This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft File: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft (raw, json) Hash identifier: m51MKlL8aUkUMhF8n1ofzzc0OxR+D28ajbbefecRJ58= Subject key identifier: CE:A7:83:0B:A3:4D:BE:5A:CC:B6:5A:B5:59:AE:6D:75:32:C1:CB:50 Authority key identifier: FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10 Certificate issuer: /CN=fb7b9ba2a7f4752d828b834abe51752b21906910 Certificate serial: 019AF209AB6A6922B91D9CCACC80C634FE35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft Manifest number: 05 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: 1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl (hash: blQ4soC71EC5hIUwrsl3KxECRWwKg3bZFTBrRMR9r7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ab:6a:69:22:b9:1d:9c:ca:cc:80:c6:34:fe:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb7b9ba2a7f4752d828b834abe51752b21906910 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=cea7830ba34dbe5accb65ab559ae6d7532c1cb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:e7:c6:ce:6d:52:d8:4c:b0:ea:82:f5:7e: 83:81:6a:0d:59:f2:65:ec:b0:4c:4b:2b:5b:d6:a7: 5f:cf:a4:b9:ff:ae:96:44:b7:d4:4e:29:a7:ea:e7: 78:c6:27:ec:d4:60:49:3b:d4:e6:7e:c9:7c:ce:a0: c4:2a:d4:47:eb:ad:db:eb:0a:09:43:9e:e3:1b:d9: 87:4f:b0:c4:c2:6d:ff:91:b6:6e:44:dd:2c:b1:c2: 97:33:a7:40:c2:0a:4f:49:62:5a:88:69:57:5c:6a: 65:e3:44:a5:66:83:84:d7:0c:35:31:e3:d6:66:45: 5c:07:b7:c1:ff:9f:5b:c8:3b:6c:91:25:d4:7b:53: e8:96:95:1c:fd:11:eb:7e:93:71:d7:50:18:17:5c: 83:61:60:be:a0:de:03:2a:8b:5d:63:aa:ca:44:78: 54:02:1b:e8:2c:fe:8c:a5:57:91:2b:fc:0c:57:24: 39:86:42:24:bc:67:49:90:94:cf:46:ca:92:f9:3f: 6e:fa:5f:86:fe:f6:4a:d0:29:0e:1f:91:bc:f5:51: 6e:27:af:dc:88:b7:f4:3a:ca:71:08:e4:8c:17:37: 7a:79:28:e0:2c:dc:5f:9e:01:2d:4b:42:a5:76:37: 77:f3:06:36:01:23:2f:5d:d3:51:2f:fd:7d:e7:34: cf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A7:83:0B:A3:4D:BE:5A:CC:B6:5A:B5:59:AE:6D:75:32:C1:CB:50 X509v3 Authority Key Identifier: keyid:FB:7B:9B:A2:A7:F4:75:2D:82:8B:83:4A:BE:51:75:2B:21:90:69:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f66d57-a075-4d87-9ab9-bcd12206ffaa/1/1-3uboqf0dS2Ci4NKvlF1KyGQaRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:06:72:05:8b:d4:a8:39:ae:8e:1f:2e:6f:98:64:ba:ff:cd: 68:24:9d:74:4b:27:65:b5:69:dd:e4:20:75:37:b9:9b:d7:f8: 6b:a2:7a:da:e0:3f:ab:3d:08:8e:75:49:7f:e6:e4:81:4c:29: f6:d9:49:86:48:26:75:a3:92:b5:30:c9:92:89:9f:1c:3a:63: 14:40:1d:81:54:8f:40:c7:39:5d:ba:95:7a:6a:2b:ef:7e:a1: c4:14:2c:aa:34:91:66:80:03:e6:05:e7:32:e7:19:34:a4:8a: 39:a0:b9:4a:2d:13:a1:3b:aa:50:3c:43:16:59:03:b5:98:8c: ed:85:6b:3a:9f:aa:ec:30:a8:b8:db:9c:51:8a:68:a7:b8:5b: 3d:96:ec:c8:53:5b:6e:fb:d1:29:65:a6:69:61:30:9e:5a:5a: 7d:49:da:df:a5:56:62:e9:60:64:c7:30:f4:7d:61:68:f3:c9: 98:d6:68:ca:b2:30:0b:0c:6c:ba:d0:25:50:01:ae:09:bc:03: 61:9e:b4:5b:9c:c4:1c:bd:3b:4c:4e:fd:9e:18:9b:3b:f1:ea: ea:6b:57:c2:ec:1e:5f:7e:36:2f:5e:5f:4f:93:27:60:b9:9d: 48:fd:65:25:c4:a1:ec:d8:5f:53:ea:5a:8b:5a:f0:b1:30:7f: 65:ef:d2:3d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryCatqaSK5HZzKzIDGNP41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiN2I5YmEyYTdmNDc1MmQ4MjhiODM0YWJlNTE3NTJiMjE5 MDY5MTAwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhjZWE3ODMwYmEzNGRiZTVhY2NiNjVhYjU1OWFlNmQ3NTMyYzFjYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJvnxs5tUthMsOqC9X6DgWoNWfJl 7LBMSytb1qdfz6S5/66WRLfUTimn6ud4xifs1GBJO9Tmfsl8zqDEKtRH663b6woJ Q57jG9mHT7DEwm3/kbZuRN0sscKXM6dAwgpPSWJaiGlXXGpl40SlZoOE1ww1MePW ZkVcB7fB/59byDtskSXUe1PolpUc/RHrfpNx11AYF1yDYWC+oN4DKotdY6rKRHhU AhvoLP6MpVeRK/wMVyQ5hkIkvGdJkJTPRsqS+T9u+l+G/vZK0CkOH5G89VFuJ6/c iLf0OspxCOSMFzd6eSjgLNxfngEtS0Kldjd38wY2ASMvXdNRL/195zTPQwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM6ngwujTb5azLZatVmubXUywctQMB8GA1UdIwQY MBaAFPt7m6Kn9HUtgouDSr5RdSshkGkQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zdWJvcWYwZFMyQ2k0Tkt2bEYxS3lHUWFSQS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjY2ZDU3LWEwNzUtNGQ4Ny05YWI5 LWJjZDEyMjA2ZmZhYS8xLzEtM3Vib3FmMGRTMkNpNE5LdmxGMUt5R1FhUkEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2IxL2Y2NmQ1Ny1hMDc1LTRkODctOWFiOS1iY2QxMjIwNmZm YWEvMS8xLTN1Ym9xZjBkUzJDaTROS3ZsRjFLeUdRYVJBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgZy BYvUqDmujh8ub5hkuv/NaCSddEsnZbVp3eQgdTe5m9f4a6J62uA/qz0IjnVJf+bk gUwp9tlJhkgmdaOStTDJkomfHDpjFEAdgVSPQMc5XbqVemor736hxBQsqjSRZoAD 5gXnMucZNKSKOaC5Si0ToTuqUDxDFlkDtZiM7YVrOp+q7DCouNucUYpop7hbPZbs yFNbbvvRKWWmaWEwnlpafUna36VWYulgZMcw9H1haPPJmNZoyrIwCwxsutAlUAGu CbwDYZ60W5zEHL07TE79nhibO/Hq6mtXwuweX342L15fT5MnYLmdSP1lJcSh7Nhf U+pai1rwsTB/Ze/SPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:34 2025 by rpki-client