This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json) Hash identifier: NjNN079W9Vm1oTHeiGBD2sEwjt+o88lcr9uvNbtJD0U= Subject key identifier: 78:37:9E:3E:00:E8:4A:65:BD:CC:E1:A3:5A:52:6D:63:B3:B9:CB:9D Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56 Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956 Certificate serial: 019AF12DB1FCD9F2162FB9098E16244299A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft Manifest number: 0A90 Signing time: Sat 06 Dec 2025 01:01:34 +0000 Manifest this update: Sat 06 Dec 2025 01:01:34 +0000 Manifest next update: Sun 07 Dec 2025 01:01:34 +0000 Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: q+OVVUD1X2B3dwM9i8tsgpJYtztTQiL6twzjY7yo/x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b1:fc:d9:f2:16:2f:b9:09:8e:16:24:42:99:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956 Validity Not Before: Dec 6 01:01:34 2025 GMT Not After : Dec 7 01:01:34 2025 GMT Subject: CN=78379e3e00e84a65bdcce1a35a526d63b3b9cb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:0b:27:2a:1f:3d:f7:eb:71:9b:bf:9b:bd: 75:bb:2c:1c:1b:d0:73:2b:39:2f:d3:27:52:f6:47: ad:51:21:ce:e0:d6:61:08:f4:70:f7:b5:77:d5:e1: 40:3b:20:91:c7:82:58:05:db:b7:8f:3b:95:f3:2f: 9f:95:4f:01:89:09:88:cc:d5:35:a6:60:4e:d9:e5: fc:bb:4b:90:50:f0:42:62:05:35:96:eb:e8:a8:e9: 18:57:26:e6:df:b1:03:e6:cf:7c:8f:c3:d8:6d:51: 50:b7:91:eb:71:76:e9:e7:df:f5:67:d7:ed:13:15: 01:ff:cc:cc:32:5a:dd:53:71:4b:1c:e7:2d:6c:e8: a4:2b:b2:c1:0c:9c:95:9d:b9:26:1b:f0:02:4a:13: b8:cb:b6:c2:59:d1:57:c2:ed:e5:48:61:c7:1a:8f: 50:c8:f7:49:ea:a3:35:8d:27:5c:ad:db:c3:e3:37: 84:c0:cb:93:35:83:85:49:b4:ad:dc:de:0b:4e:95: 9c:58:37:21:9c:98:24:af:90:01:7e:aa:12:9c:26: 40:87:14:b7:23:ab:80:41:35:da:16:c6:25:db:ec: 5f:ff:3f:85:8f:b5:9e:88:89:62:a7:1d:29:56:dc: 43:fc:b5:3e:b4:4d:42:1f:c8:03:bf:70:f5:de:f4: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:37:9E:3E:00:E8:4A:65:BD:CC:E1:A3:5A:52:6D:63:B3:B9:CB:9D X509v3 Authority Key Identifier: keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:78:0f:ae:e0:cf:ff:c5:68:a3:89:10:c4:11:c0:28:48: 20:42:c0:60:af:74:4d:18:25:2b:cb:ea:ef:c7:3d:ab:8c:77: 68:bb:de:d4:82:a7:3f:ed:ea:ee:a2:97:0f:89:3c:92:03:b5: 7e:01:27:f5:99:1e:66:a0:1f:d1:10:a0:b9:db:71:c1:55:41: 53:e1:93:45:f5:06:45:f0:c1:67:34:dc:e7:fe:fb:99:b0:52: e8:94:cf:64:46:23:7c:d1:6b:bc:6b:c4:46:40:89:7f:62:af: 0f:2b:ca:ad:7e:3e:c4:36:b8:3a:6f:11:f6:e9:e5:91:16:67: ec:c4:46:84:91:34:3a:37:9c:dc:d9:cf:05:c1:a8:d6:bb:97: 49:26:56:a3:f8:a6:28:ba:66:10:bd:6f:a3:05:92:f3:f7:89: fd:9f:bd:a4:78:79:87:0d:cb:03:a2:1e:00:2c:19:6b:64:25: 81:73:e1:43:f9:9d:b0:d2:bc:ac:c6:aa:c3:b7:58:1e:a7:a8: e5:34:5a:e3:31:31:e1:dc:1e:a0:b9:0e:cc:bd:f2:48:69:f8: 09:76:fd:36:f6:ca:49:bf:53:9c:c5:18:8a:a1:ad:31:5e:e0: d8:12:11:85:38:c9:65:a5:f2:f7:a8:29:8d:3c:f2:1d:24:f1: 93:65:5e:35 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLbH82fIWL7kJjhYkQpmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTZiNzliMDM5N2ViNDVlZTgyN2E0ZDYzZGNhNzQ3Njk1 NTI5NTYwHhcNMjUxMjA2MDEwMTM0WhcNMjUxMjA3MDEwMTM0WjAzMTEwLwYDVQQD Eyg3ODM3OWUzZTAwZTg0YTY1YmRjY2UxYTM1YTUyNmQ2M2IzYjljYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4oLJyofPffrcZu/m711uywcG9Bz Kzkv0ydS9ketUSHO4NZhCPRw97V31eFAOyCRx4JYBdu3jzuV8y+flU8BiQmIzNU1 pmBO2eX8u0uQUPBCYgU1luvoqOkYVybm37ED5s98j8PYbVFQt5HrcXbp59/1Z9ft ExUB/8zMMlrdU3FLHOctbOikK7LBDJyVnbkmG/ACShO4y7bCWdFXwu3lSGHHGo9Q yPdJ6qM1jSdcrdvD4zeEwMuTNYOFSbSt3N4LTpWcWDchnJgkr5ABfqoSnCZAhxS3 I6uAQTXaFsYl2+xf/z+Fj7WeiIlipx0pVtxD/LU+tE1CH8gDv3D13vR4IwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHg3nj4A6Eplvczho1pSbWOzucudMB8GA1UdIwQY MBaAFPimt5sDl+tF7oJ6TWPcp0dpVSlWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LYTNtd09YNjBYdWducE5ZOXluUjJsVktWWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvYjkzN2ZhLWVmNTUtNGU0NS04NGMw LTlmNTAyZGY0ZmY2NS8xLzEtS2EzbXdPWDYwWHVnbnBOWTl5blIybFZLVlkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk0L2I5MzdmYS1lZjU1LTRlNDUtODRjMC05ZjUwMmRmNGZm NjUvMS8xLUthM213T1g2MFh1Z25wTlk5eW5SMmxWS1ZZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTJ4 D67gz//FaKOJEMQRwChIIELAYK90TRglK8vq78c9q4x3aLve1IKnP+3q7qKXD4k8 kgO1fgEn9ZkeZqAf0RCgudtxwVVBU+GTRfUGRfDBZzTc5/77mbBS6JTPZEYjfNFr vGvERkCJf2KvDyvKrX4+xDa4Om8R9unlkRZn7MRGhJE0Ojec3NnPBcGo1ruXSSZW o/imKLpmEL1vowWS8/eJ/Z+9pHh5hw3LA6IeACwZa2QlgXPhQ/mdsNK8rMaqw7dY Hqeo5TRa4zEx4dweoLkOzL3ySGn4CXb9NvbKSb9TnMUYiqGtMV7g2BIRhTjJZaXy 96gpjTzyHSTxk2VeNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:45 2025 by rpki-client