This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json) Hash identifier: ms+sPUT2Xqr+E0IwLnKjdSeDmq8hl4isEdC6cRkMp6Y= Subject key identifier: 3F:B6:A0:C4:B1:B1:6D:EC:67:49:39:DC:1D:A6:5A:72:BD:84:5B:4A Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8 Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8 Certificate serial: 019AF19B23606DC1AAC6BDAE9D76EF4FE536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft Manifest number: 15D0 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: NFsV3keegMdyt2OD+0CCfSmWfjhS9NkZ6X17HCwRqjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:23:60:6d:c1:aa:c6:bd:ae:9d:76:ef:4f:e5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=3fb6a0c4b1b16dec674939dc1da65a72bd845b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:e3:9a:2f:6f:4e:d6:29:99:27:f1:8a:d0: 4f:63:1c:de:56:f2:5f:21:cb:f8:9f:62:54:de:15: 36:0b:d1:c5:05:26:21:ec:cf:1b:70:7b:6f:7a:89: 0a:a1:06:84:a4:9b:50:48:a2:cf:7a:1b:53:4f:8e: d1:12:2d:b8:27:3f:f4:93:23:2f:a5:f6:db:f3:e1: b0:af:9e:d9:d6:3c:f1:bd:8d:4a:a2:2f:61:8a:c8: b9:9c:98:cf:a6:41:08:53:ac:85:1b:f8:54:51:e8: 4a:72:b4:1d:24:6c:50:90:62:4f:e3:9a:34:c1:91: 3f:8a:95:b1:8f:dc:8b:bd:4d:3a:81:14:b1:52:54: 25:cb:86:d7:94:cf:e7:97:26:d2:f2:9e:4f:b3:80: 97:33:c7:2a:bb:60:11:b3:b1:83:fa:32:6b:72:71: 53:76:42:65:ca:0b:8e:65:1a:eb:12:c1:e0:91:31: 52:76:56:00:7f:25:78:bb:b4:d4:90:6f:19:84:9b: 2d:54:e5:cf:37:e1:19:c6:ee:35:4a:a0:59:26:a3: 7a:04:3f:6f:88:d6:d6:fc:8e:fb:6e:71:88:f6:c4: 4f:2d:2a:39:3b:e3:34:eb:02:0c:d4:b8:2c:a1:05: 27:ff:38:0d:41:19:bc:3a:2d:db:b3:4b:cd:23:e0: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B6:A0:C4:B1:B1:6D:EC:67:49:39:DC:1D:A6:5A:72:BD:84:5B:4A X509v3 Authority Key Identifier: keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b5:77:9c:9b:91:c8:d0:c8:41:ec:12:d2:0a:bb:9b:e3:e6: f2:9e:33:56:41:c1:b4:51:20:46:dc:50:2a:58:61:a9:db:b5: 0b:53:ff:cf:c6:44:7a:a9:8b:e6:f4:71:e0:7f:0e:75:5f:fa: 84:57:c6:80:37:6b:e1:f5:ec:a9:8b:87:a1:37:f5:be:9c:b7: 74:8a:43:7f:46:45:55:e5:59:a0:32:4a:54:ab:6b:01:ca:39: b1:b9:23:85:e7:75:e3:88:44:86:50:ca:77:1d:87:c0:7f:05: a6:76:3a:55:c1:a4:5f:41:d1:dd:d7:32:d2:07:c1:4a:f7:95: b4:8a:b9:53:18:77:82:2d:fa:4c:57:f2:df:0e:d4:f9:4f:dd: f6:50:fb:84:64:f8:ea:3b:2c:47:d8:6f:68:74:33:45:2e:90: b2:7e:b0:3a:10:83:24:8a:71:9b:7b:1a:80:68:ae:eb:51:66: 80:10:8e:85:85:7d:cf:91:9f:2e:95:d4:00:00:bd:32:d6:07: 71:57:91:b1:a5:a9:6a:be:97:3b:fa:9f:6f:44:76:f6:2c:56: fd:21:41:ed:ec:ff:f7:21:fb:66:7c:94:22:86:10:5d:96:17: 9a:7c:10:f9:79:5b:8e:68:0e:15:a6:b2:8e:da:62:19:6f:ca: 13:68:95:e5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxmyNgbcGqxr2unXbvT+U2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTRjYzIwYTcwZWY1YTAzMTQ2YTdkYzVhNzlkZGI1MDY1 YmVkZTgwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygzZmI2YTBjNGIxYjE2ZGVjNjc0OTM5ZGMxZGE2NWE3MmJkODQ1YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphXjmi9vTtYpmSfxitBPYxzeVvJf Icv4n2JU3hU2C9HFBSYh7M8bcHtveokKoQaEpJtQSKLPehtTT47REi24Jz/0kyMv pfbb8+Gwr57Z1jzxvY1Koi9hisi5nJjPpkEIU6yFG/hUUehKcrQdJGxQkGJP45o0 wZE/ipWxj9yLvU06gRSxUlQly4bXlM/nlybS8p5Ps4CXM8cqu2ARs7GD+jJrcnFT dkJlyguOZRrrEsHgkTFSdlYAfyV4u7TUkG8ZhJstVOXPN+EZxu41SqBZJqN6BD9v iNbW/I77bnGI9sRPLSo5O+M06wIM1LgsoQUn/zgNQRm8Oi3bs0vNI+CG9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFD+2oMSxsW3sZ0k53B2mWnK9hFtKMB8GA1UdIwQY MBaAFPoUzCCnDvWgMUan3Fp53bUGW+3oMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oVE1JS2NPOWFBeFJxZmNXbm5kdFFaYjdlZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNTBiZmNlLTM4NWUtNDA2NC1iZGU3 LTU5ZmVjMmI5ZjkxNC8xLzEtaFRNSUtjTzlhQXhScWZjV25uZHRRWmI3ZWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzljLzUwYmZjZS0zODVlLTQwNjQtYmRlNy01OWZlYzJiOWY5 MTQvMS8xLWhUTUlLY085YUF4UnFmY1dubmR0UVpiN2VnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbV3 nJuRyNDIQewS0gq7m+Pm8p4zVkHBtFEgRtxQKlhhqdu1C1P/z8ZEeqmL5vRx4H8O dV/6hFfGgDdr4fXsqYuHoTf1vpy3dIpDf0ZFVeVZoDJKVKtrAco5sbkjhed144hE hlDKdx2HwH8FpnY6VcGkX0HR3dcy0gfBSveVtIq5Uxh3gi36TFfy3w7U+U/d9lD7 hGT46jssR9hvaHQzRS6Qsn6wOhCDJIpxm3sagGiu61FmgBCOhYV9z5GfLpXUAAC9 MtYHcVeRsaWpar6XO/qfb0R29ixW/SFB7ez/9yH7ZnyUIoYQXZYXmnwQ+XlbjmgO FaayjtpiGW/KE2iV5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:14 2025 by rpki-client