This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json) Hash identifier: BynEK+dEYQm/Jsnmck3fTuK0RQ2mHSGKZMZrSYxZZNw= Subject key identifier: 2C:18:9E:1E:2D:AF:A4:2B:80:B3:BB:68:97:8E:C3:BC:D4:1E:2B:34 Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04 Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904 Certificate serial: 019AF352AC9BFA6D5D57E349AAC702119D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft Manifest number: 1481 Signing time: Sat 06 Dec 2025 11:01:12 +0000 Manifest this update: Sat 06 Dec 2025 11:01:12 +0000 Manifest next update: Sun 07 Dec 2025 11:01:12 +0000 Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: L1wbzwJt6Xsq2v16kvy7nammHwKlIsB86btr8civ5Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:ac:9b:fa:6d:5d:57:e3:49:aa:c7:02:11:9d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904 Validity Not Before: Dec 6 11:01:12 2025 GMT Not After : Dec 7 11:01:12 2025 GMT Subject: CN=2c189e1e2dafa42b80b3bb68978ec3bcd41e2b34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:0d:59:6d:59:50:99:71:96:bd:ec:db:e8: ec:e3:31:a3:20:18:65:2f:02:79:82:40:05:47:b5: 8d:3d:03:d3:28:50:c7:54:29:8e:24:ba:57:53:6c: f7:be:99:f3:03:9e:6e:34:43:83:c1:e1:d0:23:44: 30:0f:f6:b0:38:c8:50:f9:9b:61:42:e8:04:8e:79: 0a:e2:3c:7b:98:5d:18:d9:5b:57:a2:58:e2:ba:d5: 12:c6:f4:2d:06:93:15:66:2b:26:ac:5f:7c:db:7f: 4e:ec:ce:1a:38:65:ed:6e:52:1d:db:c1:91:c7:9f: 91:8d:c0:db:34:6d:bc:85:22:43:7c:e8:fe:d8:c3: cd:ac:e1:51:e9:b5:34:7d:7b:42:da:2a:3e:6a:2d: d2:0d:67:6c:f9:a1:14:d2:76:4a:9c:9a:3b:44:97: 98:44:7d:f8:a8:f4:5a:88:3c:3f:17:18:c1:1d:bf: bb:b3:66:04:fa:40:b3:87:9f:1b:dd:9e:28:4d:4f: bd:00:df:3c:29:5f:71:a7:d6:96:f8:78:53:52:06: bd:4b:81:d7:4f:26:fb:8b:84:53:e0:8d:b8:8d:5b: 58:8f:9c:94:0e:c5:0e:af:4a:c9:8c:0a:aa:4e:9f: 85:a7:38:27:85:f6:b4:26:d1:5d:30:04:9a:6c:c0: 22:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:18:9E:1E:2D:AF:A4:2B:80:B3:BB:68:97:8E:C3:BC:D4:1E:2B:34 X509v3 Authority Key Identifier: keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:17:be:cb:d3:24:49:ab:bd:26:4f:56:6d:29:e1:91:f1: ac:08:f7:8a:71:98:33:99:e3:62:1b:7c:08:26:ef:00:4f:40: 18:4f:bb:c5:f9:f9:49:59:73:85:d3:0c:ab:4c:3c:88:29:4b: eb:1e:79:aa:f1:cb:99:79:88:42:ff:35:0a:20:d5:e2:cf:9e: 6e:e9:ab:29:8b:00:a8:df:8e:74:c0:8f:03:3f:1a:90:31:bc: bf:33:7a:9a:b3:78:9a:b6:7d:90:bc:18:a9:d0:e9:63:70:d5: 16:5b:2d:b6:94:03:69:46:2f:ec:63:4b:ae:df:d0:49:31:78: 5b:9c:e5:66:f0:5f:41:7b:23:d6:bf:19:64:79:7e:4d:21:8a: 25:c5:ad:3b:11:6d:fb:fd:39:d9:49:e1:77:11:f2:90:3a:b4: 93:d9:5a:12:71:c0:c6:da:66:f9:a3:6c:04:93:9b:d5:94:87: 1e:f9:26:19:c5:33:b8:58:55:94:bf:32:ee:96:07:ee:52:19: 6b:cc:5e:d7:97:81:3c:76:da:a7:f3:a8:17:2f:dc:3c:39:5d: 16:39:68:3b:92:01:2b:b8:4a:15:f0:01:c1:71:a4:f0:71:d3: ff:54:2a:2a:e7:53:6a:9f:ff:54:29:00:7c:55:ce:8d:3f:f4: ee:db:6f:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqyb+m1dV+NJqscCEZ0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNTFjNTJkMjM3M2Y1YTViNzJkYzZkZDEyYTc1ZDEzYjI2 NWI5MDQwHhcNMjUxMjA2MTEwMTEyWhcNMjUxMjA3MTEwMTEyWjAzMTEwLwYDVQQD EygyYzE4OWUxZTJkYWZhNDJiODBiM2JiNjg5NzhlYzNiY2Q0MWUyYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYgNWW1ZUJlxlr3s2+js4zGjIBhl LwJ5gkAFR7WNPQPTKFDHVCmOJLpXU2z3vpnzA55uNEODweHQI0QwD/awOMhQ+Zth QugEjnkK4jx7mF0Y2VtXoljiutUSxvQtBpMVZismrF98239O7M4aOGXtblId28GR x5+RjcDbNG28hSJDfOj+2MPNrOFR6bU0fXtC2io+ai3SDWds+aEU0nZKnJo7RJeY RH34qPRaiDw/FxjBHb+7s2YE+kCzh58b3Z4oTU+9AN88KV9xp9aW+HhTUga9S4HX Tyb7i4RT4I24jVtYj5yUDsUOr0rJjAqqTp+Fpzgnhfa0JtFdMASabMAiswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwYnh4tr6QrgLO7aJeOw7zUHis0MB8GA1UdIwQY MBaAFCNRxS0jc/Wlty3G3RKnXROyZbkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgt OTg3M2FmYTczZTdlLzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgtOTg3M2FmYTczZTdl LzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwUXvsvT JEmrvSZPVm0p4ZHxrAj3inGYM5njYht8CCbvAE9AGE+7xfn5SVlzhdMMq0w8iClL 6x55qvHLmXmIQv81CiDV4s+ebumrKYsAqN+OdMCPAz8akDG8vzN6mrN4mrZ9kLwY qdDpY3DVFlsttpQDaUYv7GNLrt/QSTF4W5zlZvBfQXsj1r8ZZHl+TSGKJcWtOxFt +/052UnhdxHykDq0k9laEnHAxtpm+aNsBJOb1ZSHHvkmGcUzuFhVlL8y7pYH7lIZ a8xe15eBPHbap/OoFy/cPDldFjloO5IBK7hKFfABwXGk8HHT/1QqKudTap//VCkA fFXOjT/07ttvdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:28 2025 by rpki-client