This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json) Hash identifier: HTJouYKF+gRgAO++MLDgqqXTDt0KqrnSyNyT2nhv5lc= Subject key identifier: 0F:CC:2C:66:70:C5:CB:38:72:00:29:39:BF:24:DE:C5:C7:7A:F2:16 Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Certificate serial: 019B0FA559B58C88A134B2CD1DA56B1CA495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft Manifest number: 1130 Signing time: Thu 11 Dec 2025 23:00:53 +0000 Manifest this update: Thu 11 Dec 2025 23:00:53 +0000 Manifest next update: Fri 12 Dec 2025 23:00:53 +0000 Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: u6V9TBdkkENwV3vp+3UC4FLnz0cRDIBA+dLSU0Si9Cc=) 2: avTxB4xZJ7VdV5I2AVFP0VDdbT4.roa (hash: bTeIBIORZ+OkOR+FlYPPZ72JZn7A9KzpF9twp78JJjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:59:b5:8c:88:a1:34:b2:cd:1d:a5:6b:1c:a4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767 Validity Not Before: Dec 11 23:00:53 2025 GMT Not After : Dec 12 23:00:53 2025 GMT Subject: CN=0fcc2c6670c5cb3872002939bf24dec5c77af216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:92:ca:3a:a6:67:58:6f:cd:20:0c:ce:5f: 99:a9:3a:07:97:96:37:02:70:e5:44:12:c2:1f:eb: 7c:ec:d6:97:a1:65:1a:dd:1a:b9:ba:26:b9:f7:4c: bc:70:4f:86:47:4b:b8:b9:67:3d:c4:cd:d6:6e:59: 28:ea:84:8a:72:e5:c9:9a:56:a4:5b:b3:dd:f6:5e: 9b:b7:b7:01:29:36:c9:94:ff:5d:68:91:13:fa:f5: de:8d:6a:43:67:f8:b9:eb:4e:e2:dc:29:72:28:f7: 0e:0a:3d:50:02:cc:b1:15:4e:6c:56:67:40:2c:99: fb:70:bc:5a:78:1b:50:6b:20:d9:79:cd:68:0c:5c: 38:1f:8c:84:98:15:44:b9:7f:b4:ee:7a:f0:6e:11: 2a:d5:7c:da:a3:da:7d:8f:74:ce:0a:55:2a:21:b1: ec:cd:2a:29:fd:83:81:89:1e:e1:c0:ed:b7:c6:e2: 59:39:28:06:20:42:00:07:4b:ce:b8:b1:4d:a8:e8: 02:56:e5:d2:bd:a0:84:d2:4c:e0:16:8b:92:36:67: fc:c0:cf:15:43:44:2f:1c:56:3e:12:b2:1a:dd:19: d5:9c:5a:23:b8:7d:dc:03:cd:d8:e7:f8:36:9b:06: c9:5d:be:0c:5a:be:fb:51:c1:97:59:bd:f9:45:f2: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CC:2C:66:70:C5:CB:38:72:00:29:39:BF:24:DE:C5:C7:7A:F2:16 X509v3 Authority Key Identifier: keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:60:77:3b:76:36:56:f6:da:97:d5:f9:6b:ec:9a:3e:df:a5: 81:34:2c:a4:f2:28:4a:2b:a5:10:26:af:57:a7:e5:0b:68:6d: d8:41:7a:a0:2c:f7:6a:74:b0:db:62:5e:d9:af:03:01:30:37: ab:e0:4d:a1:e5:3e:49:7b:54:e6:5d:e0:af:94:8c:41:d9:80: 85:bf:26:f4:31:6a:85:d8:35:7c:61:6e:f1:be:63:cf:1e:04: cd:05:22:95:65:18:2b:1f:9d:ec:94:25:52:24:3b:cc:aa:28: 42:88:ec:aa:19:2b:d7:30:66:d5:fa:4f:ba:24:fb:bf:06:33: cd:24:d3:c7:ac:98:8f:8a:3b:0b:55:5f:71:a0:31:4c:34:a8: 65:ea:be:26:d7:64:57:1f:d1:d5:c2:fa:9d:2a:f6:10:a6:d5: 07:b4:46:99:3e:73:87:58:49:79:2c:af:56:de:65:38:30:6b: ad:10:96:eb:73:44:6f:7a:3e:72:bb:eb:7f:21:fa:08:d9:dc: 7e:ee:47:34:7a:b3:3f:18:2f:21:c4:30:be:37:8b:63:6a:ad: 5f:21:58:a2:11:f6:65:f8:b3:ad:a6:cd:6f:a7:39:1f:5f:5b: 37:77:c0:1a:ab:d4:91:f8:38:a6:ef:e3:b3:85:9c:32:cf:41: 49:33:5e:f6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsPpVm1jIihNLLNHaVrHKSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTAzODkzZmMzMWU5ZDk0ZDI2NWFiYTkwY2M3ZGQ1N2Jj MjM3NjcwHhcNMjUxMjExMjMwMDUzWhcNMjUxMjEyMjMwMDUzWjAzMTEwLwYDVQQD EygwZmNjMmM2NjcwYzVjYjM4NzIwMDI5MzliZjI0ZGVjNWM3N2FmMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwCSyjqmZ1hvzSAMzl+ZqToHl5Y3 AnDlRBLCH+t87NaXoWUa3Rq5uia590y8cE+GR0u4uWc9xM3Wblko6oSKcuXJmlak W7Pd9l6bt7cBKTbJlP9daJET+vXejWpDZ/i5607i3ClyKPcOCj1QAsyxFU5sVmdA LJn7cLxaeBtQayDZec1oDFw4H4yEmBVEuX+07nrwbhEq1Xzao9p9j3TOClUqIbHs zSop/YOBiR7hwO23xuJZOSgGIEIAB0vOuLFNqOgCVuXSvaCE0kzgFouSNmf8wM8V Q0QvHFY+ErIa3RnVnFojuH3cA83Y5/g2mwbJXb4MWr77UcGXWb35RfLk/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFA/MLGZwxcs4cgApOb8k3sXHevIWMB8GA1UdIwQY MBaAFPkQOJP8MenZTSZaupDMfdV7wjdnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQTRrX3d4NmRsTkpscTZrTXg5MVh2Q04yYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvY2RjOTk1LTlhOTEtNGVjMS1hZWRl LWY2ZTBmN2QxNzQ0MC8xLzEtUkE0a193eDZkbE5KbHE2a014OTFYdkNOMmMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk4L2NkYzk5NS05YTkxLTRlYzEtYWVkZS1mNmUwZjdkMTc0 NDAvMS8xLVJBNGtfd3g2ZGxOSmxxNmtNeDkxWHZDTjJjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGB3 O3Y2Vvbal9X5a+yaPt+lgTQspPIoSiulECavV6flC2ht2EF6oCz3anSw22Je2a8D ATA3q+BNoeU+SXtU5l3gr5SMQdmAhb8m9DFqhdg1fGFu8b5jzx4EzQUilWUYKx+d 7JQlUiQ7zKooQojsqhkr1zBm1fpPuiT7vwYzzSTTx6yYj4o7C1VfcaAxTDSoZeq+ JtdkVx/R1cL6nSr2EKbVB7RGmT5zh1hJeSyvVt5lODBrrRCW63NEb3o+crvrfyH6 CNncfu5HNHqzPxgvIcQwvjeLY2qtXyFYohH2ZfizrabNb6c5H19bN3fAGqvUkfg4 pu/js4WcMs9BSTNe9g== -----END CERTIFICATE-----Generated at Fri Dec 12 06:41:14 2025 by rpki-client