This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json) Hash identifier: ISBJnuk1NwCvHoO5VrpTv40OK5MvS5YzEyioiKL9prg= Subject key identifier: 39:7D:8E:31:7F:7F:60:7F:B2:9A:32:83:2D:3D:EE:64:AF:E1:D6:8C Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c Certificate serial: 019AF12D73C9CA8FAC98B673BD800D42A8A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft Manifest number: 0D24 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: bupaSzEfezrxCmFvoYWqXb1yRXEQaNzftrtLyvVyoPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:73:c9:ca:8f:ac:98:b6:73:bd:80:0d:42:a8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=397d8e317f7f607fb29a32832d3dee64afe1d68c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:1a:33:c9:db:2e:eb:ac:7a:81:6b:6f:52: 24:0a:ff:81:52:90:55:69:1b:f8:23:18:6c:3d:de: 57:a1:4b:9f:76:02:f6:17:45:5d:34:9d:27:21:dd: 73:06:14:f5:91:59:2a:8e:59:9d:0d:60:bb:6d:03: 55:ee:b9:a1:9a:d7:91:30:45:a6:79:a1:ba:d8:7e: d6:f8:c5:c4:33:b4:40:7e:b8:52:22:82:53:a0:c6: 05:4a:eb:11:3b:ef:7d:ca:08:a8:0d:68:e8:bf:30: e2:e8:a9:93:55:11:d6:10:7f:c5:40:26:87:4a:87: 0e:d7:0e:00:eb:a9:49:1d:7b:c8:e7:91:7d:40:f2: a1:1d:3b:b4:e1:a6:04:8f:de:ed:71:43:fe:4e:8b: bf:ac:ab:db:98:c1:99:1e:22:1f:c8:30:55:21:ab: 54:5e:1d:27:f1:4f:5e:5b:69:73:ec:84:f9:70:36: ff:0a:69:01:f8:57:64:03:9d:fd:e9:6d:6f:9e:83: 03:58:9f:23:33:43:56:ff:70:1f:5d:9c:ff:f8:8a: ea:64:d3:d6:12:b1:3e:e1:03:eb:9f:fe:d8:d1:56: 91:bf:ed:1b:4a:43:1b:31:21:7c:2b:0e:e5:58:d8: 52:95:f0:de:f0:5d:ee:10:a9:c1:f9:5b:c1:dd:8a: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7D:8E:31:7F:7F:60:7F:B2:9A:32:83:2D:3D:EE:64:AF:E1:D6:8C X509v3 Authority Key Identifier: keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:87:66:6f:6e:29:fa:19:f0:59:8d:f2:ec:e0:c3:ba:fc:38: b8:5c:87:d0:25:62:6e:85:18:5f:b5:7a:ed:8a:2f:2d:e5:ab: d5:f2:1a:2c:c6:7f:72:dc:7e:4e:b9:b0:2c:44:3c:92:ff:ad: 53:bc:a4:5b:18:28:79:ad:23:53:12:bb:35:f1:91:9c:f0:05: 29:d9:05:3b:cb:86:c8:00:70:12:f2:c2:a8:a1:86:68:62:fc: bd:71:41:8b:e1:c2:bb:86:e3:36:b9:51:4c:c6:66:37:20:c0: 03:ef:09:50:c2:fc:34:df:e3:69:45:e0:17:8d:73:11:ab:b0: c8:23:0c:4c:e0:1c:a8:f6:27:9c:93:9b:eb:61:ef:1c:95:57: 47:48:51:79:a2:30:bf:ab:75:ce:34:1d:f7:e7:e5:65:7e:e2: bc:db:92:da:5d:57:7e:54:24:e5:4e:f4:a5:62:f5:d6:9c:6f: a5:f1:67:b7:f6:91:91:cb:e6:de:6b:44:6e:d1:d7:aa:6c:34: 4e:e1:8a:7e:d8:3f:5c:98:f7:c3:07:ce:d6:d4:66:f7:4f:0c: ea:f8:4f:4c:b4:b2:d0:35:dd:69:92:d1:15:97:b3:aa:b2:a0: 98:29:7b:da:b3:e0:89:6e:2a:12:f4:c0:46:35:8b:14:4c:59: 62:75:0c:71 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLXPJyo+smLZzvYANQqioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNjdjNGUxMzg3MzEzYzAzNDQ1MzhkZWZkMmNjZmEwMzRl N2MzMGMwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD EygzOTdkOGUzMTdmN2Y2MDdmYjI5YTMyODMyZDNkZWU2NGFmZTFkNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfMaM8nbLuuseoFrb1IkCv+BUpBV aRv4IxhsPd5XoUufdgL2F0VdNJ0nId1zBhT1kVkqjlmdDWC7bQNV7rmhmteRMEWm eaG62H7W+MXEM7RAfrhSIoJToMYFSusRO+99ygioDWjovzDi6KmTVRHWEH/FQCaH SocO1w4A66lJHXvI55F9QPKhHTu04aYEj97tcUP+Tou/rKvbmMGZHiIfyDBVIatU Xh0n8U9eW2lz7IT5cDb/CmkB+FdkA5396W1vnoMDWJ8jM0NW/3AfXZz/+IrqZNPW ErE+4QPrn/7Y0VaRv+0bSkMbMSF8Kw7lWNhSlfDe8F3uEKnB+VvB3Yo/TQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDl9jjF/f2B/spoygy097mSv4daMMB8GA1UdIwQY MBaAFPtnxOE4cxPANEU43v0sz6A058MMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0yZkU0VGh6RThBMFJUamVfU3pQb0RUbnd3dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDNiMzYzLWQ2NGEtNDUwNy1hNmZk LWU1MGNlNTM2N2U3Yi8xLzEtMmZFNFRoekU4QTBSVGplX1N6UG9EVG53d3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFjLzQzYjM2My1kNjRhLTQ1MDctYTZmZC1lNTBjZTUzNjdl N2IvMS8xLTJmRTRUaHpFOEEwUlRqZV9TelBvRFRud3d3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYdm b24p+hnwWY3y7ODDuvw4uFyH0CViboUYX7V67YovLeWr1fIaLMZ/ctx+TrmwLEQ8 kv+tU7ykWxgoea0jUxK7NfGRnPAFKdkFO8uGyABwEvLCqKGGaGL8vXFBi+HCu4bj NrlRTMZmNyDAA+8JUML8NN/jaUXgF41zEauwyCMMTOAcqPYnnJOb62HvHJVXR0hR eaIwv6t1zjQd9+flZX7ivNuS2l1XflQk5U70pWL11pxvpfFnt/aRkcvm3mtEbtHX qmw0TuGKftg/XJj3wwfO1tRm908M6vhPTLSy0DXdaZLRFZezqrKgmCl72rPgiW4q EvTARjWLFExZYnUMcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:03 2025 by rpki-client