This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json) Hash identifier: BcVW6vfkVfAAWwp+RujgxAyfEQiZZXlVsZTHwvLgOC4= Subject key identifier: C1:49:7E:76:1F:28:4C:89:A4:D1:FF:8F:F5:03:DF:83:57:98:E9:D5 Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0 Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0 Certificate serial: 019B24081C11B0BEFF2C7D07409A06BAEFD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft Manifest number: 0BCC Signing time: Mon 15 Dec 2025 22:01:09 +0000 Manifest this update: Mon 15 Dec 2025 22:01:09 +0000 Manifest next update: Tue 16 Dec 2025 22:01:09 +0000 Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: h4fuRKNBm14+p1e5iW0Z9OrMvUUjCL18TJdT+Bq/XV8=) 2: D9KqMTAksNO2iOKAwulZkRCL4Fw.roa (hash: x9me+db9iBftpJ/9nLLqbm0SGnpLl+KbaGJCrguqqhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:1c:11:b0:be:ff:2c:7d:07:40:9a:06:ba:ef:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0 Validity Not Before: Dec 15 22:01:09 2025 GMT Not After : Dec 16 22:01:09 2025 GMT Subject: CN=c1497e761f284c89a4d1ff8ff503df835798e9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:00:af:cb:48:d3:f4:58:bd:b3:92:39:e6: 04:ff:78:c3:c3:9b:47:2f:d7:f0:bb:6b:6a:a2:78: 9a:b2:1a:b2:a7:58:ba:a9:d4:75:d0:39:32:49:5f: d8:3b:39:cc:a3:35:4d:56:53:40:0d:42:6b:8a:d9: e8:f5:6e:12:1d:8d:54:94:ab:a9:67:30:0a:c4:ba: 27:54:eb:b2:cd:bb:1b:5e:a0:1d:04:60:7b:9b:67: 0c:64:1b:ad:df:17:4e:92:23:a3:5b:fc:98:7b:b2: b0:cf:62:43:ad:76:0d:4b:84:da:e5:dc:36:c7:25: 34:09:b9:48:e8:cd:f2:ff:25:33:59:e4:2a:5b:86: aa:75:a5:c0:31:6c:c8:2f:ca:2a:13:16:6a:78:32: 18:ec:f4:37:2f:9e:e2:f3:fa:22:3c:00:9c:db:6c: 19:13:1c:86:ca:33:d6:9a:83:28:85:58:98:de:5e: b5:e5:64:ea:2c:4e:be:00:f8:c3:7d:d7:87:4f:76: 67:dc:47:bb:52:5e:62:07:82:00:13:14:97:ff:fd: 4b:f9:48:39:03:e5:80:4f:25:b1:a2:30:31:4a:eb: 54:68:ce:7a:ea:e4:f3:02:89:bb:75:bc:1b:5a:f9: 9c:98:ea:f5:d9:9c:bc:9d:8d:32:e9:36:8c:95:ca: 0d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:49:7E:76:1F:28:4C:89:A4:D1:FF:8F:F5:03:DF:83:57:98:E9:D5 X509v3 Authority Key Identifier: keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:72:1d:75:dd:e3:47:5e:d0:1c:0e:f6:dc:1f:f5:ac:fe:2c: f8:50:68:b4:57:1e:e9:a1:74:54:12:32:3b:f9:fa:b9:db:7f: f4:dd:76:e4:1f:8a:ff:98:32:0a:11:01:43:3d:35:9d:c8:d1: 86:59:44:8f:e7:71:03:11:5a:49:4e:44:95:ea:22:b7:d9:09: 7e:b3:c3:6f:44:8a:af:a2:db:46:c3:b0:97:7f:58:90:44:42: b7:e6:93:90:4a:79:6b:41:d0:35:fa:92:47:a8:e7:94:65:f7: 45:4b:cb:da:22:4a:11:7d:cf:9f:7f:44:9c:14:67:c2:50:b7: b0:1e:4a:9a:7e:8b:3a:28:89:57:8d:05:41:6c:2e:f7:ae:49: 12:2d:9c:b2:72:89:68:15:85:30:b6:16:04:17:c0:c0:71:5c: 23:bf:d4:c6:b8:64:94:4f:98:5f:b0:7e:c6:b5:46:9f:ab:af: 1b:49:bb:0a:da:0c:7c:1c:01:8a:e1:18:0f:02:5a:2f:e7:47: ae:33:89:be:43:a6:c0:cb:5f:61:bf:a4:ca:9d:8d:f8:ce:4a: 50:ca:68:4c:e7:5b:7e:da:89:e3:57:5a:e6:46:b4:85:c6:97: d8:ae:58:c3:99:29:7d:17:46:20:4e:a4:54:39:ee:f6:96:35: 1b:33:15:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCBwRsL7/LH0HQJoGuu/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1Zjk0Nzg2ZDAzNjY4NTQ0MDkwMWEzZGNlNWEzMzRjZjEz MjcyYTAwHhcNMjUxMjE1MjIwMTA5WhcNMjUxMjE2MjIwMTA5WjAzMTEwLwYDVQQD EyhjMTQ5N2U3NjFmMjg0Yzg5YTRkMWZmOGZmNTAzZGY4MzU3OThlOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkQAr8tI0/RYvbOSOeYE/3jDw5tH L9fwu2tqoniashqyp1i6qdR10DkySV/YOznMozVNVlNADUJritno9W4SHY1UlKup ZzAKxLonVOuyzbsbXqAdBGB7m2cMZBut3xdOkiOjW/yYe7Kwz2JDrXYNS4Ta5dw2 xyU0CblI6M3y/yUzWeQqW4aqdaXAMWzIL8oqExZqeDIY7PQ3L57i8/oiPACc22wZ ExyGyjPWmoMohViY3l615WTqLE6+APjDfdeHT3Zn3Ee7Ul5iB4IAExSX//1L+Ug5 A+WATyWxojAxSutUaM566uTzAom7dbwbWvmcmOr12Zy8nY0y6TaMlcoN0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFJfnYfKEyJpNH/j/UD34NXmOnVMB8GA1UdIwQY MBaAFNX5R4bQNmhUQJAaPc5aM0zxMnKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3Njkt YzlhNjk2ODNhOGU4LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83MDQ5NmMtNjNiOC00N2M4LWE3NjktYzlhNjk2ODNhOGU4 LzEvMWZsSGh0QTJhRlJBa0JvOXpsb3pUUEV5Y3FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXIddd3j R17QHA723B/1rP4s+FBotFce6aF0VBIyO/n6udt/9N125B+K/5gyChEBQz01ncjR hllEj+dxAxFaSU5Eleoit9kJfrPDb0SKr6LbRsOwl39YkERCt+aTkEp5a0HQNfqS R6jnlGX3RUvL2iJKEX3Pn39EnBRnwlC3sB5Kmn6LOiiJV40FQWwu965JEi2csnKJ aBWFMLYWBBfAwHFcI7/UxrhklE+YX7B+xrVGn6uvG0m7CtoMfBwBiuEYDwJaL+dH rjOJvkOmwMtfYb+kyp2N+M5KUMpoTOdbftqJ41da5ka0hcaX2K5Yw5kpfRdGIE6k VDnu9pY1GzMVVw== -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:12 2025 by rpki-client