This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json) Hash identifier: /zNu9s7tNzlIT7mfsjqr0TK2rZIJFDkEiBjVxNCdeE4= Subject key identifier: DF:41:E9:21:31:3C:1E:88:E1:19:EA:DC:AD:C4:3F:F6:06:5D:DD:F5 Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34 Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34 Certificate serial: 019AF1D1C04DA73D22154FAC6BE25B833B9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: 0VGkgLNItdxL4x6JzUQSoUJJKoNCtsPnjT56GewOEtA=) 2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c0:4d:a7:3d:22:15:4f:ac:6b:e2:5b:83:3b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=df41e921313c1e88e119eadcadc43ff6065dddf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f3:3b:f2:3a:5a:7f:6a:53:dd:bb:c2:99:d9: cc:dd:2a:2f:c9:f9:37:4c:1d:6e:61:27:3a:18:0c: 70:8c:70:63:33:c2:f2:75:83:6f:5d:37:7d:42:10: 49:f4:96:c8:97:76:04:f1:7b:13:39:02:4b:c2:ad: d4:7e:de:8d:f6:43:95:ef:e2:2b:0c:5b:00:70:7d: 03:3e:d0:2c:28:47:be:fc:be:4d:f8:de:69:ff:52: 30:13:9b:eb:a0:ac:37:2d:4c:32:48:3e:97:84:b7: 18:3f:60:16:9c:2c:b3:6f:ce:28:a0:bf:13:bf:9d: e6:3e:c4:ec:3e:18:b3:a5:47:66:72:d6:f2:c7:74: 7e:6d:b1:38:49:39:86:55:a5:69:57:3e:0f:4e:2f: a9:c2:8d:23:7b:b6:77:ed:05:2d:6e:c8:f8:bb:cb: 07:a9:89:df:7c:f5:ad:15:18:26:58:e7:72:3b:b5: 0c:55:8c:95:32:99:73:26:2d:bf:a1:28:2d:87:ef: a2:80:dc:8b:78:cc:f4:39:1a:9f:17:ea:a8:a1:2f: fe:c8:af:06:cd:ad:a4:1f:99:4b:8f:9b:67:1b:bc: 9f:a0:12:54:d9:1e:79:96:5e:f5:5c:2d:11:2f:c7: ca:d5:44:8c:2a:b6:27:2a:6c:5b:0e:11:6c:87:0e: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:41:E9:21:31:3C:1E:88:E1:19:EA:DC:AD:C4:3F:F6:06:5D:DD:F5 X509v3 Authority Key Identifier: keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c2:e9:02:f0:19:7c:8a:35:a2:5e:ec:5c:30:f7:8d:a8:71: b7:23:e4:a6:4d:76:b4:c6:43:c9:8b:7b:02:e9:dd:0a:27:dc: b2:35:63:1e:e1:64:b4:00:a9:ca:8b:62:8c:7a:36:92:93:32: d2:5e:cd:e2:e3:cd:b9:8b:5f:25:a5:11:e8:26:a3:09:0e:2f: 8b:59:bb:bf:1f:f0:5e:32:1c:ab:05:f9:97:a4:f2:8b:7d:83: f2:5a:6c:52:ba:45:23:4d:c5:93:37:35:59:94:d9:35:3c:a2: 02:81:d0:54:67:ad:59:d9:26:c2:c8:60:9c:68:b6:6b:43:70: b3:13:8b:da:39:73:b8:13:d7:11:95:f7:c6:bb:74:80:18:4c: d8:a2:15:23:30:8b:ed:f5:07:d9:51:57:ec:9f:f5:4c:d3:d5: 40:60:54:40:2f:94:08:4f:98:a5:a7:0c:98:b1:ca:df:98:31: 79:8b:2a:5e:79:53:5e:80:d9:4b:cb:52:d6:47:ce:9f:8b:9d: e6:d7:54:78:3b:1d:8b:e4:81:1e:20:35:2f:8b:55:78:60:86: 17:52:53:5b:3a:bd:82:81:02:e6:bd:c6:cb:db:56:3c:b9:93: e1:83:a9:d9:10:98:59:b6:85:08:fd:2b:7a:10:91:bb:9d:d5: 6e:0a:6c:55 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0cBNpz0iFU+sa+JbgzucMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNDZhNGYxMTQzYWJlM2FkZmM0YjY4MzVmYTEzNGUzZGYy Y2FjMzQwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhkZjQxZTkyMTMxM2MxZTg4ZTExOWVhZGNhZGM0M2ZmNjA2NWRkZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPM78jpaf2pT3bvCmdnM3Sovyfk3 TB1uYSc6GAxwjHBjM8LydYNvXTd9QhBJ9JbIl3YE8XsTOQJLwq3Uft6N9kOV7+Ir DFsAcH0DPtAsKEe+/L5N+N5p/1IwE5vroKw3LUwySD6XhLcYP2AWnCyzb84ooL8T v53mPsTsPhizpUdmctbyx3R+bbE4STmGVaVpVz4PTi+pwo0je7Z37QUtbsj4u8sH qYnffPWtFRgmWOdyO7UMVYyVMplzJi2/oSgth++igNyLeMz0ORqfF+qooS/+yK8G za2kH5lLj5tnG7yfoBJU2R55ll71XC0RL8fK1USMKrYnKmxbDhFshw6MXwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFN9B6SExPB6I4Rnq3K3EP/YGXd31MB8GA1UdIwQY MBaAFPpGpPEUOr4638S2g1+hNOPfLKw0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1rYWs4UlE2dmpyZnhMYURYNkUwNDk4c3JEUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvZjNhNzlkLTM4Y2YtNDkwNS1hYjVm LTViY2E0NWVmZGU4Yy8xLzEta2FrOFJRNnZqcmZ4TGFEWDZFMDQ5OHNyRFEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RjL2YzYTc5ZC0zOGNmLTQ5MDUtYWI1Zi01YmNhNDVlZmRl OGMvMS8xLWthazhSUTZ2anJmeExhRFg2RTA0OThzckRRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMLp AvAZfIo1ol7sXDD3jahxtyPkpk12tMZDyYt7AundCifcsjVjHuFktACpyotijHo2 kpMy0l7N4uPNuYtfJaUR6CajCQ4vi1m7vx/wXjIcqwX5l6Tyi32D8lpsUrpFI03F kzc1WZTZNTyiAoHQVGetWdkmwshgnGi2a0NwsxOL2jlzuBPXEZX3xrt0gBhM2KIV IzCL7fUH2VFX7J/1TNPVQGBUQC+UCE+YpacMmLHK35gxeYsqXnlTXoDZS8tS1kfO n4ud5tdUeDsdi+SBHiA1L4tVeGCGF1JTWzq9goEC5r3Gy9tWPLmT4YOp2RCYWbaF CP0rehCRu53VbgpsVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:27 2025 by rpki-client