This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft File: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json) Hash identifier: WaLXUC7bAWb3f+jsWPhH+Y2fA3dkrChxSvNJdtS2I6I= Subject key identifier: DA:EE:43:A3:D9:7C:C5:11:71:50:BC:53:FE:CE:79:00:66:B6:54:D2 Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8 Certificate issuer: /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8 Certificate serial: 019AF08838BBB1BD5BD9160882DB4ED133EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft Manifest number: 1191 Signing time: Fri 05 Dec 2025 22:00:50 +0000 Manifest this update: Fri 05 Dec 2025 22:00:50 +0000 Manifest next update: Sat 06 Dec 2025 22:00:50 +0000 Files and hashes: 1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: 1NH+KYVb1k7I7J9oMXnDOcI0XCankNsGVzJxuM29iSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:38:bb:b1:bd:5b:d9:16:08:82:db:4e:d1:33:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8 Validity Not Before: Dec 5 22:00:50 2025 GMT Not After : Dec 6 22:00:50 2025 GMT Subject: CN=daee43a3d97cc5117150bc53fece790066b654d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:8c:18:82:4d:c2:30:58:1d:bd:6a:e7:9e: 19:1c:52:a1:68:ba:30:97:be:9c:29:dc:f1:b2:19: 09:cf:3f:7c:16:7b:34:0c:e7:b1:4b:ae:79:46:a8: 7f:5e:bc:2b:29:d4:95:c6:39:e7:b3:fb:0a:bc:0d: 6d:c8:ef:94:71:c0:f0:1a:e3:0e:90:65:82:77:20: b2:7e:e4:57:74:b1:64:01:52:d2:9b:ef:a6:99:04: 9d:c8:4c:93:06:f7:0c:62:5f:a1:36:4e:74:ab:ea: ff:59:bd:32:f2:bf:31:c2:41:f7:8c:34:1b:2e:5d: 17:48:8e:31:35:12:df:ad:1f:18:6b:2f:97:ca:b4: de:0f:45:34:38:df:42:a6:f0:1e:ca:ff:d5:0d:00: 72:58:cf:df:87:60:76:82:e8:b9:00:82:f8:c9:83: dd:7a:42:81:81:f8:e6:9f:e7:e7:b6:ae:56:0d:37: 3c:bb:35:1d:a2:4a:5f:c9:63:b7:89:3b:d9:64:be: fe:da:d8:e5:8e:13:98:44:b5:95:38:af:a1:00:fa: 90:9a:b4:43:0e:11:f8:2f:fe:bb:e5:d3:6e:ab:24: 62:ac:d6:05:f8:fe:67:3f:43:70:cc:05:46:28:07: 82:98:6c:3e:b1:89:f9:b8:28:e6:f6:f8:dd:58:76: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EE:43:A3:D9:7C:C5:11:71:50:BC:53:FE:CE:79:00:66:B6:54:D2 X509v3 Authority Key Identifier: keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:5e:2c:98:62:13:34:e2:a2:44:22:e7:5f:f9:9c:97:72:d8: dc:6e:ab:d4:80:2e:46:b7:d4:76:2e:56:ce:09:d0:eb:da:49: da:0e:66:7d:c0:29:d3:77:e1:5e:3c:6f:2a:e3:cd:f6:24:d4: a9:67:a2:af:fc:fa:78:96:aa:41:3c:a5:bb:01:42:2f:93:46: 54:87:2f:4d:93:c6:0d:9b:c7:92:60:19:e1:fe:d4:0a:0f:3b: 11:1b:dc:74:60:3c:5f:e4:b8:20:0a:a9:1c:ea:b8:cf:c2:71: 85:00:3d:9e:5f:81:8f:62:12:92:d9:58:6c:60:28:82:a9:d6: 18:36:4a:f5:6f:29:2f:09:46:bd:d7:5d:c0:05:36:d5:9f:58: 8f:fd:3b:2d:b2:d8:18:5c:12:87:30:eb:d0:ea:f1:2b:13:04: 43:23:93:0b:83:66:7a:5c:1b:13:9b:e4:cb:fd:61:ca:5d:ee: bc:9a:ef:ce:2e:3d:8b:41:a0:cc:27:a8:b7:75:90:e0:d1:6a: cd:61:40:2e:9f:67:78:10:e9:76:6c:f6:02:77:fa:ea:3f:95: 4f:36:3f:59:bb:d0:31:ba:57:bc:e0:3c:e3:09:a6:f4:f5:f3: 95:89:0b:79:32:1d:9f:d6:a5:8b:82:2a:97:07:7f:36:a8:61: 20:74:d0:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDi7sb1b2RYIgttO0TPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Njk4NjdkMWQ2OTNlNzlhNmE1ZWU5MDE0ZTQxM2YwMzll YjUwZDgwHhcNMjUxMjA1MjIwMDUwWhcNMjUxMjA2MjIwMDUwWjAzMTEwLwYDVQQD EyhkYWVlNDNhM2Q5N2NjNTExNzE1MGJjNTNmZWNlNzkwMDY2YjY1NGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAaMGIJNwjBYHb1q554ZHFKhaLow l76cKdzxshkJzz98Fns0DOexS655Rqh/XrwrKdSVxjnns/sKvA1tyO+UccDwGuMO kGWCdyCyfuRXdLFkAVLSm++mmQSdyEyTBvcMYl+hNk50q+r/Wb0y8r8xwkH3jDQb Ll0XSI4xNRLfrR8Yay+XyrTeD0U0ON9CpvAeyv/VDQByWM/fh2B2gui5AIL4yYPd ekKBgfjmn+fntq5WDTc8uzUdokpfyWO3iTvZZL7+2tjljhOYRLWVOK+hAPqQmrRD DhH4L/675dNuqyRirNYF+P5nP0NwzAVGKAeCmGw+sYn5uCjm9vjdWHaLeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNruQ6PZfMURcVC8U/7OeQBmtlTSMB8GA1UdIwQY MBaAFNRphn0daT55pqXukBTkE/A561DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYt NDFkZTk3ZGM5YjZjLzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iNDg1ZDktZWVkYy00NzA2LWE5ZTYtNDFkZTk3ZGM5YjZj LzEvMUdtR2ZSMXBQbm1tcGU2UUZPUVQ4RG5yVU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ14smGIT NOKiRCLnX/mcl3LY3G6r1IAuRrfUdi5WzgnQ69pJ2g5mfcAp03fhXjxvKuPN9iTU qWeir/z6eJaqQTyluwFCL5NGVIcvTZPGDZvHkmAZ4f7UCg87ERvcdGA8X+S4IAqp HOq4z8JxhQA9nl+Bj2ISktlYbGAogqnWGDZK9W8pLwlGvdddwAU21Z9Yj/07LbLY GFwShzDr0OrxKxMEQyOTC4NmelwbE5vky/1hyl3uvJrvzi49i0GgzCeot3WQ4NFq zWFALp9neBDpdmz2Anf66j+VTzY/WbvQMbpXvOA84wmm9PXzlYkLeTIdn9ali4Iq lwd/NqhhIHTQ/g== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:15 2025 by rpki-client