This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft File: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json) Hash identifier: BMJzxgqibVTaYzHN5xAw3EjW87uVRge8wdHQWjPDI4E= Subject key identifier: 43:3D:79:47:94:55:BA:DD:8A:5C:50:82:8B:E0:5E:D9:07:E1:37:F6 Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82 Certificate issuer: /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82 Certificate serial: 019AF2090D5679FECEDE698D9BBABBD4EFC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 05:01:10 +0000 Manifest this update: Sat 06 Dec 2025 05:01:10 +0000 Manifest next update: Sun 07 Dec 2025 05:01:10 +0000 Files and hashes: 1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: GLM2qMGrRq3Fq8xzgEdvOnbIthZZmL6lOqkuwlPR5P0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0d:56:79:fe:ce:de:69:8d:9b:ba:bb:d4:ef:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82 Validity Not Before: Dec 6 05:01:10 2025 GMT Not After : Dec 7 05:01:10 2025 GMT Subject: CN=433d79479455badd8a5c50828be05ed907e137f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:f5:ca:0d:cd:47:a1:5a:af:e8:35:b2:b7: 1f:88:ad:6c:33:a5:ee:1a:95:87:1b:49:e2:24:ac: 66:2e:6d:c5:2e:18:97:5a:f3:1f:64:5d:80:e0:dc: 69:5f:cd:7b:ee:82:85:41:39:6c:28:82:5b:04:dc: 48:d7:de:45:b6:b4:9a:cb:e3:e6:08:7a:d7:3c:65: cc:24:87:80:81:02:c4:fb:f5:51:4e:db:73:97:10: 3a:34:da:74:bf:d5:a4:30:35:01:ac:db:f0:e1:cc: b1:5c:5d:36:a8:3f:ae:23:11:32:80:ea:0f:ab:e2: ca:2c:4e:2c:e7:49:e3:60:e8:24:c6:78:45:b1:19: 35:e9:d3:57:40:33:e6:ce:ae:51:fd:74:ad:ef:27: c2:64:0e:13:67:b6:06:67:68:1c:fa:b6:1d:52:da: 74:0e:b7:20:a0:1f:3b:c8:43:8a:ff:5d:cc:9c:09: 5c:36:17:e2:21:2c:cd:88:6a:63:40:fb:9d:a7:c8: 1f:66:5a:22:77:af:af:d4:9b:ae:1a:7c:22:5f:fc: 42:77:59:1b:d0:b4:4b:55:78:f7:de:2f:5e:50:aa: 43:64:e5:7d:9a:d4:59:90:2b:1d:62:87:e0:92:d2: 38:6b:1a:fc:19:9a:ce:4b:ff:d1:0d:48:dd:0d:b9: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3D:79:47:94:55:BA:DD:8A:5C:50:82:8B:E0:5E:D9:07:E1:37:F6 X509v3 Authority Key Identifier: keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3f:9e:01:c6:97:a1:d1:75:38:32:c6:41:91:53:a1:f1:ec: ec:18:63:61:84:02:f0:ee:ee:00:35:68:32:cd:09:cc:ba:cc: b9:76:a1:ae:54:87:50:f8:96:08:f3:16:f7:f3:5f:65:c9:5e: 3f:1c:f3:d6:79:03:5d:4b:81:42:4b:e8:cb:3c:2b:b0:ce:d1: d9:a1:31:7d:22:01:4c:c3:27:e3:a0:d5:b5:8a:1b:08:25:c0: e8:97:3e:8f:18:c2:6d:b8:ec:32:0e:d1:41:03:ca:32:0b:63: 97:11:18:80:e4:4f:c3:b3:6c:0c:25:5f:31:c1:de:02:3a:ba: 91:3b:84:8b:74:27:c6:21:88:40:80:ae:94:80:ee:56:88:5d: 1b:0c:89:89:dc:cc:bf:4d:06:0d:a6:bd:bf:df:82:fc:99:d9: f0:8d:4b:ac:c9:1d:ee:7c:db:96:4d:2a:0d:a7:8f:47:d4:15: f8:09:bf:cd:b1:91:73:5a:43:0e:5c:cd:0f:a3:01:93:1f:48: 5c:13:dd:64:80:39:c9:ff:26:56:72:2e:d3:2a:b9:a6:e3:14: d0:aa:ce:e7:a1:24:31:16:07:c3:12:11:4c:d5:97:6e:2c:e0: 48:8a:9e:64:17:ed:f2:63:79:f9:f6:77:d2:05:5c:57:e4:f9: 6c:de:41:87 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCQ1Wef7O3mmNm7q71O/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMGY3ZWJkMjVmNmFmNDYzNzgyMmVmZjQ4YjI3OGIxOGM3 MDZmODIwHhcNMjUxMjA2MDUwMTEwWhcNMjUxMjA3MDUwMTEwWjAzMTEwLwYDVQQD Eyg0MzNkNzk0Nzk0NTViYWRkOGE1YzUwODI4YmUwNWVkOTA3ZTEzN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwH1yg3NR6Far+g1srcfiK1sM6Xu GpWHG0niJKxmLm3FLhiXWvMfZF2A4NxpX8177oKFQTlsKIJbBNxI195FtrSay+Pm CHrXPGXMJIeAgQLE+/VRTttzlxA6NNp0v9WkMDUBrNvw4cyxXF02qD+uIxEygOoP q+LKLE4s50njYOgkxnhFsRk16dNXQDPmzq5R/XSt7yfCZA4TZ7YGZ2gc+rYdUtp0 DrcgoB87yEOK/13MnAlcNhfiISzNiGpjQPudp8gfZloid6+v1JuuGnwiX/xCd1kb 0LRLVXj33i9eUKpDZOV9mtRZkCsdYofgktI4axr8GZrOS//RDUjdDbnT1wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEM9eUeUVbrdilxQgovgXtkH4Tf2MB8GA1UdIwQY MBaAFPsPfr0l9q9GN4Iu/0iyeLGMcG+CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13OS12U1gycjBZM2dpN19TTEo0c1l4d2I0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvZTIwOTk3LWExZWUtNDFkZS04Nzhj LTIxODA1NDA3YjkwYy8xLzEtdzktdlNYMnIwWTNnaTdfU0xKNHNZeHdiNEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA1L2UyMDk5Ny1hMWVlLTQxZGUtODc4Yy0yMTgwNTQwN2I5 MGMvMS8xLXc5LXZTWDJyMFkzZ2k3X1NMSjRzWXh3YjRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdT+e AcaXodF1ODLGQZFTofHs7BhjYYQC8O7uADVoMs0JzLrMuXahrlSHUPiWCPMW9/Nf ZclePxzz1nkDXUuBQkvoyzwrsM7R2aExfSIBTMMn46DVtYobCCXA6Jc+jxjCbbjs Mg7RQQPKMgtjlxEYgORPw7NsDCVfMcHeAjq6kTuEi3QnxiGIQICulIDuVohdGwyJ idzMv00GDaa9v9+C/JnZ8I1LrMkd7nzblk0qDaePR9QV+Am/zbGRc1pDDlzND6MB kx9IXBPdZIA5yf8mVnIu0yq5puMU0KrO56EkMRYHwxIRTNWXbizgSIqeZBft8mN5 +fZ30gVcV+T5bN5Bhw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:33 2025 by rpki-client