This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft File: m1hBsHzPY5l5mzWGobIohZI9-L8.mft (raw, json) Hash identifier: 1IMYDoE5TLEYNwWhR+8/fFaxyVIIkTOmKUH/B4FWeuI= Subject key identifier: 6F:61:A7:95:BA:48:C0:E5:C6:63:77:32:DC:16:DE:34:8E:C8:44:21 Authority key identifier: 9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF Certificate issuer: /CN=9b5841b07ccf6399799b3586a1b22885923df8bf Certificate serial: 019AF3C0BB1F79EC160BA0EEA71A17A78D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft Manifest number: 13DE Signing time: Sat 06 Dec 2025 13:01:25 +0000 Manifest this update: Sat 06 Dec 2025 13:01:25 +0000 Manifest next update: Sun 07 Dec 2025 13:01:25 +0000 Files and hashes: 1: m1hBsHzPY5l5mzWGobIohZI9-L8.crl (hash: sEcaughbS0/NzHn0ehhaStLXu8odzHw+B35AVPccMT8=) 2: t1PClou-z7vfeF555qMb4l57MSc.roa (hash: 9X/H2c1jyHWtYn2BaqYb1fxAsJf2gSZ8sASmz7CE+Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:bb:1f:79:ec:16:0b:a0:ee:a7:1a:17:a7:8d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5841b07ccf6399799b3586a1b22885923df8bf Validity Not Before: Dec 6 13:01:25 2025 GMT Not After : Dec 7 13:01:25 2025 GMT Subject: CN=6f61a795ba48c0e5c6637732dc16de348ec84421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:db:b8:6c:74:f7:ee:cd:c3:f5:0f:e6:a3:8c: 02:b7:91:5b:60:5c:bc:23:9d:db:68:91:ac:3b:09: 5a:f5:24:4b:00:d4:f3:ac:45:ee:fa:94:e8:09:9a: 01:01:52:71:e5:57:ff:86:29:c9:98:20:31:59:87: c3:39:27:a6:dc:ce:fb:21:57:20:16:e0:3d:1b:d6: fb:15:bf:45:06:6e:b8:3c:56:76:13:41:89:b2:d4: 1a:33:31:52:9c:06:1a:24:7e:b0:6f:7a:11:30:65: 0c:e1:ec:58:14:8b:be:47:f6:64:a1:36:c3:a4:3e: 3e:5e:4b:03:87:4f:f3:c8:d8:2e:be:15:31:d2:ad: 3d:52:a1:25:f7:0f:82:19:ca:03:83:7c:55:28:a8: 4f:d2:0d:c1:3e:59:f8:34:ed:a9:8c:b0:e9:a2:0f: 8e:6e:5a:6c:49:90:23:cf:45:78:99:10:ad:d4:2b: 25:8f:3c:ad:8a:9d:c4:d1:72:57:6c:52:92:a8:8e: 53:9b:5f:ae:ec:61:88:a9:fe:b9:22:50:8b:e9:6c: 7c:ad:da:ce:32:a3:dc:b3:c9:0d:f8:0d:e8:d5:33: 5c:8f:76:93:04:c7:58:10:a5:bd:e4:c4:36:a3:64: 03:9e:a1:fb:af:f7:b9:1c:00:6e:06:23:52:9a:2c: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:61:A7:95:BA:48:C0:E5:C6:63:77:32:DC:16:DE:34:8E:C8:44:21 X509v3 Authority Key Identifier: keyid:9B:58:41:B0:7C:CF:63:99:79:9B:35:86:A1:B2:28:85:92:3D:F8:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1hBsHzPY5l5mzWGobIohZI9-L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/51f699-a0a2-434b-89b8-5339f37ffc77/1/m1hBsHzPY5l5mzWGobIohZI9-L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:31:fc:4e:1a:d1:ed:a8:31:d7:1f:34:fc:d6:c8:56:d2:bc: