This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json) Hash identifier: Plj1fJUaO61xmPLperYWyQCcRl8MSjAFfIIhdMSQF0E= Subject key identifier: 48:FC:70:B1:55:AB:82:77:D7:4C:7F:B0:4F:39:23:B5:F9:8D:A0:B3 Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81 Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181 Certificate serial: 019AF19ADE8271236A3D2FD54AC4C5A0A9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: LzHW9yOsixKmPBr/9ow6h2AhPI+rzf2PrzSYSZ9bbUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:de:82:71:23:6a:3d:2f:d5:4a:c4:c5:a0:a9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=48fc70b155ab8277d74c7fb04f3923b5f98da0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:27:14:90:72:16:bf:60:53:63:01:e1:e0: f5:8a:50:eb:3d:0c:61:7e:b5:f7:bf:91:1d:3c:5d: 3b:af:8c:64:a4:5e:7c:4a:e0:fa:58:a7:07:e9:fc: 03:a0:73:5e:ab:1b:31:97:58:81:5a:b8:51:0c:77: 99:57:60:a7:b0:57:1b:08:db:af:ba:8a:3c:8b:76: 34:9d:d1:5c:de:76:ab:fb:0b:af:d6:59:dc:60:de: e2:ff:17:47:dc:64:65:c3:b8:f8:fd:72:24:77:52: 4e:7e:ea:9f:f9:88:9e:cb:8a:bb:22:e3:e5:73:f8: fc:e3:94:73:96:05:5d:45:33:5d:fd:52:3f:b2:6e: ac:ea:c5:f7:24:87:a0:0c:8f:d4:af:11:4d:b7:4e: 67:0f:b7:bc:bf:97:8b:61:48:36:24:0a:f3:17:98: 3d:a9:0f:24:53:ad:96:c8:97:3c:07:0a:7f:9f:34: 60:04:0c:47:cb:c6:b8:cb:77:4e:e2:a6:cb:d4:78: 69:95:d1:8a:6c:0c:01:6a:c4:48:b1:4f:d5:d1:0e: da:53:86:ef:c4:08:fb:36:50:63:1b:d8:76:0c:00: 1c:46:77:18:48:12:68:cd:d4:44:bb:c9:8f:c7:f1: 00:c0:bb:75:5e:c2:ab:d7:3a:79:1a:21:aa:cf:b4: 68:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FC:70:B1:55:AB:82:77:D7:4C:7F:B0:4F:39:23:B5:F9:8D:A0:B3 X509v3 Authority Key Identifier: keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:38:3b:c7:c3:c1:5f:e6:cf:71:5d:ac:dc:53:07:53:23:fe: de:99:11:8e:f2:5d:f6:0b:2d:d5:03:c7:a6:a5:0a:a6:e4:fe: 0c:05:86:3d:c4:f2:50:85:13:49:1d:95:50:00:52:9b:8c:5b: d9:02:b0:24:4e:11:0f:d1:57:4b:c4:ff:94:37:23:cb:cb:74: c9:b3:55:48:29:97:db:4a:5e:00:7d:f5:7a:13:1d:5e:8b:0e: 61:e9:5d:f4:ee:89:fe:22:05:30:9b:1b:ea:82:61:a0:0d:35: 57:c3:d1:57:6b:5f:40:83:af:24:dc:a0:4a:be:9c:8e:7a:d7: d2:ab:b7:31:49:1f:5f:b9:be:ea:38:c7:71:92:44:e4:15:d1: fc:09:da:41:d5:ea:9f:f6:59:97:36:f2:87:90:a4:98:be:c3: f3:f4:ab:27:0a:44:61:5e:1a:a4:80:2b:d9:1d:68:c5:f5:da: 6a:ea:9f:4b:d1:73:b8:59:1b:a6:65:18:47:3a:10:f6:3b:fb: be:f6:75:78:0d:48:60:e8:23:4e:9b:cc:24:7f:61:48:ae:89: 27:f5:64:2a:6d:9e:f4:2f:d8:da:84:34:49:46:b5:12:72:40: 59:bd:75:86:62:00:d6:66:69:50:85:00:b0:05:3f:38:07:40: 98:d7:5a:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmt6CcSNqPS/VSsTFoKnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTc2YzY5MmUyZjM2MTlkZTc5ODIwNTQ4ZWNiNWZhN2Mz MGExODEwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg0OGZjNzBiMTU1YWI4Mjc3ZDc0YzdmYjA0ZjM5MjNiNWY5OGRhMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqAnFJByFr9gU2MB4eD1ilDrPQxh frX3v5EdPF07r4xkpF58SuD6WKcH6fwDoHNeqxsxl1iBWrhRDHeZV2CnsFcbCNuv uoo8i3Y0ndFc3nar+wuv1lncYN7i/xdH3GRlw7j4/XIkd1JOfuqf+Yiey4q7IuPl c/j845RzlgVdRTNd/VI/sm6s6sX3JIegDI/UrxFNt05nD7e8v5eLYUg2JArzF5g9 qQ8kU62WyJc8Bwp/nzRgBAxHy8a4y3dO4qbL1HhpldGKbAwBasRIsU/V0Q7aU4bv xAj7NlBjG9h2DAAcRncYSBJozdREu8mPx/EAwLt1XsKr1zp5GiGqz7RohQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEj8cLFVq4J310x/sE85I7X5jaCzMB8GA1UdIwQY MBaAFPinbGkuLzYZ3nmCBUjstfp8MKGBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LZHNhUzR2TmhuZWVZSUZTT3kxLW53d29ZRS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvY2YwZWQ2LTVkOGQtNDdmZi1iZDg2 LWE1ZGU4NmVkZjgzZS8xLzEtS2RzYVM0dk5obmVlWUlGU095MS1ud3dvWUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzExL2NmMGVkNi01ZDhkLTQ3ZmYtYmQ4Ni1hNWRlODZlZGY4 M2UvMS8xLUtkc2FTNHZOaG5lZVlJRlNPeTEtbnd3b1lFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTg7 x8PBX+bPcV2s3FMHUyP+3pkRjvJd9gst1QPHpqUKpuT+DAWGPcTyUIUTSR2VUABS m4xb2QKwJE4RD9FXS8T/lDcjy8t0ybNVSCmX20peAH31ehMdXosOYeld9O6J/iIF MJsb6oJhoA01V8PRV2tfQIOvJNygSr6cjnrX0qu3MUkfX7m+6jjHcZJE5BXR/Ana QdXqn/ZZlzbyh5CkmL7D8/SrJwpEYV4apIAr2R1oxfXaauqfS9FzuFkbpmUYRzoQ 9jv7vvZ1eA1IYOgjTpvMJH9hSK6JJ/VkKm2e9C/Y2oQ0SUa1EnJAWb11hmIA1mZp UIUAsAU/OAdAmNdaag== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:50 2025 by rpki-client