This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json) Hash identifier: IchPdCejj5AepNzrDOhxHZp2IrFHWOHjYvGbYLD1Mww= Subject key identifier: E9:00:34:5C:2C:F3:63:80:9D:16:42:15:A7:E6:DF:23:56:A3:EB:FF Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60 Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60 Certificate serial: 019AF12D93D15069C0276FE1035F5EE87B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft Manifest number: 02EA Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: k8zBN9RWmKnm3BJzgtJKnpXQt0K/pGVGFM7WPCehl28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:93:d1:50:69:c0:27:6f:e1:03:5f:5e:e8:7b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=e900345c2cf363809d164215a7e6df2356a3ebff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:36:6f:d4:8f:aa:3e:2d:fd:9d:57:0b:26: 32:13:fe:2d:9d:84:df:05:d1:3d:41:48:1d:0a:3e: 7d:cd:72:29:ec:1c:12:50:17:27:9b:cd:b5:87:e6: 22:aa:b9:9f:bd:11:ca:99:ae:57:92:98:a9:cd:8b: ec:78:a1:18:49:b0:5b:d8:e9:b9:18:6a:53:07:31: cf:fa:11:0f:5e:fb:56:e4:15:fc:e3:df:da:72:25: 36:4f:19:38:4f:de:61:e6:62:69:de:fd:0c:7b:06: ac:7d:1a:2e:9d:91:44:6f:07:c9:f4:71:ea:98:19: 6e:da:23:39:b7:86:c0:3b:86:56:2c:81:f9:6d:35: 72:60:58:ae:cd:8f:cf:79:df:35:a5:44:6b:b8:9a: 90:6f:b7:e0:49:0c:ac:c0:69:2c:7f:02:16:54:1c: 2b:e7:3e:f0:48:ae:63:e8:93:f1:08:d0:c7:6c:2f: c8:3d:bd:31:41:69:e8:51:2d:c7:5e:df:c4:94:1b: cc:97:8b:f9:5a:cd:5e:81:8c:ec:d6:de:a2:d3:ef: 0c:71:8b:3f:ce:bd:0b:bf:69:a0:f3:4a:b5:fd:0a: 2d:ca:6b:59:82:86:25:3b:26:20:4f:68:0e:f0:55: 91:46:54:96:5e:38:8f:24:74:53:1a:55:9b:04:6c: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:00:34:5C:2C:F3:63:80:9D:16:42:15:A7:E6:DF:23:56:A3:EB:FF X509v3 Authority Key Identifier: keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ef:70:19:33:9a:99:08:08:ce:c2:ab:88:b1:23:b7:ee:fe: 50:3d:6f:93:e3:17:1d:02:70:7b:ac:49:bf:04:14:d5:7d:aa: ad:a3:d3:d2:1f:d1:cd:6c:53:9e:da:35:db:11:13:96:14:f5: cc:41:be:70:9a:02:4c:a9:cc:5c:9a:f7:0b:1b:a4:4b:70:50: 5a:4b:fa:9d:55:9a:d8:77:d6:30:12:33:b5:99:98:d7:fd:1f: 19:18:1a:fe:62:f9:ff:d0:76:a7:f7:f9:87:d5:55:5f:06:58: 73:98:76:ff:06:fd:23:e3:29:4e:97:e0:58:7e:ff:d0:ea:a7: ec:2b:1e:3d:62:6f:e0:a5:12:7f:9f:7a:94:46:ef:6d:2c:4e: 8f:53:10:20:ed:bf:2d:eb:6a:49:59:99:e5:b5:0d:9d:0f:84: 27:1a:35:81:4b:f0:b0:fe:3d:9d:03:f0:73:40:7b:8c:17:c7: 86:8c:d3:14:5a:06:9c:c2:b8:b9:e3:cd:4f:53:30:52:6d:d7: 7a:55:70:0a:9b:03:b4:b7:9a:3d:1b:cc:e1:53:7a:99:92:93: 68:5c:e0:f2:12:78:84:4b:f8:4c:8c:a5:08:9e:db:8d:ce:58: e5:4e:0b:1e:21:56:7d:9a:91:2b:df:bb:d0:05:d3:42:b8:58: cf:dc:7b:f5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLZPRUGnAJ2/hA19e6HsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYWYyZjE5YjBlNGQ5NmM2NTViZjM3NzA2NjQ2MmUyYjE0 MWNkNjAwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EyhlOTAwMzQ1YzJjZjM2MzgwOWQxNjQyMTVhN2U2ZGYyMzU2YTNlYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa02b9SPqj4t/Z1XCyYyE/4tnYTf BdE9QUgdCj59zXIp7BwSUBcnm821h+YiqrmfvRHKma5XkpipzYvseKEYSbBb2Om5 GGpTBzHP+hEPXvtW5BX849/aciU2Txk4T95h5mJp3v0MewasfRounZFEbwfJ9HHq mBlu2iM5t4bAO4ZWLIH5bTVyYFiuzY/Ped81pURruJqQb7fgSQyswGksfwIWVBwr 5z7wSK5j6JPxCNDHbC/IPb0xQWnoUS3HXt/ElBvMl4v5Ws1egYzs1t6i0+8McYs/ zr0Lv2mg80q1/QotymtZgoYlOyYgT2gO8FWRRlSWXjiPJHRTGlWbBGxonQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOkANFws82OAnRZCFafm3yNWo+v/MB8GA1UdIwQY MBaAFPuvLxmw5NlsZVvzdwZkYuKxQc1gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02OHZHYkRrMld4bFdfTjNCbVJpNHJGQnpXQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZTNjMzY3LTM3YTItNGM2NS04M2My LTU5MmI4NGZkNTMzNi8xLzEtNjh2R2JEazJXeGxXX04zQm1SaTRyRkJ6V0EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBjL2UzYzM2Ny0zN2EyLTRjNjUtODNjMi01OTJiODRmZDUz MzYvMS8xLTY4dkdiRGsyV3hsV19OM0JtUmk0ckZCeldBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+9w GTOamQgIzsKriLEjt+7+UD1vk+MXHQJwe6xJvwQU1X2qraPT0h/RzWxTnto12xET lhT1zEG+cJoCTKnMXJr3CxukS3BQWkv6nVWa2HfWMBIztZmY1/0fGRga/mL5/9B2 p/f5h9VVXwZYc5h2/wb9I+MpTpfgWH7/0Oqn7CsePWJv4KUSf596lEbvbSxOj1MQ IO2/LetqSVmZ5bUNnQ+EJxo1gUvwsP49nQPwc0B7jBfHhozTFFoGnMK4uePNT1Mw Um3XelVwCpsDtLeaPRvM4VN6mZKTaFzg8hJ4hEv4TIylCJ7bjc5Y5U4LHiFWfZqR K9+70AXTQrhYz9x79Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:00 2025 by rpki-client