This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft File: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json) Hash identifier: bzXO20WwRDatJVihuAaZbx+Q2UccUDBQOq5obofnnMc= Subject key identifier: 91:3E:8D:89:1F:97:EB:59:5F:E5:65:4F:1C:B0:F9:E4:3E:2C:F7:33 Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F Certificate issuer: /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f Certificate serial: 019AF12CB7F61C49D60277EA5CECB095AA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: wxDALKlzKRCdj+lM/STOIvE0SJ84c/PB7QQrf0TSC3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b7:f6:1c:49:d6:02:77:ea:5c:ec:b0:95:aa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=913e8d891f97eb595fe5654f1cb0f9e43e2cf733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:bb:e6:32:33:f1:30:7e:35:33:1a:99:e9: 16:e7:fa:25:e4:06:3e:f4:7b:ea:6f:5e:9d:93:73: 99:de:41:f3:3f:85:ee:f4:22:6c:39:66:60:e3:9f: 25:a2:5b:3c:f7:06:8a:1f:54:af:cb:49:f5:40:6b: 6d:3e:7e:a1:9f:a9:fe:54:9f:d7:48:f9:b2:e1:0e: c3:9e:82:7f:39:fb:ec:f2:a1:97:ff:ea:c0:fa:45: 87:0e:f9:65:b8:1f:42:37:67:b4:b9:5c:a0:83:18: 68:69:3e:f3:35:38:d5:d3:0f:3f:b1:a5:42:37:06: 6c:7a:5f:56:c9:ab:32:36:a8:25:dc:2f:1b:ee:24: 3c:ff:f5:aa:93:46:7a:6f:92:32:67:7c:03:66:25: 2c:c4:58:8d:09:83:eb:ac:23:49:6c:4f:73:f1:b1: dc:04:28:ab:c3:da:99:85:b7:46:b0:0d:a8:44:75: 9d:23:58:71:7f:98:4a:81:ed:53:f5:f1:ee:5f:01: de:c5:45:27:59:62:e8:19:56:2b:66:6b:9b:52:33: 18:e5:eb:9b:41:c8:b1:d3:f6:56:35:c5:69:8f:9a: 33:4b:1c:e1:65:b3:68:8c:d9:45:71:25:ac:3a:eb: a8:39:a9:6e:0b:a8:24:f3:75:d8:7d:26:6f:f1:ce: 75:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3E:8D:89:1F:97:EB:59:5F:E5:65:4F:1C:B0:F9:E4:3E:2C:F7:33 X509v3 Authority Key Identifier: keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:65:76:24:05:42:c8:d2:d1:1e:6c:d0:a1:09:10:03:4b:63: c6:19:bb:dd:31:9e:a5:6c:3c:d1:90:01:5f:64:74:a3:f6:0f: 1a:c1:11:e1:fd:45:c8:13:d2:aa:71:9c:9f:ed:d6:a2:cc:97: a9:9b:cd:94:5d:ef:16:25:46:5d:51:16:d2:63:2b:90:f0:d4: aa:56:c8:94:ff:99:56:da:62:78:c4:90:80:a7:cc:31:3e:46: 15:f6:a3:7a:73:ee:6e:da:79:33:f2:54:1c:eb:e9:a0:9b:8c: 43:5a:29:e9:9a:7d:7a:b5:4c:f5:01:14:0d:15:db:1c:62:ea: 1c:f2:a1:d2:6e:d2:f5:c7:f4:4f:06:35:2a:94:d6:6e:57:41: 9f:6a:13:d1:17:93:fe:1a:6b:09:43:b8:66:6c:2f:bb:92:ce: a7:8c:88:17:9e:c2:88:0d:4f:30:41:ca:5f:bc:13:40:04:4d: 5e:7b:1e:ba:ae:06:c7:5e:ac:bd:bf:4c:99:9f:43:3b:92:e7: b0:58:a9:c7:4c:9f:6a:54:d4:81:7a:b3:95:9c:b9:51:17:b9: e9:09:01:de:7c:fe:fd:de:65:bf:88:b4:92:a3:f5:a8:c2:84: c7:78:53:0b:45:e3:ec:65:34:8b:a3:22:35:58:ec:e1:c9:29: f0:65:a0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLf2HEnWAnfqXOywlaoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NTY3MWNkYzE0YTM3ZmJjYjlmMDE1MGNjZjkxOGRiMTVj MjMyNmYwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD Eyg5MTNlOGQ4OTFmOTdlYjU5NWZlNTY1NGYxY2IwZjllNDNlMmNmNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifS75jIz8TB+NTMamekW5/ol5AY+ 9Hvqb16dk3OZ3kHzP4Xu9CJsOWZg458lols89waKH1Svy0n1QGttPn6hn6n+VJ/X SPmy4Q7DnoJ/Ofvs8qGX/+rA+kWHDvlluB9CN2e0uVyggxhoaT7zNTjV0w8/saVC NwZsel9WyasyNqgl3C8b7iQ8//Wqk0Z6b5IyZ3wDZiUsxFiNCYPrrCNJbE9z8bHc BCirw9qZhbdGsA2oRHWdI1hxf5hKge1T9fHuXwHexUUnWWLoGVYrZmubUjMY5eub Qcix0/ZWNcVpj5ozSxzhZbNojNlFcSWsOuuoOaluC6gk83XYfSZv8c51NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE+jYkfl+tZX+VlTxyw+eQ+LPczMB8GA1UdIwQY MBaAFNdWcc3BSjf7y58BUMz5GNsVwjJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYmQ5ZTMtOGExZi00ZTA2LTk2NTMt N2Q0NjczYjdlMTg1LzEvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYmQ5ZTMtOGExZi00ZTA2LTk2NTMtN2Q0NjczYjdlMTg1 LzEvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWV2JAVC yNLRHmzQoQkQA0tjxhm73TGepWw80ZABX2R0o/YPGsER4f1FyBPSqnGcn+3WosyX qZvNlF3vFiVGXVEW0mMrkPDUqlbIlP+ZVtpieMSQgKfMMT5GFfajenPubtp5M/JU HOvpoJuMQ1op6Zp9erVM9QEUDRXbHGLqHPKh0m7S9cf0TwY1KpTWbldBn2oT0ReT /hprCUO4Zmwvu5LOp4yIF57CiA1PMEHKX7wTQARNXnseuq4Gx16svb9MmZ9DO5Ln sFipx0yfalTUgXqzlZy5URe56QkB3nz+/d5lv4i0kqP1qMKEx3hTC0Xj7GU0i6Mi NVjs4ckp8GWgvw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:01 2025 by rpki-client