This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json) Hash identifier: vsHgFSIVUvJNdFXTmKzfQ8pk7P7WGioLcEdHiGvp0RM= Subject key identifier: 56:D4:1E:FD:0A:6F:40:A4:E6:F9:04:A2:50:ED:99:9C:77:9C:05:74 Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae Certificate serial: 019AF23FF6A021758D42CB0502B45FFB34DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 06:01:09 +0000 Manifest this update: Sat 06 Dec 2025 06:01:09 +0000 Manifest next update: Sun 07 Dec 2025 06:01:09 +0000 Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: /bl/F5Go2PghZEDNz5cSdQYYUowbmXGeYuJhTWt/quk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f6:a0:21:75:8d:42:cb:05:02:b4:5f:fb:34:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae Validity Not Before: Dec 6 06:01:09 2025 GMT Not After : Dec 7 06:01:09 2025 GMT Subject: CN=56d41efd0a6f40a4e6f904a250ed999c779c0574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:76:c5:eb:18:b8:59:e0:72:83:09:90:13: e4:23:e6:26:82:6a:44:2b:3e:37:e1:b7:bf:8e:fa: ee:f8:59:b6:f4:4f:11:11:fb:c9:57:09:a6:b6:c7: 37:e0:b0:f0:17:10:1f:96:f4:32:f4:2d:bc:81:8d: 75:f0:85:10:69:89:b2:d7:eb:4e:c0:89:ff:d5:50: 9f:d2:4f:fe:67:29:73:c1:e4:3a:1d:32:e3:6a:a2: 62:d8:96:bd:e0:62:8b:fe:ba:db:e7:e5:1f:9a:f1: 4c:d8:bd:36:99:c7:f0:d2:46:6f:07:ea:0b:21:60: bb:23:7c:62:27:47:69:0e:56:7a:45:f0:6e:b2:c9: f6:11:8d:36:05:08:83:b2:92:7c:dc:47:9f:05:74: 72:d9:d7:b2:62:b5:7b:37:51:20:79:74:6f:82:4e: d5:91:e2:b6:2f:ff:c2:2a:58:9c:1f:7c:98:fb:91: ed:5e:92:b2:51:ab:3f:e3:3d:67:e3:8c:db:e2:d6: 73:06:aa:6b:d1:bf:21:49:ee:13:47:3a:0a:bb:65: 4d:ad:88:2a:2f:fd:cc:c3:e0:1d:86:1e:44:f0:00: 93:43:b9:61:c0:67:81:7a:34:f0:6e:30:33:a3:e1: f5:4c:dc:d9:72:b6:f8:16:12:39:1c:dd:74:7b:88: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:1E:FD:0A:6F:40:A4:E6:F9:04:A2:50:ED:99:9C:77:9C:05:74 X509v3 Authority Key Identifier: keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:23:55:c1:16:4d:81:2d:bb:87:c7:b2:1e:47:7a:ed:dc:0f: d1:9d:9f:e0:a8:53:75:96:a1:30:d6:f1:22:fb:03:6b:09:78: 04:65:1a:d1:bb:15:ec:61:a3:1a:ba:0f:87:0b:d3:9e:6e:bb: 23:1a:ef:c9:de:72:bf:69:03:b1:af:9c:21:92:3b:98:3a:42: d5:e2:a2:dc:c7:36:df:72:0f:22:f0:5b:69:60:f3:1c:95:e1: 93:90:d7:b6:9e:8f:51:13:ab:bb:fd:82:de:91:52:e9:0e:37: d6:dc:ab:f9:52:47:b4:4a:d6:27:84:58:e1:a8:ff:a6:9e:50: 7d:39:f2:16:4c:dc:05:0a:c2:5e:bc:64:8b:9c:30:2c:85:7b: f9:52:c2:ef:23:b9:85:f5:ce:5c:50:05:df:40:d4:72:fa:97: d4:df:2a:10:11:b7:a1:19:52:4f:14:27:60:c1:cd:72:0e:2d: 40:0e:6c:d1:99:3e:a1:f4:4e:b8:5d:fc:e6:67:64:ad:08:ae: 16:f3:79:1a:2d:9b:c8:4f:ee:96:4f:89:98:d6:3d:96:5a:d3: c9:ef:90:28:f5:fe:1a:99:46:d3:e4:44:e3:24:ce:f3:cb:aa: 80:4b:fb:1c:c8:3c:58:93:68:30:07:01:87:ed:bf:52:bf:21: f9:ad:94:a3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryP/agIXWNQssFArRf+zTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZjdmODZjNmNlNzNkNWQ3NjM0MDNmNDk4ZWViMzJmNzBj NDc0YWUwHhcNMjUxMjA2MDYwMTA5WhcNMjUxMjA3MDYwMTA5WjAzMTEwLwYDVQQD Eyg1NmQ0MWVmZDBhNmY0MGE0ZTZmOTA0YTI1MGVkOTk5Yzc3OWMwNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXJ2xesYuFngcoMJkBPkI+YmgmpE Kz434be/jvru+Fm29E8REfvJVwmmtsc34LDwFxAflvQy9C28gY118IUQaYmy1+tO wIn/1VCf0k/+ZylzweQ6HTLjaqJi2Ja94GKL/rrb5+UfmvFM2L02mcfw0kZvB+oL IWC7I3xiJ0dpDlZ6RfBussn2EY02BQiDspJ83EefBXRy2deyYrV7N1EgeXRvgk7V keK2L//CKlicH3yY+5HtXpKyUas/4z1n44zb4tZzBqpr0b8hSe4TRzoKu2VNrYgq L/3Mw+Adhh5E8ACTQ7lhwGeBejTwbjAzo+H1TNzZcrb4FhI5HN10e4hnjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFbUHv0Kb0Ck5vkEolDtmZx3nAV0MB8GA1UdIwQY MBaAFPn3+Gxs5z1ddjQD9Jjusy9wxHSuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1mZjRiR3puUFYxMk5BUDBtTzZ6TDNERWRLNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZDY5ZDU4LWMyMjktNGMyYi1iZjU1 LTQ1NjM0NTMzMmY4Yi8xLzEtZmY0Ykd6blBWMTJOQVAwbU82ekwzREVkSzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2Q2OWQ1OC1jMjI5LTRjMmItYmY1NS00NTYzNDUzMzJm OGIvMS8xLWZmNGJHem5QVjEyTkFQMG1PNnpMM0RFZEs0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyNV wRZNgS27h8eyHkd67dwP0Z2f4KhTdZahMNbxIvsDawl4BGUa0bsV7GGjGroPhwvT nm67Ixrvyd5yv2kDsa+cIZI7mDpC1eKi3Mc233IPIvBbaWDzHJXhk5DXtp6PUROr u/2C3pFS6Q431tyr+VJHtErWJ4RY4aj/pp5QfTnyFkzcBQrCXrxki5wwLIV7+VLC 7yO5hfXOXFAF30DUcvqX1N8qEBG3oRlSTxQnYMHNcg4tQA5s0Zk+ofROuF385mdk rQiuFvN5Gi2byE/ulk+JmNY9llrTye+QKPX+GplG0+RE4yTO88uqgEv7HMg8WJNo MAcBh+2/Ur8h+a2Uow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:36 2025 by rpki-client