This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json) Hash identifier: cM2PpdwQ5/H9m5KmtaLtJb4/9fx0kjJRmWaRcjz+MG4= Subject key identifier: E9:47:ED:99:C4:7E:33:37:C0:1A:E3:B7:E8:F1:E8:76:A2:D3:32:8D Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d Certificate serial: 019AF31B380DB14A3C28901F6729AF78859B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: gOWV3fyLby+Ua9gdn8EiuP10Afd+oneyNdu4yemTyWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:38:0d:b1:4a:3c:28:90:1f:67:29:af:78:85:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=e947ed99c47e3337c01ae3b7e8f1e876a2d3328d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:25:ef:34:2c:f5:87:89:03:f4:9b:2c:b8: eb:c4:81:1b:aa:1c:ac:96:3c:13:15:6a:1a:39:f9: 59:49:36:a1:b8:33:e7:4c:7d:c9:6f:b9:03:82:45: 36:f4:d6:18:16:76:c2:0c:9d:e8:1f:db:c8:90:bd: e0:58:9c:df:9b:46:b9:5e:25:9d:9a:69:a9:fd:30: 2f:94:85:fa:93:20:dd:c3:e5:b5:71:b1:13:84:b8: 06:c4:bc:f9:de:ce:4a:9f:ac:7d:65:c9:a0:85:87: e4:31:e7:9f:a9:32:2d:b1:37:54:e6:4e:d6:f4:12: 67:e0:83:77:23:2d:da:7b:fb:2c:4e:21:24:b8:72: 01:8f:ba:a4:7a:52:06:f1:18:af:11:40:b7:8a:04: 39:4e:73:61:05:70:08:fc:09:22:30:d3:ec:67:c7: 22:96:6b:a0:f6:e4:d4:bc:88:bb:76:fc:01:80:4b: 75:3c:52:ac:44:55:ad:0c:49:17:07:48:ac:78:82: 54:01:4b:c2:0b:8d:42:78:0e:19:28:b1:67:98:44: 5c:d6:f3:b1:40:e6:63:3b:69:03:fc:d1:f8:f4:a0: 28:d2:8a:c7:c1:7b:55:83:1f:07:08:4b:09:63:cf: d2:0f:be:91:77:de:01:3f:94:66:8b:d1:e1:3c:33: f9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:47:ED:99:C4:7E:33:37:C0:1A:E3:B7:E8:F1:E8:76:A2:D3:32:8D X509v3 Authority Key Identifier: keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:1c:7b:9b:3d:4b:98:b4:f1:2f:5f:bb:40:e3:a1:21:52:f1: 79:3e:83:ce:84:8b:08:54:b8:f0:7e:33:fe:61:fa:cb:27:9c: d4:c8:d4:0a:38:58:54:1b:8e:f4:f7:a4:01:a1:41:83:b9:7a: 22:01:0f:fe:e1:aa:eb:54:23:1f:5f:b8:35:ee:1e:a9:46:ab: 36:58:e1:b5:78:50:84:21:74:41:9e:45:3b:43:85:53:6e:b0: 64:36:6b:ff:36:73:70:67:67:60:7a:f5:35:e1:a6:ff:5a:4f: c9:26:4c:ba:f6:4e:24:5e:e5:15:0f:f4:2a:5b:09:94:59:0c: 34:05:b9:b4:b6:a5:04:ec:d1:6a:1c:10:be:63:65:e0:5a:8c: b3:41:9d:57:1e:75:76:ee:6f:25:14:a3:69:51:e7:4c:ad:c6: dc:1c:9a:85:39:b5:cb:48:6f:bd:ea:72:03:6b:f4:43:5c:db: 80:0d:b7:0a:99:f9:78:31:5d:cb:a0:2b:f1:19:e3:87:72:9c: 4f:f8:9f:8e:55:d4:58:ee:48:0e:b6:33:15:6b:cd:23:d2:8d: 7d:d9:08:3d:1b:d2:c0:bc:75:bc:ea:23:2a:64:48:a7:b8:84: 2b:27:47:bb:a2:a0:f1:a1:10:58:91:e4:bd:e5:d4:3a:de:ad: 94:8c:0c:b0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzGzgNsUo8KJAfZymveIWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzEwNTkyNzk4OWVjNDFjMDg5MDNhZDhjZDU2YTg5ZGFl OGJlNWQwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EyhlOTQ3ZWQ5OWM0N2UzMzM3YzAxYWUzYjdlOGYxZTg3NmEyZDMzMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzcl7zQs9YeJA/SbLLjrxIEbqhys ljwTFWoaOflZSTahuDPnTH3Jb7kDgkU29NYYFnbCDJ3oH9vIkL3gWJzfm0a5XiWd mmmp/TAvlIX6kyDdw+W1cbEThLgGxLz53s5Kn6x9ZcmghYfkMeefqTItsTdU5k7W 9BJn4IN3Iy3ae/ssTiEkuHIBj7qkelIG8RivEUC3igQ5TnNhBXAI/AkiMNPsZ8ci lmug9uTUvIi7dvwBgEt1PFKsRFWtDEkXB0iseIJUAUvCC41CeA4ZKLFnmERc1vOx QOZjO2kD/NH49KAo0orHwXtVgx8HCEsJY8/SD76Rd94BP5Rmi9HhPDP5cwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOlH7ZnEfjM3wBrjt+jx6Hai0zKNMB8GA1UdIwQY MBaAFPnBBZJ5iexBwIkDrYzVaona6L5dMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jRUZrbm1KN0VIQWlRT3RqTlZxaWRyb3ZsMC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNWY2MmVmLTMyZWYtNDRmNy1iNDEy LTFiMTg2YjZmY2Y0MS8xLzEtY0VGa25tSjdFSEFpUU90ak5WcWlkcm92bDAubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY5LzVmNjJlZi0zMmVmLTQ0ZjctYjQxMi0xYjE4NmI2ZmNm NDEvMS8xLWNFRmtubUo3RUhBaVFPdGpOVnFpZHJvdmwwLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxx7 mz1LmLTxL1+7QOOhIVLxeT6DzoSLCFS48H4z/mH6yyec1MjUCjhYVBuO9PekAaFB g7l6IgEP/uGq61QjH1+4Ne4eqUarNljhtXhQhCF0QZ5FO0OFU26wZDZr/zZzcGdn YHr1NeGm/1pPySZMuvZOJF7lFQ/0KlsJlFkMNAW5tLalBOzRahwQvmNl4FqMs0Gd Vx51du5vJRSjaVHnTK3G3ByahTm1y0hvvepyA2v0Q1zbgA23Cpn5eDFdy6Ar8Rnj h3KcT/ifjlXUWO5IDrYzFWvNI9KNfdkIPRvSwLx1vOojKmRIp7iEKydHu6Kg8aEQ WJHkveXUOt6tlIwMsA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:50:11 2025 by rpki-client