This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json) Hash identifier: VnnadmCNSUEDx7SKMb37NhKiXIR7DXiFQmiCO2UDbCA= Subject key identifier: CC:85:81:CF:23:03:49:FC:39:CA:C4:8F:92:6E:EF:13:D7:DD:D6:40 Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62 Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62 Certificate serial: 019AF12CBA4777D1C89EAEB695BFC1F321D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft Manifest number: 079F Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: NI1UFyGetMe596puSSaOjOwl6WLD9HxG8cJ4xG3BwDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ba:47:77:d1:c8:9e:ae:b6:95:bf:c1:f3:21:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322d6d4be163123242185dd451f14777974f7c62 Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=cc8581cf230349fc39cac48f926eef13d7ddd640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:23:39:a4:de:00:6c:81:3f:ad:45:f8:b4: 52:43:73:22:00:c9:73:22:22:3c:d7:81:e7:15:45: 4b:71:68:5b:15:cb:40:00:37:a1:9d:69:20:4c:8b: c8:50:0b:ea:2e:4f:df:46:25:0a:2c:3c:40:a4:ba: 15:61:9c:94:27:19:32:26:33:6b:6b:d3:ed:f7:c5: 9a:60:96:84:4c:bd:8c:83:97:2c:0b:98:0c:69:e5: 34:5a:45:93:e0:e3:3b:b0:43:77:dd:30:75:12:07: a1:69:45:18:b2:39:5c:ab:21:93:b5:8e:d7:49:b9: 94:a2:3f:e8:0c:f2:26:a8:bf:14:64:f3:95:64:de: 4a:25:2b:92:76:4b:09:e2:f4:ca:35:e0:4e:b9:1e: b7:48:ad:39:c4:65:d5:a6:c2:f8:b9:3a:b9:54:bb: 44:17:83:d8:f7:46:29:ec:d9:92:14:e9:73:c1:ff: bd:86:1e:4e:77:5d:dd:44:ad:24:a6:19:2e:8c:90: 91:c4:25:a6:b2:c7:7b:6e:ae:bd:23:e3:87:a2:f0: 1b:11:59:62:49:9d:7d:f2:ad:f3:19:92:72:8a:3f: 45:8d:32:c3:c1:d9:57:49:2c:74:da:bd:0d:0b:6e: 6a:ff:48:f3:23:f0:bf:cb:d2:57:51:84:ac:01:74: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:81:CF:23:03:49:FC:39:CA:C4:8F:92:6E:EF:13:D7:DD:D6:40 X509v3 Authority Key Identifier: keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:16:fc:37:1f:e3:e4:a2:ab:91:cc:17:b5:02:9d:21:d9:f6: 9a:4d:10:fb:99:51:98:11:9f:9d:8f:85:6b:8b:29:f0:11:e9: d8:42:6f:e5:59:65:3a:a7:cf:5f:4f:98:67:74:f1:ea:eb:cf: d5:90:7b:24:50:ba:15:e1:58:76:1f:d9:f3:96:95:f8:56:45: e9:b2:6f:57:0b:a5:1b:d3:45:dd:b5:0d:84:4d:73:df:2f:e1: e0:67:9a:0f:ad:b7:2c:85:42:df:da:02:e4:e8:1e:20:3a:0b: 89:03:6d:01:55:9f:88:68:13:8c:dc:94:be:ab:26:30:3b:a4: 21:ae:13:5d:62:c5:24:ed:ab:2e:c4:fc:c4:27:13:99:ef:62: 1f:4a:a5:be:73:db:76:e0:d4:8c:b3:c9:3f:12:f6:60:63:f1: 0e:69:9d:86:ab:f0:73:bb:09:82:4c:6f:ba:ac:4f:09:eb:03: 23:5c:22:4a:f2:b0:5c:bc:f8:d4:0d:f1:77:23:99:e2:b8:cf: 37:a8:f2:22:fe:64:11:56:21:4c:34:d0:f0:2c:1c:22:ff:66: 93:33:3c:5e:8a:54:09:94:3b:70:26:3a:0a:37:f8:98:0b:49: 13:ea:64:81:bf:19:a8:c3:a1:53:92:81:cc:69:14:61:b9:30: d2:66:e5:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLpHd9HInq62lb/B8yHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMmQ2ZDRiZTE2MzEyMzI0MjE4NWRkNDUxZjE0Nzc3OTc0 ZjdjNjIwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EyhjYzg1ODFjZjIzMDM0OWZjMzljYWM0OGY5MjZlZWYxM2Q3ZGRkNjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQjOaTeAGyBP61F+LRSQ3MiAMlz IiI814HnFUVLcWhbFctAADehnWkgTIvIUAvqLk/fRiUKLDxApLoVYZyUJxkyJjNr a9Pt98WaYJaETL2Mg5csC5gMaeU0WkWT4OM7sEN33TB1EgehaUUYsjlcqyGTtY7X SbmUoj/oDPImqL8UZPOVZN5KJSuSdksJ4vTKNeBOuR63SK05xGXVpsL4uTq5VLtE F4PY90Yp7NmSFOlzwf+9hh5Od13dRK0kphkujJCRxCWmssd7bq69I+OHovAbEVli SZ198q3zGZJyij9FjTLDwdlXSSx02r0NC25q/0jzI/C/y9JXUYSsAXRUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyFgc8jA0n8OcrEj5Ju7xPX3dZAMB8GA1UdIwQY MBaAFDItbUvhYxIyQhhd1FHxR3eXT3xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xYzc1OGMtZTc1Yi00MjI0LWFmYzct MDYwYmRiYTQzMGM1LzEvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xYzc1OGMtZTc1Yi00MjI0LWFmYzctMDYwYmRiYTQzMGM1 LzEvTWkxdFMtRmpFakpDR0YzVVVmRkhkNWRQZkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxb8Nx/j 5KKrkcwXtQKdIdn2mk0Q+5lRmBGfnY+Fa4sp8BHp2EJv5VllOqfPX0+YZ3Tx6uvP 1ZB7JFC6FeFYdh/Z85aV+FZF6bJvVwulG9NF3bUNhE1z3y/h4GeaD623LIVC39oC 5OgeIDoLiQNtAVWfiGgTjNyUvqsmMDukIa4TXWLFJO2rLsT8xCcTme9iH0qlvnPb duDUjLPJPxL2YGPxDmmdhqvwc7sJgkxvuqxPCesDI1wiSvKwXLz41A3xdyOZ4rjP N6jyIv5kEVYhTDTQ8CwcIv9mkzM8XopUCZQ7cCY6Cjf4mAtJE+pkgb8ZqMOhU5KB zGkUYbkw0mbl7A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:16 2025 by rpki-client