b4:d2:9a:4c:dd:f5:e2:f3:a1:ea:66:29:2f:54:5b:41:43:cd: 83:83:60:49:40:28:58:57:fb:5e:8a:2f:4b:d9:02:98:83:98: d7:88:da:ba:54:ab:c2:e9:61:28:c5:4b:47:cd:fd:a8:38:84: c3:b1:bd:de:17:4a:28:ff:e1:e3:2e:9a:db:9b:53:26:71:6c: 7d:22:64:2d:9b:96:09:f5:77:fb:4a:bf:70:0f:bd:b0:09:9e: ed:e0:c6:21:25:08:db:7f:cb:9b:ef:6a:76:57:fd:8a:59:c7: 05:b8:cd:7d:c7:1f:5d:2c:86:87:ab:75:29:d3:23:df:89:7f: 14:d7:41:e9:ce:40:e7:c7:93:11:ef:c1:0e:4f:2c:53:b3:4a: 45:8c:3f:55:98:bc:ea:17:d8:1c:60:c2:27:8c:1d:61:6b:1a: 84:dd:83:6d:95:13:04:50:9f:65:8c:93:77:43:94:b3:79:2d: 99:76:f2:c4:88:bd:ec:41:1d:03:c9:a3:82:ee:30:4e:0c:f9: 30:d7:7c:b6:91:6d:24:b1:cd:88:64:28:c9:15:21:ac:2d:75: 82:60:ae:5a:2b:95:f7:8f:40:24:92:13:b3:1a:fe:07:5c:cb: 02:e6:fe:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLsfeewWC6DupxoXp40qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTg0MWIwN2NjZjYzOTk3OTliMzU4NmExYjIyODg1OTIz ZGY4YmYwHhcNMjUxMjA2MTMwMTI1WhcNMjUxMjA3MTMwMTI1WjAzMTEwLwYDVQQD Eyg2ZjYxYTc5NWJhNDhjMGU1YzY2Mzc3MzJkYzE2ZGUzNDhlYzg0NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNu4bHT37s3D9Q/mo4wCt5FbYFy8 I53baJGsOwla9SRLANTzrEXu+pToCZoBAVJx5Vf/hinJmCAxWYfDOSem3M77IVcg FuA9G9b7Fb9FBm64PFZ2E0GJstQaMzFSnAYaJH6wb3oRMGUM4exYFIu+R/ZkoTbD pD4+XksDh0/zyNguvhUx0q09UqEl9w+CGcoDg3xVKKhP0g3BPln4NO2pjLDpog+O blpsSZAjz0V4mRCt1Csljzytip3E0XJXbFKSqI5Tm1+u7GGIqf65IlCL6Wx8rdrO MqPcs8kN+A3o1TNcj3aTBMdYEKW95MQ2o2QDnqH7r/e5HABuBiNSmizZcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9hp5W6SMDlxmN3MtwW3jSOyEQhMB8GA1UdIwQY MBaAFJtYQbB8z2OZeZs1hqGyKIWSPfi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5Yjgt NTMzOWYzN2ZmYzc3LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81MWY2OTktYTBhMi00MzRiLTg5YjgtNTMzOWYzN2ZmYzc3 LzEvbTFoQnNIelBZNWw1bXpXR29iSW9oWkk5LUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTH8ThrR 7agx1x80/NbIVtK8tNKaTN314vOh6mYpL1RbQUPNg4NgSUAoWFf7XoovS9kCmIOY 14jaulSrwulhKMVLR839qDiEw7G93hdKKP/h4y6a25tTJnFsfSJkLZuWCfV3+0q/ cA+9sAme7eDGISUI23/Lm+9qdlf9ilnHBbjNfccfXSyGh6t1KdMj34l/FNdB6c5A 58eTEe/BDk8sU7NKRYw/VZi86hfYHGDCJ4wdYWsahN2DbZUTBFCfZYyTd0OUs3kt mXbyxIi97EEdA8mjgu4wTgz5MNd8tpFtJLHNiGQoyRUhrC11gmCuWiuV949AJJIT sxr+B1zLAub+7A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:31 2025 by rpki-client