This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json) Hash identifier: SakDejnYGSTJo9RFdtLI3YqAdu60GrLnHJhKUSRNIGo= Subject key identifier: 23:86:00:5B:AF:7D:82:06:54:6F:6A:3F:8B:C4:16:9A:71:39:B1:43 Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7 Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7 Certificate serial: 019AF19AA7BB3E2CF024B98A99893852360B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft Manifest number: 0A77 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: HNIkRHTWOGfJ4xR7isBrqQTM73cK9T/4lIgTzSD8yqU=) 2: _KxvEwb-05zypoulu-kOqoL22-A.roa (hash: iIrzlSKXJeml3wWcOMj0MUUk02aq1R81c8+dmUXm/h4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a7:bb:3e:2c:f0:24:b9:8a:99:89:38:52:36:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=2386005baf7d8206546f6a3f8bc4169a7139b143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:8d:54:31:37:62:e8:22:8b:30:4b:c7:82: f9:c2:15:65:a5:b4:41:a5:43:b9:6f:83:4d:3b:dc: 8b:37:45:92:af:88:5a:bb:6c:e8:ac:a9:70:33:33: 7f:dc:19:1d:50:13:02:90:71:5e:7a:02:5a:59:b4: 18:9e:aa:5e:65:f8:fa:ac:23:17:85:8f:a0:89:9d: ed:2a:68:ce:aa:e7:65:6a:db:c5:07:5d:f0:0f:2c: 6f:c3:15:30:5f:b8:12:0d:ab:bb:69:cc:27:ad:fa: 63:1b:99:17:06:30:5d:ea:b8:d4:66:ea:11:3e:85: c2:ac:de:55:b5:9a:82:a4:10:dc:d9:f7:f6:8f:46: 82:fe:c1:25:e2:64:cf:5c:b8:4d:49:a6:80:8a:16: ef:9a:48:82:bf:de:8b:67:61:44:0c:24:9f:be:e7: 91:52:fa:29:98:e8:a4:75:c9:2a:e0:a9:4e:d6:5e: 51:6b:25:a7:af:66:38:fc:2a:84:05:0b:1a:5a:9f: 81:46:6f:0d:81:b7:f4:a3:53:6d:c9:98:51:d9:d7: 91:0b:dd:7b:3a:93:ca:c1:6a:cb:86:4a:0a:a5:f4: bd:86:7a:11:32:b2:20:ad:c3:f5:e0:5f:ce:3a:2a: b7:08:82:d3:26:4b:3e:7f:b4:23:2e:a8:ff:04:51: 30:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:86:00:5B:AF:7D:82:06:54:6F:6A:3F:8B:C4:16:9A:71:39:B1:43 X509v3 Authority Key Identifier: keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c1:06:98:c2:76:41:2b:88:9f:d5:4f:e2:9c:42:19:b0:f4: 66:ee:03:ea:29:fc:fb:f8:f7:f0:eb:e1:c5:f8:a0:97:a7:86: df:d3:e3:3b:c8:f5:fb:28:9c:38:fc:0a:4e:23:fc:6c:83:03: 6f:1b:5e:12:d7:01:bd:86:e8:0e:7e:ac:31:cf:89:93:ce:4e: f0:79:cc:e8:f2:e2:fb:47:66:9a:1a:12:3b:da:ff:83:21:8a: 88:b8:d2:c9:f4:37:81:44:8a:75:01:23:28:26:b7:60:56:48: 2f:96:d0:2b:9d:25:71:88:dc:9a:e5:63:ce:56:f2:e3:6c:1d: 39:9c:d8:40:8f:8d:9b:38:88:27:63:6d:83:ad:6b:8b:86:a9: f2:e6:e4:c4:95:02:58:49:79:cc:44:1b:08:12:e2:cc:f1:a2: 3c:42:c2:ca:ce:de:be:9a:79:7a:27:d5:d0:f7:8e:15:7c:ba: ce:bd:a6:8a:8d:fd:e0:ca:f7:29:08:2d:54:bd:b6:9c:b1:ed: df:37:d8:4e:a6:9e:7e:9e:dc:31:44:1e:c8:3d:54:8c:0e:65: f6:a1:df:52:c9:31:16:12:53:3d:43:07:c7:5a:59:0a:3e:00: 22:0a:b7:c9:7e:da:c7:6d:41:a3:63:21:21:d1:40:c4:f9:e1: a3:7a:37:6c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmqe7PizwJLmKmYk4UjYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTc4ZTM4YmI4ZWY5OGJiZjJiMzFiODk2Mzk3ZjQ4Nzlm NmIwZjcwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EygyMzg2MDA1YmFmN2Q4MjA2NTQ2ZjZhM2Y4YmM0MTY5YTcxMzliMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdGNVDE3YugiizBLx4L5whVlpbRB pUO5b4NNO9yLN0WSr4hau2zorKlwMzN/3BkdUBMCkHFeegJaWbQYnqpeZfj6rCMX hY+giZ3tKmjOqudlatvFB13wDyxvwxUwX7gSDau7acwnrfpjG5kXBjBd6rjUZuoR PoXCrN5VtZqCpBDc2ff2j0aC/sEl4mTPXLhNSaaAihbvmkiCv96LZ2FEDCSfvueR UvopmOikdckq4KlO1l5RayWnr2Y4/CqEBQsaWp+BRm8Ngbf0o1NtyZhR2deRC917 OpPKwWrLhkoKpfS9hnoRMrIgrcP14F/OOiq3CILTJks+f7QjLqj/BFEwCwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCOGAFuvfYIGVG9qP4vEFppxObFDMB8GA1UdIwQY MBaAFPoXjji7jvmLvysxuJY5f0h59rD3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oZU9PTHVPLVl1X0t6RzRsamxfU0huMnNQYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjZlMDZhLTVlNDctNGZhOS1iZDNi LTBiYzQ3ZjRmZjcxNC8xLzEtaGVPT0x1Ty1ZdV9Lekc0bGpsX1NIbjJzUGMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2U0LzY2ZTA2YS01ZTQ3LTRmYTktYmQzYi0wYmM0N2Y0ZmY3 MTQvMS8xLWhlT09MdU8tWXVfS3pHNGxqbF9TSG4yc1BjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMEG mMJ2QSuIn9VP4pxCGbD0Zu4D6in8+/j38Ovhxfigl6eG39PjO8j1+yicOPwKTiP8 bIMDbxteEtcBvYboDn6sMc+Jk85O8HnM6PLi+0dmmhoSO9r/gyGKiLjSyfQ3gUSK dQEjKCa3YFZIL5bQK50lcYjcmuVjzlby42wdOZzYQI+NmziIJ2Ntg61ri4ap8ubk xJUCWEl5zEQbCBLizPGiPELCys7evpp5eifV0PeOFXy6zr2mio394Mr3KQgtVL22 nLHt3zfYTqaefp7cMUQeyD1UjA5l9qHfUskxFhJTPUMHx1pZCj4AIgq3yX7ax21B o2MhIdFAxPnho3o3bA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:56:58 2025 by rpki-client