This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json) Hash identifier: W8MzrOlg4NUc0w/ez8oPvFHXZpSEO3iAwAzKuYvO5tk= Subject key identifier: 30:20:5D:35:4B:5A:C5:3D:81:D2:CC:59:3C:9C:65:9B:A1:1A:E4:4F Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99 Certificate serial: 019B5976E439768F6DF90DE785F8D81FAD20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:02:02 +0000 Manifest this update: Fri 26 Dec 2025 07:02:02 +0000 Manifest next update: Sat 27 Dec 2025 07:02:02 +0000 Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: yzBnSxL5giEqaD3QbtyugWrMnPNbKrOu4wtoCaPyLww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e4:39:76:8f:6d:f9:0d:e7:85:f8:d8:1f:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99 Validity Not Before: Dec 26 07:02:02 2025 GMT Not After : Dec 27 07:02:02 2025 GMT Subject: CN=30205d354b5ac53d81d2cc593c9c659ba11ae44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:b9:7c:de:25:57:d1:18:b2:68:be:ef:39: 04:65:8e:77:64:56:dc:72:38:c2:a6:c8:03:ca:e7: 80:61:f2:da:bf:5d:cc:f9:e0:13:0d:da:e1:12:84: 02:5e:e5:04:13:03:d0:7e:bf:fb:af:af:f0:97:cc: 08:9b:be:32:9a:d8:a5:73:bc:fd:8b:df:c4:32:cf: be:4d:b8:ec:41:72:53:34:c6:5f:21:d1:5f:34:f4: 14:b4:53:82:32:e5:82:be:6d:cc:ec:ad:d8:0b:e3: 4e:1b:86:70:c5:9e:d8:01:37:d0:55:b9:c2:1f:89: c1:4f:16:46:03:ba:bc:be:dc:db:ce:9e:48:88:24: a1:53:c7:c7:6c:57:0c:9b:4c:94:38:ae:30:f8:d9: 8f:ef:37:55:8d:61:dc:e4:f9:14:3d:e0:b0:5b:b2: 74:fa:ed:94:a3:07:58:44:c1:88:83:ab:1a:57:46: 0a:e1:fb:17:1e:20:f8:51:0b:ec:e1:81:e8:e3:bc: 1a:06:16:48:02:99:a9:e6:72:33:98:81:41:f9:e6: 66:4a:5a:08:ab:dd:8c:d9:58:d2:d8:49:ff:f1:e2: 9b:81:de:83:99:25:66:68:43:06:41:3f:c3:e6:50: 21:78:6e:a0:5e:dc:e6:38:08:d5:ba:b4:a1:9f:5b: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:20:5D:35:4B:5A:C5:3D:81:D2:CC:59:3C:9C:65:9B:A1:1A:E4:4F X509v3 Authority Key Identifier: keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:75:10:9b:de:9d:3d:16:93:dc:cb:1a:3c:44:4e:ba:38: 5b:99:ba:0a:fa:7b:c6:dd:c8:c6:bd:3e:d7:bd:d8:be:67:bc: 52:37:dd:02:95:51:9f:da:d1:8a:b8:d0:f3:1e:bc:ac:5b:d1: 2c:34:21:6f:fb:44:60:96:5d:cb:a7:56:3c:c9:a2:96:c0:cc: cc:ac:db:2c:92:6d:d7:3b:e9:59:c6:0e:16:f4:52:b4:59:5c: 17:69:05:27:43:0a:8d:6e:0b:c9:87:a3:23:28:bc:36:ee:1e: 55:64:ca:cd:86:2b:fa:a5:b3:4e:31:84:c1:5f:ab:b1:c9:72: d3:78:c0:4a:83:ae:ae:4d:a4:b4:64:00:86:53:fc:06:00:2a: 70:0e:f0:99:c7:f0:49:d8:79:23:98:d6:04:4a:8e:1a:84:8e: fe:e9:d9:23:cc:b7:03:66:29:20:c4:51:d1:96:56:a7:e8:8a: dc:12:29:ab:8a:6f:a2:ef:a5:fb:de:c5:f5:52:25:56:f2:6f: 42:3f:ad:57:b0:0e:79:3b:b0:b3:49:45:53:4c:86:c4:cc:f1: ea:03:9c:f0:71:ac:3e:1f:ee:52:fe:c8:db:1d:d3:c3:7c:ab: f1:ba:24:dd:e8:e0:71:8e:2d:b6:a8:92:5a:8c:b0:a1:fb:45: c3:c6:7c:e2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZduQ5do9t+Q3nhfjYH60gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2 N2ZlOTkwHhcNMjUxMjI2MDcwMjAyWhcNMjUxMjI3MDcwMjAyWjAzMTEwLwYDVQQD EygzMDIwNWQzNTRiNWFjNTNkODFkMmNjNTkzYzljNjU5YmExMWFlNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRu5fN4lV9EYsmi+7zkEZY53ZFbc cjjCpsgDyueAYfLav13M+eATDdrhEoQCXuUEEwPQfr/7r6/wl8wIm74ymtilc7z9 i9/EMs++TbjsQXJTNMZfIdFfNPQUtFOCMuWCvm3M7K3YC+NOG4ZwxZ7YATfQVbnC H4nBTxZGA7q8vtzbzp5IiCShU8fHbFcMm0yUOK4w+NmP7zdVjWHc5PkUPeCwW7J0 +u2UowdYRMGIg6saV0YK4fsXHiD4UQvs4YHo47waBhZIApmp5nIzmIFB+eZmSloI q92M2VjS2En/8eKbgd6DmSVmaEMGQT/D5lAheG6gXtzmOAjVurShn1udqwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDAgXTVLWsU9gdLMWTycZZuhGuRPMB8GA1UdIwQY MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvN1 EJvenT0Wk9zLGjxETro4W5m6Cvp7xt3Ixr0+173Yvme8UjfdApVRn9rRirjQ8x68 rFvRLDQhb/tEYJZdy6dWPMmilsDMzKzbLJJt1zvpWcYOFvRStFlcF2kFJ0MKjW4L yYejIyi8Nu4eVWTKzYYr+qWzTjGEwV+rscly03jASoOurk2ktGQAhlP8BgAqcA7w mcfwSdh5I5jWBEqOGoSO/unZI8y3A2YpIMRR0ZZWp+iK3BIpq4pvou+l+97F9VIl VvJvQj+tV7AOeTuws0lFU0yGxMzx6gOc8HGsPh/uUv7I2x3Tw3yr8bok3ejgcY4t tqiSWoywoftFw8Z84g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:19 2025 by rpki-client