This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json) Hash identifier: MUSEOTR/eyAxr6oVEXXQDv3bdOZfhqouNGSd2yDbQCE= Subject key identifier: 7C:6F:62:B0:C6:4F:29:36:EA:95:AC:76:AF:3B:F7:4F:29:5B:F2:0B Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5 Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5 Certificate serial: 019AF42DD732050E106B9019705FC73E835A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft Manifest number: 024C Signing time: Sat 06 Dec 2025 15:00:36 +0000 Manifest this update: Sat 06 Dec 2025 15:00:36 +0000 Manifest next update: Sun 07 Dec 2025 15:00:36 +0000 Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: BnaWYhHcf+FbY5j6n+JL25523+GecIp9NaAlfl7xd7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d7:32:05:0e:10:6b:90:19:70:5f:c7:3e:83:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5 Validity Not Before: Dec 6 15:00:36 2025 GMT Not After : Dec 7 15:00:36 2025 GMT Subject: CN=7c6f62b0c64f2936ea95ac76af3bf74f295bf20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:69:c8:62:81:16:37:e1:0c:38:55:93:73: f9:ab:38:f8:da:b6:97:3f:0e:69:61:ce:02:b5:e6: db:d2:f4:02:5d:b8:b9:d3:63:f5:d7:39:ea:35:41: f2:ab:1a:9b:b8:a1:e8:7d:12:f5:74:3e:a5:c5:d7: 7e:3d:96:b7:da:47:cc:68:38:62:e4:92:5a:d2:3c: d3:07:76:a0:03:30:30:5c:18:d9:5c:9f:03:cd:bf: ce:7f:77:fa:c8:b3:7d:d9:bf:2c:53:45:eb:5f:31: a2:c4:ae:4a:b0:44:b3:31:49:43:60:96:bb:76:dc: 52:0d:a1:bb:b7:de:29:16:64:c5:66:6e:fc:8c:73: fa:ac:e5:67:8a:43:a3:58:a7:b0:92:0c:34:f5:8b: f1:cf:bf:06:1f:32:1c:ae:24:82:f0:78:a4:4f:fa: 05:12:66:86:35:87:ab:8a:26:8b:3b:d9:f7:ca:7b: 4a:10:1c:07:0b:57:31:26:f2:2e:47:db:43:87:8e: 07:99:56:3e:f3:02:aa:dd:3c:6a:63:77:4c:df:dd: b4:3e:07:b3:29:1e:c7:64:39:b4:54:99:3e:a3:2e: 05:83:42:34:c2:24:c2:c7:20:b0:87:d3:71:38:c5: 14:19:40:a9:8d:6d:0b:ee:c4:b9:3e:85:bd:1d:96: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6F:62:B0:C6:4F:29:36:EA:95:AC:76:AF:3B:F7:4F:29:5B:F2:0B X509v3 Authority Key Identifier: keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4f:e7:c2:f4:e7:8e:1a:30:cc:90:70:e7:a4:9e:7b:2d:38: 26:b4:5a:32:8a:07:07:23:15:35:d2:76:8f:95:a7:3c:4b:60: b1:a1:12:f8:36:b9:cb:b9:21:84:cd:13:2e:73:5a:cc:a1:83: ce:6b:9e:e1:05:ed:88:ae:d1:a6:85:86:f1:5c:7c:9b:4b:ea: 1f:f1:07:08:35:0d:43:5a:fa:82:51:3e:3a:60:2e:11:14:db: 17:ca:aa:b6:b8:61:0f:3c:b5:bc:65:a5:83:c9:f8:2a:02:93: 0c:b8:f9:c7:ec:58:87:84:c3:e0:e8:8c:74:f7:57:3d:4a:cd: 7a:9e:2a:35:6d:87:0c:46:5d:d4:7d:ec:97:2e:ac:61:92:df: 82:a1:23:33:04:3d:81:73:8f:28:d7:49:a7:ab:c9:eb:a8:73: 58:7b:70:16:8c:c6:d7:65:97:65:e4:88:30:16:5f:2c:79:fd: c0:03:87:b5:43:78:47:0b:2d:e1:ba:77:dd:d6:50:62:46:f7: 4b:f6:ee:41:f6:47:38:e7:cd:17:99:b2:01:c4:29:8e:a2:f9: 01:e3:0c:4b:d1:c8:72:22:ba:14:ad:f3:85:87:1d:68:3c:6b: 8a:1b:00:de:84:e8:5c:db:cf:ec:25:6b:84:0f:d1:c0:7a:4d: a9:f6:2e:53 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr0LdcyBQ4Qa5AZcF/HPoNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTczODIwNDA2N2I3MzYxN2VjN2RmMjE4YzFiMjU2ZWNi NmY2ZjUwHhcNMjUxMjA2MTUwMDM2WhcNMjUxMjA3MTUwMDM2WjAzMTEwLwYDVQQD Eyg3YzZmNjJiMGM2NGYyOTM2ZWE5NWFjNzZhZjNiZjc0ZjI5NWJmMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj39pyGKBFjfhDDhVk3P5qzj42raX Pw5pYc4Ctebb0vQCXbi502P11znqNUHyqxqbuKHofRL1dD6lxdd+PZa32kfMaDhi 5JJa0jzTB3agAzAwXBjZXJ8Dzb/Of3f6yLN92b8sU0XrXzGixK5KsESzMUlDYJa7 dtxSDaG7t94pFmTFZm78jHP6rOVnikOjWKewkgw09Yvxz78GHzIcriSC8HikT/oF EmaGNYeriiaLO9n3yntKEBwHC1cxJvIuR9tDh44HmVY+8wKq3TxqY3dM3920Pgez KR7HZDm0VJk+oy4Fg0I0wiTCxyCwh9NxOMUUGUCpjW0L7sS5PoW9HZbWGwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHxvYrDGTyk26pWsdq87908pW/ILMB8GA1UdIwQY MBaAFPinOCBAZ7c2F+x98hjBslbstvb1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LYzRJRUJudHpZWDdIM3lHTUd5VnV5Mjl2VS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNDhlZjgyLTA5OTItNDI1NS05OTY0 LTQ5YmNkMzg0Y2ViMC8xLzEtS2M0SUVCbnR6WVg3SDN5R01HeVZ1eTI5dlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FjLzQ4ZWY4Mi0wOTkyLTQyNTUtOTk2NC00OWJjZDM4NGNl YjAvMS8xLUtjNElFQm50ellYN0gzeUdNR3lWdXkyOXZVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALk/n wvTnjhowzJBw56Seey04JrRaMooHByMVNdJ2j5WnPEtgsaES+Da5y7khhM0TLnNa zKGDzmue4QXtiK7RpoWG8Vx8m0vqH/EHCDUNQ1r6glE+OmAuERTbF8qqtrhhDzy1 vGWlg8n4KgKTDLj5x+xYh4TD4OiMdPdXPUrNep4qNW2HDEZd1H3sly6sYZLfgqEj MwQ9gXOPKNdJp6vJ66hzWHtwFozG12WXZeSIMBZfLHn9wAOHtUN4Rwst4bp33dZQ Ykb3S/buQfZHOOfNF5myAcQpjqL5AeMMS9HIciK6FK3zhYcdaDxrihsA3oToXNvP 7CVrhA/RwHpNqfYuUw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:05 2025 by rpki-client