This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json) Hash identifier: Hja4Y08MS+zDeOPI5t/JiSJOdxZnSpSEG2l0pxJGTs8= Subject key identifier: 9D:FD:D2:42:3B:7F:29:72:4B:5F:06:39:40:54:7D:BD:87:0C:D6:6E Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc Certificate serial: 019AF19B79A10C6752EC5E23A73044734419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft Manifest number: 175B Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: Ruv1bWspSwdeJCHiMH+Bltjc5MmR8a8/El3iZyfPRvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:79:a1:0c:67:52:ec:5e:23:a7:30:44:73:44:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=9dfdd2423b7f29724b5f063940547dbd870cd66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:29:7e:7d:0e:ac:f6:35:c9:dc:81:9c:03: 23:cd:22:55:93:27:03:ee:d9:47:eb:8f:04:82:92: 7e:71:ce:37:86:ef:5e:ec:2a:e9:08:be:97:3f:0a: c2:e2:bf:5f:64:1c:cc:92:8e:62:1b:a9:cc:ba:c4: b5:48:3b:4d:1f:d8:6e:d1:d6:fb:d7:25:e5:c9:7e: 12:80:8d:99:c9:ec:2f:e2:03:df:85:82:f3:0d:e1: 8d:63:81:0b:35:45:fc:ff:00:1f:db:fd:03:ab:29: 6b:cb:58:86:c4:f3:83:97:cc:c7:2f:2f:fb:59:67: 70:1c:04:76:2d:cc:08:a3:7a:b5:57:2c:a4:c5:93: 40:a3:33:04:1c:b5:cf:67:10:39:a0:1c:b9:72:d0: 1d:44:a1:1a:e1:ea:8b:71:05:53:41:3c:89:cf:94: 22:a4:bb:d3:a7:55:28:d2:8a:33:13:16:d3:23:c5: b9:6f:c1:8d:a3:61:1f:8d:23:ba:77:38:4a:c2:fc: 5b:65:50:15:9e:d6:5d:77:c3:c9:b5:54:29:fd:79: 2a:ef:61:83:87:68:93:56:c2:fb:10:2f:f5:10:6c: 7f:af:25:80:c1:7f:ee:01:c9:50:0d:14:68:68:af: 1f:f8:6c:25:e0:80:09:ba:4b:aa:ee:fe:86:69:02: a0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:D2:42:3B:7F:29:72:4B:5F:06:39:40:54:7D:BD:87:0C:D6:6E X509v3 Authority Key Identifier: keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fa:16:22:22:fc:6d:4f:11:74:05:7c:7c:de:1c:f2:e4:18: 18:49:90:d3:72:d6:1e:00:82:33:00:c1:1e:6c:22:b6:d0:37: c0:a7:29:aa:66:3b:e5:68:e3:00:87:be:cc:61:11:43:e6:ad: 6e:19:7b:83:51:e5:58:cc:ea:52:6f:21:8f:31:b8:ec:92:b9: a7:d9:47:fd:d1:50:6f:75:ce:22:36:e8:f0:12:6e:d6:ae:39: c8:c0:a3:f3:00:9f:28:dd:36:de:78:40:6c:fe:0c:32:c8:fb: 94:9a:60:2e:34:92:68:ea:17:88:69:79:83:b7:3f:1a:75:15: 3b:66:9d:74:32:a1:4a:d1:46:85:eb:8e:81:98:ad:fc:c1:22: 7b:5b:26:92:de:9f:09:5c:cc:76:16:66:c3:f8:c8:c7:49:e6: 74:1a:1e:dc:d4:b7:be:d5:ae:dc:51:57:8b:87:1a:08:eb:f1: 91:2a:b8:84:92:06:1d:d9:28:23:b9:9f:2f:f2:55:01:65:36: 40:45:4f:64:f4:bf:46:ab:d4:c5:47:fd:d6:b8:b3:40:bd:3b: f9:e4:1d:6b:65:cf:0c:dc:47:1b:2e:cb:ff:8e:22:ab:a6:cf: da:3f:df:ed:a3:7f:4f:e3:d3:f6:2c:d6:99:2a:8f:15:35:c4: c5:1c:2a:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3mhDGdS7F4jpzBEc0QZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNTNkNTJhNDAyNDkxZjRmOTlmZTU0NzFiZGQxYTVkZDZm NDJiYmMwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD Eyg5ZGZkZDI0MjNiN2YyOTcyNGI1ZjA2Mzk0MDU0N2RiZDg3MGNkNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Mpfn0OrPY1ydyBnAMjzSJVkycD 7tlH648EgpJ+cc43hu9e7CrpCL6XPwrC4r9fZBzMko5iG6nMusS1SDtNH9hu0db7 1yXlyX4SgI2Zyewv4gPfhYLzDeGNY4ELNUX8/wAf2/0Dqylry1iGxPODl8zHLy/7 WWdwHAR2LcwIo3q1VyykxZNAozMEHLXPZxA5oBy5ctAdRKEa4eqLcQVTQTyJz5Qi pLvTp1Uo0oozExbTI8W5b8GNo2EfjSO6dzhKwvxbZVAVntZdd8PJtVQp/Xkq72GD h2iTVsL7EC/1EGx/ryWAwX/uAclQDRRoaK8f+Gwl4IAJukuq7v6GaQKgSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ390kI7fylyS18GOUBUfb2HDNZuMB8GA1UdIwQY MBaAFCNT1SpAJJH0+Z/lRxvdGl3W9Cu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTFQVktrQWtrZlQ1bi1WSEc5MGFYZGIwSzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZjFhZjYtZGQxYi00MTE3LWFjMTct ZGVhYjg1ODZmMmNlLzEvSTFQVktrQWtrZlQ1bi1WSEc5MGFYZGIwSzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xZjFhZjYtZGQxYi00MTE3LWFjMTctZGVhYjg1ODZmMmNl LzEvSTFQVktrQWtrZlQ1bi1WSEc5MGFYZGIwSzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvoWIiL8 bU8RdAV8fN4c8uQYGEmQ03LWHgCCMwDBHmwittA3wKcpqmY75WjjAIe+zGERQ+at bhl7g1HlWMzqUm8hjzG47JK5p9lH/dFQb3XOIjbo8BJu1q45yMCj8wCfKN023nhA bP4MMsj7lJpgLjSSaOoXiGl5g7c/GnUVO2addDKhStFGheuOgZit/MEie1smkt6f CVzMdhZmw/jIx0nmdBoe3NS3vtWu3FFXi4caCOvxkSq4hJIGHdkoI7mfL/JVAWU2 QEVPZPS/RqvUxUf91rizQL07+eQda2XPDNxHGy7L/44iq6bP2j/f7aN/T+PT9izW mSqPFTXExRwqWg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:29 2025 by rpki-client