This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json) Hash identifier: 0wzF/ckKoLPnoX2qubm3o1xR13er9cGDCAdYvMWhkFU= Subject key identifier: 9A:DB:58:E6:E0:A0:C1:67:B8:0B:76:48:50:8B:30:7A:25:13:B4:F1 Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Certificate serial: 019AF209381379BB147CCA4241FD647605E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: Sjev7hghIw/RXCDGHiKsm5s2PqEa5dwegrqUzM/yl4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:38:13:79:bb:14:7c:ca:42:41:fd:64:76:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=9adb58e6e0a0c167b80b7648508b307a2513b4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:a2:0b:e5:d2:5e:ea:e2:5b:49:a9:52:aa: f6:d5:3f:df:c8:f3:5e:90:1c:91:75:60:df:2f:29: e9:54:ff:e8:78:ba:c4:7a:a4:b5:35:06:19:76:9f: 22:0d:e8:5a:13:77:4d:da:d8:c7:68:d1:d8:17:c7: d1:bb:db:81:2a:b2:3b:5d:13:9b:1a:95:28:c2:f2: 46:86:49:af:7c:b1:3d:a3:e1:0c:d2:4b:d8:ce:b2: dd:83:1a:84:f7:ea:81:40:8b:4c:70:9b:3a:26:fe: df:7f:5f:da:dd:42:64:22:0b:b7:b5:d1:42:76:f2: cd:37:6b:95:08:be:a1:d6:f4:cc:cb:32:d9:46:78: be:1a:fc:53:d6:b6:80:1b:c1:87:10:c0:ad:fc:7d: ff:43:02:b6:b9:3d:c5:a3:34:29:90:b3:99:76:cc: c7:58:fb:31:18:54:fe:b9:3d:f8:44:f8:9d:c3:4c: 46:8d:43:f6:b9:99:a9:2a:a7:4d:94:45:9c:e2:01: 67:40:a8:65:23:30:46:9d:76:60:26:35:2f:2f:fe: 68:b6:df:57:4f:22:e6:fa:14:5e:6a:78:c2:2f:29: d3:83:11:50:34:6e:11:fc:37:fa:b3:66:c5:a7:b8: 10:75:c2:58:55:55:d1:02:2e:82:9f:34:f0:47:90: 78:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:58:E6:E0:A0:C1:67:B8:0B:76:48:50:8B:30:7A:25:13:B4:F1 X509v3 Authority Key Identifier: keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:bf:24:15:86:3e:ef:d7:51:2d:95:05:9e:af:24:d8:4e:46: 36:41:7f:16:34:18:c5:96:6a:62:95:e9:94:cf:3f:88:80:14: b7:90:1f:f3:b0:02:be:4c:91:e5:83:a4:b1:97:58:4d:f3:4b: f4:9a:24:47:3e:98:3d:0d:a2:37:c2:72:bd:90:c3:3b:8b:2d: e1:2f:dd:16:4c:10:e0:26:67:df:fd:f3:fc:9c:f3:39:a5:42: de:91:3f:4c:ad:28:3a:3e:d5:b1:dd:3c:4d:91:5a:2d:82:38: b8:30:46:f1:9d:65:06:d6:f1:71:f6:15:1d:7d:ac:23:fb:76: 69:d9:28:a9:d3:b9:0e:f6:24:aa:22:7a:2a:3f:69:0e:0f:aa: ac:d2:59:e8:eb:78:7d:b0:9b:e3:16:ba:30:cb:43:62:f8:56: d4:f4:fe:fc:68:45:eb:eb:05:28:8c:a6:62:e4:b3:76:eb:e7: d8:df:4c:b1:ac:19:ec:2f:ec:b4:24:2b:f1:8c:f4:c3:55:24: 64:5f:b1:b1:4a:28:17:dc:8a:ac:b5:48:07:8c:10:70:52:7f: 26:9c:c7:85:85:2a:0a:7c:ac:67:fb:df:e7:03:e4:35:46:dc: ee:7d:aa:ad:f9:2d:6a:87:00:76:69:d4:0e:2d:15:55:2c:07: b7:72:2a:59 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCTgTebsUfMpCQf1kdgXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGE1YWFhNmM5OTQ2MmZlYjE1OWY1NmIxYzBhZjJkZDNm NDYyNWIwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD Eyg5YWRiNThlNmUwYTBjMTY3YjgwYjc2NDg1MDhiMzA3YTI1MTNiNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5+iC+XSXuriW0mpUqr21T/fyPNe kByRdWDfLynpVP/oeLrEeqS1NQYZdp8iDehaE3dN2tjHaNHYF8fRu9uBKrI7XROb GpUowvJGhkmvfLE9o+EM0kvYzrLdgxqE9+qBQItMcJs6Jv7ff1/a3UJkIgu3tdFC dvLNN2uVCL6h1vTMyzLZRni+GvxT1raAG8GHEMCt/H3/QwK2uT3FozQpkLOZdszH WPsxGFT+uT34RPidw0xGjUP2uZmpKqdNlEWc4gFnQKhlIzBGnXZgJjUvL/5ott9X TyLm+hReanjCLynTgxFQNG4R/Df6s2bFp7gQdcJYVVXRAi6CnzTwR5B4GQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJrbWObgoMFnuAt2SFCLMHolE7TxMB8GA1UdIwQY MBaAFPraWqpsmUYv6xWfVrHAry3T9GJbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10cGFxbXlaUmlfckZaOVdzY0N2TGRQMFlscy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2LWVkZjAtNDhkNy1iZTdk LTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlXc2NDdkxkUDBZbHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FjLzA2MTUwNi1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2 ZTIvMS8xLXRwYXFteVpSaV9yRlo5V3NjQ3ZMZFAwWWxzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr8k FYY+79dRLZUFnq8k2E5GNkF/FjQYxZZqYpXplM8/iIAUt5Af87ACvkyR5YOksZdY TfNL9JokRz6YPQ2iN8JyvZDDO4st4S/dFkwQ4CZn3/3z/JzzOaVC3pE/TK0oOj7V sd08TZFaLYI4uDBG8Z1lBtbxcfYVHX2sI/t2adkoqdO5DvYkqiJ6Kj9pDg+qrNJZ 6Ot4fbCb4xa6MMtDYvhW1PT+/GhF6+sFKIymYuSzduvn2N9MsawZ7C/stCQr8Yz0 w1UkZF+xsUooF9yKrLVIB4wQcFJ/JpzHhYUqCnysZ/vf5wPkNUbc7n2qrfktaocA dmnUDi0VVSwHt3IqWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:26 2025 by rpki-client