This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json) Hash identifier: OmKPc4Snym6+6s+ggsEnkf7DRW9hsZsZyVhpkvrP5m4= Subject key identifier: EA:B3:77:F6:7D:77:DE:A3:EE:EC:B5:14:CD:DC:F7:16:BB:74:2E:01 Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Certificate serial: 019AF1D1F318E58D7B5A6295206245A49DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft Manifest number: 0721 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: B4ATiNxZK/xx9J3hkSLP1nBQuGP3ooL7MJ/dcZBNPJk=) 2: ghDhm4VYeRYSti6uTmC3gk8HU3Q.roa (hash: G+P2vluMfyw3HQMk6YBkLL9/sRExJnIDxuRwVWm8Dr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f3:18:e5:8d:7b:5a:62:95:20:62:45:a4:9d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=eab377f67d77dea3eeecb514cddcf716bb742e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:17:a4:e5:2e:30:c5:fe:b3:b7:ac:a6:a4: 76:1c:f5:33:93:75:d7:5e:12:9a:30:fd:c3:90:3e: dd:a3:16:12:ca:ca:76:7d:98:82:6b:7e:49:a1:ee: 86:d6:79:78:de:07:8e:6d:98:b7:5f:78:9c:f6:e4: 57:35:d2:a6:21:50:e4:b1:22:3e:5f:d8:c9:e7:87: 4d:81:0d:c6:7d:8e:80:16:1a:e2:30:0c:60:58:fa: 74:30:cb:d7:33:d0:55:77:f9:01:0b:94:28:52:24: 83:65:a9:bf:ab:83:88:f8:6c:57:ec:be:14:70:9b: e3:48:1c:ed:01:0b:50:39:54:d2:ea:63:71:7f:c9: 01:a2:ff:fb:be:16:55:26:75:70:f6:fb:93:b2:9d: 51:ef:8a:f2:a1:e6:8d:b6:b6:95:3e:a7:c4:26:d0: fd:f4:09:0f:e0:b0:2a:e7:fa:66:d6:b6:1e:ae:86: 82:c0:53:98:f3:97:29:92:e1:1d:4f:85:db:d2:96: 4a:70:8f:47:3d:d2:5f:8e:1a:3b:9b:74:73:67:ec: 80:3f:91:f4:84:1a:41:b4:94:37:60:04:ac:ee:77: ac:bf:c6:46:e1:71:b5:37:c6:35:98:37:ea:44:9b: ca:b8:5c:2e:39:65:25:f8:cd:68:0d:1b:d0:41:d2: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B3:77:F6:7D:77:DE:A3:EE:EC:B5:14:CD:DC:F7:16:BB:74:2E:01 X509v3 Authority Key Identifier: keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ae:23:4d:37:95:90:cd:7e:65:7e:1a:dd:d2:92:b8:0a:36: 4c:86:b4:5d:6d:e6:74:1a:5c:ac:91:3f:18:29:b0:09:55:89: 5d:b8:cb:ad:d6:f9:63:a6:67:77:16:a0:4e:18:86:9d:66:e4: ed:09:cf:4e:f6:1e:24:da:0a:65:2b:93:3e:87:b0:fc:b2:33: 3c:65:7d:cd:4a:8b:82:7c:ae:98:4c:f7:47:07:8c:f7:34:33: 00:10:bc:2e:36:d7:4b:d8:9f:0a:ea:e9:3c:88:03:83:3a:c1: 85:8b:bf:30:dc:6d:11:f6:c5:7e:3d:79:bc:b8:29:e4:53:e1: eb:c4:ca:90:86:a9:2d:5a:e8:dd:59:60:63:3d:62:a9:29:d7: 23:27:f7:cb:ce:10:5f:a8:3e:cd:47:98:22:f4:ab:0c:4b:1f: 70:44:ad:bb:e1:f5:dc:14:a6:ba:9f:df:f7:5e:4b:a7:3e:a4: bc:63:67:22:d5:2b:6e:d5:f8:93:b0:83:3d:a0:81:78:98:c2: cc:17:01:cb:47:e5:55:14:2c:27:ed:08:cb:d6:78:4a:3d:0e: 7f:7c:92:ba:53:8b:5e:38:c5:21:97:36:85:68:a0:d4:dc:ed: c7:25:f8:d6:7d:fa:cb:27:90:05:71:9e:a1:cd:04:ab:0c:6c: 73:55:45:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fMY5Y17WmKVIGJFpJ2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy ZjMyMWIwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EyhlYWIzNzdmNjdkNzdkZWEzZWVlY2I1MTRjZGRjZjcxNmJiNzQyZTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApngXpOUuMMX+s7espqR2HPUzk3XX XhKaMP3DkD7doxYSysp2fZiCa35Joe6G1nl43geObZi3X3ic9uRXNdKmIVDksSI+ X9jJ54dNgQ3GfY6AFhriMAxgWPp0MMvXM9BVd/kBC5QoUiSDZam/q4OI+GxX7L4U cJvjSBztAQtQOVTS6mNxf8kBov/7vhZVJnVw9vuTsp1R74ryoeaNtraVPqfEJtD9 9AkP4LAq5/pm1rYeroaCwFOY85cpkuEdT4Xb0pZKcI9HPdJfjho7m3RzZ+yAP5H0 hBpBtJQ3YASs7nesv8ZG4XG1N8Y1mDfqRJvKuFwuOWUl+M1oDRvQQdLqPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqzd/Z9d96j7uy1FM3c9xa7dC4BMB8GA1UdIwQY MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha4jTTeV kM1+ZX4a3dKSuAo2TIa0XW3mdBpcrJE/GCmwCVWJXbjLrdb5Y6ZndxagThiGnWbk 7QnPTvYeJNoKZSuTPoew/LIzPGV9zUqLgnyumEz3RweM9zQzABC8LjbXS9ifCurp PIgDgzrBhYu/MNxtEfbFfj15vLgp5FPh68TKkIapLVro3VlgYz1iqSnXIyf3y84Q X6g+zUeYIvSrDEsfcEStu+H13BSmup/f915Lpz6kvGNnItUrbtX4k7CDPaCBeJjC zBcBy0flVRQsJ+0Iy9Z4Sj0Of3ySulOLXjjFIZc2hWig1NztxyX41n36yyeQBXGe oc0Eqwxsc1VFQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:06 2025 by rpki-client