This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft File: hRwTZejd_OV1mPvo3n6oesYD4iw.mft (raw, json) Hash identifier: 6pM/R0FITbw4rQXyXDJTJmNdkgHx4mps3B2Zj6XBKgI= Subject key identifier: F1:EB:3C:0D:2A:2E:12:99:C1:C3:68:B8:79:2D:36:9C:0D:96:A3:75 Authority key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C Certificate issuer: /CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c Certificate serial: 019AF12D6E673E276060457E70DD56B0F1A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft Manifest number: 09B1 Signing time: Sat 06 Dec 2025 01:01:17 +0000 Manifest this update: Sat 06 Dec 2025 01:01:17 +0000 Manifest next update: Sun 07 Dec 2025 01:01:17 +0000 Files and hashes: 1: hRwTZejd_OV1mPvo3n6oesYD4iw.crl (hash: kN4IGnPNh7O+OSNkSuKXcwIh9lijNlWob3yPnZCCpxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:6e:67:3e:27:60:60:45:7e:70:dd:56:b0:f1:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c Validity Not Before: Dec 6 01:01:17 2025 GMT Not After : Dec 7 01:01:17 2025 GMT Subject: CN=f1eb3c0d2a2e1299c1c368b8792d369c0d96a375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:d8:b4:90:b1:99:9b:ba:9e:e9:cc:ef:25: 24:ef:76:af:94:a4:68:87:16:3a:85:50:f9:f7:f9: c9:3e:60:bd:50:02:c7:09:02:af:03:8d:fb:c6:30: db:0c:7e:8d:ef:83:dc:a6:07:8c:56:81:6e:b5:e6: f3:37:20:58:cb:5d:b6:9e:fe:a7:0d:50:04:d3:23: 37:d4:c2:d2:ad:89:95:89:25:1c:7e:b7:9c:86:c2: ca:c7:74:10:36:d8:6c:91:f7:e0:f0:3f:19:22:0b: 48:cb:2e:e6:0d:7d:3f:b4:4c:9b:a2:72:1a:55:8f: f8:6d:d7:ff:04:11:f7:52:9e:e3:75:5d:a0:d3:50: 98:b6:79:c4:15:60:de:bc:18:21:58:1b:c3:a2:6b: 1a:6f:b1:66:a7:38:d2:d8:74:6d:af:0b:8c:f1:40: 60:57:29:43:36:f8:03:57:f9:9d:fb:dd:59:f1:a6: 8a:81:67:eb:cd:ef:8e:ba:43:7a:41:96:10:04:52: c9:36:27:ad:e6:63:b4:ad:bb:7e:44:32:b1:bb:e6: 46:de:21:77:23:e6:de:4f:0c:22:ac:53:5c:60:a9: 01:94:73:2f:f3:9b:09:1c:c7:5d:e0:b8:1c:67:00: 89:da:07:9b:94:e1:91:b1:33:77:c8:ac:77:aa:e0: 6a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:3C:0D:2A:2E:12:99:C1:C3:68:B8:79:2D:36:9C:0D:96:A3:75 X509v3 Authority Key Identifier: keyid:85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:49:02:96:f6:6f:31:8e:22:22:29:8c:31:13:bf:69:2b: 0b:b5:f6:b9:5f:a2:62:b8:6d:53:2c:0f:05:96:71:1d:45:19: 5d:c9:6b:5b:5a:39:02:87:22:fd:ee:a6:d9:a3:f1:2a:7a:f6: 93:be:d3:aa:bb:28:c4:11:79:30:e7:db:21:ec:2d:66:a2:1d: 56:92:0b:c3:69:10:be:d8:fc:c5:ad:c1:09:dc:bf:29:19:48: 73:d2:00:c7:e7:69:e0:6d:13:4f:f0:3e:0e:4c:57:95:76:83: 7d:ad:f6:7f:4e:89:ce:77:83:27:58:1c:80:e1:9f:4e:58:15: dc:d7:45:3b:06:de:e0:ce:1a:25:9f:13:13:d2:68:17:95:42: 29:18:13:d9:a2:60:2a:f0:66:7c:61:8e:6d:6d:0c:86:c5:0c: 73:09:b0:7a:8c:84:5b:c0:20:f2:0b:87:eb:48:31:a7:30:12: f7:c6:18:55:9b:7f:89:c0:87:17:a4:ff:0d:5c:12:2c:e8:c7: f0:53:22:d2:55:fc:0d:be:7c:a5:c5:8a:2a:fa:6d:a3:24:05: 93:43:cc:fc:b5:ab:7d:43:0c:bb:d5:47:03:11:09:8d:1b:53: 92:6f:80:d1:ef:76:1e:ca:e5:df:6b:68:4c:4d:4d:b5:18:23: ec:ff:d4:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLW5nPidgYEV+cN1WsPGmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MWMxMzY1ZThkZGZjZTU3NTk4ZmJlOGRlN2VhODdhYzYw M2UyMmMwHhcNMjUxMjA2MDEwMTE3WhcNMjUxMjA3MDEwMTE3WjAzMTEwLwYDVQQD EyhmMWViM2MwZDJhMmUxMjk5YzFjMzY4Yjg3OTJkMzY5YzBkOTZhMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQDYtJCxmZu6nunM7yUk73avlKRo hxY6hVD59/nJPmC9UALHCQKvA437xjDbDH6N74PcpgeMVoFutebzNyBYy122nv6n DVAE0yM31MLSrYmViSUcfrechsLKx3QQNthskffg8D8ZIgtIyy7mDX0/tEybonIa VY/4bdf/BBH3Up7jdV2g01CYtnnEFWDevBghWBvDomsab7FmpzjS2HRtrwuM8UBg VylDNvgDV/md+91Z8aaKgWfrze+OukN6QZYQBFLJNiet5mO0rbt+RDKxu+ZG3iF3 I+beTwwirFNcYKkBlHMv85sJHMdd4LgcZwCJ2geblOGRsTN3yKx3quBq3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHrPA0qLhKZwcNouHktNpwNlqN1MB8GA1UdIwQY MBaAFIUcE2Xo3fzldZj76N5+qHrGA+IsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFJ3VFplamRfT1YxbVB2bzNuNm9lc1lENGl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zNTIyZTktODZlMC00YjVhLWEyYzgt MDBmMDYwMTI1MmM4LzEvaFJ3VFplamRfT1YxbVB2bzNuNm9lc1lENGl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zNTIyZTktODZlMC00YjVhLWEyYzgtMDBmMDYwMTI1MmM4 LzEvaFJ3VFplamRfT1YxbVB2bzNuNm9lc1lENGl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc9JApb2 bzGOIiIpjDETv2krC7X2uV+iYrhtUywPBZZxHUUZXclrW1o5Aoci/e6m2aPxKnr2 k77TqrsoxBF5MOfbIewtZqIdVpILw2kQvtj8xa3BCdy/KRlIc9IAx+dp4G0TT/A+ DkxXlXaDfa32f06JzneDJ1gcgOGfTlgV3NdFOwbe4M4aJZ8TE9JoF5VCKRgT2aJg KvBmfGGObW0MhsUMcwmweoyEW8Ag8guH60gxpzAS98YYVZt/icCHF6T/DVwSLOjH 8FMi0lX8Db58pcWKKvptoyQFk0PM/LWrfUMMu9VHAxEJjRtTkm+A0e92Hsrl32to TE1NtRgj7P/U1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:01 2025 by rpki-client