This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json) Hash identifier: UYeDRkJxQF1WQ4j/V9P8i6W+YIKMVSsHEvpXLwTyidA= Subject key identifier: E8:02:FC:3F:7D:03:97:20:AD:EB:A1:DF:25:A1:C3:6D:0E:2A:37:FE Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0 Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0 Certificate serial: 019AF1D23DC6CB7B14ED49FAB01365337C0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft Manifest number: 0BAE Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: 4d+Be/llPvyue1Fg6zKRZBDHaHeUjBg8Uh+u7mBjxtE=) 2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:c6:cb:7b:14:ed:49:fa:b0:13:65:33:7c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=e802fc3f7d039720adeba1df25a1c36d0e2a37fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:89:7a:04:78:03:3b:6a:b9:1c:6b:7b:52:15: 4c:32:6f:a2:d7:7b:96:c5:c2:e3:0a:c9:f1:55:2d: 33:b7:eb:5b:e6:51:cc:1a:c4:20:f0:24:0a:b9:9e: 6e:6c:61:e3:85:ee:f4:6d:66:14:68:26:76:ab:2d: 08:2d:79:d3:d7:9a:94:c6:aa:5a:54:57:8d:f0:a8: d3:0c:2f:19:e5:6b:f1:0f:dc:dd:56:9d:7b:ed:73: 61:cd:ec:3c:66:e4:df:f9:67:b7:c3:db:03:27:b9: 0b:56:6e:09:17:ef:95:67:6a:28:37:12:0d:38:12: 12:e1:9b:90:59:b7:e2:67:17:ab:e6:be:8b:2a:d6: 4c:c1:de:88:cd:ef:24:e4:51:7f:78:de:e3:e0:a1: 07:d5:5b:5d:7e:cd:41:9b:1e:9e:74:dd:1c:11:f5: 4b:10:d1:c4:1f:88:f3:d7:30:a2:80:2f:8c:31:67: 9c:ac:f4:ba:c5:63:bd:42:bc:87:5a:37:7c:09:cb: d4:3a:96:38:2f:4a:b2:f3:38:9f:56:c6:af:68:4e: bd:93:83:a8:c5:20:06:0c:8a:06:e5:e7:d4:ed:a0: 47:48:11:d2:0e:7a:c3:f6:80:03:49:84:0c:bb:93: f8:20:20:10:eb:9d:55:b5:40:e3:50:34:c0:69:96: b9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:02:FC:3F:7D:03:97:20:AD:EB:A1:DF:25:A1:C3:6D:0E:2A:37:FE X509v3 Authority Key Identifier: keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:aa:82:41:3f:38:d5:1c:13:ad:45:44:ca:b4:f2:1f:21:6b: a1:2f:82:57:74:71:d3:ab:46:c7:9d:1f:bf:5f:7a:97:57:4b: 10:da:b2:12:30:09:80:44:24:8d:a9:8e:a5:61:cf:80:00:53: e2:14:25:04:56:7a:94:06:0e:6d:93:b8:c3:ee:ff:52:89:71: 9a:bb:37:05:61:69:e3:2d:b1:3e:16:0d:fd:d5:94:a6:39:8a: 3a:9c:4d:91:35:33:c8:a3:ef:a3:89:db:69:90:dd:c5:bd:f7: 29:33:6f:0d:c9:1b:c3:16:19:d1:53:a8:38:65:49:21:45:8f: 4d:4b:17:7c:d0:53:18:78:75:f3:2d:54:77:e5:c9:d4:84:12: 5b:76:28:18:29:1e:9e:17:e4:8c:fd:54:07:d2:30:93:f2:14: 88:b7:d9:9f:cb:25:3f:6e:9b:9b:c3:ce:9d:ab:17:d0:44:75: fc:a2:ab:c6:6b:d9:0b:55:a1:67:a4:79:4b:d6:58:a1:1f:2d: 69:42:63:36:de:88:03:99:36:22:14:88:11:13:4e:86:4a:94: 0c:1d:1c:da:5f:bf:78:df:66:06:77:ec:6f:a7:68:23:d1:2a: 18:76:4d:a7:2e:64:a9:54:f6:14:06:bd:7c:4f:26:eb:b9:c5: b8:9a:74:6b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0j3Gy3sU7Un6sBNlM3wPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNTYwMjgwMmE4NzkzYTI0ZmRhNGQwZWRjYzMwYTE5NmMw Zjc3ZTAwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EyhlODAyZmMzZjdkMDM5NzIwYWRlYmExZGYyNWExYzM2ZDBlMmEzN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYl6BHgDO2q5HGt7UhVMMm+i13uW xcLjCsnxVS0zt+tb5lHMGsQg8CQKuZ5ubGHjhe70bWYUaCZ2qy0ILXnT15qUxqpa VFeN8KjTDC8Z5WvxD9zdVp177XNhzew8ZuTf+We3w9sDJ7kLVm4JF++VZ2ooNxIN OBIS4ZuQWbfiZxer5r6LKtZMwd6Ize8k5FF/eN7j4KEH1Vtdfs1Bmx6edN0cEfVL ENHEH4jz1zCigC+MMWecrPS6xWO9QryHWjd8CcvUOpY4L0qy8zifVsavaE69k4Oo xSAGDIoG5efU7aBHSBHSDnrD9oADSYQMu5P4ICAQ651VtUDjUDTAaZa5UQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOgC/D99A5cgreuh3yWhw20OKjf+MB8GA1UdIwQY MBaAFPtWAoAqh5OiT9pNDtzDChlsD3fgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0xWUNnQ3FIazZKUDJrME8zTU1LR1d3UGQtQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvODM4N2E3LTA2OGMtNDgzMi1hYTI2 LWRiNWIxZjg5YTUwZC8xLzEtMVlDZ0NxSGs2SlAyazBPM01NS0dXd1BkLUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4LzgzODdhNy0wNjhjLTQ4MzItYWEyNi1kYjViMWY4OWE1 MGQvMS8xLTFZQ2dDcUhrNkpQMmswTzNNTUtHV3dQZC1BLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKqC QT841RwTrUVEyrTyHyFroS+CV3Rx06tGx50fv196l1dLENqyEjAJgEQkjamOpWHP gABT4hQlBFZ6lAYObZO4w+7/Uolxmrs3BWFp4y2xPhYN/dWUpjmKOpxNkTUzyKPv o4nbaZDdxb33KTNvDckbwxYZ0VOoOGVJIUWPTUsXfNBTGHh18y1Ud+XJ1IQSW3Yo GCkenhfkjP1UB9Iwk/IUiLfZn8slP26bm8POnasX0ER1/KKrxmvZC1WhZ6R5S9ZY oR8taUJjNt6IA5k2IhSIERNOhkqUDB0c2l+/eN9mBnfsb6doI9EqGHZNpy5kqVT2 FAa9fE8m67nFuJp0aw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:45 2025 by rpki-client