This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json) Hash identifier: Kbm94O3Wi/eQbFPEJoA0NY9ZnAXXkmp/hkmu3oVouas= Subject key identifier: FE:21:D1:09:7D:14:72:1D:E8:08:84:07:E7:5D:89:DE:79:A0:32:FB Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c Certificate serial: 019AF19BB4D1ACE511D4C387E0B0984CC4A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft Manifest number: 0138 Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: TjJMrEDtQgGMB+jXyulQSmGcWNxtvMzMT5CvddOsIa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b4:d1:ac:e5:11:d4:c3:87:e0:b0:98:4c:c4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=fe21d1097d14721de8088407e75d89de79a032fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:bd:07:aa:b7:89:d2:2b:81:77:15:88:74: 47:37:62:16:43:1e:26:b9:0a:df:0a:05:65:83:38: ed:20:1c:6b:9d:0a:27:20:a9:ce:6a:cf:64:c3:cf: 45:df:4e:43:36:d6:79:fd:28:49:5c:42:25:ea:17: f8:d9:c5:19:dc:54:c2:b0:48:27:9e:5c:c1:4a:8e: 40:ab:47:c9:25:d1:6e:5a:87:2e:b9:93:02:8c:78: f9:ff:b1:c7:fb:81:96:73:fe:41:ce:2e:6b:a4:8b: 53:07:b6:a5:b1:3c:11:0f:c9:75:7f:f3:5c:a2:32: 54:9d:5d:5a:b2:fc:5a:cc:0a:fa:26:fb:a4:f9:2a: 1d:1e:a9:03:49:5a:a7:94:1f:6f:fa:9a:80:10:1b: 5f:27:f3:28:b8:40:0c:f4:70:22:51:32:1e:7b:75: 65:16:37:59:d5:dc:6e:b5:c7:e4:fa:27:fa:2b:5a: d7:54:2a:e9:56:35:66:2e:3b:3e:1f:f1:a7:1b:e4: 84:d7:af:23:a6:80:43:12:eb:97:6b:f4:4f:42:14: 8b:35:8f:cd:7f:a7:70:f3:71:d4:e6:18:ef:35:bb: 59:1e:43:d0:90:54:77:4a:76:3f:53:c4:42:4f:21: 20:64:1d:16:53:36:a6:9e:48:13:ff:27:9f:db:56: f1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:D1:09:7D:14:72:1D:E8:08:84:07:E7:5D:89:DE:79:A0:32:FB X509v3 Authority Key Identifier: keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e2:46:1e:fd:80:ac:70:11:0d:45:34:4a:24:49:65:10:4e: 27:94:d0:42:b8:29:65:18:89:4b:49:5b:ff:0a:4a:2a:17:17: 07:d8:d0:3a:06:74:bd:ac:46:2e:7f:3e:cc:2c:34:f5:54:bd: 66:d5:b5:f3:e6:c2:fc:b0:7d:6a:89:ee:b6:33:45:b9:b7:42: c6:70:5c:1e:ae:de:97:77:0b:1f:69:95:81:50:03:e4:69:79: 61:57:62:2e:64:ba:57:0b:1c:5e:be:5d:68:20:69:20:5e:1e: 8b:b7:bf:4c:ff:7d:14:42:cb:c0:c5:80:ef:ad:95:ab:76:f7: b3:4b:ef:02:6b:23:c9:e9:44:9b:5a:d5:7e:73:d9:4d:b9:92: 2b:e3:6d:d4:49:8b:39:aa:51:d3:16:a0:04:ba:a2:6f:13:9a: d8:32:74:70:65:33:24:a5:f1:f4:7d:d8:e0:6a:f2:4b:a6:ea: d4:42:04:33:c8:50:e3:a1:b7:c4:74:30:26:b1:bf:1d:c2:5f: 8c:4e:3c:fd:1b:a4:f5:69:97:93:20:ca:32:c9:07:f5:6f:b0: 84:f0:57:d9:e9:a3:ff:13:54:45:61:9a:d8:5a:97:2c:31:2b: a6:9f:da:fa:7b:8d:e5:5d:c3:81:d1:9c:f9:73:57:21:31:ae: de:b9:c7:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7TRrOUR1MOH4LCYTMSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYmQ0NmU4NjJkZTAzMTkxZmYzMTMxYWNjNzhlMTk3MDk1 OTZhMWMwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD EyhmZTIxZDEwOTdkMTQ3MjFkZTgwODg0MDdlNzVkODlkZTc5YTAzMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt69B6q3idIrgXcViHRHN2IWQx4m uQrfCgVlgzjtIBxrnQonIKnOas9kw89F305DNtZ5/ShJXEIl6hf42cUZ3FTCsEgn nlzBSo5Aq0fJJdFuWocuuZMCjHj5/7HH+4GWc/5Bzi5rpItTB7alsTwRD8l1f/Nc ojJUnV1asvxazAr6Jvuk+SodHqkDSVqnlB9v+pqAEBtfJ/MouEAM9HAiUTIee3Vl FjdZ1dxutcfk+if6K1rXVCrpVjVmLjs+H/GnG+SE168jpoBDEuuXa/RPQhSLNY/N f6dw83HU5hjvNbtZHkPQkFR3SnY/U8RCTyEgZB0WUzamnkgT/yef21bxsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4h0Ql9FHId6AiEB+ddid55oDL7MB8GA1UdIwQY MBaAFLq9Ruhi3gMZH/MTGsx44ZcJWWocMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZjVlNjYtZWNjYy00MzdjLTg5ZjUt MjZmYTZhZWU4ZmU1LzEvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8zZjVlNjYtZWNjYy00MzdjLTg5ZjUtMjZmYTZhZWU4ZmU1 LzEvdXIxRzZHTGVBeGtmOHhNYXpIamhsd2xaYWh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOJGHv2A rHARDUU0SiRJZRBOJ5TQQrgpZRiJS0lb/wpKKhcXB9jQOgZ0vaxGLn8+zCw09VS9 ZtW18+bC/LB9aonutjNFubdCxnBcHq7el3cLH2mVgVAD5Gl5YVdiLmS6VwscXr5d aCBpIF4ei7e/TP99FELLwMWA762Vq3b3s0vvAmsjyelEm1rVfnPZTbmSK+Nt1EmL OapR0xagBLqibxOa2DJ0cGUzJKXx9H3Y4GryS6bq1EIEM8hQ46G3xHQwJrG/HcJf jE48/Ruk9WmXkyDKMskH9W+whPBX2emj/xNURWGa2FqXLDErpp/a+nuN5V3DgdGc +XNXITGu3rnHtg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:21 2025 by rpki-client