This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json) Hash identifier: bxhED+IDrUh+eghjM0S8WUUgXhh83N1GYRNKD4PmzbU= Subject key identifier: B3:52:A7:86:A8:AA:E8:8C:F9:8C:53:20:2D:53:5F:30:B3:E4:B1:37 Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f Certificate serial: 019AF12EC1E9EE24828DB18F3EF8A7789D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft Manifest number: 1501 Signing time: Sat 06 Dec 2025 01:02:44 +0000 Manifest this update: Sat 06 Dec 2025 01:02:44 +0000 Manifest next update: Sun 07 Dec 2025 01:02:44 +0000 Files and hashes: 1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: tlsjAoOjBO89Q6pifE38dY60OZIBBZUXLA4ElmAVbb0=) 2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:c1:e9:ee:24:82:8d:b1:8f:3e:f8:a7:78:9d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f Validity Not Before: Dec 6 01:02:44 2025 GMT Not After : Dec 7 01:02:44 2025 GMT Subject: CN=b352a786a8aae88cf98c53202d535f30b3e4b137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f1:23:51:5f:48:2c:29:28:cd:ef:ba:92:11: 72:ce:c0:14:bd:12:47:e8:3b:05:9c:36:c3:c6:eb: 4c:87:ec:7c:d7:88:35:4e:89:98:59:40:b5:50:32: 07:10:d5:9c:c9:55:24:58:a2:84:37:b1:8a:d3:9b: 1c:4e:cd:1d:c4:24:8e:3b:ce:3a:63:72:0d:ad:c8: b7:4f:90:9a:ae:58:3d:75:c3:f9:65:2b:e0:45:4d: 65:19:ae:2b:13:3f:ac:29:05:50:7e:40:18:12:e9: 18:4d:9a:23:8e:1e:a9:ad:2b:b5:ec:67:46:73:81: 12:0d:2e:44:56:32:0c:63:94:96:8f:2a:78:06:04: c3:1f:12:a9:bd:d0:13:45:a7:f8:f4:29:16:11:64: 02:dc:b9:52:c9:2a:98:a7:59:14:03:7b:fa:99:90: 01:36:65:a1:e4:55:fb:36:06:0e:19:76:9c:3b:a8: 15:13:b0:8b:7c:e8:3c:c5:7a:03:0d:5b:6a:10:2e: d5:7e:c3:2c:d7:c3:f0:a7:8c:25:ff:29:8f:a2:82: 40:75:8d:d1:8a:5f:4d:d5:7b:48:5f:72:35:29:ac: 1d:a4:88:60:10:9b:24:f7:3b:b5:89:bc:fb:c6:87: 2e:be:65:c1:e5:fc:fb:cb:78:68:7e:05:13:6c:e3: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:52:A7:86:A8:AA:E8:8C:F9:8C:53:20:2D:53:5F:30:B3:E4:B1:37 X509v3 Authority Key Identifier: keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:14:bc:58:a1:13:2c:0d:ad:18:d9:26:4f:7a:7c:ca:3b:5c: d9:78:75:b5:42:63:d7:9f:30:fd:f1:2e:e5:09:eb:28:f8:16: 6e:57:06:f2:75:db:29:2e:d4:18:06:84:33:73:74:4b:2b:ee: 7d:3d:3b:ac:40:e4:8a:81:a7:3e:39:79:2e:64:18:5e:47:c0: b0:83:c4:2a:a4:c9:df:d7:b2:01:b1:4c:16:9a:04:6a:1a:0b: df:92:4d:33:5e:0a:17:9d:6d:3c:48:bd:f3:d9:60:8a:23:5c: d4:f0:54:6c:f4:07:0c:cf:b8:1b:04:2e:97:31:db:8c:8e:7e: 3f:44:34:7a:65:96:ce:43:46:60:38:51:37:18:3b:33:8c:c9: 27:cc:13:05:92:87:eb:30:d0:8b:0d:25:bd:d4:df:f8:9d:e3: 41:2b:c7:d6:6e:a2:7d:b7:2f:f1:b1:31:52:f5:40:81:4c:79: 7d:ad:c0:0b:73:32:0e:42:74:82:78:13:91:e3:d8:d6:90:5c: cd:e5:bb:e3:d0:0b:af:8c:04:a0:82:32:cd:7e:ca:47:72:de: 54:e9:52:5f:48:94:f1:fa:d9:24:a9:1f:15:3c:dc:9c:fd:e2: 4a:d5:4c:fc:a1:4c:89:7d:35:c7:b6:a4:66:3b:94:d6:96:bf: 62:44:87:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsHp7iSCjbGPPvineJ0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOGQ2ZTNkY2YyNThhZTI2YjBjZmE2ZmZkZWY0NjdjNTRi YjdkOWYwHhcNMjUxMjA2MDEwMjQ0WhcNMjUxMjA3MDEwMjQ0WjAzMTEwLwYDVQQD EyhiMzUyYTc4NmE4YWFlODhjZjk4YzUzMjAyZDUzNWYzMGIzZTRiMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPEjUV9ILCkoze+6khFyzsAUvRJH 6DsFnDbDxutMh+x814g1TomYWUC1UDIHENWcyVUkWKKEN7GK05scTs0dxCSOO846 Y3INrci3T5Carlg9dcP5ZSvgRU1lGa4rEz+sKQVQfkAYEukYTZojjh6prSu17GdG c4ESDS5EVjIMY5SWjyp4BgTDHxKpvdATRaf49CkWEWQC3LlSySqYp1kUA3v6mZAB NmWh5FX7NgYOGXacO6gVE7CLfOg8xXoDDVtqEC7VfsMs18Pwp4wl/ymPooJAdY3R il9N1XtIX3I1KawdpIhgEJsk9zu1ibz7xocuvmXB5fz7y3hofgUTbOOG+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNSp4aoquiM+YxTIC1TXzCz5LE3MB8GA1UdIwQY MBaAFJCNbj3PJYriawz6b/3vRnxUu32fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUt ZWQ2MTE0Yzc5ZGFlLzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUtZWQ2MTE0Yzc5ZGFl LzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBS8WKET LA2tGNkmT3p8yjtc2Xh1tUJj158w/fEu5QnrKPgWblcG8nXbKS7UGAaEM3N0Syvu fT07rEDkioGnPjl5LmQYXkfAsIPEKqTJ39eyAbFMFpoEahoL35JNM14KF51tPEi9 89lgiiNc1PBUbPQHDM+4GwQulzHbjI5+P0Q0emWWzkNGYDhRNxg7M4zJJ8wTBZKH 6zDQiw0lvdTf+J3jQSvH1m6ifbcv8bExUvVAgUx5fa3AC3MyDkJ0gngTkePY1pBc zeW749ALr4wEoIIyzX7KR3LeVOlSX0iU8frZJKkfFTzcnP3iStVM/KFMiX01x7ak ZjuU1pa/YkSHwA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:41 2025 by rpki-client