This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json) Hash identifier: yZbcFA0UWSS+9p+53uODZYVYI+CpRa1ydPAwYPkupqU= Subject key identifier: 73:95:9E:3A:8C:74:18:DA:B7:51:04:D4:04:88:F0:77:5E:44:19:51 Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98 Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798 Certificate serial: 019AF12D7515568DA8C6708FD04F863F439E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: ZdHMKsHoDybTlYnEZxZwH1W4ABSv4P+CCHqGg3z5MDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:75:15:56:8d:a8:c6:70:8f:d0:4f:86:3f:43:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66dde950da56f1203327e50e2b395c402251798 Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=73959e3a8c7418dab75104d40488f0775e441951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:80:db:ac:6a:ac:1e:3e:13:72:ea:6c:bb:1c: 7d:b1:94:85:d4:72:3a:dd:50:a0:80:2f:e6:24:77: 6f:92:16:58:0c:3a:77:9d:39:43:ce:bb:de:6f:c9: 05:d9:8a:59:82:aa:4c:a7:4b:be:d2:14:55:61:15: 0a:72:e8:79:39:0f:eb:11:c5:e6:8b:9b:11:73:08: 5a:e2:08:2e:36:9c:ad:0c:c0:6a:87:06:60:6f:16: 5c:33:e2:38:f5:d1:82:de:6d:fd:19:9b:50:88:79: 35:55:d7:d5:ee:83:1d:e6:68:5f:90:a8:fd:f8:ff: fb:26:7c:31:ca:f9:81:5d:ff:35:a3:dc:bd:fe:ce: 18:23:74:c3:0e:79:ed:86:e9:fa:99:8f:5f:ce:6e: 75:cd:8c:8c:04:56:70:29:3c:52:94:4f:60:42:28: 36:e7:c8:b7:85:bd:a7:ac:ae:48:c7:21:21:18:80: 04:80:85:cb:e0:cc:34:ea:e2:fd:e1:64:3a:c7:d3: f6:3e:5d:4b:dc:75:76:d2:4a:ea:b1:63:74:5d:c1: 74:c8:ea:0b:b1:0b:c3:11:96:da:15:e4:2e:70:b4: ce:58:04:ea:81:60:23:fa:9d:93:92:ba:00:9a:aa: 50:04:41:d5:ed:8a:c7:fd:dd:09:d5:24:82:10:db: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:9E:3A:8C:74:18:DA:B7:51:04:D4:04:88:F0:77:5E:44:19:51 X509v3 Authority Key Identifier: keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:37:d9:cc:7f:83:3b:0b:15:26:47:13:3a:93:89:e6:6c:f7: 07:e8:43:9f:3b:d4:8e:69:ae:2c:43:3a:61:d6:e2:fc:81:c1: 0d:04:16:8f:01:00:b0:3b:53:6c:9b:e4:0b:a5:cb:f1:aa:da: c9:da:a2:99:e2:11:a0:e0:b1:8b:1b:58:f3:b4:f0:66:76:10: 45:3b:69:21:db:ea:6e:93:2e:56:c7:04:bc:1e:19:1f:ed:4a: f5:13:a9:09:a3:ae:8b:5a:54:61:f2:b0:ed:24:c1:cc:60:67: be:aa:32:1a:5e:4c:32:89:fd:29:27:dc:58:db:35:33:74:90: 3b:e2:b9:09:f3:ff:8c:11:ca:5b:e1:11:e8:3b:a2:56:64:cf: 45:b5:6f:d1:e4:2f:d5:26:60:53:86:5b:52:3c:7b:fa:76:4e: 1c:c0:26:03:2a:fd:0a:45:1c:26:f3:b5:f5:0f:3b:29:13:e9: ed:6c:20:4c:e5:0a:e0:72:87:73:ba:b3:1a:02:fb:01:12:27: 84:aa:94:d1:ad:d1:17:81:df:5c:b3:ca:ba:af:46:21:db:ac: d4:9d:f4:55:74:6c:a4:5e:73:b4:ef:4b:43:a0:9a:c4:78:fa: b2:93:01:25:82:ae:db:e5:cf:15:9b:b1:6f:4d:58:df:9d:0c: 03:d4:f7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXUVVo2oxnCP0E+GP0OeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NmRkZTk1MGRhNTZmMTIwMzMyN2U1MGUyYjM5NWM0MDIy NTE3OTgwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD Eyg3Mzk1OWUzYThjNzQxOGRhYjc1MTA0ZDQwNDg4ZjA3NzVlNDQxOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYDbrGqsHj4Tcupsuxx9sZSF1HI6 3VCggC/mJHdvkhZYDDp3nTlDzrveb8kF2YpZgqpMp0u+0hRVYRUKcuh5OQ/rEcXm i5sRcwha4gguNpytDMBqhwZgbxZcM+I49dGC3m39GZtQiHk1VdfV7oMd5mhfkKj9 +P/7JnwxyvmBXf81o9y9/s4YI3TDDnnthun6mY9fzm51zYyMBFZwKTxSlE9gQig2 58i3hb2nrK5IxyEhGIAEgIXL4Mw06uL94WQ6x9P2Pl1L3HV20krqsWN0XcF0yOoL sQvDEZbaFeQucLTOWATqgWAj+p2TkroAmqpQBEHV7YrH/d0J1SSCENvf1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOVnjqMdBjat1EE1ASI8HdeRBlRMB8GA1UdIwQY MBaAFNZt3pUNpW8SAzJ+UOKzlcQCJReYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAt ODk3NTJlNGJmNWQzLzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAtODk3NTJlNGJmNWQz LzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATfZzH+D OwsVJkcTOpOJ5mz3B+hDnzvUjmmuLEM6Ydbi/IHBDQQWjwEAsDtTbJvkC6XL8ara ydqimeIRoOCxixtY87TwZnYQRTtpIdvqbpMuVscEvB4ZH+1K9ROpCaOui1pUYfKw 7STBzGBnvqoyGl5MMon9KSfcWNs1M3SQO+K5CfP/jBHKW+ER6DuiVmTPRbVv0eQv 1SZgU4ZbUjx7+nZOHMAmAyr9CkUcJvO19Q87KRPp7WwgTOUK4HKHc7qzGgL7ARIn hKqU0a3RF4HfXLPKuq9GIdus1J30VXRspF5ztO9LQ6CaxHj6spMBJYKu2+XPFZux b01Y350MA9T3xg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:19 2025 by rpki-client