This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json) Hash identifier: fVcH0WtIf12vKxvPGf4vZogkF0a6ub9wz3Pdylg6OzM= Subject key identifier: 64:67:FB:94:E5:1E:4D:64:B6:E8:D0:9E:DD:E7:90:2B:DB:20:84:55 Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Certificate serial: 019B33B1C3202A6CC4B65978C5388EEB8CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft Manifest number: 1718 Signing time: Thu 18 Dec 2025 23:00:46 +0000 Manifest this update: Thu 18 Dec 2025 23:00:46 +0000 Manifest next update: Fri 19 Dec 2025 23:00:46 +0000 Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: IhfPyUpzLanl2ZZd+XFlJYibkItfakCGvcdEidBgh+8=) 2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:c3:20:2a:6c:c4:b6:59:78:c5:38:8e:eb:8c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Validity Not Before: Dec 18 23:00:46 2025 GMT Not After : Dec 19 23:00:46 2025 GMT Subject: CN=6467fb94e51e4d64b6e8d09edde7902bdb208455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:89:aa:f3:85:18:a3:b4:cb:5d:3c:fe:56: 69:13:4c:4e:78:f0:92:d1:af:c0:a1:2c:d8:df:ea: f8:2f:9d:cc:bc:15:03:96:34:75:84:0a:44:b4:f6: 60:c6:00:93:41:cc:4a:0a:fe:ed:94:54:3c:38:73: 57:cc:3d:ae:16:0c:4a:63:a8:3b:37:0d:81:28:a6: 1f:23:b3:35:f4:8c:82:4c:36:31:ea:97:f7:f0:9b: ab:ac:55:6b:bd:69:f1:b3:9d:bf:03:7f:48:61:35: 40:e2:f7:2b:87:1e:75:32:bf:8f:0c:ec:c1:77:03: 89:eb:2d:7e:04:db:c8:d1:ed:90:16:f4:a5:25:22: 0d:14:69:4e:20:d2:ff:cf:88:29:ca:8e:0b:1e:b4: 49:d7:e7:8e:16:a2:c0:9e:71:09:97:af:65:25:cf: 46:d1:b1:59:08:9b:99:8b:e9:e6:2f:86:90:78:ec: ae:d1:70:a7:c0:0b:eb:22:ba:d8:f8:8c:da:2d:17: 77:1a:69:34:16:70:a2:19:a5:ef:95:45:93:3e:9b: e5:1b:e8:aa:a8:0c:c7:d6:50:80:4f:6f:fa:b7:b7: 1f:2b:19:87:14:c6:87:2b:5c:9d:45:64:c7:55:b6: fd:ef:54:bf:14:68:fb:03:20:14:50:23:a4:2f:64: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:FB:94:E5:1E:4D:64:B6:E8:D0:9E:DD:E7:90:2B:DB:20:84:55 X509v3 Authority Key Identifier: keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:37:82:ce:5d:90:11:29:04:57:34:96:8d:1a:68:95:4a:2b: 48:e6:8a:de:46:26:b4:40:03:83:16:27:94:b4:5a:3e:8f:2a: 99:a6:15:41:69:5e:48:ad:10:7c:ef:69:7f:b3:db:b2:1f:97: 97:68:32:42:99:9b:4b:eb:8d:06:7c:75:e6:ef:62:7e:e3:21: 8f:8c:5b:88:11:0e:b9:f8:f1:08:dd:36:9c:a5:7b:7b:c8:0d: bf:a1:2a:d2:ee:d5:cf:fe:cf:87:f4:02:ef:46:b7:62:c6:0e: fd:46:40:b9:bc:59:52:c4:1e:20:38:c0:e7:e5:4d:c4:41:59: 9b:1e:d7:6e:29:81:c1:18:72:08:05:d3:23:73:de:ae:9c:50: a4:7a:ad:9e:0e:64:df:29:c6:f4:96:ce:b5:c3:fb:7e:60:5a: 17:4c:6b:7d:07:d5:7a:39:c0:f1:f4:26:ca:16:a9:6d:00:ec: 3a:ee:1b:11:84:6d:01:2d:ba:89:04:b1:12:e8:d1:0c:2f:01: 72:a4:11:d4:5b:e7:c2:f9:ec:31:0c:a2:eb:ad:d0:06:e0:23: cf:04:21:7d:6e:40:1a:b9:66:8a:c9:df:1f:3f:47:4f:c8:fa: 61:2e:19:f4:cd:ac:fb:15:88:9b:73:50:03:8b:82:97:48:18: a5:db:6e:7b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZszscMgKmzEtll4xTiO64ziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw ZWQ0YzcwHhcNMjUxMjE4MjMwMDQ2WhcNMjUxMjE5MjMwMDQ2WjAzMTEwLwYDVQQD Eyg2NDY3ZmI5NGU1MWU0ZDY0YjZlOGQwOWVkZGU3OTAyYmRiMjA4NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9mJqvOFGKO0y108/lZpE0xOePCS 0a/AoSzY3+r4L53MvBUDljR1hApEtPZgxgCTQcxKCv7tlFQ8OHNXzD2uFgxKY6g7 Nw2BKKYfI7M19IyCTDYx6pf38JurrFVrvWnxs52/A39IYTVA4vcrhx51Mr+PDOzB dwOJ6y1+BNvI0e2QFvSlJSINFGlOINL/z4gpyo4LHrRJ1+eOFqLAnnEJl69lJc9G 0bFZCJuZi+nmL4aQeOyu0XCnwAvrIrrY+IzaLRd3Gmk0FnCiGaXvlUWTPpvlG+iq qAzH1lCAT2/6t7cfKxmHFMaHK1ydRWTHVbb971S/FGj7AyAUUCOkL2SgmwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGRn+5TlHk1ktujQnt3nkCvbIIRVMB8GA1UdIwQY MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2 LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3 YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjeC zl2QESkEVzSWjRpolUorSOaK3kYmtEADgxYnlLRaPo8qmaYVQWleSK0QfO9pf7Pb sh+Xl2gyQpmbS+uNBnx15u9ifuMhj4xbiBEOufjxCN02nKV7e8gNv6Eq0u7Vz/7P h/QC70a3YsYO/UZAubxZUsQeIDjA5+VNxEFZmx7XbimBwRhyCAXTI3PerpxQpHqt ng5k3ynG9JbOtcP7fmBaF0xrfQfVejnA8fQmyhapbQDsOu4bEYRtAS26iQSxEujR DC8BcqQR1FvnwvnsMQyi663QBuAjzwQhfW5AGrlmisnfHz9HT8j6YS4Z9M2s+xWI m3NQA4uCl0gYpdtuew== -----END CERTIFICATE-----Generated at Fri Dec 19 06:44:54 2025 by rpki-client