This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json) Hash identifier: OicUkGUUcaxaU2Pjiq4uqs7InPN86py2A2YEq2AsvmQ= Subject key identifier: F2:34:2F:D1:B9:D7:ED:2A:B8:DF:7F:46:91:EF:4D:28:56:0C:D0:BA Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18 Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818 Certificate serial: 019AF3F7FBF94AE83A1BD8351A130A4E15E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 14:01:46 +0000 Manifest this update: Sat 06 Dec 2025 14:01:46 +0000 Manifest next update: Sun 07 Dec 2025 14:01:46 +0000 Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: CQAYFnATs5jrbF73D22vMSsuaDvFenji1mZtudbJWS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:fb:f9:4a:e8:3a:1b:d8:35:1a:13:0a:4e:15:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818 Validity Not Before: Dec 6 14:01:46 2025 GMT Not After : Dec 7 14:01:46 2025 GMT Subject: CN=f2342fd1b9d7ed2ab8df7f4691ef4d28560cd0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:eb:d7:18:75:3b:ee:c8:2f:2b:be:4b:c9:19: a8:0b:a5:16:98:7f:dc:2b:30:3b:25:2e:c3:ab:94: b2:5e:af:57:66:d1:68:7b:35:39:be:c7:79:0c:44: 3a:73:db:04:4e:1f:d8:61:11:9f:a5:22:20:62:86: be:34:fc:64:f1:64:ab:ad:0d:48:79:77:1d:db:c5: de:fe:a3:a3:e8:47:a5:a4:10:ed:00:c6:93:a2:a9: fe:e4:d3:f1:77:55:d9:83:d4:71:9e:6b:dd:bc:26: 76:4c:c3:62:dc:e8:ff:0d:32:75:01:f2:db:15:61: 26:5a:59:f9:52:1a:ae:18:fd:ad:05:f8:64:65:95: 0c:94:ea:78:c7:eb:cf:45:e1:11:9d:4b:15:32:3c: 52:8a:69:02:36:8a:ed:71:e3:bd:21:af:57:29:21: 84:d6:d7:fd:b1:b1:5c:cf:b6:d0:ff:7d:95:86:5b: 69:e7:92:b7:da:f4:a0:5b:d0:a8:af:a3:4e:4e:9f: 1d:b8:26:dd:a8:01:57:49:13:d8:4b:84:38:59:77: f1:d0:1d:47:60:53:8d:40:97:73:9b:45:ac:d2:62: 05:d6:7c:6f:c4:10:cb:c1:88:f7:6e:55:dc:7f:0e: f8:33:c1:dc:cb:31:20:e5:83:93:50:40:c2:64:30: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:34:2F:D1:B9:D7:ED:2A:B8:DF:7F:46:91:EF:4D:28:56:0C:D0:BA X509v3 Authority Key Identifier: keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:0c:6d:31:b6:46:56:dd:ea:fc:bd:a9:f6:13:43:88:55:b1: d1:c7:a6:83:87:95:b1:81:35:2c:c7:ce:0e:21:aa:af:37:58: 02:e3:7d:e2:5e:7b:d3:dd:72:96:d7:3f:03:20:65:dc:90:0c: e8:2e:35:fa:80:b6:ad:4f:58:20:75:03:da:10:09:25:0b:1d: d7:5b:b4:e6:eb:4d:98:b1:20:2c:c1:70:b2:e4:30:ab:fc:63: 90:5d:a1:66:f6:c7:68:37:d5:7d:5b:77:bb:55:c6:c6:86:37: 46:29:d6:9e:20:58:08:db:ff:d9:b8:01:d9:1f:16:57:07:ac: 14:89:02:5a:45:5b:4e:12:fb:ae:a7:5a:eb:70:83:4c:74:ea: 94:4a:92:58:04:5a:e7:e6:11:ca:9d:5e:70:35:f7:2d:88:d4: 48:19:cb:ad:58:ae:6a:a0:9d:37:97:70:3a:c2:a6:ad:ce:92: db:7a:97:25:10:25:9b:d0:c3:88:b7:25:50:78:92:a5:e0:b3: 34:08:44:b6:37:89:39:73:2b:01:e4:18:d5:2a:33:2f:d5:8b: 5f:ad:3b:5f:62:b9:51:ce:04:5e:99:9d:9a:ed:22:10:69:22: 5b:7e:29:e1:32:9d:53:83:cc:a9:98:34:93:0a:21:fd:9f:bb: 70:9f:a8:40 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrz9/v5Sug6G9g1GhMKThXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzM1NjZjOGM1YjgzYjJmM2UxNjk4Yjk3MTEyNTk0ZTgy MTA4MTgwHhcNMjUxMjA2MTQwMTQ2WhcNMjUxMjA3MTQwMTQ2WjAzMTEwLwYDVQQD EyhmMjM0MmZkMWI5ZDdlZDJhYjhkZjdmNDY5MWVmNGQyODU2MGNkMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OvXGHU77sgvK75LyRmoC6UWmH/c KzA7JS7Dq5SyXq9XZtFoezU5vsd5DEQ6c9sETh/YYRGfpSIgYoa+NPxk8WSrrQ1I eXcd28Xe/qOj6EelpBDtAMaToqn+5NPxd1XZg9RxnmvdvCZ2TMNi3Oj/DTJ1AfLb FWEmWln5UhquGP2tBfhkZZUMlOp4x+vPReERnUsVMjxSimkCNortceO9Ia9XKSGE 1tf9sbFcz7bQ/32Vhltp55K32vSgW9Cor6NOTp8duCbdqAFXSRPYS4Q4WXfx0B1H YFONQJdzm0Ws0mIF1nxvxBDLwYj3blXcfw74M8HcyzEg5YOTUEDCZDAHDwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPI0L9G51+0quN9/RpHvTShWDNC6MB8GA1UdIwQY MBaAFPozVmyMW4Oy8+Fpi5cRJZToIQgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qTldiSXhiZzdMejRXbUxseEVsbE9naENCZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTMxMzQ3LWQ3OWItNDE0NC04NzQ5 LWMzMzM3OTRhN2I5Ny8xLzEtak5XYkl4Ymc3THo0V21MbHhFbGxPZ2hDQmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFjL2UzMTM0Ny1kNzliLTQxNDQtODc0OS1jMzMzNzk0YTdi OTcvMS8xLWpOV2JJeGJnN0x6NFdtTGx4RWxsT2doQ0JnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Qxt MbZGVt3q/L2p9hNDiFWx0cemg4eVsYE1LMfODiGqrzdYAuN94l57091yltc/AyBl 3JAM6C41+oC2rU9YIHUD2hAJJQsd11u05utNmLEgLMFwsuQwq/xjkF2hZvbHaDfV fVt3u1XGxoY3RinWniBYCNv/2bgB2R8WVwesFIkCWkVbThL7rqda63CDTHTqlEqS WARa5+YRyp1ecDX3LYjUSBnLrViuaqCdN5dwOsKmrc6S23qXJRAlm9DDiLclUHiS peCzNAhEtjeJOXMrAeQY1SozL9WLX607X2K5Uc4EXpmdmu0iEGkiW34p4TKdU4PM qZg0kwoh/Z+7cJ+oQA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:53 2025 by rpki-client