This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json) Hash identifier: lWoDsvpua9BqZeZrnPsoAUdbCebKRCelHCPuS4Aceqk= Subject key identifier: 7A:74:B1:53:1F:99:BA:F1:69:B7:17:44:07:BC:F2:3B:19:92:C2:1A Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94 Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294 Certificate serial: 019AF2765FA39EB2AFC698783EA968DD4A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:34 +0000 Manifest this update: Sat 06 Dec 2025 07:00:34 +0000 Manifest next update: Sun 07 Dec 2025 07:00:34 +0000 Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: mkvgliv137TVNoiHJM+Pc0+SsR3s/KMHSAXsmHbXHS8=) 2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5f:a3:9e:b2:af:c6:98:78:3e:a9:68:dd:4a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294 Validity Not Before: Dec 6 07:00:34 2025 GMT Not After : Dec 7 07:00:34 2025 GMT Subject: CN=7a74b1531f99baf169b7174407bcf23b1992c21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:e3:11:59:0a:f4:8f:5f:25:c7:da:c1:ae: eb:4b:bd:fc:39:0a:32:d4:12:c2:55:9b:e3:71:3a: 2c:56:cf:71:74:95:ea:65:7d:4d:53:a8:3b:ea:e4: d5:9f:42:17:58:5c:6d:3b:a9:b7:2f:1e:e9:99:b5: 42:0d:11:95:e3:a3:e8:27:24:65:18:9f:70:89:c0: db:46:ce:97:6a:fa:c3:f6:90:23:bd:75:d8:53:12: 46:89:a3:0f:b7:8f:1a:12:10:da:83:f5:80:03:11: fa:5f:ea:f3:12:0a:61:87:7c:72:12:f0:19:71:c4: 98:2d:a3:5f:8a:fa:06:ef:6d:28:d8:1e:e1:8a:e6: ec:c6:4e:22:1d:a2:cf:69:c7:65:c2:48:a1:38:01: 4b:38:5c:9d:c5:0a:91:7c:b8:73:3a:92:8b:16:be: 39:96:3b:02:a9:14:4f:58:be:74:4b:db:30:9c:3c: 37:7d:00:2e:4d:f5:93:50:96:e5:5b:29:26:25:65: 0e:92:d1:40:db:8e:11:85:ac:a1:8b:48:cd:a2:1b: 3e:39:34:05:17:21:33:cc:59:0f:1a:32:ac:a5:85: 38:23:4f:45:86:db:54:d9:5b:aa:6b:fa:8b:aa:97: 0b:ab:a5:37:e2:da:60:f7:00:b1:5d:ec:28:b5:97: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:74:B1:53:1F:99:BA:F1:69:B7:17:44:07:BC:F2:3B:19:92:C2:1A X509v3 Authority Key Identifier: keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:00:70:bf:ed:33:e6:26:51:ff:fc:00:da:54:bf:67:49:9b: f5:80:1d:75:85:15:f7:17:05:77:52:62:c1:47:a7:f0:2b:bc: 19:44:26:cc:03:d0:0c:64:42:27:35:1b:f1:75:ec:af:32:79: 31:4d:00:2a:3b:ce:7e:98:5e:ea:37:9c:a0:27:43:4d:6c:91: d6:ba:d2:84:e9:b3:ab:6e:fe:0e:6d:6b:17:b8:d4:9a:f3:c9: b4:79:24:6a:66:b7:0d:16:78:d8:ba:33:f7:aa:6b:c1:32:82: 25:c4:bf:eb:de:fd:57:76:06:e1:7e:47:c5:f2:84:a0:64:38: c5:61:35:bf:6d:f4:91:76:ec:18:7b:41:d4:c8:5d:10:be:bf: b5:90:b5:f2:07:e9:ff:e3:a8:5a:95:f6:ec:ed:eb:73:92:6b: f0:7c:08:b4:16:84:44:57:e5:05:ff:df:38:03:f4:2a:4f:e7: 94:ca:c0:07:3e:1e:0a:25:5a:4d:fd:68:20:46:fe:b7:3f:2b: 03:92:86:1a:31:59:24:d5:1a:78:e5:26:d7:b1:28:be:3d:25: 0a:dc:bb:d4:cd:05:e7:64:87:d9:5d:71:38:97:7f:3c:99:d6: 10:5c:59:4c:04:df:84:8d:15:33:86:4f:4c:67:34:80:25:f4: cf:e5:51:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydl+jnrKvxph4Pqlo3UoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTI5Y2NiYjhjMjQxYTljOWIxZmYyMDczMGEyNjQ5NTZi NTAyOTQwHhcNMjUxMjA2MDcwMDM0WhcNMjUxMjA3MDcwMDM0WjAzMTEwLwYDVQQD Eyg3YTc0YjE1MzFmOTliYWYxNjliNzE3NDQwN2JjZjIzYjE5OTJjMjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqDjEVkK9I9fJcfawa7rS738OQoy 1BLCVZvjcTosVs9xdJXqZX1NU6g76uTVn0IXWFxtO6m3Lx7pmbVCDRGV46PoJyRl GJ9wicDbRs6XavrD9pAjvXXYUxJGiaMPt48aEhDag/WAAxH6X+rzEgphh3xyEvAZ ccSYLaNfivoG720o2B7hiubsxk4iHaLPacdlwkihOAFLOFydxQqRfLhzOpKLFr45 ljsCqRRPWL50S9swnDw3fQAuTfWTUJblWykmJWUOktFA244Rhayhi0jNohs+OTQF FyEzzFkPGjKspYU4I09FhttU2Vuqa/qLqpcLq6U34tpg9wCxXewotZfXXQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHp0sVMfmbrxabcXRAe88jsZksIaMB8GA1UdIwQY MBaAFPoSnMu4wkGpybH/IHMKJklWtQKUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oS2N5N2pDUWFuSnNmOGdjd29tU1ZhMUFwUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzAwODM5LTE5MmUtNGVhOS05OWYy LTE4ZmQ4NTZhNThiNy8xLzEtaEtjeTdqQ1FhbkpzZjhnY3dvbVNWYTFBcFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzhjLzMwMDgzOS0xOTJlLTRlYTktOTlmMi0xOGZkODU2YTU4 YjcvMS8xLWhLY3k3akNRYW5Kc2Y4Z2N3b21TVmExQXBRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQBw v+0z5iZR//wA2lS/Z0mb9YAddYUV9xcFd1JiwUen8Cu8GUQmzAPQDGRCJzUb8XXs rzJ5MU0AKjvOfphe6jecoCdDTWyR1rrShOmzq27+Dm1rF7jUmvPJtHkkama3DRZ4 2Loz96prwTKCJcS/6979V3YG4X5HxfKEoGQ4xWE1v230kXbsGHtB1MhdEL6/tZC1 8gfp/+OoWpX27O3rc5Jr8HwItBaERFflBf/fOAP0Kk/nlMrABz4eCiVaTf1oIEb+ tz8rA5KGGjFZJNUaeOUm17Eovj0lCty71M0F52SH2V1xOJd/PJnWEFxZTATfhI0V M4ZPTGc0gCX0z+VRww== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:41 2025 by rpki-client