This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json) Hash identifier: 6HlMR2xCPLOlAwofv+fuEIye3BhkFKUq4Bhhrm5mXoA= Subject key identifier: A6:93:99:6D:C2:AC:C7:2A:60:55:AF:96:2A:47:B5:FA:7C:CE:53:6C Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f Certificate serial: 019AF1D207839B4A26A08EE71AABF82DE369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft Manifest number: 0A12 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: GcGX/kx0qUiODq1s1h2VdVSWTT+scBYQJq7pvUAMN18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:07:83:9b:4a:26:a0:8e:e7:1a:ab:f8:2d:e3:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=a693996dc2acc72a6055af962a47b5fa7cce536c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:6b:72:a4:84:1e:b8:b0:4e:e0:9e:a4:21: 90:4a:7f:12:ee:bd:15:63:d6:c7:37:44:59:09:7b: 02:32:b8:90:c9:c1:06:8a:f9:54:33:ca:ce:32:b8: 4b:ea:88:4b:a4:41:82:41:09:c1:a2:be:0f:7a:ab: 99:c0:0f:59:4f:58:6f:b9:2f:3d:9c:8a:c2:6c:48: b5:60:56:44:37:52:e8:69:3c:62:9f:69:d1:3f:d0: 50:92:fa:9d:89:95:67:02:80:39:39:65:cf:cb:fc: 13:bf:f1:3f:8d:7f:7f:eb:85:ff:24:3d:08:75:1d: 99:17:bd:31:18:d4:da:63:2b:bc:b8:b4:cf:4d:bb: aa:bc:fd:10:66:f5:90:3e:70:53:52:46:58:d6:a5: 02:b0:87:39:6b:d9:1e:f6:34:5e:59:e4:91:ae:43: 26:b5:a1:46:bd:df:e4:2c:c7:6a:d6:ab:d8:d1:98: db:ff:5d:41:a1:0f:2c:95:b2:bb:30:ef:e1:7f:53: b6:53:e5:11:65:43:3c:1c:69:3d:e7:8a:cf:07:af: 5d:7a:e5:ae:eb:1d:70:54:50:41:a7:1a:98:27:3a: bf:50:dd:4d:7b:95:b8:b0:05:69:af:31:5f:87:4d: ee:96:d6:45:ad:22:51:a3:36:c0:22:6e:16:ed:c0: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:93:99:6D:C2:AC:C7:2A:60:55:AF:96:2A:47:B5:FA:7C:CE:53:6C X509v3 Authority Key Identifier: keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7e:82:9d:19:64:1f:42:ae:4c:c7:4c:21:8f:81:61:69:7c: c8:30:ba:64:82:73:fb:0c:12:0f:f2:b5:cf:b7:1a:b7:a8:b7: af:5a:cf:23:10:67:2c:f2:7d:ba:bc:68:23:fb:15:6e:aa:63: 7e:5e:86:50:fb:a8:f6:71:3d:2f:51:2e:99:37:a3:58:4e:83: a5:76:83:30:88:ef:a2:8e:70:20:37:e7:b0:0b:8e:dc:96:7e: d7:75:dd:b6:6f:5a:84:18:63:44:5a:7e:66:89:47:1d:02:f4: 1c:91:0e:60:90:3e:7d:97:1c:61:fd:38:8a:3b:d5:18:7c:ad: f7:ec:fa:4d:4f:15:46:6d:8c:9a:92:84:52:61:f8:19:bb:06: 76:59:5b:45:0f:5d:59:4c:a8:5e:25:88:57:1e:06:98:82:4c: 6f:11:40:0a:15:65:d9:1d:66:3d:b5:dd:bd:ae:f6:85:ef:89: a3:ef:8e:6e:e7:c3:6c:d6:28:c8:47:86:9d:f7:05:c6:3b:b5: 86:b8:25:bc:d2:e5:12:10:94:d3:13:47:fb:26:c6:d9:c1:5e: 35:59:26:e3:db:1a:ce:61:ba:91:f7:2c:e4:88:a5:04:74:f2: 49:34:7e:dc:e8:9b:eb:4d:80:a7:11:81:1f:6b:af:98:ba:3e: 20:03:34:9a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0geDm0omoI7nGqv4LeNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWU4ODIyNzZmODBlNjc1MDQ5MGVlZjAwNmRlOTQzZGFj YjZlMGYwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EyhhNjkzOTk2ZGMyYWNjNzJhNjA1NWFmOTYyYTQ3YjVmYTdjY2U1MzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqNrcqSEHriwTuCepCGQSn8S7r0V Y9bHN0RZCXsCMriQycEGivlUM8rOMrhL6ohLpEGCQQnBor4PequZwA9ZT1hvuS89 nIrCbEi1YFZEN1LoaTxin2nRP9BQkvqdiZVnAoA5OWXPy/wTv/E/jX9/64X/JD0I dR2ZF70xGNTaYyu8uLTPTbuqvP0QZvWQPnBTUkZY1qUCsIc5a9ke9jReWeSRrkMm taFGvd/kLMdq1qvY0Zjb/11BoQ8slbK7MO/hf1O2U+URZUM8HGk954rPB69deuWu 6x1wVFBBpxqYJzq/UN1Ne5W4sAVprzFfh03ultZFrSJRozbAIm4W7cAFtwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKaTmW3CrMcqYFWvlipHtfp8zlNsMB8GA1UdIwQY MBaAFPieiCJ2+A5nUEkO7wBt6UPay24PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KNklJbmI0RG1kUVNRN3ZBRzNwUTlyTGJnOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNjVlOTczLWI0MWItNDEwMy1hYTU2 LWZjY2NlYTY4MWI3YS8xLzEtSjZJSW5iNERtZFFTUTd2QUczcFE5ckxiZzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk5LzY1ZTk3My1iNDFiLTQxMDMtYWE1Ni1mY2NjZWE2ODFi N2EvMS8xLUo2SUluYjREbWRRU1E3dkFHM3BROXJMYmc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZX6C nRlkH0KuTMdMIY+BYWl8yDC6ZIJz+wwSD/K1z7cat6i3r1rPIxBnLPJ9urxoI/sV bqpjfl6GUPuo9nE9L1EumTejWE6DpXaDMIjvoo5wIDfnsAuO3JZ+13Xdtm9ahBhj RFp+ZolHHQL0HJEOYJA+fZccYf04ijvVGHyt9+z6TU8VRm2MmpKEUmH4GbsGdllb RQ9dWUyoXiWIVx4GmIJMbxFAChVl2R1mPbXdva72he+Jo++ObufDbNYoyEeGnfcF xju1hrglvNLlEhCU0xNH+ybG2cFeNVkm49sazmG6kfcs5IilBHTySTR+3Oib602A pxGBH2uvmLo+IAM0mg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:01:07 2025 by rpki-client