This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json) Hash identifier: 51CcnFbcVqEwy25P4JMkopo5L/Wla9jeeQXcKRCM4Rc= Subject key identifier: 30:13:22:9C:84:D9:15:BF:65:D2:9B:49:DE:E6:2E:8D:B1:46:31:74 Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e Certificate serial: 019AF1D245D5916A4D5C21ECB4810BB7181E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft Manifest number: B4 Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: 6h9KYDOcP0qnwv+4+lTkhcuw7PiCdxJi07dYUyPY8M8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:45:d5:91:6a:4d:5c:21:ec:b4:81:0b:b7:18:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=3013229c84d915bf65d29b49dee62e8db1463174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:7d:97:cf:42:b8:e7:63:7a:68:17:c4:42: 23:bf:42:a2:01:fe:b6:7d:ec:26:0a:81:f0:d4:2a: f2:ed:f6:38:79:ce:ef:0f:08:70:54:cd:cf:39:d9: 30:d6:ac:88:84:ac:9a:e6:06:62:6d:fc:d2:b0:2e: b9:81:df:1b:7e:97:4e:4e:31:d2:8d:25:d5:2a:92: 90:2b:94:44:8e:2f:36:3a:ea:cc:ff:a4:d1:4a:8d: 81:e0:08:6f:6d:45:d9:fb:d8:e8:cd:36:de:77:d3: 84:5f:3d:c3:97:12:93:4f:a6:60:d4:86:0d:4a:69: 4b:9b:1b:bd:5a:05:f5:c3:05:02:d5:12:00:86:98: 70:3c:66:12:ed:34:a9:db:2e:14:21:c2:c5:a6:5e: f7:d7:5f:76:cc:33:35:6f:8f:a4:b7:e7:1b:d6:1f: 50:1e:f3:f2:b5:7e:0d:8e:06:4b:ca:b6:f8:58:f1: f8:c7:c1:2b:91:25:2b:59:73:17:32:ef:14:8e:00: 0b:5b:1b:a6:ca:0f:2d:aa:0b:00:58:07:b5:03:20: 72:f0:73:7c:8a:38:a1:6d:dd:37:dd:8c:b1:e2:c1: e1:cd:a2:f5:9d:98:0f:aa:f1:17:f7:64:78:9d:db: a4:8d:37:99:8e:11:27:cb:9e:50:79:80:a7:46:35: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:13:22:9C:84:D9:15:BF:65:D2:9B:49:DE:E6:2E:8D:B1:46:31:74 X509v3 Authority Key Identifier: keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b1:a5:4b:c9:49:7b:a0:49:5b:60:93:47:e2:59:87:e0:61: 4c:db:8a:89:81:bd:c5:00:c2:d3:04:e1:ea:7e:a9:83:db:3e: 95:b4:6e:85:e9:62:51:2f:dc:b7:8c:bf:91:ed:54:e5:02:71: 6e:12:e4:ea:31:8a:2f:33:99:6d:e0:f4:fd:5d:06:3c:d4:6a: 5f:e2:35:13:85:f9:dc:c6:05:a9:9b:3c:71:d0:e1:a0:5e:cd: 2e:cc:46:05:a0:a5:29:6f:59:90:ff:b8:a7:5b:0d:bb:46:45: a2:8c:90:f0:de:91:1e:64:70:14:28:eb:ef:ac:fb:b3:4b:e3: 64:2c:02:23:8c:ff:73:03:55:bc:e5:01:7a:c0:32:d1:80:5a: ca:15:f6:43:df:cd:7a:8a:70:d0:8d:08:e7:ee:38:9c:15:08: ee:74:b8:5f:76:a0:13:70:53:af:b7:72:bb:ae:9f:c3:c0:53: b2:29:9d:af:20:7b:c8:8f:2d:08:e5:6b:c8:be:ff:87:2b:79: ce:11:b8:7f:1f:c5:08:70:93:8a:99:6f:23:fc:6b:4a:67:f5: 05:ef:ba:a8:10:79:89:74:1a:e4:60:9d:c5:09:71:be:18:66: ad:1a:bf:f5:8d:e6:25:54:37:0f:bf:3d:50:fe:5c:0b:e8:2b: 7a:83:a5:29 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0kXVkWpNXCHstIELtxgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZmRlM2Q5OTI1YWJiZTIwZmMzYzZkOTE4NGM3ZGY2NzA0 N2ZiOWUwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EygzMDEzMjI5Yzg0ZDkxNWJmNjVkMjliNDlkZWU2MmU4ZGIxNDYzMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCd9l89CuOdjemgXxEIjv0KiAf62 fewmCoHw1Cry7fY4ec7vDwhwVM3POdkw1qyIhKya5gZibfzSsC65gd8bfpdOTjHS jSXVKpKQK5REji82OurM/6TRSo2B4AhvbUXZ+9jozTbed9OEXz3DlxKTT6Zg1IYN SmlLmxu9WgX1wwUC1RIAhphwPGYS7TSp2y4UIcLFpl731192zDM1b4+kt+cb1h9Q HvPytX4NjgZLyrb4WPH4x8ErkSUrWXMXMu8UjgALWxumyg8tqgsAWAe1AyBy8HN8 ijihbd033Yyx4sHhzaL1nZgPqvEX92R4ndukjTeZjhEny55QeYCnRjV+NQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDATIpyE2RW/ZdKbSd7mLo2xRjF0MB8GA1UdIwQY MBaAFPr949mSWrviD8PG2RhMffZwR/ueMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12M2oyWkphdS1JUHc4YlpHRXg5OW5CSC01NC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvZGM4ZDAwLWYyYzQtNDk5MS05ODll LTQzZDE5ZGMzZjEzOC8xLzEtdjNqMlpKYXUtSVB3OGJaR0V4OTluQkgtNTQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA4L2RjOGQwMC1mMmM0LTQ5OTEtOTg5ZS00M2QxOWRjM2Yx MzgvMS8xLXYzajJaSmF1LUlQdzhiWkdFeDk5bkJILTU0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrGl S8lJe6BJW2CTR+JZh+BhTNuKiYG9xQDC0wTh6n6pg9s+lbRuheliUS/ct4y/ke1U 5QJxbhLk6jGKLzOZbeD0/V0GPNRqX+I1E4X53MYFqZs8cdDhoF7NLsxGBaClKW9Z kP+4p1sNu0ZFooyQ8N6RHmRwFCjr76z7s0vjZCwCI4z/cwNVvOUBesAy0YBayhX2 Q9/Neopw0I0I5+44nBUI7nS4X3agE3BTr7dyu66fw8BTsimdryB7yI8tCOVryL7/ hyt5zhG4fx/FCHCTiplvI/xrSmf1Be+6qBB5iXQa5GCdxQlxvhhmrRq/9Y3mJVQ3 D789UP5cC+greoOlKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:38 2025 by rpki-client