This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json) Hash identifier: UVDhBEo/xwaDS5zCVXrYPmPSgo/0i7NEJyizUKf+oXg= Subject key identifier: 11:E7:86:23:15:56:7A:AF:92:13:DD:0E:D1:85:A6:BF:81:50:21:D1 Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26 Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726 Certificate serial: 019AF12E4B2D6A6BF7DBE6EDBDAE9070BBB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft Manifest number: 0D8D Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: KA68zDm4oMl2P09ciW3oKObNCMqz5gDM/FFFvvLxqd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4b:2d:6a:6b:f7:db:e6:ed:bd:ae:90:70:bb:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=11e7862315567aaf9213dd0ed185a6bf815021d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:55:34:ed:c5:f0:59:a9:91:c5:65:11:0e: 63:0f:3c:77:be:3e:08:e0:b1:7a:90:b3:ee:42:17: 47:86:3a:7a:dd:be:30:40:ea:4a:7a:0e:c7:75:56: 19:69:f8:b8:a2:cf:b5:35:f0:86:68:86:fe:f4:76: 67:d4:bb:1a:98:21:2c:9f:37:c3:01:6c:f9:4f:0b: e0:22:7e:40:c0:ce:92:2f:91:2c:ac:21:b7:f4:43: 87:9f:d5:63:bd:1c:92:3c:41:12:7a:9a:a0:be:47: 64:59:f3:71:74:aa:29:3a:d2:8a:d7:dd:93:74:34: c6:94:9c:5f:02:b8:9f:fe:92:38:48:3a:47:38:96: 56:04:27:11:e1:7d:c4:a3:d3:a6:68:88:6a:80:47: 06:96:dc:6d:de:6d:0e:80:c3:eb:26:64:7d:b2:0a: 34:d6:d5:fb:3c:8d:30:50:4a:f6:43:ef:11:9f:f7: 0b:58:4e:7e:01:89:54:77:9b:00:f4:d3:b6:52:75: 1d:62:50:8d:20:09:8a:89:01:b8:7b:b5:f7:f3:e4: f4:81:5b:4f:55:2a:71:e2:6c:d3:b7:6b:9f:02:d0: 26:37:71:94:36:aa:39:bf:10:79:83:9c:b5:8c:3f: a4:45:da:3a:3c:73:79:de:46:14:0b:01:de:10:99: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E7:86:23:15:56:7A:AF:92:13:DD:0E:D1:85:A6:BF:81:50:21:D1 X509v3 Authority Key Identifier: keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b6:41:de:fe:67:b7:83:c3:3e:6c:44:51:c7:4a:c5:a5:ce: d3:0f:e2:84:54:cc:55:4e:b9:09:35:47:21:6d:b3:ca:31:85: 55:8c:62:3b:92:3a:c3:6d:ec:e5:f9:e7:7c:ee:b2:df:a1:6f: 4c:54:60:e1:51:23:2b:bc:ef:bf:fb:65:d0:ad:54:31:3a:0e: 2e:7e:a4:83:7b:4b:9f:3c:b8:87:44:1c:25:ac:0d:87:0a:c2: 68:4e:ef:44:5b:d5:aa:f4:03:4b:db:51:d9:70:bf:ad:f6:d3: 26:69:07:9a:bb:c5:ca:d6:82:69:fe:2b:99:93:dc:f4:cc:f2: a5:82:1b:99:1a:c7:bb:c9:cb:20:4b:b9:06:35:73:9d:ba:a6: e0:8d:59:35:07:da:6f:54:71:50:e5:d9:42:f5:51:87:70:54: b4:04:84:b0:91:c3:d0:33:56:42:af:f5:1c:8d:d8:d8:63:29: ba:25:cb:f3:af:c5:8e:d3:0f:ad:9f:f3:d3:c4:78:cd:86:7d: 94:6a:cc:3d:eb:ea:68:75:de:8c:bc:40:06:63:da:b4:67:29: f3:ee:5c:fc:a6:e0:89:18:3b:20:c9:22:87:99:fe:d5:63:71: e7:03:a7:60:4a:23:4e:7a:5d:fd:6d:9f:eb:1d:ef:c0:16:30: ab:53:ae:cb -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLkstamv32+btva6QcLu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOGU2MGU1NjM5OWZmOTM0NjBiMzQyN2NkNTUyNzRiNWE4 M2U3MjYwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EygxMWU3ODYyMzE1NTY3YWFmOTIxM2RkMGVkMTg1YTZiZjgxNTAyMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zFVNO3F8FmpkcVlEQ5jDzx3vj4I 4LF6kLPuQhdHhjp63b4wQOpKeg7HdVYZafi4os+1NfCGaIb+9HZn1LsamCEsnzfD AWz5TwvgIn5AwM6SL5EsrCG39EOHn9VjvRySPEESepqgvkdkWfNxdKopOtKK192T dDTGlJxfArif/pI4SDpHOJZWBCcR4X3Eo9OmaIhqgEcGltxt3m0OgMPrJmR9sgo0 1tX7PI0wUEr2Q+8Rn/cLWE5+AYlUd5sA9NO2UnUdYlCNIAmKiQG4e7X38+T0gVtP VSpx4mzTt2ufAtAmN3GUNqo5vxB5g5y1jD+kRdo6PHN53kYUCwHeEJnpFwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBHnhiMVVnqvkhPdDtGFpr+BUCHRMB8GA1UdIwQY MBaAFPuOYOVjmf+TRgs0J81VJ0tag+cmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS00NWc1V09aXzVOR0N6UW56VlVuUzFxRDV5WS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzY0Y2ViLTg2MTAtNDBlOS04MmFm LWVlYjZjZGQ2ZmNmZi8xLzEtNDVnNVdPWl81TkdDelFuelZVblMxcUQ1eVkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2FlL2M2NGNlYi04NjEwLTQwZTktODJhZi1lZWI2Y2RkNmZj ZmYvMS8xLTQ1ZzVXT1pfNU5HQ3pRbnpWVW5TMXFENXlZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLZB 3v5nt4PDPmxEUcdKxaXO0w/ihFTMVU65CTVHIW2zyjGFVYxiO5I6w23s5fnnfO6y 36FvTFRg4VEjK7zvv/tl0K1UMToOLn6kg3tLnzy4h0QcJawNhwrCaE7vRFvVqvQD S9tR2XC/rfbTJmkHmrvFytaCaf4rmZPc9MzypYIbmRrHu8nLIEu5BjVznbqm4I1Z NQfab1RxUOXZQvVRh3BUtASEsJHD0DNWQq/1HI3Y2GMpuiXL86/FjtMPrZ/z08R4 zYZ9lGrMPevqaHXejLxABmPatGcp8+5c/KbgiRg7IMkih5n+1WNx5wOnYEojTnpd /W2f6x3vwBYwq1Ouyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:42 2025 by rpki-client