This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json) Hash identifier: r+1CpY926gSZjrAWJjlfIuTGrogn3Ej4NfVlZmlkrnU= Subject key identifier: B5:D7:8B:96:AA:5E:B9:BC:7D:3D:86:74:24:FF:30:4F:CC:AA:3A:AE Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c Certificate serial: 019AF240134A6A688BB032695AEBABF62378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft Manifest number: 0E3A Signing time: Sat 06 Dec 2025 06:01:16 +0000 Manifest this update: Sat 06 Dec 2025 06:01:16 +0000 Manifest next update: Sun 07 Dec 2025 06:01:16 +0000 Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: T99+aajeg2v57goqjVDZ5yv0zcT0SsWDtiQQi+AAznk=) 2: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (hash: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:13:4a:6a:68:8b:b0:32:69:5a:eb:ab:f6:23:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c Validity Not Before: Dec 6 06:01:16 2025 GMT Not After : Dec 7 06:01:16 2025 GMT Subject: CN=b5d78b96aa5eb9bc7d3d867424ff304fccaa3aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:54:e2:ba:6e:0a:60:09:74:65:1d:ed:01: d3:54:04:13:76:22:fb:a9:94:a4:16:b2:ef:7b:be: 12:c3:da:38:17:9d:0a:86:9c:11:b7:a0:69:c6:e1: 88:6d:2d:3c:a3:31:bb:be:14:b6:b6:b0:8f:e5:b0: 66:8b:e3:48:7c:ed:ef:54:20:ad:71:8c:74:fa:5d: 84:01:ae:59:5d:ae:5b:1d:b8:4c:69:06:f8:8f:1f: 73:72:d3:9d:db:37:54:5b:51:d8:99:0f:0d:93:1e: fe:b0:3d:1e:d6:8c:4b:54:f0:8b:7c:14:1f:c6:e0: 67:58:24:28:a0:bc:50:8b:d6:67:a9:e8:f6:0a:c3: f2:da:bf:63:56:2c:3a:37:57:2e:c0:d2:14:a8:43: c5:4e:2d:a2:8e:93:8c:bb:fe:a7:5b:5c:ee:21:08: 01:64:5b:ac:62:8c:40:fb:f9:71:64:af:2d:8c:57: 91:71:b3:23:23:ee:63:cb:46:38:72:2c:38:cc:1d: 41:bf:3b:b2:db:9e:21:f2:02:eb:40:a3:36:3b:7a: b6:9b:7f:94:66:9f:32:6a:a0:d1:ba:1a:7b:90:c0: 4c:57:50:67:00:37:c9:0b:a5:b4:77:a4:fa:2d:ac: 4f:6f:83:d6:a0:37:ad:1e:92:68:2f:99:8f:26:f1: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D7:8B:96:AA:5E:B9:BC:7D:3D:86:74:24:FF:30:4F:CC:AA:3A:AE X509v3 Authority Key Identifier: keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:40:53:d7:6b:18:70:f6:17:d2:8d:c0:66:25:b5:83:f3:f9: 63:ef:81:81:e9:22:8e:87:a9:ab:8d:26:05:56:3b:4a:d8:75: 77:7a:2b:b7:51:73:c1:7a:9f:d9:d5:54:94:3b:ce:00:5c:11: 56:ba:5f:bf:33:51:fa:4d:b2:87:ba:a3:fa:24:1e:b2:e9:e2: a5:ca:ca:06:46:3e:ec:a9:44:52:eb:eb:cb:00:8b:70:46:40: 89:8d:70:9f:94:19:d3:11:e2:80:e1:c8:ce:e9:a8:a1:9a:ae: c5:12:f9:84:8e:4c:dd:5e:7a:12:5c:94:46:85:7e:9b:51:a9: 28:43:94:fe:3d:7f:5c:53:a3:9a:42:9c:f8:39:17:14:1e:66: ac:28:50:cf:f5:fe:01:7e:e8:df:b7:8d:c9:d0:87:bb:ce:a3: 43:1c:22:de:83:38:7c:b2:73:43:f2:33:87:47:d7:ff:ee:f3: bf:40:e4:f2:f1:42:7a:7d:9c:3f:0b:e3:70:86:44:a0:23:dd: dd:f0:55:2c:0b:02:1b:ff:41:45:42:89:36:91:70:12:cb:be: 2a:de:3d:88:f9:00:6c:0a:91:34:9d:8e:bb:85:01:f7:bd:3e: 78:46:30:a9:af:64:3a:d5:0a:47:2c:6c:3e:36:7d:6f:6c:5f: 5f:81:4d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBNKamiLsDJpWuur9iN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MWViNTNjYjU2NzE4ZGYwZDk0NzZjZDk4NGFhYzQ0MzJi OTBmNmMwHhcNMjUxMjA2MDYwMTE2WhcNMjUxMjA3MDYwMTE2WjAzMTEwLwYDVQQD EyhiNWQ3OGI5NmFhNWViOWJjN2QzZDg2NzQyNGZmMzA0ZmNjYWEzYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFJU4rpuCmAJdGUd7QHTVAQTdiL7 qZSkFrLve74Sw9o4F50KhpwRt6BpxuGIbS08ozG7vhS2trCP5bBmi+NIfO3vVCCt cYx0+l2EAa5ZXa5bHbhMaQb4jx9zctOd2zdUW1HYmQ8Nkx7+sD0e1oxLVPCLfBQf xuBnWCQooLxQi9Znqej2CsPy2r9jViw6N1cuwNIUqEPFTi2ijpOMu/6nW1zuIQgB ZFusYoxA+/lxZK8tjFeRcbMjI+5jy0Y4ciw4zB1Bvzuy254h8gLrQKM2O3q2m3+U Zp8yaqDRuhp7kMBMV1BnADfJC6W0d6T6LaxPb4PWoDetHpJoL5mPJvFI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXXi5aqXrm8fT2GdCT/ME/MqjquMB8GA1UdIwQY MBaAFNYetTy1ZxjfDZR2zZhKrEQyuQ9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTIt OWFlM2RmZTk3NDgxLzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTItOWFlM2RmZTk3NDgx LzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0BT12sY cPYX0o3AZiW1g/P5Y++Bgekijoepq40mBVY7Sth1d3ort1FzwXqf2dVUlDvOAFwR VrpfvzNR+k2yh7qj+iQesunipcrKBkY+7KlEUuvrywCLcEZAiY1wn5QZ0xHigOHI zumooZquxRL5hI5M3V56ElyURoV+m1GpKEOU/j1/XFOjmkKc+DkXFB5mrChQz/X+ AX7o37eNydCHu86jQxwi3oM4fLJzQ/Izh0fX/+7zv0Dk8vFCen2cPwvjcIZEoCPd 3fBVLAsCG/9BRUKJNpFwEsu+Kt49iPkAbAqRNJ2Ou4UB970+eEYwqa9kOtUKRyxs PjZ9b2xfX4FNvw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:22 2025 by rpki-client