This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json) Hash identifier: fmlYC2IFUkr0EBVv24oscfmeAKjugMpDWeEsKt7fERA= Subject key identifier: C2:71:A2:ED:B2:26:4C:21:F3:F1:78:38:8A:21:2A:D6:45:5A:C5:68 Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Certificate serial: 019AF0BEF8A1EDC7774BE0B3775447556C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft Manifest number: 01BE Signing time: Fri 05 Dec 2025 23:00:38 +0000 Manifest this update: Fri 05 Dec 2025 23:00:38 +0000 Manifest next update: Sat 06 Dec 2025 23:00:38 +0000 Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: kAThToZOgadKa2mdjJoAwnyDvRkz6hQH0/ByDKCoruI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:f8:a1:ed:c7:77:4b:e0:b3:77:54:47:55:6c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f Validity Not Before: Dec 5 23:00:38 2025 GMT Not After : Dec 6 23:00:38 2025 GMT Subject: CN=c271a2edb2264c21f3f178388a212ad6455ac568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:84:57:1e:7a:3d:e2:e9:b4:38:23:c0:77: 34:16:00:a8:3f:bf:67:2e:d2:e1:34:d3:c1:ef:37: ee:a8:bf:2f:1f:01:a1:b5:7f:5e:90:f5:0e:1b:2c: 03:2e:f4:86:7f:45:47:1d:6d:0a:c8:93:40:c5:4e: f4:f6:c0:b0:ad:b1:1a:a0:e4:a0:f9:42:35:26:0b: 46:72:da:1a:e7:68:98:41:47:03:e2:a4:7b:dc:d9: 81:e7:7a:75:d8:8a:47:8b:bb:5b:4f:a9:e9:13:07: c3:42:c8:2d:c8:04:a0:27:cb:99:9f:ff:33:bc:15: 4b:af:44:fa:76:5d:9e:c6:9e:8a:0f:bb:50:fd:0d: be:cc:b9:2f:70:f1:36:81:8b:3b:cc:06:38:b2:d6: 24:f9:a1:93:d5:58:d5:f7:06:ff:f0:9e:7c:ed:4a: af:e3:4f:46:03:9f:0e:27:62:63:0e:bc:b8:c6:54: b3:1c:26:3e:67:3e:d4:66:06:72:dd:89:ca:41:50: 40:9c:84:88:69:e3:3e:ad:0a:4a:df:66:89:01:7c: 53:19:4c:05:2e:c7:bd:cc:99:81:3d:f7:82:87:07: 16:cd:b1:cb:2d:4f:31:78:c3:59:0f:84:04:ad:db: c2:b6:1d:a9:78:d6:91:85:6b:c9:71:55:af:cf:dc: 79:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:71:A2:ED:B2:26:4C:21:F3:F1:78:38:8A:21:2A:D6:45:5A:C5:68 X509v3 Authority Key Identifier: keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:75:3e:49:89:31:58:b7:85:93:2f:b4:4b:fb:4a:ec:6f:a5: 59:0d:fa:32:a0:a6:17:8c:5f:0e:24:79:2f:c9:cf:c6:9e:8e: 17:b2:21:ae:99:d9:7e:a5:fe:4e:2e:00:1c:c0:d8:c8:a2:d7: 94:cb:25:b7:b2:a0:5e:f5:89:29:36:53:8d:94:c7:19:c4:e1: 76:6c:c0:db:57:71:8d:64:a9:7d:5f:4a:4b:33:5e:aa:d8:a8: aa:9b:36:85:65:39:8f:85:c4:a3:be:fb:da:1c:51:59:ca:e1: db:8a:d1:73:b7:3c:ee:1b:0e:f3:73:58:8a:48:d3:a3:da:86: f4:6f:79:1f:2b:c4:3d:e7:f3:07:12:17:17:b5:7c:55:a3:31: ba:62:0b:2d:2b:5e:b8:18:a4:2c:92:36:95:df:9c:40:0e:c6: 94:f7:b3:39:ab:66:9a:11:df:4d:4d:39:f5:ab:63:ab:d4:c4: eb:fd:cd:7e:dc:25:46:12:fa:ab:73:a8:4b:b4:bd:56:87:ab: 23:64:7c:52:77:d4:5f:4f:40:2b:d2:2d:f2:d1:5c:5e:71:08: 61:94:25:f3:bc:fe:56:92:97:64:28:11:cc:82:52:d3:77:cf: 85:08:2c:c0:ae:25:fb:b9:43:4e:fb:42:58:13:d1:34:4f:7c: 84:67:e6:a3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwvvih7cd3S+Czd1RHVWxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTRiZTAxNGJmODM5NGU0Y2Q3Y2U2Yzg0YTRmYTg0ZjJl NTlmNWYwHhcNMjUxMjA1MjMwMDM4WhcNMjUxMjA2MjMwMDM4WjAzMTEwLwYDVQQD EyhjMjcxYTJlZGIyMjY0YzIxZjNmMTc4Mzg4YTIxMmFkNjQ1NWFjNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7KEVx56PeLptDgjwHc0FgCoP79n LtLhNNPB7zfuqL8vHwGhtX9ekPUOGywDLvSGf0VHHW0KyJNAxU709sCwrbEaoOSg +UI1JgtGctoa52iYQUcD4qR73NmB53p12IpHi7tbT6npEwfDQsgtyASgJ8uZn/8z vBVLr0T6dl2exp6KD7tQ/Q2+zLkvcPE2gYs7zAY4stYk+aGT1VjV9wb/8J587Uqv 409GA58OJ2JjDry4xlSzHCY+Zz7UZgZy3YnKQVBAnISIaeM+rQpK32aJAXxTGUwF Lse9zJmBPfeChwcWzbHLLU8xeMNZD4QErdvCth2peNaRhWvJcVWvz9x5HwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMJxou2yJkwh8/F4OIohKtZFWsVoMB8GA1UdIwQY MBaAFPnkvgFL+DlOTNfObISk+oTy5Z9fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lUy1BVXY0T1U1TTE4NXNoS1Q2aFBMbG4xOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvNGQ1ODlmLTJkNTAtNDI0Yy05YjQ5 LWFjMzZkODIwNDQzNi8xLzEtZVMtQVV2NE9VNU0xODVzaEtUNmhQTGxuMTgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzg2LzRkNTg5Zi0yZDUwLTQyNGMtOWI0OS1hYzM2ZDgyMDQ0 MzYvMS8xLWVTLUFVdjRPVTVNMTg1c2hLVDZoUExsbjE4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHU+ SYkxWLeFky+0S/tK7G+lWQ36MqCmF4xfDiR5L8nPxp6OF7IhrpnZfqX+Ti4AHMDY yKLXlMslt7KgXvWJKTZTjZTHGcThdmzA21dxjWSpfV9KSzNeqtioqps2hWU5j4XE o7772hxRWcrh24rRc7c87hsO83NYikjTo9qG9G95HyvEPefzBxIXF7V8VaMxumIL LSteuBikLJI2ld+cQA7GlPezOatmmhHfTU059atjq9TE6/3NftwlRhL6q3OoS7S9 VoerI2R8UnfUX09AK9It8tFcXnEIYZQl87z+VpKXZCgRzIJS03fPhQgswK4l+7lD TvtCWBPRNE98hGfmow== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:10 2025 by rpki-client