This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json) Hash identifier: jSwHCBfLjnwDzpOBjCGug0JbMQInmknKFHDAFyTrq8M= Subject key identifier: 51:1D:DC:0F:C2:73:F9:7E:2D:DE:21:F4:5A:18:95:DD:8E:DA:4F:E6 Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5 Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5 Certificate serial: 019AF19A9A9E9F364471FBAF1F1BE450D9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft Manifest number: 0C1E Signing time: Sat 06 Dec 2025 03:00:32 +0000 Manifest this update: Sat 06 Dec 2025 03:00:32 +0000 Manifest next update: Sun 07 Dec 2025 03:00:32 +0000 Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: NuNhqWaf78taaGL/FJ3uQ3+erC7wCxhj9Yqjfe72BjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9a:9e:9f:36:44:71:fb:af:1f:1b:e4:50:d9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5 Validity Not Before: Dec 6 03:00:32 2025 GMT Not After : Dec 7 03:00:32 2025 GMT Subject: CN=511ddc0fc273f97e2dde21f45a1895dd8eda4fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:fb:b3:e9:67:e1:ed:eb:a5:8d:ce:06:33: 54:26:a8:12:17:89:fe:5f:eb:fa:d9:ef:3a:9c:b4: d9:49:86:f9:47:3a:f0:66:96:33:fe:78:15:4b:bc: 85:80:9e:d9:64:08:f5:6a:92:17:d9:76:d0:cf:d2: 5f:84:36:e5:91:4f:e5:b4:84:44:66:27:82:5d:1d: 1b:8b:c6:f9:af:db:3e:d5:5b:d6:8e:87:cc:6d:c8: b5:47:15:63:39:f0:26:56:d3:66:47:1d:d2:a6:82: 96:40:af:a7:b8:e2:4a:00:19:9c:7a:4f:cd:05:9e: 3c:f5:a2:d8:5b:41:87:e0:3c:22:7c:04:24:fe:41: cb:fb:e3:30:07:06:73:89:77:05:5c:c6:d5:2c:36: ab:1b:e7:fd:6f:85:ed:32:83:85:a8:ae:06:78:05: b4:3a:f7:0d:62:e2:5f:53:35:9c:52:c2:de:39:36: 86:6c:bf:d6:26:9c:e1:f3:90:79:8e:b9:bc:60:62: 68:7e:a0:f0:4c:79:f3:65:47:e8:5f:5b:c8:8f:53: 08:d5:1a:de:04:ac:fb:a0:46:04:87:e9:b8:dc:fe: 18:c9:06:68:62:a2:35:a4:68:1e:2b:90:15:bd:3c: 9d:fc:ec:89:71:ac:1d:24:ce:ec:92:37:4e:62:27: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1D:DC:0F:C2:73:F9:7E:2D:DE:21:F4:5A:18:95:DD:8E:DA:4F:E6 X509v3 Authority Key Identifier: keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6c:c9:63:a6:a4:1c:93:65:47:c2:d7:d3:a6:3e:f8:ce:9e: 78:14:ca:0f:12:bf:41:5b:04:53:79:bf:a9:69:7d:58:9c:b1: 9d:47:9a:b7:a4:a4:69:b4:54:93:6b:b5:52:1d:71:ab:98:a0: b1:96:b8:d6:0d:2a:0c:f8:6c:80:88:fe:71:b2:78:b1:19:16: 72:4f:f0:3d:35:de:94:0f:a3:e5:da:da:2b:ea:ce:e8:16:ce: e0:38:d1:e5:ce:84:9b:08:1f:52:18:bb:2b:bd:5f:07:81:ad: e0:e4:c6:41:4e:fa:e8:bf:a7:9b:14:fd:9e:52:fd:97:e6:65: 28:d3:82:0f:40:5f:89:65:7a:71:b9:5a:36:96:38:9d:a1:76: 2b:f0:2e:05:77:db:3d:9c:ef:ff:17:d5:f0:a0:b8:28:45:3a: 0b:86:01:4c:97:1f:40:09:83:f2:4e:f0:3b:13:56:0b:55:33: f1:6b:e6:89:b7:c9:f1:5f:b1:8b:03:73:78:24:fc:f8:ee:3f: a3:e5:c9:ff:7c:1d:df:46:77:a6:29:b1:53:53:ca:21:97:fa: 1a:b7:9b:0f:ae:77:0e:1f:3f:8e:6c:d9:97:17:1e:b8:71:ef: 04:56:54:53:26:67:27:4a:94:c4:53:15:ee:c7:f4:63:8e:61: d0:b3:4a:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpqenzZEcfuvHxvkUNnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTg0NjFiYTA4NDU1YzM0NGZjNzUzYTRkOTY2ZGIxYjVk ZWM1ZDUwHhcNMjUxMjA2MDMwMDMyWhcNMjUxMjA3MDMwMDMyWjAzMTEwLwYDVQQD Eyg1MTFkZGMwZmMyNzNmOTdlMmRkZTIxZjQ1YTE4OTVkZDhlZGE0ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWv7s+ln4e3rpY3OBjNUJqgSF4n+ X+v62e86nLTZSYb5RzrwZpYz/ngVS7yFgJ7ZZAj1apIX2XbQz9JfhDblkU/ltIRE ZieCXR0bi8b5r9s+1VvWjofMbci1RxVjOfAmVtNmRx3SpoKWQK+nuOJKABmcek/N BZ489aLYW0GH4DwifAQk/kHL++MwBwZziXcFXMbVLDarG+f9b4XtMoOFqK4GeAW0 OvcNYuJfUzWcUsLeOTaGbL/WJpzh85B5jrm8YGJofqDwTHnzZUfoX1vIj1MI1Rre BKz7oEYEh+m43P4YyQZoYqI1pGgeK5AVvTyd/OyJcawdJM7skjdOYifBdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEd3A/Cc/l+Ld4h9FoYld2O2k/mMB8GA1UdIwQY MBaAFNXoRhughFXDRPx1Ok2WbbG13sXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVoR0c2Q0VWY05FX0hVNlRaWnRzYlhleGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNWE0ZDgtZjBhYS00OGJiLThiMTIt Y2Q3NWY5Njk5YjMwLzEvMWVoR0c2Q0VWY05FX0hVNlRaWnRzYlhleGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9jNWE0ZDgtZjBhYS00OGJiLThiMTItY2Q3NWY5Njk5YjMw LzEvMWVoR0c2Q0VWY05FX0hVNlRaWnRzYlhleGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2zJY6ak HJNlR8LX06Y++M6eeBTKDxK/QVsEU3m/qWl9WJyxnUeat6SkabRUk2u1Uh1xq5ig sZa41g0qDPhsgIj+cbJ4sRkWck/wPTXelA+j5draK+rO6BbO4DjR5c6EmwgfUhi7 K71fB4Gt4OTGQU766L+nmxT9nlL9l+ZlKNOCD0BfiWV6cblaNpY4naF2K/AuBXfb PZzv/xfV8KC4KEU6C4YBTJcfQAmD8k7wOxNWC1Uz8WvmibfJ8V+xiwNzeCT8+O4/ o+XJ/3wd30Z3pimxU1PKIZf6GrebD653Dh8/jmzZlxceuHHvBFZUUyZnJ0qUxFMV 7sf0Y45h0LNKhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:56 2025 by rpki-client