This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json) Hash identifier: s8DevXvWJaFdO28vG0wiQ0vRLka7dIflF+9vjLhQLVw= Subject key identifier: DF:47:30:33:7C:51:17:E5:B4:6B:FE:06:7B:F0:97:87:96:25:6C:F2 Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99 Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199 Certificate serial: 019AF19AA5B1DD9B86C2850E98002835E1F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft Manifest number: 1333 Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=) 2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: 1nB70TiQJjb7QouwKL7xqaPBe6d/1aqa9IlGkp7QkTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a5:b1:dd:9b:86:c2:85:0e:98:00:28:35:e1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=df4730337c5117e5b46bfe067bf0978796256cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:02:2f:d2:ae:6e:48:e8:23:ca:53:a0:ec: 37:9b:b0:be:45:b2:d3:e3:bf:ba:06:f7:b0:34:bc: 07:79:74:43:52:77:01:e9:53:bf:7d:a9:b2:10:36: 09:7c:79:3c:6b:e5:1a:02:3c:9b:ce:fa:d7:22:01: b3:68:fd:12:57:ad:6f:61:cd:18:29:2b:f0:f4:73: ba:45:c2:ca:96:b5:f4:41:81:d2:80:c7:6b:5e:03: 51:d0:b7:94:3d:84:ab:91:93:77:c5:26:37:00:65: f7:27:2a:ad:6a:e4:da:a3:39:dd:cf:06:15:86:90: a1:35:7b:19:59:b6:36:9a:c5:0d:e9:a1:66:e7:9b: ec:f0:5e:1c:4f:bf:f1:b5:30:df:d4:e0:15:5a:5a: 99:26:9e:2c:10:f3:8e:93:e2:8e:56:62:9f:42:6e: 3a:b4:ed:fb:17:b5:eb:fd:6f:5d:a3:bd:8d:db:38: 9a:f8:0f:3a:ac:a5:97:7a:95:02:d8:d8:41:3b:a8: a9:c1:d8:7f:3a:f9:14:93:fb:98:b0:31:64:89:48: 02:e2:72:72:63:0a:9a:87:c4:bb:e6:6f:e4:34:a5: f7:2d:8a:eb:d6:33:44:ed:d8:d3:7b:d0:63:de:83: 8b:07:a5:c9:7e:76:82:61:98:93:7b:70:69:6c:55: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:47:30:33:7C:51:17:E5:B4:6B:FE:06:7B:F0:97:87:96:25:6C:F2 X509v3 Authority Key Identifier: keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a0:5b:b4:11:8e:3e:c3:a6:71:e1:8a:44:eb:8d:32:cb:8f: 5a:6f:99:62:be:3b:b2:f9:b7:c7:3b:f8:fe:10:69:5d:e8:5c: 9a:99:dc:fc:e8:f0:fd:3b:8a:00:ee:ec:ea:03:90:48:50:a7: c0:a4:6a:38:f8:e7:db:cd:5b:f9:03:47:6b:8b:e9:43:5b:70: 8c:2d:ed:f3:4d:6c:e9:8a:a5:40:e0:47:81:3f:de:50:d5:5c: 20:e5:67:38:e9:77:6c:c0:85:e2:0e:9a:e2:1a:8a:7c:9b:19: a7:5c:f5:20:aa:c2:37:9a:56:04:bc:6c:33:ba:c8:11:01:7f: 42:67:0a:6e:e1:7f:31:23:ac:13:9a:bc:04:de:0c:d0:41:07: 77:f9:cd:97:41:77:3d:fa:15:8a:f2:b6:48:75:e7:87:98:74: 10:1f:61:fe:33:88:fc:62:23:ac:2a:b8:28:ab:98:44:f8:55: e6:f5:b8:30:93:0d:eb:cc:a4:ee:45:03:8b:29:e0:b2:01:5c: 59:07:7d:9d:75:c5:a4:e3:07:fe:55:ce:2b:4c:12:5b:c1:cf: 45:6b:09:51:90:e0:ab:a5:ea:78:4e:ea:5a:2f:9a:f4:b9:04: 2d:e2:39:1c:e5:03:04:7e:58:dc:a1:d5:e7:d5:f4:e5:a0:07: d6:5e:c9:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqWx3ZuGwoUOmAAoNeH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj ZmMxOTkwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EyhkZjQ3MzAzMzdjNTExN2U1YjQ2YmZlMDY3YmYwOTc4Nzk2MjU2Y2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuekCL9KubkjoI8pToOw3m7C+RbLT 47+6BvewNLwHeXRDUncB6VO/famyEDYJfHk8a+UaAjybzvrXIgGzaP0SV61vYc0Y KSvw9HO6RcLKlrX0QYHSgMdrXgNR0LeUPYSrkZN3xSY3AGX3JyqtauTaozndzwYV hpChNXsZWbY2msUN6aFm55vs8F4cT7/xtTDf1OAVWlqZJp4sEPOOk+KOVmKfQm46 tO37F7Xr/W9do72N2zia+A86rKWXepUC2NhBO6ipwdh/OvkUk/uYsDFkiUgC4nJy Ywqah8S75m/kNKX3LYrr1jNE7djTe9Bj3oOLB6XJfnaCYZiTe3BpbFVKNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9HMDN8URfltGv+Bnvwl4eWJWzyMB8GA1UdIwQY MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0 LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaBbtBGO PsOmceGKROuNMsuPWm+ZYr47svm3xzv4/hBpXehcmpnc/Ojw/TuKAO7s6gOQSFCn wKRqOPjn281b+QNHa4vpQ1twjC3t801s6YqlQOBHgT/eUNVcIOVnOOl3bMCF4g6a 4hqKfJsZp1z1IKrCN5pWBLxsM7rIEQF/QmcKbuF/MSOsE5q8BN4M0EEHd/nNl0F3 PfoVivK2SHXnh5h0EB9h/jOI/GIjrCq4KKuYRPhV5vW4MJMN68yk7kUDiyngsgFc WQd9nXXFpOMH/lXOK0wSW8HPRWsJUZDgq6XqeE7qWi+a9LkELeI5HOUDBH5Y3KHV 59X05aAH1l7J8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:23 2025 by rpki-client