This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json) Hash identifier: 3DzFi8qfcY3TAScJZn8RvQ+UYqRqR+SFHyZ02e9oBZA= Subject key identifier: 16:FF:81:B9:EE:89:C0:23:37:29:CA:E2:EA:60:BF:3F:B6:38:3F:D6 Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9 Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9 Certificate serial: 019AF19B1FE708602C40E3AC0C05E8C8810F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft Manifest number: 111F Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: YsytI3wnCCaglxERVjefG6Yci1OIYD/0jhO8vmFkdbQ=) 2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1f:e7:08:60:2c:40:e3:ac:0c:05:e8:c8:81:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=16ff81b9ee89c0233729cae2ea60bf3fb6383fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:e7:9a:92:97:90:70:09:10:ee:d2:a8:e1: 0c:f7:c8:69:1e:ac:66:d4:e8:2b:45:2a:2d:1e:7d: 71:01:f4:c7:51:66:a2:63:cc:d6:e4:65:f9:eb:60: f7:ad:53:51:4d:65:3d:3d:50:65:8e:5b:74:39:fc: 98:c0:91:67:ae:3f:8d:49:39:a8:ea:21:c9:3d:e2: b1:ca:1e:93:95:2c:7d:79:b8:9a:1e:73:76:df:50: ff:0a:c1:f9:fc:f1:92:5f:6b:41:69:d6:27:2d:7b: a5:e4:8d:ce:46:f6:ea:63:55:66:6e:c2:70:55:56: e9:91:bf:ec:43:ad:35:97:ff:f6:24:ea:6b:53:8d: 0c:94:b0:6a:3c:c4:d5:49:c8:af:e7:e8:81:80:5b: 90:85:3e:21:3e:47:7f:ad:39:ae:76:58:80:e4:af: c1:86:b3:ee:32:a7:bd:71:34:f5:19:7b:9c:09:1a: 12:f3:be:d7:64:2d:2f:84:89:60:c8:aa:de:51:76: 0a:12:5c:2f:23:3b:75:49:40:2c:fa:c6:78:a9:d6: 94:e2:58:0d:f1:c0:ae:68:b3:b9:3a:f9:89:c1:62: 2e:06:8f:61:4a:dd:36:3c:77:96:0e:27:68:5d:56: 13:92:32:c6:15:fb:40:28:17:7a:21:b8:a5:ac:6b: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:81:B9:EE:89:C0:23:37:29:CA:E2:EA:60:BF:3F:B6:38:3F:D6 X509v3 Authority Key Identifier: keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d7:b1:54:ce:86:93:89:75:78:f8:c0:b1:04:df:77:a6:65: 91:13:07:71:b3:24:9e:32:0e:4f:4e:a3:8e:91:53:e0:5c:2c: 17:74:d9:89:39:10:32:32:97:00:42:82:14:f9:7f:1b:4d:2b: 14:af:d0:3b:33:0c:b0:4d:5e:f7:3b:a5:f1:7e:0a:02:7b:dc: 19:71:27:b9:ca:a3:d4:50:81:91:92:b3:03:52:63:e6:5a:b2: 00:5c:65:d6:d0:19:8e:50:d2:f1:ed:aa:eb:c6:eb:d1:cc:da: e8:82:1b:8d:65:97:c9:2a:78:86:56:30:ce:c8:df:59:53:35: 0c:d8:ab:6d:82:cc:c4:71:3b:f8:94:8e:7b:5a:81:15:8f:94: 0d:87:e8:1d:23:e0:35:65:64:1f:38:00:09:ae:5e:3c:9d:7b: f9:0e:10:81:1a:4c:97:84:df:5e:15:f3:1d:a4:cd:c3:32:1f: b3:16:65:81:f1:4d:c0:af:ba:86:d7:7d:3b:95:10:b7:c7:2b: a7:17:39:de:85:55:f9:87:3e:a2:2a:25:1a:a9:6d:d8:e3:2c: aa:7e:c4:4d:69:5c:44:97:5b:f0:ba:42:99:33:89:0a:d2:40: a0:14:5d:06:d5:83:77:66:31:1a:21:a2:05:32:ca:79:17:67: 84:7f:8c:91 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmx/nCGAsQOOsDAXoyIEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2JiM2I0YWI2ZmZmNTg4ZGRiNGNmMmFmZTZkNWFjNDY1 NTdiYjkwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EygxNmZmODFiOWVlODljMDIzMzcyOWNhZTJlYTYwYmYzZmI2MzgzZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyfnmpKXkHAJEO7SqOEM98hpHqxm 1OgrRSotHn1xAfTHUWaiY8zW5GX562D3rVNRTWU9PVBljlt0OfyYwJFnrj+NSTmo 6iHJPeKxyh6TlSx9ebiaHnN231D/CsH5/PGSX2tBadYnLXul5I3ORvbqY1VmbsJw VVbpkb/sQ601l//2JOprU40MlLBqPMTVSciv5+iBgFuQhT4hPkd/rTmudliA5K/B hrPuMqe9cTT1GXucCRoS877XZC0vhIlgyKreUXYKElwvIzt1SUAs+sZ4qdaU4lgN 8cCuaLO5OvmJwWIuBo9hSt02PHeWDidoXVYTkjLGFftAKBd6IbilrGsFUQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBb/gbnuicAjNynK4upgvz+2OD/WMB8GA1UdIwQY MBaAFPs7s7Srb/9YjdtM8q/m1axGVXu5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16dXp0S3R2XzFpTjIwenlyLWJWckVaVmU3ay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvNjhmYmFmLTQ1ZjEtNDk0Ni1hMzQ2 LTY4NmEwMTg4OGQyOS8xLzEtenV6dEt0dl8xaU4yMHp5ci1iVnJFWlZlN2subWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk2LzY4ZmJhZi00NWYxLTQ5NDYtYTM0Ni02ODZhMDE4ODhk MjkvMS8xLXp1enRLdHZfMWlOMjB6eXItYlZyRVpWZTdrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9ex VM6Gk4l1ePjAsQTfd6ZlkRMHcbMknjIOT06jjpFT4FwsF3TZiTkQMjKXAEKCFPl/ G00rFK/QOzMMsE1e9zul8X4KAnvcGXEnucqj1FCBkZKzA1Jj5lqyAFxl1tAZjlDS 8e2q68br0cza6IIbjWWXySp4hlYwzsjfWVM1DNirbYLMxHE7+JSOe1qBFY+UDYfo HSPgNWVkHzgACa5ePJ17+Q4QgRpMl4TfXhXzHaTNwzIfsxZlgfFNwK+6htd9O5UQ t8crpxc53oVV+Yc+oiolGqlt2OMsqn7ETWlcRJdb8LpCmTOJCtJAoBRdBtWDd2Yx GiGiBTLKeRdnhH+MkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:55 2025 by rpki-client