This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json) Hash identifier: 54o9EEG8qQNGg44R/1FTz7PWnqPOfZmtjrKSLoFRNNw= Subject key identifier: 4F:F3:6A:35:CE:5F:E3:31:E5:C9:E0:A0:EE:77:98:41:7B:2C:E0:EC Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Certificate serial: 019AF2769FF5EBF68AE32642263433E23AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: fpqXeNFIYtD+tjcnLssf4v3BU35e7z+/f0QJQ3WbaYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9f:f5:eb:f6:8a:e3:26:42:26:34:33:e2:3a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=4ff36a35ce5fe331e5c9e0a0ee7798417b2ce0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:d0:44:cb:34:6e:4b:c0:20:f5:87:74:5a: 1c:de:40:66:89:92:18:1c:5e:ad:5c:13:1c:d7:fc: e1:e3:fe:3c:5b:1d:99:85:76:ec:ac:1c:82:c3:0f: be:7a:0e:91:02:0b:dc:46:dc:be:25:c7:58:4a:e6: 97:36:67:2c:db:e7:44:b9:2c:d2:ce:1e:76:73:d8: fd:7d:9d:b1:a9:81:48:69:e3:2c:d1:42:62:01:a1: 08:65:6b:0e:d6:7b:1e:41:d8:00:54:17:9a:ce:55: 8a:bf:a3:3f:d5:6b:01:89:fd:05:3e:84:70:89:46: c8:d8:8a:ed:f6:5b:b3:7c:fe:0c:4d:a0:4f:28:17: 6c:92:57:76:8d:db:fa:30:69:81:84:74:cb:82:b2: d7:71:b8:08:67:de:db:c2:a5:7d:43:00:1f:c3:5c: ec:22:cb:12:92:e9:f1:bc:e1:f6:4e:fb:00:9b:3b: db:cb:7e:b4:51:ee:69:e2:31:c4:06:a6:1b:65:46: 9e:1f:8b:21:68:5f:6c:6a:b2:6c:85:57:b3:3f:f9: 68:49:66:a4:a6:b7:c4:c7:b0:fb:fc:09:ee:4a:0a: 23:30:e0:42:70:54:38:58:df:39:b8:6d:f3:7c:48: 18:78:e5:e2:5a:0d:3d:98:39:56:66:31:de:8d:0d: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F3:6A:35:CE:5F:E3:31:E5:C9:E0:A0:EE:77:98:41:7B:2C:E0:EC X509v3 Authority Key Identifier: keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:70:d0:ff:32:fb:00:cc:e2:eb:b2:a4:c5:7d:af:0d:1b: a9:d0:f0:f2:62:60:82:f8:8f:26:f4:04:1b:04:12:0e:df:e2: c4:51:59:39:ba:91:be:54:3a:18:fa:cc:38:bf:d9:8a:5f:b4: 80:3d:be:58:ee:a6:82:2a:b0:47:bd:89:bb:b1:d0:0c:f6:b9: 1c:ec:23:05:98:06:b3:a5:ce:a0:bc:99:17:cb:f9:38:81:bb: 89:82:07:f2:db:ea:fe:e2:a4:1b:33:3f:ba:50:bb:5f:0a:9a: cf:70:b6:28:4b:59:3e:fb:f4:4e:19:9a:5c:0a:ac:ae:7d:c1: d7:29:ce:41:6f:f1:d6:37:86:22:ac:ba:28:89:f3:e2:90:51: 4c:a0:a7:91:35:c1:93:a6:b6:c0:2b:79:94:12:ac:a9:9f:ce: 95:29:fc:23:a8:6e:34:15:a5:55:b8:c7:5b:75:56:91:f6:59: 11:ec:0e:9b:0d:f5:7c:45:5f:00:ce:23:8c:4f:51:00:8c:29: 97:8c:6e:ac:39:a6:43:22:1b:01:b9:8a:8c:60:e7:93:c3:66: 9b:e1:32:3c:20:51:ca:23:17:66:00:57:82:c4:d6:60:7a:5e: 05:58:cf:37:9e:4e:05:7d:9b:2c:6f:04:6d:48:55:f1:14:cc: f6:53:d3:fa -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydp/16/aK4yZCJjQz4jrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj YTMxOWEwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD Eyg0ZmYzNmEzNWNlNWZlMzMxZTVjOWUwYTBlZTc3OTg0MTdiMmNlMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4fQRMs0bkvAIPWHdFoc3kBmiZIY HF6tXBMc1/zh4/48Wx2ZhXbsrByCww++eg6RAgvcRty+JcdYSuaXNmcs2+dEuSzS zh52c9j9fZ2xqYFIaeMs0UJiAaEIZWsO1nseQdgAVBeazlWKv6M/1WsBif0FPoRw iUbI2Irt9luzfP4MTaBPKBdskld2jdv6MGmBhHTLgrLXcbgIZ97bwqV9QwAfw1zs IssSkunxvOH2TvsAmzvby360Ue5p4jHEBqYbZUaeH4shaF9sarJshVezP/loSWak prfEx7D7/AnuSgojMOBCcFQ4WN85uG3zfEgYeOXiWg09mDlWZjHejQ1GhQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFE/zajXOX+Mx5cngoO53mEF7LODsMB8GA1UdIwQY MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2 LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFFw 0P8y+wDM4uuypMV9rw0bqdDw8mJggviPJvQEGwQSDt/ixFFZObqRvlQ6GPrMOL/Z il+0gD2+WO6mgiqwR72Ju7HQDPa5HOwjBZgGs6XOoLyZF8v5OIG7iYIH8tvq/uKk GzM/ulC7Xwqaz3C2KEtZPvv0ThmaXAqsrn3B1ynOQW/x1jeGIqy6KInz4pBRTKCn kTXBk6a2wCt5lBKsqZ/OlSn8I6huNBWlVbjHW3VWkfZZEewOmw31fEVfAM4jjE9R AIwpl4xurDmmQyIbAbmKjGDnk8Nmm+EyPCBRyiMXZgBXgsTWYHpeBVjPN55OBX2b LG8EbUhV8RTM9lPT+g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:16 2025 by rpki-client