This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json) Hash identifier: xPAo1vgqY6u2gMZ1IAI/8xygVkJ/nlH24RBnOJzzFaY= Subject key identifier: 20:E6:57:FC:68:2C:2B:4A:1C:ED:17:18:FB:A8:91:A3:89:D3:16:B5 Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0 Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0 Certificate serial: 019AF12DBC832EB43AE6C153AF77A8543EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:37 +0000 Manifest this update: Sat 06 Dec 2025 01:01:37 +0000 Manifest next update: Sun 07 Dec 2025 01:01:37 +0000 Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: 7LwzUV+wK7gebDuacoQIWxokZijvZJ4pGqVnYs/uFrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:bc:83:2e:b4:3a:e6:c1:53:af:77:a8:54:3e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0 Validity Not Before: Dec 6 01:01:37 2025 GMT Not After : Dec 7 01:01:37 2025 GMT Subject: CN=20e657fc682c2b4a1ced1718fba891a389d316b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:08:8a:5f:8f:35:4d:38:20:21:95:b9:2c: 2e:ac:2a:de:9f:16:5e:0e:70:a5:1a:13:87:4d:e8: 05:01:40:d4:11:9f:d9:4b:aa:d8:b6:5f:06:9f:4a: df:8c:53:fe:79:5a:a7:6b:da:3b:4a:87:58:1e:4e: 2b:30:ab:94:02:a7:c7:c3:b9:12:65:dd:09:54:a9: 71:46:51:da:ff:50:e0:66:c0:a4:3c:7f:3d:74:e8: bb:5d:c7:30:96:46:ac:1c:c6:7c:94:f6:ee:bd:10: fd:1c:7f:b4:01:69:5f:c0:fb:d4:bf:5f:9d:be:53: d0:e1:cf:f6:12:5c:0d:ec:d9:be:00:1f:d5:64:e4: 78:2a:a2:cf:02:88:07:15:50:3d:9d:15:fd:0d:b2: 00:ee:f7:44:21:92:ef:05:da:8a:9e:d5:8e:da:93: 46:71:97:0d:d1:ff:95:af:9d:e7:f0:29:44:71:57: 14:93:55:23:81:24:cd:36:52:00:b5:6b:fe:65:03: 4b:c4:58:f7:21:0a:92:67:3f:ac:4e:00:4d:37:95: f9:68:9c:1b:5b:f5:de:51:39:d8:b4:f2:95:d8:8a: c6:ab:54:ca:c3:db:6a:f1:eb:35:32:44:6d:a1:54: 1b:bd:67:17:e1:f5:26:db:ab:b3:eb:b0:29:1e:fc: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:57:FC:68:2C:2B:4A:1C:ED:17:18:FB:A8:91:A3:89:D3:16:B5 X509v3 Authority Key Identifier: keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:63:d8:b5:df:04:96:8f:bb:4f:ce:9c:c4:27:43:02:cf:1d: 9e:f8:67:b4:be:11:22:37:f2:37:92:5c:76:49:ce:6a:77:da: cd:82:7c:f3:47:85:b8:49:91:6e:87:5e:33:88:65:44:ba:af: 53:40:05:32:5c:90:25:7e:e2:c7:bc:37:9f:c3:cc:f6:cf:8f: 96:b0:99:8b:d6:ba:7c:10:d8:6a:49:be:c9:09:90:29:31:21: a1:a4:e9:4e:c2:8b:cd:95:69:64:3c:e3:38:ac:0e:88:ca:4c: ea:04:08:b0:3a:d6:3d:b2:6a:a0:71:ef:68:48:c0:a0:a2:74: c0:4f:f4:6c:d8:d9:6e:86:f7:b6:1e:71:eb:9e:91:54:fb:db: 07:34:76:bc:cf:91:69:fb:bc:8c:a7:c1:57:d6:cd:28:e8:95: d0:d1:a9:73:f1:6a:a7:a3:fc:8d:17:85:b0:ff:bb:cc:43:5c: ba:a4:c9:6d:69:aa:3a:a9:ff:d1:e5:10:70:9f:97:8f:bc:0d: 2f:d5:fd:1f:77:d8:61:20:ea:f0:46:ca:4e:23:78:9b:f8:2d: e9:cb:0d:05:ab:35:94:05:31:84:90:6e:2c:e8:41:d6:11:c6: c9:b8:49:98:59:81:98:81:fc:16:f9:85:a7:3a:94:86:c1:cd: 17:57:c1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbyDLrQ65sFTr3eoVD7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTA3NjIyZmQyNjA3MmUyYjk5MzZjYWYyNzU3MDQzNTAy MjZjYTAwHhcNMjUxMjA2MDEwMTM3WhcNMjUxMjA3MDEwMTM3WjAzMTEwLwYDVQQD EygyMGU2NTdmYzY4MmMyYjRhMWNlZDE3MThmYmE4OTFhMzg5ZDMxNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstIIil+PNU04ICGVuSwurCrenxZe DnClGhOHTegFAUDUEZ/ZS6rYtl8Gn0rfjFP+eVqna9o7SodYHk4rMKuUAqfHw7kS Zd0JVKlxRlHa/1DgZsCkPH89dOi7XccwlkasHMZ8lPbuvRD9HH+0AWlfwPvUv1+d vlPQ4c/2ElwN7Nm+AB/VZOR4KqLPAogHFVA9nRX9DbIA7vdEIZLvBdqKntWO2pNG cZcN0f+Vr53n8ClEcVcUk1UjgSTNNlIAtWv+ZQNLxFj3IQqSZz+sTgBNN5X5aJwb W/XeUTnYtPKV2IrGq1TKw9tq8es1MkRtoVQbvWcX4fUm26uz67ApHvwIQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDmV/xoLCtKHO0XGPuokaOJ0xa1MB8GA1UdIwQY MBaAFNYQdiL9JgcuK5k2yvJ1cENQImygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhCMkl2MG1CeTRybVRiSzhuVndRMUFpYktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYjgwNDYtYTkzZi00MzM1LWJkMmIt MmQ4YjY4ODlmZDljLzEvMWhCMkl2MG1CeTRybVRiSzhuVndRMUFpYktBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9hYjgwNDYtYTkzZi00MzM1LWJkMmItMmQ4YjY4ODlmZDlj LzEvMWhCMkl2MG1CeTRybVRiSzhuVndRMUFpYktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2PYtd8E lo+7T86cxCdDAs8dnvhntL4RIjfyN5JcdknOanfazYJ880eFuEmRbodeM4hlRLqv U0AFMlyQJX7ix7w3n8PM9s+PlrCZi9a6fBDYakm+yQmQKTEhoaTpTsKLzZVpZDzj OKwOiMpM6gQIsDrWPbJqoHHvaEjAoKJ0wE/0bNjZbob3th5x656RVPvbBzR2vM+R afu8jKfBV9bNKOiV0NGpc/Fqp6P8jReFsP+7zENcuqTJbWmqOqn/0eUQcJ+Xj7wN L9X9H3fYYSDq8EbKTiN4m/gt6csNBas1lAUxhJBuLOhB1hHGybhJmFmBmIH8FvmF pzqUhsHNF1fB0A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:56 2025 by rpki-client