This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json) Hash identifier: sHVOHIv53GNeMq1TL6LV2oKwsabuYNcNuhOrAosQEiI= Subject key identifier: 66:71:14:07:1D:89:95:F6:66:4C:8A:3E:36:87:49:F0:A4:80:32:23 Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54 Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654 Certificate serial: 019AF2765127EEE26396AA424B51E28E3445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft Manifest number: 0407 Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: KS9P8cRkIETEJXduWqoJdhQuZdrHsj1CdZGM/4PD5J4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:51:27:ee:e2:63:96:aa:42:4b:51:e2:8e:34:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=667114071d8995f6664c8a3e368749f0a4803223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:90:d0:cd:19:76:b6:6e:15:58:95:8d:4c: b9:0e:98:0f:fc:7f:f9:06:ed:3a:dd:06:f5:35:1a: f4:6d:09:8b:48:c8:29:34:08:9f:6a:d9:33:0f:7d: 72:a6:57:24:24:8f:27:a1:4a:8f:b1:1e:b2:ba:5a: 0a:35:f0:c6:21:09:b1:47:b3:0f:38:c7:73:fb:88: a7:3a:bb:4a:f5:b6:d9:10:d4:e0:e0:1d:99:2f:33: 75:90:cf:a4:6a:36:97:13:8e:26:98:16:02:62:63: 2f:c6:42:de:32:45:a3:30:29:aa:3d:d2:83:b2:fc: 38:a3:41:fc:ff:c7:40:1d:a5:14:f7:d2:53:41:16: e9:50:14:11:fd:ee:2f:b4:d3:54:59:8e:e0:be:69: ff:51:66:cb:53:d3:ed:35:18:03:84:79:e4:49:16: b8:32:8f:2c:d4:99:99:6e:ae:21:a1:95:cb:c3:04: 21:c5:f9:37:27:ff:21:df:eb:60:5e:78:9a:87:f9: 9f:eb:9d:4a:7c:eb:76:6f:82:3b:2e:f2:e4:fc:57: 65:28:2a:f1:aa:17:eb:9d:96:bb:64:94:5e:bb:35: ad:c8:18:bf:60:40:3e:9b:28:e5:0a:d4:33:25:88: 03:c0:ac:57:70:83:1e:2c:d8:a7:f8:65:d4:3b:25: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:71:14:07:1D:89:95:F6:66:4C:8A:3E:36:87:49:F0:A4:80:32:23 X509v3 Authority Key Identifier: keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c2:1e:b4:e9:02:f9:89:10:6f:60:ec:55:2c:ba:82:bb:7a: 33:a9:db:c5:5e:03:3f:cb:3f:ec:61:3e:5b:d7:53:bb:00:0b: fa:38:60:b2:30:03:6a:bd:1d:06:59:3c:75:2c:de:4d:0f:95: 51:12:fe:da:ad:07:80:ff:20:e9:e1:1e:c3:38:fb:51:22:97: 38:82:07:ba:44:d6:bf:be:ab:e1:e1:a1:93:c0:1d:da:03:85: 15:cb:7d:e0:c9:a4:29:69:0a:d0:27:8e:16:78:50:7f:3f:52: f6:11:f8:a2:de:3c:23:04:de:91:4a:47:b3:24:16:ce:58:26: 02:66:01:70:5f:b8:86:fb:80:70:7a:25:d8:3d:77:0c:38:4b: f7:91:5d:c7:2a:70:75:2e:49:f9:9d:c8:29:12:36:20:6b:c1: 6b:4e:c7:10:9f:f5:02:cb:ed:70:be:51:08:c5:bb:57:12:4e: 5f:60:4d:29:15:b1:ee:74:1e:93:94:1e:e5:93:06:7e:a5:95: ba:68:97:ab:d7:cc:fd:0a:93:d0:73:42:5d:ea:53:a3:b7:ee: 24:b7:c7:07:88:6b:85:47:c5:01:c6:e2:b9:10:24:dc:4b:83: aa:bd:3e:e5:8b:ae:51:3e:f1:d2:9b:75:ae:8f:a3:3d:3c:09: 0a:4c:6f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlEn7uJjlqpCS1HijjRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTQyZGFkMGJhZWRlNGE4YjExNTBmNDU5YTAzZjAxMWNk YmE2NTQwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD Eyg2NjcxMTQwNzFkODk5NWY2NjY0YzhhM2UzNjg3NDlmMGE0ODAzMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3qQ0M0ZdrZuFViVjUy5DpgP/H/5 Bu063Qb1NRr0bQmLSMgpNAifatkzD31yplckJI8noUqPsR6yuloKNfDGIQmxR7MP OMdz+4inOrtK9bbZENTg4B2ZLzN1kM+kajaXE44mmBYCYmMvxkLeMkWjMCmqPdKD svw4o0H8/8dAHaUU99JTQRbpUBQR/e4vtNNUWY7gvmn/UWbLU9PtNRgDhHnkSRa4 Mo8s1JmZbq4hoZXLwwQhxfk3J/8h3+tgXniah/mf651KfOt2b4I7LvLk/FdlKCrx qhfrnZa7ZJReuzWtyBi/YEA+myjlCtQzJYgDwKxXcIMeLNin+GXUOyWZawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZxFAcdiZX2ZkyKPjaHSfCkgDIjMB8GA1UdIwQY MBaAFK9ULa0Lrt5KixFQ9FmgPwEc26ZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMt NmI1MDA4NGY0MjY0LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMtNmI1MDA4NGY0MjY0 LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsIetOkC +YkQb2DsVSy6grt6M6nbxV4DP8s/7GE+W9dTuwAL+jhgsjADar0dBlk8dSzeTQ+V URL+2q0HgP8g6eEewzj7USKXOIIHukTWv76r4eGhk8Ad2gOFFct94MmkKWkK0CeO FnhQfz9S9hH4ot48IwTekUpHsyQWzlgmAmYBcF+4hvuAcHol2D13DDhL95Fdxypw dS5J+Z3IKRI2IGvBa07HEJ/1AsvtcL5RCMW7VxJOX2BNKRWx7nQek5Qe5ZMGfqWV umiXq9fM/QqT0HNCXepTo7fuJLfHB4hrhUfFAcbiuRAk3EuDqr0+5YuuUT7x0pt1 ro+jPTwJCkxvCw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:23 2025 by rpki-client