This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: +fEuSaFxbVIzt+dxwDnYw+Hp7ayKBsUUDrTUjCO+VxI= Subject key identifier: DD:53:D4:BC:C6:90:75:1D:32:57:38:CC:96:88:98:96:B0:DC:64:CE Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019AF42DD37AD18A6A08694A8D4FBF486774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 15:00:35 +0000 Manifest this update: Sat 06 Dec 2025 15:00:35 +0000 Manifest next update: Sun 07 Dec 2025 15:00:35 +0000 Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=) 2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: n438EBfo2TPbLqZpqQyt2RSYSmddhS84Dg9v/BAS0zM=) 3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=) 4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=) 5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=) 6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=) 7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=) 8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=) 9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d3:7a:d1:8a:6a:08:69:4a:8d:4f:bf:48:67:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Dec 6 15:00:35 2025 GMT Not After : Dec 7 15:00:35 2025 GMT Subject: CN=dd53d4bcc690751d325738cc96889896b0dc64ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:db:d7:97:7d:dc:49:2b:89:f1:9a:4c:68: 74:cd:1e:f4:a5:f9:47:08:6d:da:d7:2c:62:0d:9b: 9f:26:d5:f7:b8:32:e7:ff:83:7a:db:a0:cf:83:d6: d7:5d:b9:2e:a5:14:17:d2:fb:5b:7a:f1:0c:77:e5: 33:fd:40:12:f8:5c:69:fe:3d:fa:0b:b9:d3:3f:71: aa:fc:4c:13:1c:73:3c:97:7e:ab:0a:59:c2:b4:45: b5:c9:36:90:aa:65:ad:ec:0c:d6:60:e3:bd:5c:d7: 96:62:7c:32:56:e7:8d:11:e4:ab:41:1b:7d:15:5a: 63:4e:95:59:14:67:3a:5c:cc:f7:76:2d:b5:f3:f3: d8:90:8f:5e:b5:a7:4d:6c:17:c0:1b:e3:14:66:95: 23:9e:c0:69:30:ec:37:15:27:11:5d:a3:0f:67:d7: bb:a7:7c:0b:d4:eb:29:f9:d7:f9:33:0f:c2:9b:94: 5a:c5:3e:f4:93:84:c2:1b:f8:be:73:ea:a1:fc:97: ed:a6:43:1a:9f:1e:34:14:c8:c1:5a:fa:90:0d:dd: cc:38:ac:0f:5f:d9:26:40:4e:ce:50:b6:c8:b3:b8: ad:af:21:7a:54:7c:be:71:d7:06:30:2d:93:6f:cd: f2:c3:72:b5:be:c9:b4:5b:87:9f:15:a7:54:ae:de: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:D4:BC:C6:90:75:1D:32:57:38:CC:96:88:98:96:B0:DC:64:CE X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6c:dd:da:78:45:2a:1c:85:91:41:c3:65:9b:c6:38:52:06: 01:15:55:da:d7:86:36:2e:61:4d:21:04:af:b3:83:41:f2:6e: 8f:93:3e:03:c4:be:5d:ec:4e:03:42:62:ef:31:90:35:79:06: cd:49:cc:95:51:86:7e:25:10:fb:55:09:c2:4d:42:a0:f7:74: 75:2f:e6:6e:a7:fc:cf:45:0c:90:3b:b8:79:a8:e4:d8:6b:b4: 8c:82:c3:91:6b:85:97:d8:cc:9a:c6:7f:fa:db:b5:a7:2a:86: 07:4b:1c:e9:21:af:45:6b:e0:37:92:36:99:15:fa:a9:93:10: bb:44:cc:7c:a1:77:fd:9e:30:1d:81:2f:08:c1:e3:40:c4:67: a6:8b:15:88:a9:96:1a:02:b9:87:74:58:1e:58:12:67:fc:b0: dd:f9:ad:af:37:70:79:c7:ab:1f:42:d0:90:20:a2:82:53:04: c0:4c:be:27:ad:f4:2c:b3:d5:df:18:33:2a:f0:96:7e:f3:86: f7:e1:82:78:3a:1c:71:dc:0b:76:66:2b:1d:24:3c:27:a2:f8: ea:b0:e5:04:ad:4f:89:1f:ad:2c:71:4d:86:87:6d:c9:66:ca: bb:39:23:57:7d:e5:42:b4:1f:1a:68:8e:6f:41:7f:f2:ff:56: e4:b0:22:4a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0LdN60YpqCGlKjU+/SGd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjUxMjA2MTUwMDM1WhcNMjUxMjA3MTUwMDM1WjAzMTEwLwYDVQQD EyhkZDUzZDRiY2M2OTA3NTFkMzI1NzM4Y2M5Njg4OTg5NmIwZGM2NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2fb15d93EkrifGaTGh0zR70pflH CG3a1yxiDZufJtX3uDLn/4N626DPg9bXXbkupRQX0vtbevEMd+Uz/UAS+Fxp/j36 C7nTP3Gq/EwTHHM8l36rClnCtEW1yTaQqmWt7AzWYOO9XNeWYnwyVueNEeSrQRt9 FVpjTpVZFGc6XMz3di218/PYkI9etadNbBfAG+MUZpUjnsBpMOw3FScRXaMPZ9e7 p3wL1Osp+df5Mw/Cm5RaxT70k4TCG/i+c+qh/JftpkManx40FMjBWvqQDd3MOKwP X9kmQE7OULbIs7itryF6VHy+cdcGMC2Tb83yw3K1vsm0W4efFadUrt438wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN1T1LzGkHUdMlc4zJaImJaw3GTOMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2zd 2nhFKhyFkUHDZZvGOFIGARVV2teGNi5hTSEEr7ODQfJuj5M+A8S+XexOA0Ji7zGQ NXkGzUnMlVGGfiUQ+1UJwk1CoPd0dS/mbqf8z0UMkDu4eajk2Gu0jILDkWuFl9jM msZ/+tu1pyqGB0sc6SGvRWvgN5I2mRX6qZMQu0TMfKF3/Z4wHYEvCMHjQMRnposV iKmWGgK5h3RYHlgSZ/yw3fmtrzdwecerH0LQkCCiglMEwEy+J630LLPV3xgzKvCW fvOG9+GCeDoccdwLdmYrHSQ8J6L46rDlBK1PiR+tLHFNhodtyWbKuzkjV33lQrQf GmiOb0F/8v9W5LAiSg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:43 2025 by rpki-client