This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json) Hash identifier: cDOPjBzMGM+O2Rpgwn+cxWj8+7tflfRF3QgLsCO23G0= Subject key identifier: A9:6A:2B:FE:82:8E:2B:19:EC:A0:F6:F4:14:8C:96:1F:10:40:1D:98 Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d Certificate serial: 019AF19B951B84A087F6F8B83D9AFA3E1325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft Manifest number: 0479 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: 4d7H9hpqpiZOProawEcroIzA5W/kaLBItXd9O/vOXZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:95:1b:84:a0:87:f6:f8:b8:3d:9a:fa:3e:13:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=a96a2bfe828e2b19eca0f6f4148c961f10401d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:03:67:ec:7c:88:06:5f:a5:db:28:15:f0:30: 85:b2:a2:5b:11:65:0a:f8:86:7b:c6:f1:66:b5:5a: 6a:37:58:5b:f3:10:ee:88:7d:82:4e:b6:fb:ce:77: 67:15:94:02:92:a2:d2:13:9c:aa:58:85:b2:01:77: 09:fd:f2:48:da:ac:ff:6e:76:7d:0e:b5:87:6b:2e: 1f:c4:82:58:49:87:bf:03:a4:44:5e:d2:ab:4b:2b: e4:ca:e7:fa:ce:eb:fb:68:b5:47:b5:22:af:88:b3: 4d:d9:af:ec:0d:0d:f9:6f:b0:5b:ad:c9:56:b7:78: 26:76:25:19:e9:68:4c:d8:2d:30:cb:56:88:72:04: f7:f1:77:c1:a2:bd:ca:c8:ec:3c:4f:34:a5:82:30: ca:dc:19:04:c7:5d:0d:ff:36:da:68:4c:58:d8:48: 27:a1:a2:a9:55:48:f4:a9:46:1a:73:f6:98:c8:4b: d7:f9:77:10:47:d5:ff:71:d3:fe:82:77:df:66:31: de:af:24:fe:88:fd:39:c3:48:f6:42:bb:63:c0:7e: ae:5a:61:3f:48:ec:47:8d:73:97:01:86:e2:cd:16: eb:ba:c5:69:64:96:2f:dc:f4:97:7a:0b:99:19:53: 77:14:57:28:35:e7:b5:87:d8:e5:1c:08:5b:81:c1: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6A:2B:FE:82:8E:2B:19:EC:A0:F6:F4:14:8C:96:1F:10:40:1D:98 X509v3 Authority Key Identifier: keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:02:27:a0:87:6b:21:58:33:77:cd:bc:a0:fb:2e:d5:89:c3: db:35:ce:5d:a9:00:e5:68:f2:13:6e:02:24:bd:fe:f4:65:dc: a7:c2:d7:13:86:01:e6:28:f5:15:47:48:22:7e:de:ee:d7:42: 2b:f5:ea:fb:95:4c:34:92:e6:13:eb:b6:9d:59:b3:30:da:7b: e3:86:56:c1:5f:a0:32:04:dd:7f:f9:50:34:f6:4d:71:f2:d3: b5:3a:e1:55:dc:06:30:38:6b:f9:2b:fb:e2:6b:c2:a3:49:e0: 25:c9:22:17:22:42:43:bb:1e:17:e2:fa:74:81:15:3b:67:1e: 2b:d3:f2:06:90:e4:dc:fd:db:70:4f:48:43:ed:89:ee:c8:e4: 27:8c:95:d0:f7:c3:14:e6:77:11:5a:ea:db:ac:8e:8b:4d:3e: 41:96:aa:92:3b:77:68:44:72:2c:ae:58:5b:9b:6e:23:02:55: 6d:a3:10:42:81:47:6b:23:9f:89:4c:3b:d9:c3:54:12:b4:f7: 61:22:30:94:13:1a:b3:5f:99:ce:16:d9:cd:86:45:d9:e7:5d: ca:67:9e:d7:b5:cf:40:c5:41:f4:d0:0e:da:9b:67:72:e8:67: 0c:8f:99:df:eb:df:47:55:31:ca:af:dd:b9:28:85:c1:f1:4c: 69:fd:b1:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5UbhKCH9vi4PZr6PhMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MmNjNDAyNjdlMzU5MmUxYjUyZjBmMDA5NmNiMWYyZjBh ZjE2N2QwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD EyhhOTZhMmJmZTgyOGUyYjE5ZWNhMGY2ZjQxNDhjOTYxZjEwNDAxZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wNn7HyIBl+l2ygV8DCFsqJbEWUK +IZ7xvFmtVpqN1hb8xDuiH2CTrb7zndnFZQCkqLSE5yqWIWyAXcJ/fJI2qz/bnZ9 DrWHay4fxIJYSYe/A6REXtKrSyvkyuf6zuv7aLVHtSKviLNN2a/sDQ35b7BbrclW t3gmdiUZ6WhM2C0wy1aIcgT38XfBor3KyOw8TzSlgjDK3BkEx10N/zbaaExY2Egn oaKpVUj0qUYac/aYyEvX+XcQR9X/cdP+gnffZjHeryT+iP05w0j2QrtjwH6uWmE/ SOxHjXOXAYbizRbrusVpZJYv3PSXeguZGVN3FFcoNee1h9jlHAhbgcEMqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlqK/6CjisZ7KD29BSMlh8QQB2YMB8GA1UdIwQY MBaAFNQsxAJn41kuG1Lw8AlssfLwrxZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjct MTZlMTMwODczN2IwLzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjctMTZlMTMwODczN2Iw LzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAInoIdr IVgzd828oPsu1YnD2zXOXakA5WjyE24CJL3+9GXcp8LXE4YB5ij1FUdIIn7e7tdC K/Xq+5VMNJLmE+u2nVmzMNp744ZWwV+gMgTdf/lQNPZNcfLTtTrhVdwGMDhr+Sv7 4mvCo0ngJckiFyJCQ7seF+L6dIEVO2ceK9PyBpDk3P3bcE9IQ+2J7sjkJ4yV0PfD FOZ3EVrq26yOi00+QZaqkjt3aERyLK5YW5tuIwJVbaMQQoFHayOfiUw72cNUErT3 YSIwlBMas1+ZzhbZzYZF2eddymee17XPQMVB9NAO2ptncuhnDI+Z3+vfR1Uxyq/d uSiFwfFMaf2x7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:11 2025 by rpki-client