This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json) Hash identifier: L7yuT/ZgUAfs08F8a0LMFmcz1WFLJqmkYA2DbufGhcg= Subject key identifier: 8F:FC:F3:07:80:57:26:4C:4F:5A:65:27:D1:CD:AE:8C:61:8A:67:5B Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Certificate serial: 019B31FA9801899E321C0353C301CC4DC3AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft Manifest number: 0509 Signing time: Thu 18 Dec 2025 15:01:05 +0000 Manifest this update: Thu 18 Dec 2025 15:01:05 +0000 Manifest next update: Fri 19 Dec 2025 15:01:05 +0000 Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: UNMXU0CkU6I5sgM8FOFqHUU6WQuHoUnpzTjQMxsvzQg=) 2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:98:01:89:9e:32:1c:03:53:c3:01:cc:4d:c3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d Validity Not Before: Dec 18 15:01:05 2025 GMT Not After : Dec 19 15:01:05 2025 GMT Subject: CN=8ffcf3078057264c4f5a6527d1cdae8c618a675b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:92:df:0d:1c:7d:f7:ed:c6:31:17:af:9d: e0:75:5d:27:2a:9c:3e:34:09:8e:4f:12:8e:46:23: 37:00:c9:c9:1e:42:c1:8a:38:e6:8b:76:c7:75:01: da:a0:c2:83:56:63:fe:35:a5:59:2e:36:f8:55:92: 65:cf:33:db:0e:05:67:1f:b7:94:ba:52:ed:58:c7: 86:ae:96:82:8d:8d:c9:9b:42:7b:c3:d1:94:e0:a6: d0:ab:e6:53:5d:00:9b:54:60:7d:d1:d8:d7:8f:ce: 90:7d:30:82:7d:f0:62:e6:04:bf:44:02:9e:71:56: 7e:cd:f1:80:c4:94:51:ac:d6:f7:a6:b1:2b:77:86: 17:c7:49:67:a0:8a:fc:2a:6f:5c:f9:d5:9e:15:ef: e0:04:38:98:5b:1b:6c:c7:a2:15:08:ae:6f:56:b0: 2e:d9:33:3b:2f:f8:f3:3a:be:0e:1f:55:e4:c0:c8: 76:21:10:0f:f5:ea:1f:74:d0:e6:aa:a9:77:e3:36: cd:16:69:81:d2:cc:06:6e:37:2f:5f:c3:b5:3e:05: f4:3d:80:1c:eb:0d:c6:9f:2d:6e:55:f8:3a:ff:e9: f5:94:f3:58:a8:99:57:9b:39:ed:49:29:20:86:64: 12:2b:7d:9a:63:9c:bc:09:95:8b:46:83:fd:2c:c1: c2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FC:F3:07:80:57:26:4C:4F:5A:65:27:D1:CD:AE:8C:61:8A:67:5B X509v3 Authority Key Identifier: keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d3:49:53:5d:d1:a6:8d:fa:a9:9c:b0:17:f8:60:34:af:7b: 39:49:b9:9e:bb:17:90:58:0d:e4:43:81:88:09:85:fb:21:01: 48:39:ad:a6:90:9c:1e:8f:af:ac:81:02:39:62:78:be:25:1e: 90:01:5e:e9:46:44:00:40:05:98:9c:c5:06:c7:f2:12:90:4f: 37:e0:16:f2:03:bc:0d:be:54:63:9b:36:41:1f:c8:b3:bd:29: 28:eb:19:0f:96:cb:7b:62:ed:7e:68:58:3c:8b:cd:e4:78:29: bc:2f:42:b9:4d:8e:de:0e:b2:1e:5a:64:2a:49:7f:65:0f:96: 3f:69:a8:ee:e2:0d:49:cf:f4:e7:ed:79:9b:0e:b4:2e:80:17: de:0d:e2:2f:5c:00:30:63:d4:b3:89:c1:5e:fc:58:ec:71:f1: 13:3c:ad:42:3d:22:a1:c2:fc:73:ff:3f:6e:3d:c6:e5:93:44: 07:ab:0a:cd:1f:c9:03:35:44:8d:8a:4d:a7:50:2e:5a:7a:b6: 57:20:6d:38:37:a3:54:bc:5c:5b:84:a7:bd:22:3a:86:73:6d: e3:28:cf:9e:89:b5:39:1a:36:9a:1d:f8:01:90:89:6b:9a:3c: 1c:e8:41:39:56:28:fe:ab:3a:0d:45:63:b9:ab:c2:7f:01:40: 15:6f:b8:40 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsx+pgBiZ4yHANTwwHMTcOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTFjOTU2MGZhOTEwNWU2YmRjNGI0OTJlZmFiNjQxYWI1 MDgwMWQwHhcNMjUxMjE4MTUwMTA1WhcNMjUxMjE5MTUwMTA1WjAzMTEwLwYDVQQD Eyg4ZmZjZjMwNzgwNTcyNjRjNGY1YTY1MjdkMWNkYWU4YzYxOGE2NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk2S3w0cffftxjEXr53gdV0nKpw+ NAmOTxKORiM3AMnJHkLBijjmi3bHdQHaoMKDVmP+NaVZLjb4VZJlzzPbDgVnH7eU ulLtWMeGrpaCjY3Jm0J7w9GU4KbQq+ZTXQCbVGB90djXj86QfTCCffBi5gS/RAKe cVZ+zfGAxJRRrNb3prErd4YXx0lnoIr8Km9c+dWeFe/gBDiYWxtsx6IVCK5vVrAu 2TM7L/jzOr4OH1XkwMh2IRAP9eofdNDmqql34zbNFmmB0swGbjcvX8O1PgX0PYAc 6w3Gny1uVfg6/+n1lPNYqJlXmzntSSkghmQSK32aY5y8CZWLRoP9LMHCCQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI/88weAVyZMT1plJ9HNroxhimdbMB8GA1UdIwQY MBaAFPoRyVYPqRBea9xLSS76tkGrUIAdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oSEpWZy1wRUY1cjNFdEpMdnEyUWF0UWdCMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMDBlZTZhLTVlOTUtNGUxMC04ZWU2 LTdlMjIyYmZlY2M5MC8xLzEtaEhKVmctcEVGNXIzRXRKTHZxMlFhdFFnQjAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4LzAwZWU2YS01ZTk1LTRlMTAtOGVlNi03ZTIyMmJmZWNj OTAvMS8xLWhISlZnLXBFRjVyM0V0Skx2cTJRYXRRZ0IwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9NJ U13Rpo36qZywF/hgNK97OUm5nrsXkFgN5EOBiAmF+yEBSDmtppCcHo+vrIECOWJ4 viUekAFe6UZEAEAFmJzFBsfyEpBPN+AW8gO8Db5UY5s2QR/Is70pKOsZD5bLe2Lt fmhYPIvN5HgpvC9CuU2O3g6yHlpkKkl/ZQ+WP2mo7uINSc/05+15mw60LoAX3g3i L1wAMGPUs4nBXvxY7HHxEzytQj0iocL8c/8/bj3G5ZNEB6sKzR/JAzVEjYpNp1Au Wnq2VyBtODejVLxcW4SnvSI6hnNt4yjPnom1ORo2mh34AZCJa5o8HOhBOVYo/qs6 DUVjuavCfwFAFW+4QA== -----END CERTIFICATE-----Generated at Thu Dec 18 17:50:42 2025 by rpki-client