This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json) Hash identifier: 3wavXTAdaw8jz4IfUBUupSln5dvBWGc6CeeGtd/5NG8= Subject key identifier: E3:7C:09:DF:88:B6:54:81:89:71:CD:F4:C2:77:16:8A:C9:30:31:26 Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca Certificate serial: 019B21E28F9D8F8AF047D84DF17B435D8D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft Manifest number: 0493 Signing time: Mon 15 Dec 2025 12:00:54 +0000 Manifest this update: Mon 15 Dec 2025 12:00:54 +0000 Manifest next update: Tue 16 Dec 2025 12:00:54 +0000 Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: vn4LhCEAd+M7/QGugEuwapGlpT2JEdqmFQn/xICiiLc=) 2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:8f:9d:8f:8a:f0:47:d8:4d:f1:7b:43:5d:8d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca Validity Not Before: Dec 15 12:00:54 2025 GMT Not After : Dec 16 12:00:54 2025 GMT Subject: CN=e37c09df88b654818971cdf4c277168ac9303126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:a1:27:8f:65:86:bb:90:cf:b7:68:ee:f9: 27:46:f0:eb:ad:90:b0:52:f0:51:80:a8:d0:43:07: fe:88:e5:ff:6e:f5:4e:25:7b:03:32:bc:f6:28:36: 21:b8:56:1b:3b:e5:5e:8f:3a:d3:bd:36:ca:de:19: 1e:15:8c:72:da:1b:47:35:d0:58:6a:90:bb:2f:f4: f0:8a:fd:50:e6:7f:26:cc:28:39:7e:c8:f6:ae:75: d9:63:02:bf:e1:6e:d4:e2:62:55:f1:0d:2c:92:a8: 08:65:b3:69:56:68:16:83:fb:18:95:e5:91:ca:9d: 7c:89:13:49:29:ff:bb:72:ba:3c:ca:fe:d0:51:2c: 23:c5:63:37:a6:d6:9f:24:25:67:83:32:30:3b:79: 30:e7:e6:32:a6:67:12:6a:f5:c3:bf:f7:13:68:ac: 37:d8:dd:25:94:24:75:f9:6f:87:e8:8c:11:1c:6f: 2c:f9:bb:cd:a7:ea:94:1e:cd:19:af:53:ab:35:e5: 49:00:d4:3f:ab:9e:d2:a8:a2:99:e1:26:b7:63:31: 0a:65:a1:14:3d:2b:f6:eb:03:c6:e2:50:cf:2a:dd: 63:b0:f3:01:7a:c7:fb:cf:c2:a4:51:a5:79:d9:d5: 4a:a7:34:07:11:a9:5b:37:83:06:cd:8a:dd:d7:ae: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7C:09:DF:88:B6:54:81:89:71:CD:F4:C2:77:16:8A:C9:30:31:26 X509v3 Authority Key Identifier: keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d8:73:70:78:40:a7:f7:fd:8d:bf:90:de:3a:23:4c:46:7b: 7e:f5:4c:01:f3:38:9b:ee:e6:78:ce:79:8e:6e:d5:a2:c8:b5: 9f:83:1e:37:13:d3:16:b3:5d:ab:0a:45:2d:bc:59:10:d6:bc: 0b:5b:91:41:41:c7:d4:26:c7:85:2d:9f:1c:bd:f4:24:1e:10: bc:a2:de:b2:e9:2b:24:4b:51:84:7e:6b:a6:c3:cd:ba:15:40: f8:d2:15:fb:b7:2b:14:e3:cc:a6:c5:c5:6e:66:ed:54:e7:44: b5:5f:e7:4c:fb:d7:84:3f:92:da:ef:3f:18:51:5a:25:bc:0c: fa:92:37:84:7a:5f:22:ae:01:37:b9:fb:b0:b9:73:57:a4:09: 27:24:7b:81:d5:27:e0:23:c6:78:cb:43:32:96:81:33:7c:c6: a5:e8:33:2d:ab:dc:d1:21:19:cd:1b:1d:8f:07:ed:32:62:f2: 7e:24:4c:11:bb:2d:bd:75:e5:f0:79:bb:45:c2:13:8c:03:2b: f9:62:ab:14:24:6c:71:05:3a:3e:0b:eb:a4:99:cd:5f:9b:d3: df:65:9b:76:d8:31:73:2d:e6:c6:34:0b:37:23:89:46:76:39: 0a:12:d0:37:e1:9e:78:83:26:d0:6d:e1:07:0a:b4:d5:54:2b: be:56:ce:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4o+dj4rwR9hN8XtDXY04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDhjZjA5YjZhYjAwNWJhOTMzYjJhN2E0YTZkMjdlYTZi YjcyY2EwHhcNMjUxMjE1MTIwMDU0WhcNMjUxMjE2MTIwMDU0WjAzMTEwLwYDVQQD EyhlMzdjMDlkZjg4YjY1NDgxODk3MWNkZjRjMjc3MTY4YWM5MzAzMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopKhJ49lhruQz7do7vknRvDrrZCw UvBRgKjQQwf+iOX/bvVOJXsDMrz2KDYhuFYbO+VejzrTvTbK3hkeFYxy2htHNdBY apC7L/Twiv1Q5n8mzCg5fsj2rnXZYwK/4W7U4mJV8Q0skqgIZbNpVmgWg/sYleWR yp18iRNJKf+7cro8yv7QUSwjxWM3ptafJCVngzIwO3kw5+YypmcSavXDv/cTaKw3 2N0llCR1+W+H6IwRHG8s+bvNp+qUHs0Zr1OrNeVJANQ/q57SqKKZ4Sa3YzEKZaEU PSv26wPG4lDPKt1jsPMBesf7z8KkUaV52dVKpzQHEalbN4MGzYrd166jfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON8Cd+ItlSBiXHN9MJ3ForJMDEmMB8GA1UdIwQY MBaAFNQIzwm2qwBbqTOyp6Sm0n6mu3LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmIt ZDY1MjM2ODI5OWQ1LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmItZDY1MjM2ODI5OWQ1 LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNhzcHhA p/f9jb+Q3jojTEZ7fvVMAfM4m+7meM55jm7Vosi1n4MeNxPTFrNdqwpFLbxZENa8 C1uRQUHH1CbHhS2fHL30JB4QvKLesukrJEtRhH5rpsPNuhVA+NIV+7crFOPMpsXF bmbtVOdEtV/nTPvXhD+S2u8/GFFaJbwM+pI3hHpfIq4BN7n7sLlzV6QJJyR7gdUn 4CPGeMtDMpaBM3zGpegzLavc0SEZzRsdjwftMmLyfiRMEbstvXXl8Hm7RcITjAMr +WKrFCRscQU6PgvrpJnNX5vT32Wbdtgxcy3mxjQLNyOJRnY5ChLQN+GeeIMm0G3h Bwq01VQrvlbOGg== -----END CERTIFICATE-----Generated at Mon Dec 15 15:33:42 2025 by rpki-client