This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft File: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft (raw, json) Hash identifier: 2kiEfw6jjII68tEM6nrwJtSmxwWHU32Btt04+1iLdFg= Subject key identifier: 3E:65:BE:64:C7:1A:0A:18:B9:E7:0C:54:ED:85:B2:C1:31:96:84:2E Authority key identifier: F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C Certificate issuer: /CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c Certificate serial: 019AF577D685913AAA47D100A76C70278E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft Manifest number: 0835 Signing time: Sat 06 Dec 2025 21:01:02 +0000 Manifest this update: Sat 06 Dec 2025 21:01:02 +0000 Manifest next update: Sun 07 Dec 2025 21:01:02 +0000 Files and hashes: 1: 1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl (hash: u+fNjqUoIvDBpuztrLkYMvTKMY/7sQM9olNBI20YxSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d6:85:91:3a:aa:47:d1:00:a7:6c:70:27:8e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85cdd52cc9fa08acb2a9a1669a1361d5a81c43c Validity Not Before: Dec 6 21:01:02 2025 GMT Not After : Dec 7 21:01:02 2025 GMT Subject: CN=3e65be64c71a0a18b9e70c54ed85b2c13196842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:99:b6:96:97:9c:c2:7d:c5:6c:40:88:0c: 36:5f:07:8d:8d:f4:7e:61:9a:ba:04:c5:3a:71:01: 3a:b5:80:a3:0b:23:ee:d5:80:39:f6:98:4e:05:04: ed:67:f5:c9:e4:b8:fb:a4:1d:03:cb:4d:9f:f7:ff: 88:c5:fe:e2:58:62:81:38:6f:2e:3b:1b:7d:f6:04: 7f:36:a2:5f:11:5b:5e:5c:2b:d9:d9:25:d4:58:45: 98:26:64:0c:e6:a9:73:f2:45:36:13:7e:14:8b:28: 77:24:f1:6f:0c:8e:d6:78:45:ea:dd:ae:60:7c:ae: da:82:f2:55:83:b7:93:ce:2a:fe:a0:f4:79:f8:f1: 99:f4:cd:24:a5:b7:43:21:eb:ad:17:92:18:42:48: 32:db:6b:25:a4:89:4b:87:19:49:69:62:e8:5e:14: df:9d:0d:ce:b6:60:e9:0b:de:8e:3b:36:d1:60:36: 6b:d8:3f:d0:b5:83:1c:43:9b:0c:64:09:1b:1d:79: b1:c0:fd:6f:e0:ff:27:59:f5:45:dc:5a:fc:6b:06: 10:8c:f7:09:8a:06:c9:41:57:4e:e3:d5:b7:fb:ea: f4:80:4f:9b:b5:75:d6:92:b4:ec:22:00:45:ec:02: 60:e4:fd:97:54:d2:79:51:a4:fb:2c:f3:f2:82:cc: 45:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:65:BE:64:C7:1A:0A:18:B9:E7:0C:54:ED:85:B2:C1:31:96:84:2E X509v3 Authority Key Identifier: keyid:F8:5C:DD:52:CC:9F:A0:8A:CB:2A:9A:16:69:A1:36:1D:5A:81:C4:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/eb8870-479f-4e61-90ea-c52abc21a0ab/1/1-FzdUsyfoIrLKpoWaaE2HVqBxDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:0f:d7:78:ac:c3:c7:f1:55:f1:c5:68:28:49:32:29:c8:97: 