This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json) Hash identifier: Ng3fHuxbBDv5DEi/IOrjqAvCCNsTz0Js/wR2/a50UGA= Subject key identifier: 8B:3D:93:D7:DE:54:C4:1A:9D:16:BC:5A:8F:4F:99:25:F8:10:6D:27 Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17 Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417 Certificate serial: 019AF31B3C39D3D963911514F186001439C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft Manifest number: 0C46 Signing time: Sat 06 Dec 2025 10:00:39 +0000 Manifest this update: Sat 06 Dec 2025 10:00:39 +0000 Manifest next update: Sun 07 Dec 2025 10:00:39 +0000 Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: CRhdlgF1ih0jxkH4fwWam54nOuFwqjmTHfVbRqZc2GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3c:39:d3:d9:63:91:15:14:f1:86:00:14:39:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417 Validity Not Before: Dec 6 10:00:39 2025 GMT Not After : Dec 7 10:00:39 2025 GMT Subject: CN=8b3d93d7de54c41a9d16bc5a8f4f9925f8106d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f2:96:fa:27:b7:b3:b5:c6:38:44:c9:6c:6a: aa:a0:a5:19:85:0f:81:5b:31:de:b8:7c:9d:4f:66: bc:4c:00:37:68:c8:ff:67:92:04:3e:d8:dc:6f:68: 8a:2b:5a:6c:03:50:8c:4a:66:87:27:d4:57:7d:d9: 3c:2c:ee:db:88:2f:cb:fc:6a:c6:32:9b:8c:1c:9a: 9a:62:11:53:33:2c:3a:c8:79:1b:98:e4:ca:6a:06: ab:ae:9c:5e:a5:97:8f:52:43:70:35:cc:93:84:b0: cb:79:91:23:a1:6a:2b:36:47:45:db:af:3b:f7:78: 9f:c9:83:3e:ce:18:28:79:10:0b:2e:ed:fe:18:d3: 96:bb:06:8b:2c:44:2f:26:5f:b9:9c:21:57:10:5b: 25:ee:a2:38:d1:11:58:51:0b:32:ee:6a:ae:ff:d8: 4e:eb:28:33:55:b0:e2:05:cb:d6:dc:51:1a:37:dd: dc:9f:85:1d:c6:7c:2d:5b:8e:44:06:52:19:47:17: 3b:d3:db:e4:70:7f:bb:a4:0b:ab:5f:8e:b0:e4:50: 65:b3:1c:00:12:1e:fd:91:4a:b3:2e:87:84:29:54: f3:c9:78:9d:59:88:fc:bc:59:7d:35:c3:84:2f:03: c5:df:45:52:de:d5:38:89:01:c3:66:50:e9:1d:6b: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3D:93:D7:DE:54:C4:1A:9D:16:BC:5A:8F:4F:99:25:F8:10:6D:27 X509v3 Authority Key Identifier: keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3a:01:d6:5b:81:66:e7:b6:1f:f1:6e:07:67:23:04:74:eb: 21:88:e1:ca:95:6a:70:23:27:46:df:6b:79:f1:8b:e0:1d:e7: db:39:51:a7:6b:a3:c6:e9:1a:9c:8b:fa:43:92:25:ce:6b:15: a7:f0:e0:4b:56:87:e9:f8:a1:eb:38:1d:cf:d4:c7:4e:95:b9: 39:c0:12:5b:20:95:b4:b5:e7:f0:7c:3a:ad:cd:6d:c3:6d:93: e4:94:09:00:8b:62:60:5f:4f:0f:c9:ed:94:1b:6a:55:6e:9b: 96:68:62:b5:79:74:99:f5:2a:00:3a:9f:94:63:73:72:b4:f4: c0:6a:0f:69:64:ba:06:c2:e8:bc:71:db:9c:7d:1f:1b:e5:d2: 7c:76:bc:4b:b6:50:66:2c:4a:2c:73:bd:98:d2:52:a2:57:6f: 9b:d8:5a:e2:dc:a9:1a:62:b5:00:9f:6b:cc:67:bc:4e:b7:e6: c0:df:19:e3:c2:8c:2a:a0:de:85:a4:f2:7e:2e:3b:c8:a7:22: d5:77:ba:c9:77:ef:23:5b:5a:87:2e:9e:ad:85:13:38:4e:2b: e8:2e:95:fd:af:a7:45:a4:ba:7b:ca:b4:05:8b:bd:16:b0:ca: 02:cd:aa:33:1d:8a:b8:a5:c1:1c:6f:e9:4c:55:4d:81:37:b6: e8:18:08:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzw509ljkRUU8YYAFDnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTViM2JkN2IwNGY0YzA2YjJhYWZlZTk2MzRlY2RjMTU3 MmY0MTcwHhcNMjUxMjA2MTAwMDM5WhcNMjUxMjA3MTAwMDM5WjAzMTEwLwYDVQQD Eyg4YjNkOTNkN2RlNTRjNDFhOWQxNmJjNWE4ZjRmOTkyNWY4MTA2ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPKW+ie3s7XGOETJbGqqoKUZhQ+B WzHeuHydT2a8TAA3aMj/Z5IEPtjcb2iKK1psA1CMSmaHJ9RXfdk8LO7biC/L/GrG MpuMHJqaYhFTMyw6yHkbmOTKagarrpxepZePUkNwNcyThLDLeZEjoWorNkdF2687 93ifyYM+zhgoeRALLu3+GNOWuwaLLEQvJl+5nCFXEFsl7qI40RFYUQsy7mqu/9hO 6ygzVbDiBcvW3FEaN93cn4UdxnwtW45EBlIZRxc709vkcH+7pAurX46w5FBlsxwA Eh79kUqzLoeEKVTzyXidWYj8vFl9NcOELwPF30VS3tU4iQHDZlDpHWvAqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs9k9feVMQanRa8Wo9PmSX4EG0nMB8GA1UdIwQY MBaAFNYVs717BPTAayqv7pY07NwVcvQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQt OGQ2NjUxMTQ4NTYwLzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQtOGQ2NjUxMTQ4NTYw LzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjoB1luB Zue2H/FuB2cjBHTrIYjhypVqcCMnRt9refGL4B3n2zlRp2ujxukanIv6Q5IlzmsV p/DgS1aH6fih6zgdz9THTpW5OcASWyCVtLXn8Hw6rc1tw22T5JQJAItiYF9PD8nt lBtqVW6blmhitXl0mfUqADqflGNzcrT0wGoPaWS6BsLovHHbnH0fG+XSfHa8S7ZQ ZixKLHO9mNJSoldvm9ha4typGmK1AJ9rzGe8TrfmwN8Z48KMKqDehaTyfi47yKci 1Xe6yXfvI1tahy6erYUTOE4r6C6V/a+nRaS6e8q0BYu9FrDKAs2qMx2KuKXBHG/p TFVNgTe26BgIng== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:57 2025 by rpki-client