This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json) Hash identifier: UyqOBjm4Z9rqLolnAb+cjCQMcYIKDnTYAqc55PdiIXM= Subject key identifier: D5:8E:A7:48:7A:02:68:01:09:E6:02:30:2F:12:5F:DB:11:BF:C7:03 Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36 Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536 Certificate serial: 019AF164570AEBE0BD96FBB83E7138F1168A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: Yhd4J60riDgVfDyxyqopFyQ+ZUAioNuuZnoIF+v+moI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:57:0a:eb:e0:bd:96:fb:b8:3e:71:38:f1:16:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=d58ea7487a02680109e602302f125fdb11bfc703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:be:f0:57:a4:7d:6e:d2:be:99:9a:9c:66: 2e:87:35:c8:28:04:4d:67:f3:79:aa:07:6b:41:d1: 6b:da:f2:8b:bc:00:47:aa:17:db:76:f7:11:3b:0e: 46:c7:f0:c6:36:e4:12:27:e5:f0:98:b5:07:fb:53: fb:c6:0f:e7:d1:63:17:c6:26:6a:9b:87:b8:ba:e8: 5c:ee:26:b6:80:79:eb:1a:a6:43:e9:63:09:8c:a9: f3:b3:b0:53:ce:f2:9a:40:34:58:bb:35:90:0b:51: 43:35:7f:b0:0e:ea:84:e1:22:af:59:48:2e:34:ce: 87:c2:38:f8:53:b5:11:7e:13:82:56:c6:8c:4a:16: 8a:e0:40:03:14:1b:57:72:55:30:a0:7d:72:c6:e3: d9:29:df:77:87:4e:d7:a5:cb:31:05:d7:f6:5b:76: 85:90:ab:8a:8d:73:1d:36:c8:87:ff:39:0a:41:c2: 57:2e:02:0d:6e:f7:90:73:5c:8a:92:27:c5:75:14: ff:c8:8e:9b:c9:8c:4f:7b:46:b0:75:7e:62:8e:9d: e2:6f:e5:4e:10:90:0d:8c:c3:7f:e6:2e:92:6c:b4: 97:8a:a4:60:78:9d:6d:de:39:95:56:fc:69:e4:88: c3:35:b7:9b:0f:96:02:d8:67:0f:e0:77:f7:e7:fe: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8E:A7:48:7A:02:68:01:09:E6:02:30:2F:12:5F:DB:11:BF:C7:03 X509v3 Authority Key Identifier: keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:54:39:9e:b2:4c:28:69:3a:07:1e:31:f7:86:cf:2f:d1:52: f1:48:58:94:04:7a:af:ce:4f:a1:fd:84:c8:e0:a4:c5:65:57: ef:c6:68:97:8a:0e:ab:3a:b1:87:54:3f:be:23:89:92:47:65: 5c:f4:e4:f6:7e:8b:e0:ec:3e:36:4c:75:5e:1d:fe:32:23:0c: 0b:03:22:29:be:fc:82:ab:16:fd:fd:a4:0e:37:16:2e:d4:1b: d5:9e:34:26:18:2a:42:44:52:be:07:5b:ef:73:5a:8e:f1:68: e4:4c:e5:2f:7f:58:fe:d0:1f:cb:ca:25:06:a4:3f:33:d1:7e: 6d:25:24:bc:68:a9:71:cb:8a:09:3c:6d:15:91:f6:e9:0b:3f: 98:e0:3c:b5:7e:70:f7:f8:da:6c:46:dc:53:07:d9:60:e3:f6: 54:ad:aa:77:78:cf:25:7c:90:54:63:c1:57:bf:38:9c:62:ca: 5a:e0:e2:5b:0b:8f:dc:5d:62:4a:1f:c8:58:72:57:b3:f5:79: 66:8c:07:4b:9b:1f:f7:68:65:cd:50:28:df:a1:b7:fc:b9:0e: da:04:27:2d:2f:e1:65:db:e1:ce:69:6f:fc:0e:0e:f2:15:af: 67:3b:8f:0a:88:98:19:e1:f3:ff:ea:50:b2:40:1c:86:53:c9: f6:95:e3:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFcK6+C9lvu4PnE48RaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2Y2VmY2EwYzZjZDk0NzZkMzMwMTU2MDM4NzJkMjYxYmYy YjM1MzYwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EyhkNThlYTc0ODdhMDI2ODAxMDllNjAyMzAyZjEyNWZkYjExYmZjNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg6+8FekfW7SvpmanGYuhzXIKARN Z/N5qgdrQdFr2vKLvABHqhfbdvcROw5Gx/DGNuQSJ+XwmLUH+1P7xg/n0WMXxiZq m4e4uuhc7ia2gHnrGqZD6WMJjKnzs7BTzvKaQDRYuzWQC1FDNX+wDuqE4SKvWUgu NM6Hwjj4U7URfhOCVsaMShaK4EADFBtXclUwoH1yxuPZKd93h07XpcsxBdf2W3aF kKuKjXMdNsiH/zkKQcJXLgINbveQc1yKkifFdRT/yI6byYxPe0awdX5ijp3ib+VO EJANjMN/5i6SbLSXiqRgeJ1t3jmVVvxp5IjDNbebD5YC2GcP4Hf35/7yUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWOp0h6AmgBCeYCMC8SX9sRv8cDMB8GA1UdIwQY MBaAFNbO/KDGzZR20zAVYDhy0mG/KzU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjIt NjYwOGI2MWE5YWFhLzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjItNjYwOGI2MWE5YWFh LzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlQ5nrJM KGk6Bx4x94bPL9FS8UhYlAR6r85Pof2EyOCkxWVX78Zol4oOqzqxh1Q/viOJkkdl XPTk9n6L4Ow+Nkx1Xh3+MiMMCwMiKb78gqsW/f2kDjcWLtQb1Z40JhgqQkRSvgdb 73NajvFo5EzlL39Y/tAfy8olBqQ/M9F+bSUkvGipccuKCTxtFZH26Qs/mOA8tX5w 9/jabEbcUwfZYOP2VK2qd3jPJXyQVGPBV784nGLKWuDiWwuP3F1iSh/IWHJXs/V5 ZowHS5sf92hlzVAo36G3/LkO2gQnLS/hZdvhzmlv/A4O8hWvZzuPCoiYGeHz/+pQ skAchlPJ9pXjTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:43 2025 by rpki-client