This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json) Hash identifier: eNI3qP07Ej9RlUgRrJI47l12dL37U4GKGvoZPdNZoeA= Subject key identifier: 56:EC:4D:EE:54:E5:DD:E4:12:34:F3:B0:11:CA:22:C0:DA:B0:C6:A9 Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93 Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93 Certificate serial: 019AF12DA20B1707DEAA8D4FFD82C2D93136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:30 +0000 Manifest this update: Sat 06 Dec 2025 01:01:30 +0000 Manifest next update: Sun 07 Dec 2025 01:01:30 +0000 Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: nuXfbB8KHmMZhqL8/OB0FJFhpmzdhT8g5VoiXlpj4q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a2:0b:17:07:de:aa:8d:4f:fd:82:c2:d9:31:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93 Validity Not Before: Dec 6 01:01:30 2025 GMT Not After : Dec 7 01:01:30 2025 GMT Subject: CN=56ec4dee54e5dde41234f3b011ca22c0dab0c6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:f0:d4:63:50:8b:44:ab:92:64:f3:41:fe: bf:b3:9f:7a:38:04:1d:76:83:8e:3a:bf:75:35:10: 3b:af:e0:26:24:51:43:06:ad:a3:df:a8:45:f6:96: 0c:7a:d5:34:f2:61:7e:cf:f2:2e:e6:12:cc:3e:f0: 57:0d:ec:17:c0:fa:05:0d:96:00:19:b3:f1:18:c3: 21:4a:ff:99:71:1f:32:00:de:cd:96:e7:25:27:ab: 27:19:3a:63:3b:9c:45:26:60:fd:e9:09:d6:7c:e1: 0f:8e:c6:4d:70:9d:fc:10:bb:dd:8b:84:4e:80:fc: 25:62:44:d5:df:81:60:bb:2e:06:9c:b0:4c:2e:7d: e9:40:80:48:a7:90:1e:72:5e:2c:45:d9:f3:6c:4c: 0f:70:08:7d:a2:b6:01:f7:da:02:1d:27:42:60:0b: b6:67:e0:fe:59:70:bc:fd:14:d9:47:14:55:3d:e1: da:fe:23:1e:f0:bf:da:3d:02:17:50:53:97:86:f8: 43:cd:19:74:88:70:d4:d0:22:3c:b5:bd:44:4f:24: 76:c3:40:8d:00:d7:2e:2c:66:3f:5d:b6:69:3b:58: 84:a5:f5:15:cd:a6:ce:36:3e:f4:ca:b3:04:38:f9: d9:c5:0d:a5:3d:8f:6a:07:73:0f:85:90:48:38:c0: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EC:4D:EE:54:E5:DD:E4:12:34:F3:B0:11:CA:22:C0:DA:B0:C6:A9 X509v3 Authority Key Identifier: keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b8:f4:c5:b7:a3:d2:8e:c8:d3:77:03:ac:31:cb:b2:2a:8b: 78:e3:e0:6e:49:14:33:eb:cc:00:18:22:55:bf:4f:bc:38:77: d1:a7:8a:ed:b7:e8:72:31:6b:86:de:e0:16:80:37:62:c3:ef: 56:3c:df:f0:c4:3e:c3:be:74:cb:de:6e:54:c6:ca:8c:77:da: bc:4f:77:76:03:bb:b1:54:5a:0c:16:d2:92:03:64:13:bd:f1: 92:18:eb:95:57:2e:16:f1:69:77:13:05:53:af:b0:2f:b1:1b: 98:a0:2a:84:b5:95:43:f9:2d:35:2a:2f:f1:00:8d:3d:d9:69: d3:dc:0d:46:ff:2a:63:ae:7d:dd:be:6d:39:b3:20:68:3c:ca: bf:81:15:07:96:fd:31:83:b3:44:d4:96:22:1a:18:44:01:af: 1f:96:4c:ff:ff:df:bb:52:16:55:07:28:92:24:2d:a5:26:91: 55:91:54:a0:a7:fd:d3:6a:1a:37:e7:bf:72:b0:ab:a6:95:a1: a9:84:b5:f1:30:ce:62:8d:e6:0e:5f:a8:59:28:90:e9:9d:93: 7c:a4:d8:4c:d9:87:23:76:01:7a:97:b8:8e:d7:72:ff:68:91: c7:ad:e5:0c:31:cf:93:e5:27:bc:cb:a4:88:75:0d:76:2b:4d: d0:1c:44:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaILFwfeqo1P/YLC2TE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjE1N2VhNjgyZWY3NGYwZjFlZjY3ZmExZTkxNjBkMTdj ZDJlOTMwHhcNMjUxMjA2MDEwMTMwWhcNMjUxMjA3MDEwMTMwWjAzMTEwLwYDVQQD Eyg1NmVjNGRlZTU0ZTVkZGU0MTIzNGYzYjAxMWNhMjJjMGRhYjBjNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqbw1GNQi0SrkmTzQf6/s596OAQd doOOOr91NRA7r+AmJFFDBq2j36hF9pYMetU08mF+z/Iu5hLMPvBXDewXwPoFDZYA GbPxGMMhSv+ZcR8yAN7NluclJ6snGTpjO5xFJmD96QnWfOEPjsZNcJ38ELvdi4RO gPwlYkTV34Fguy4GnLBMLn3pQIBIp5Aecl4sRdnzbEwPcAh9orYB99oCHSdCYAu2 Z+D+WXC8/RTZRxRVPeHa/iMe8L/aPQIXUFOXhvhDzRl0iHDU0CI8tb1ETyR2w0CN ANcuLGY/XbZpO1iEpfUVzabONj70yrMEOPnZxQ2lPY9qB3MPhZBIOMCCPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbsTe5U5d3kEjTzsBHKIsDasMapMB8GA1UdIwQY MBaAFNWxV+poLvdPDx72f6HpFg0XzS6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYt MDIxYzllZWMwMDc3LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYtMDIxYzllZWMwMDc3 LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbj0xbej 0o7I03cDrDHLsiqLeOPgbkkUM+vMABgiVb9PvDh30aeK7bfocjFrht7gFoA3YsPv Vjzf8MQ+w750y95uVMbKjHfavE93dgO7sVRaDBbSkgNkE73xkhjrlVcuFvFpdxMF U6+wL7EbmKAqhLWVQ/ktNSov8QCNPdlp09wNRv8qY6593b5tObMgaDzKv4EVB5b9 MYOzRNSWIhoYRAGvH5ZM///fu1IWVQcokiQtpSaRVZFUoKf902oaN+e/crCrppWh qYS18TDOYo3mDl+oWSiQ6Z2TfKTYTNmHI3YBepe4jtdy/2iRx63lDDHPk+UnvMuk iHUNditN0BxEhg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:21 2025 by rpki-client