This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json) Hash identifier: yotkbA5C4RzqCLEIvNmIOt/mFg7RmmGLMB7w/5GeDKc= Subject key identifier: 43:0B:03:EF:DA:E3:0F:52:AF:C1:3E:9C:92:0C:E7:B8:DD:76:1E:FB Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5 Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5 Certificate serial: 019AF2768BDF76B0B76DA8E96C8938565727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft Manifest number: 0866 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: 1YyDa3PmsBIBgZD9Bq1mMAkBJlX1w9X3ZgW3GoeyQOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8b:df:76:b0:b7:6d:a8:e9:6c:89:38:56:57:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=430b03efdae30f52afc13e9c920ce7b8dd761efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b2:54:9d:2b:92:66:5e:f8:7a:a6:a4:88:b8: 61:60:83:84:42:64:4e:dd:36:56:d4:36:88:0e:6e: 06:6c:3e:0b:41:71:3b:ed:fd:c2:b9:a4:6e:ed:61: 22:9a:8d:5a:13:1d:d8:50:44:c1:93:09:02:d1:ed: 5c:e9:c1:1b:e1:6b:eb:e2:1e:26:82:ed:a9:64:c9: b9:d6:90:b6:09:0c:ff:e8:3e:aa:52:b0:00:01:5f: fc:d9:62:1e:b8:eb:8d:c7:38:12:49:36:f2:22:ae: b5:f8:09:ff:cb:6e:96:46:fe:c2:c8:92:0f:3e:5e: e0:9f:e2:82:3b:0b:ca:11:aa:75:04:1d:6e:c2:5d: 61:33:74:43:18:43:d1:c7:e5:ff:0b:b1:fe:81:b8: 17:d5:fa:9f:36:e9:a9:98:d2:11:f0:70:cd:83:af: 08:22:4a:6f:d9:80:89:08:48:ae:07:e4:d1:ec:2e: 91:0b:2d:c9:23:5e:ea:18:c6:30:6e:c1:88:e9:87: d7:21:f2:c4:ce:18:12:d8:b8:90:e8:99:6e:fe:cb: 34:6d:61:7a:d2:f4:75:42:a0:78:8f:17:77:46:33: c4:3c:9c:e3:7a:56:38:9d:e7:32:b5:d6:0d:65:94: 54:9d:07:9d:1c:7e:69:69:96:54:7a:f3:9b:2c:33: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:03:EF:DA:E3:0F:52:AF:C1:3E:9C:92:0C:E7:B8:DD:76:1E:FB X509v3 Authority Key Identifier: keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6e:0e:3e:7e:18:dd:d3:0a:52:9e:ef:80:99:60:98:52:68: 82:35:56:19:85:7d:59:82:2c:74:b3:b8:ca:c9:b8:5d:04:0e: 0b:af:ea:05:d1:67:a4:23:d9:82:b7:b0:dc:b7:6a:75:3a:99: d7:7a:23:07:15:99:ab:14:70:7f:30:4b:78:4b:7e:2e:42:5a: 75:b5:92:e0:71:de:4e:f3:d0:d6:7b:c1:39:98:bc:46:2d:32: 30:74:70:ce:ac:88:df:fc:34:4e:64:34:5e:0c:31:9f:e9:16: f6:2a:2a:dd:e5:1c:41:05:a8:17:19:8a:74:f9:b9:75:48:37: 5f:2a:6a:ff:6a:46:ea:39:a2:6b:ff:24:12:d0:cc:90:99:46: dc:6d:36:04:4e:e3:06:b1:4a:8c:af:f7:04:f3:ec:a0:df:ab: db:6f:bf:36:1e:3c:26:51:8a:8e:e6:36:11:12:13:a2:0b:18: 6d:3e:69:42:6c:e7:38:99:f0:fe:a8:42:4e:7c:f1:40:cc:b5: 95:f4:c0:28:15:7a:f9:a4:45:73:ee:c2:f8:c7:51:37:6a:65: 03:e5:74:41:1b:0d:55:0d:a5:c2:a2:cd:f9:15:05:9f:be:87: 25:55:6b:6d:47:62:93:6e:05:24:80:63:22:5d:0f:ab:23:1d: 6e:f0:7e:a1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrydovfdrC3bajpbIk4VlcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTRhZjE2ZTU4OWY5ODQ4ZmM2OTVkMDU3ZjgxYzE2N2U4 ZjYzZDUwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg0MzBiMDNlZmRhZTMwZjUyYWZjMTNlOWM5MjBjZTdiOGRkNzYxZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bJUnSuSZl74eqakiLhhYIOEQmRO 3TZW1DaIDm4GbD4LQXE77f3CuaRu7WEimo1aEx3YUETBkwkC0e1c6cEb4Wvr4h4m gu2pZMm51pC2CQz/6D6qUrAAAV/82WIeuOuNxzgSSTbyIq61+An/y26WRv7CyJIP Pl7gn+KCOwvKEap1BB1uwl1hM3RDGEPRx+X/C7H+gbgX1fqfNumpmNIR8HDNg68I Ikpv2YCJCEiuB+TR7C6RCy3JI17qGMYwbsGI6YfXIfLEzhgS2LiQ6Jlu/ss0bWF6 0vR1QqB4jxd3RjPEPJzjelY4necytdYNZZRUnQedHH5paZZUevObLDN8LwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEMLA+/a4w9Sr8E+nJIM57jddh77MB8GA1UdIwQY MBaAFPoUrxblifmEj8aV0Ff4HBZ+j2PVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oU3ZGdVdKLVlTUHhwWFFWX2djRm42UFk5VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNmY1MDJhLWZkNmYtNDI3OC05Y2U4 LWNhNTFlYmYzYjM1Zi8xLzEtaFN2RnVXSi1ZU1B4cFhRVl9nY0ZuNlBZOVUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg0LzZmNTAyYS1mZDZmLTQyNzgtOWNlOC1jYTUxZWJmM2Iz NWYvMS8xLWhTdkZ1V0otWVNQeHBYUVZfZ2NGbjZQWTlVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG4O Pn4Y3dMKUp7vgJlgmFJogjVWGYV9WYIsdLO4ysm4XQQOC6/qBdFnpCPZgrew3Ldq dTqZ13ojBxWZqxRwfzBLeEt+LkJadbWS4HHeTvPQ1nvBOZi8Ri0yMHRwzqyI3/w0 TmQ0Xgwxn+kW9ioq3eUcQQWoFxmKdPm5dUg3Xypq/2pG6jmia/8kEtDMkJlG3G02 BE7jBrFKjK/3BPPsoN+r22+/Nh48JlGKjuY2ERITogsYbT5pQmznOJnw/qhCTnzx QMy1lfTAKBV6+aRFc+7C+MdRN2plA+V0QRsNVQ2lwqLN+RUFn76HJVVrbUdik24F JIBjIl0PqyMdbvB+oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:39 2025 by rpki-client