This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json) Hash identifier: slPEDWu6U4/VSK0VFDjlKj/+5g9Fwo8ZTyh/L2Uy05s= Subject key identifier: E5:8F:45:A7:97:38:48:30:B7:3D:CC:10:99:EC:E7:FF:F1:C5:EC:E2 Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Certificate serial: 019AF209ACD5B54ECF0B72F357F273BED058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft Manifest number: 0D88 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: XYqQOOSnOkFRbshNsLQpyF228Gj5xgVs4+44jbukzM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ac:d5:b5:4e:cf:0b:72:f3:57:f2:73:be:d0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=e58f45a797384830b73dcc1099ece7fff1c5ece2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:00:13:f4:6c:ae:e8:76:71:bd:86:48:95: 45:0a:0f:89:7a:df:51:d6:2d:01:ea:a1:d3:31:50: 79:24:b6:69:59:7e:83:75:ee:4f:03:2c:38:e4:0a: 88:d2:c1:8b:25:86:e5:1c:bd:e9:41:4c:a5:a6:a1: 24:20:5a:08:51:ee:de:c3:8c:09:2e:08:7d:a9:2b: 45:38:9b:85:46:bd:de:c1:2d:76:00:cb:13:1a:86: 99:58:a3:85:f7:c0:c9:7d:e7:d9:95:b1:a0:9b:d4: 86:1f:bb:24:7e:54:31:57:35:a2:6a:58:3b:7d:d8: 3c:65:d5:fd:e9:cd:3b:a8:83:8f:43:5b:90:89:90: c0:4b:fe:d3:7c:eb:3c:6b:b8:83:6c:89:a1:ba:0a: 9f:85:49:bd:f8:f3:0a:62:1d:2c:7a:19:df:0a:f2: 26:a5:1f:49:f2:1b:7f:d1:73:6f:eb:2d:de:b4:e8: 02:37:0e:a8:f5:58:d3:dc:f4:29:0c:ad:4c:45:d8: 6f:80:0d:5e:13:16:9a:f3:c8:54:5c:6d:19:14:ed: b9:de:05:e7:b5:99:35:c0:af:6c:7c:83:de:54:94: cc:3a:d6:a2:6c:4c:18:46:49:33:d7:6d:3c:bc:20: 71:88:53:0a:03:b3:fa:c3:9c:51:78:3b:9a:3d:31: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:45:A7:97:38:48:30:B7:3D:CC:10:99:EC:E7:FF:F1:C5:EC:E2 X509v3 Authority Key Identifier: keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:80:a5:82:95:bc:10:68:ad:86:64:cc:2b:09:19:d5:3b: ec:06:af:61:9a:23:45:36:08:b0:f1:fa:83:a9:4f:e3:3c:ba: e6:14:6f:14:27:58:0c:59:66:14:17:6d:78:47:88:5c:11:94: 63:68:5a:79:53:e0:0b:02:23:8c:61:ba:98:c2:2f:c3:c4:1e: a8:a2:c9:70:a8:3f:4e:33:75:7f:3b:6e:7e:e7:09:ec:b7:1c: f0:e2:57:c5:09:99:c4:01:93:10:3c:88:04:74:f3:dc:36:98: d4:be:c0:c3:e6:f6:c5:c7:51:22:67:ad:bc:23:e0:8c:22:bb: 0b:fb:a9:c5:36:dd:89:2b:69:8c:ce:34:05:7b:24:7a:b6:69: 54:1a:3b:15:fa:70:76:91:dc:cf:f0:42:48:a5:a3:69:85:1d: a4:76:5a:bd:47:e4:f6:e0:79:ed:d3:57:1d:bd:59:d6:74:d5: ea:9f:fa:f6:1f:a4:b7:66:f7:49:87:e0:62:ce:45:88:19:0d: c4:ba:61:18:4e:d3:4a:15:ba:50:64:f6:a7:c6:3e:c2:ee:94: ef:d4:71:d1:50:c7:35:53:f9:a2:48:4a:44:5c:34:e5:69:a4: 3c:4d:c4:27:55:0f:be:93:bc:bc:f9:9b:79:c8:20:1c:76:2f: eb:ec:14:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCazVtU7PC3LzV/JzvtBYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx OGIyMWMwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhlNThmNDVhNzk3Mzg0ODMwYjczZGNjMTA5OWVjZTdmZmYxYzVlY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyQAE/Rsruh2cb2GSJVFCg+Jet9R 1i0B6qHTMVB5JLZpWX6Dde5PAyw45AqI0sGLJYblHL3pQUylpqEkIFoIUe7ew4wJ Lgh9qStFOJuFRr3ewS12AMsTGoaZWKOF98DJfefZlbGgm9SGH7skflQxVzWialg7 fdg8ZdX96c07qIOPQ1uQiZDAS/7TfOs8a7iDbImhugqfhUm9+PMKYh0sehnfCvIm pR9J8ht/0XNv6y3etOgCNw6o9VjT3PQpDK1MRdhvgA1eExaa88hUXG0ZFO253gXn tZk1wK9sfIPeVJTMOtaibEwYRkkz1208vCBxiFMKA7P6w5xReDuaPTEvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWPRaeXOEgwtz3MEJns5//xxeziMB8GA1UdIwQY MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnaApYKV vBBorYZkzCsJGdU77AavYZojRTYIsPH6g6lP4zy65hRvFCdYDFlmFBdteEeIXBGU Y2haeVPgCwIjjGG6mMIvw8QeqKLJcKg/TjN1fztufucJ7Lcc8OJXxQmZxAGTEDyI BHTz3DaY1L7Aw+b2xcdRImetvCPgjCK7C/upxTbdiStpjM40BXskerZpVBo7Ffpw dpHcz/BCSKWjaYUdpHZavUfk9uB57dNXHb1Z1nTV6p/69h+kt2b3SYfgYs5FiBkN xLphGE7TShW6UGT2p8Y+wu6U79Rx0VDHNVP5okhKRFw05WmkPE3EJ1UPvpO8vPmb ecggHHYv6+wUWA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client