This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json) Hash identifier: N9yk7Bmjx9O6A/nY5MgL820R8n/T3SL/H2Kmn7NMozs= Subject key identifier: B6:26:5D:D3:B4:A0:E5:59:3F:D5:B8:E3:39:7F:42:DB:A1:0D:55:31 Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Certificate serial: 019AF49C1CB51C97E07D235B985DBF67769C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: ftZGma2syrLuQ8q9naQSTUEftI1SITCPYPalga3vmjg=) 2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1c:b5:1c:97:e0:7d:23:5b:98:5d:bf:67:76:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=b6265dd3b4a0e5593fd5b8e3397f42dba10d5531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d4:be:a8:4d:09:8b:4b:6c:67:55:57:f5:62: 25:0a:22:2a:dc:e0:da:0e:38:35:f5:ee:76:74:f2: e3:b0:d6:4c:42:0b:70:68:7d:d8:e1:2d:74:a8:64: 90:62:e9:22:c6:89:1a:62:29:37:00:4a:d4:f5:05: 91:bf:da:96:3c:1f:8d:96:9f:34:b7:9a:33:27:0f: 2a:d0:ca:19:47:b8:d1:80:91:ba:ec:91:81:1a:99: 99:4f:7b:62:f8:7c:32:c2:9b:31:7f:a5:da:ce:50: ab:2f:18:65:18:f9:d0:bd:d1:36:08:a9:17:9f:26: d0:34:ea:56:2b:a6:16:af:87:83:10:89:c4:d4:40: 8f:5b:5c:86:bb:46:a2:79:50:d7:62:62:12:d9:2a: db:8e:e3:4a:77:34:ac:76:33:40:75:60:31:a1:b0: 27:b0:ae:22:66:92:49:e6:fc:7c:17:3a:83:f9:e7: 0a:26:4f:5c:ae:dd:5d:f4:43:b6:e0:23:79:45:4e: d5:e6:80:33:3e:b1:18:6d:03:27:45:69:04:34:11: 62:f5:f3:8f:4c:32:66:49:37:c2:a3:ce:66:c2:ec: 45:13:b6:67:72:45:46:a6:b8:c7:4a:72:db:83:00: 80:5f:57:c7:35:02:69:c4:c7:12:e9:23:8c:a4:2a: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:26:5D:D3:B4:A0:E5:59:3F:D5:B8:E3:39:7F:42:DB:A1:0D:55:31 X509v3 Authority Key Identifier: keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1a:3e:16:62:65:85:c9:b3:04:f6:fe:fb:f0:51:70:c3:80: 55:f4:83:5b:44:e8:69:c6:0b:ea:6f:98:00:ad:63:1b:91:49: 0c:44:23:cd:19:be:e8:e6:95:d3:0d:c5:a2:cf:be:42:f3:2b: 6f:86:2f:45:7a:65:e4:d8:eb:ce:36:94:4a:88:b3:a3:d3:f5: b3:00:99:8e:44:95:aa:55:9e:4e:5a:40:71:40:a1:9c:6c:a1: 4e:e8:5b:2b:d7:1c:f5:7c:7f:ae:dc:b7:29:1e:4d:07:1b:ca: 0f:53:8e:14:24:c2:08:18:fa:b8:f0:0c:d6:a8:c3:2b:e7:f6: 01:4f:d9:cb:e5:6f:36:87:3b:8c:e1:fa:5c:ac:93:ec:b5:ec: 81:cc:74:c9:07:64:8b:29:94:70:86:7a:dc:7a:ae:94:57:89: 7c:b4:b4:01:9b:b8:fd:01:da:4d:e1:4d:9a:17:5e:c1:43:af: 08:2a:41:e8:4b:63:2f:a6:13:db:c0:1a:d3:f2:1d:8e:b2:30: e3:c2:27:07:11:9b:a3:b2:7c:f1:ab:d5:ad:d7:9e:d0:7e:a8: f9:44:81:73:8a:2d:6a:5d:3d:20:26:83:54:1c:94:55:13:b2: 23:88:d5:c5:8c:a2:77:1c:43:ed:6a:db:18:27:54:c7:ec:86: ae:16:b5:58 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0nBy1HJfgfSNbmF2/Z3acMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzVkZjEzYmY4YzFiYThiMTBlMmRhNDgwYWU2MWE1MzQ4 YWI4ZTkwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD EyhiNjI2NWRkM2I0YTBlNTU5M2ZkNWI4ZTMzOTdmNDJkYmExMGQ1NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dS+qE0Ji0tsZ1VX9WIlCiIq3ODa Djg19e52dPLjsNZMQgtwaH3Y4S10qGSQYukixokaYik3AErU9QWRv9qWPB+Nlp80 t5ozJw8q0MoZR7jRgJG67JGBGpmZT3ti+Hwywpsxf6XazlCrLxhlGPnQvdE2CKkX nybQNOpWK6YWr4eDEInE1ECPW1yGu0aieVDXYmIS2SrbjuNKdzSsdjNAdWAxobAn sK4iZpJJ5vx8FzqD+ecKJk9crt1d9EO24CN5RU7V5oAzPrEYbQMnRWkENBFi9fOP TDJmSTfCo85mwuxFE7ZnckVGprjHSnLbgwCAX1fHNQJpxMcS6SOMpCqrmwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLYmXdO0oOVZP9W44zl/QtuhDVUxMB8GA1UdIwQY MBaAFPh13xO/jBuosQ4tpICuYaU0irjpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IWGZFNy1NRzZpeERpMmtnSzVocFRTS3VPay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5 LWZjODNkYjEzZjNhMS8xLzEtSFhmRTctTUc2aXhEaTJrZ0s1aHBUU0t1T2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNiL2FiYWNmMS1mNGM2LTQ3MTAtOTNlOS1mYzgzZGIxM2Yz YTEvMS8xLUhYZkU3LU1HNml4RGkya2dLNWhwVFNLdU9rLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaho+ FmJlhcmzBPb++/BRcMOAVfSDW0ToacYL6m+YAK1jG5FJDEQjzRm+6OaV0w3Fos++ QvMrb4YvRXpl5NjrzjaUSoizo9P1swCZjkSVqlWeTlpAcUChnGyhTuhbK9cc9Xx/ rty3KR5NBxvKD1OOFCTCCBj6uPAM1qjDK+f2AU/Zy+VvNoc7jOH6XKyT7LXsgcx0 yQdkiymUcIZ63HqulFeJfLS0AZu4/QHaTeFNmhdewUOvCCpB6EtjL6YT28Aa0/Id jrIw48InBxGbo7J88avVrdee0H6o+USBc4otal09ICaDVByUVROyI4jVxYyidxxD 7WrbGCdUx+yGrha1WA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:26 2025 by rpki-client