5f:3f:5a:71:f5:85:04:65:de:f9:d6:b7:de:53:68:32:5a:9c: da:71:9a:7d:4c:1c:47:e2:2f:39:3a:35:b6:bd:44:d9:05:70: 12:33:01:8c:4d:32:51:22:6d:61:12:f4:a8:8d:04:6f:16:18: 93:17:85:c2:7d:dc:04:9f:6d:d6:ca:ea:0e:39:1d:1e:2f:52: 93:17:bf:80:db:69:0a:23:d8:9e:e6:64:8a:7b:aa:e6:6d:72: ee:54:ff:ce:94:83:3a:11:cb:77:9a:97:aa:ac:6d:0c:46:85: b2:ef:55:e7:2c:f3:45:6c:55:30:15:a8:fe:89:86:25:e1:63: 6b:a1:f1:3f:b6:cb:19:d3:db:69:a2:04:4e:ae:cb:3d:44:d4: e2:e5:5b:c6:81:4a:33:8b:5d:4b:94:70:f3:9e:60:80:0d:21: 72:8f:b0:95:3b:0a:cb:5b:9a:7a:f0:ed:82:12:d1:75:3f:a0: 2a:fb:f5:ac:29:0f:24:06:8a:f6:bf:db:8c:cd:3b:46:9d:a5: 0f:89:20:43:e8:39:5c:51:a9:ca:2d:a7:bf:57:f8:47:f1:c1: ab:63:f7:be:46:c1:1a:3a:71:c9:16:a3:0b:a4:65:6c:b5:b8: 40:ab:1f:fd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1d9aFkTqqR9EAp2xwJ44MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWNkZDUyY2M5ZmEwOGFjYjJhOWExNjY5YTEzNjFkNWE4 MWM0M2MwHhcNMjUxMjA2MjEwMTAyWhcNMjUxMjA3MjEwMTAyWjAzMTEwLwYDVQQD EygzZTY1YmU2NGM3MWEwYTE4YjllNzBjNTRlZDg1YjJjMTMxOTY4NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpmZtpaXnMJ9xWxAiAw2XweNjfR+ YZq6BMU6cQE6tYCjCyPu1YA59phOBQTtZ/XJ5Lj7pB0Dy02f9/+Ixf7iWGKBOG8u Oxt99gR/NqJfEVteXCvZ2SXUWEWYJmQM5qlz8kU2E34Uiyh3JPFvDI7WeEXq3a5g fK7agvJVg7eTzir+oPR5+PGZ9M0kpbdDIeutF5IYQkgy22slpIlLhxlJaWLoXhTf nQ3OtmDpC96OOzbRYDZr2D/QtYMcQ5sMZAkbHXmxwP1v4P8nWfVF3Fr8awYQjPcJ igbJQVdO49W3++r0gE+btXXWkrTsIgBF7AJg5P2XVNJ5UaT7LPPygsxFRQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD5lvmTHGgoYuecMVO2FssExloQuMB8GA1UdIwQY MBaAFPhc3VLMn6CKyyqaFmmhNh1agcQ8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GemRVc3lmb0lyTEtwb1dhYUUySFZxQnhEdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZWI4ODcwLTQ3OWYtNGU2MS05MGVh LWM1MmFiYzIxYTBhYi8xLzEtRnpkVXN5Zm9JckxLcG9XYWFFMkhWcUJ4RHcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzlhL2ViODg3MC00NzlmLTRlNjEtOTBlYS1jNTJhYmMyMWEw YWIvMS8xLUZ6ZFVzeWZvSXJMS3BvV2FhRTJIVnFCeER3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQ/X eKzDx/FV8cVoKEkyKciXXz9acfWFBGXe+da33lNoMlqc2nGafUwcR+IvOTo1tr1E 2QVwEjMBjE0yUSJtYRL0qI0EbxYYkxeFwn3cBJ9t1srqDjkdHi9Skxe/gNtpCiPY nuZkinuq5m1y7lT/zpSDOhHLd5qXqqxtDEaFsu9V5yzzRWxVMBWo/omGJeFja6Hx P7bLGdPbaaIETq7LPUTU4uVbxoFKM4tdS5Rw855ggA0hco+wlTsKy1uaevDtghLR dT+gKvv1rCkPJAaK9r/bjM07Rp2lD4kgQ+g5XFGpyi2nv1f4R/HBq2P3vkbBGjpx yRajC6RlbLW4QKsf/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:51 2025 by rpki-client