This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json) Hash identifier: BCG0TZNOFLFxXgTHcQrWsRs+JpQxeu0HhQEx9VnPubw= Subject key identifier: BC:DA:27:EF:EE:C6:4D:EC:82:B3:45:D0:99:BB:A4:FC:FF:E3:88:47 Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95 Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95 Certificate serial: 019AF1D18C3A1717B9CC0C8EE78C4BF48A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: ScVC460jf8vi740AZzNFbANn318BAWUHVV09nk5Ksso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8c:3a:17:17:b9:cc:0c:8e:e7:8c:4b:f4:8a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=bcda27efeec64dec82b345d099bba4fcffe38847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:7b:1b:ff:eb:e2:d5:41:7d:b3:ec:55:21: f9:4c:2e:9a:78:eb:90:bf:1d:ac:e3:fd:b7:65:7b: 34:d0:79:e4:f9:08:0c:1f:f0:a7:ec:c9:46:7e:60: 11:f2:71:65:2f:bf:9d:d0:23:d6:24:a8:62:f4:0e: 62:a4:bf:bf:68:63:d1:65:f5:0e:56:0b:39:bb:21: 98:3b:a2:54:5c:13:8a:e5:31:24:bd:c4:fd:11:d5: 21:83:b0:0c:83:36:b1:c1:b5:33:08:2d:e7:9b:6c: 16:a2:93:18:a0:31:a8:98:3a:63:27:00:44:00:09: 84:da:d3:e2:d5:b3:58:8b:de:77:80:9d:52:49:f3: 79:ff:49:e1:9c:40:46:c7:b7:1d:e8:99:d7:06:94: 89:a9:46:fd:ba:ac:59:11:25:1d:a8:14:71:27:a9: c4:85:bb:a6:e6:bf:c5:1e:3c:f4:37:c2:ce:02:66: b3:49:92:63:8d:4a:31:0d:a3:68:9b:02:7c:55:fb: 93:0f:d8:c8:c9:2d:bc:4e:df:87:b8:08:55:82:cf: 8a:ae:7a:6b:98:fc:26:a5:a5:aa:b8:86:40:af:47: 83:d6:1f:3a:6b:9e:30:95:30:8d:aa:0f:9e:3f:c1: dd:f8:11:4c:5a:5d:46:b8:2a:db:33:0c:f6:98:19: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:27:EF:EE:C6:4D:EC:82:B3:45:D0:99:BB:A4:FC:FF:E3:88:47 X509v3 Authority Key Identifier: keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e8:f5:75:23:71:42:ff:1e:4e:7a:07:e0:9c:81:5e:d0:91: 80:e0:a5:8e:dc:8e:1a:d9:5e:da:6a:1b:27:22:46:c2:9d:24: 26:7a:df:84:11:9c:3f:31:31:f0:fa:d4:2a:a8:d8:8e:ba:df: ea:c1:08:1a:c0:33:e7:47:58:f3:2a:18:e6:11:5a:5b:a9:be: 96:37:10:2c:32:6a:31:d1:39:3e:f0:bb:cc:7f:da:a8:f4:86: 6f:a9:18:b9:68:34:71:0d:43:01:46:9a:fe:67:02:a7:ae:53: 90:4a:6f:eb:55:a7:67:77:9c:67:ee:21:0b:4a:b5:e7:87:c9: a7:04:c7:c4:68:2d:e8:fd:4b:23:6f:ff:6d:22:c0:f8:27:f5: c2:0e:59:f5:65:03:c8:9c:6a:ae:98:43:48:6b:70:06:9f:e2: b7:fa:a6:9f:ff:1c:20:97:fa:57:e1:11:de:a0:39:60:cf:cf: 37:04:83:db:e6:b9:c9:75:41:cf:2c:35:31:4f:4e:b5:d1:45: fd:41:97:82:80:5b:f6:1f:8a:b0:66:6c:6f:43:73:17:0f:eb: c3:75:34:65:07:a8:6a:e5:5c:ef:bb:6d:21:93:99:b2:f8:e4: 8a:a9:2d:4f:53:7e:bb:3d:7f:d3:34:46:e9:17:ba:9d:83:c0: d9:82:03:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Yw6Fxe5zAyO54xL9IpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNTU0OTE5OTMxYzY3YmQyNjUwZmM0ZTBjNzNjMmZiM2Uy MjhkOTUwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EyhiY2RhMjdlZmVlYzY0ZGVjODJiMzQ1ZDA5OWJiYTRmY2ZmZTM4ODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0F7G//r4tVBfbPsVSH5TC6aeOuQ vx2s4/23ZXs00Hnk+QgMH/Cn7MlGfmAR8nFlL7+d0CPWJKhi9A5ipL+/aGPRZfUO Vgs5uyGYO6JUXBOK5TEkvcT9EdUhg7AMgzaxwbUzCC3nm2wWopMYoDGomDpjJwBE AAmE2tPi1bNYi953gJ1SSfN5/0nhnEBGx7cd6JnXBpSJqUb9uqxZESUdqBRxJ6nE hbum5r/FHjz0N8LOAmazSZJjjUoxDaNomwJ8VfuTD9jIyS28Tt+HuAhVgs+Krnpr mPwmpaWquIZAr0eD1h86a54wlTCNqg+eP8Hd+BFMWl1GuCrbMwz2mBnC0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzaJ+/uxk3sgrNF0Jm7pPz/44hHMB8GA1UdIwQY MBaAFP9VSRmTHGe9JlD8Tgxzwvs+Io2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMt MjkwYWE0MzE4Y2FhLzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMtMjkwYWE0MzE4Y2Fh LzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOj1dSNx Qv8eTnoH4JyBXtCRgOCljtyOGtle2mobJyJGwp0kJnrfhBGcPzEx8PrUKqjYjrrf 6sEIGsAz50dY8yoY5hFaW6m+ljcQLDJqMdE5PvC7zH/aqPSGb6kYuWg0cQ1DAUaa /mcCp65TkEpv61WnZ3ecZ+4hC0q154fJpwTHxGgt6P1LI2//bSLA+Cf1wg5Z9WUD yJxqrphDSGtwBp/it/qmn/8cIJf6V+ER3qA5YM/PNwSD2+a5yXVBzyw1MU9OtdFF /UGXgoBb9h+KsGZsb0NzFw/rw3U0ZQeoauVc77ttIZOZsvjkiqktT1N+uz1/0zRG 6Re6nYPA2YIDWA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:16 2025 by rpki-client