This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json) Hash identifier: ERdfRr8goK06Ctip9v/+LwgnqmwI1dtTE2h/4rAx0Mo= Subject key identifier: A3:39:87:73:45:5B:81:43:47:3B:27:BD:C9:54:0C:6C:32:A2:CB:63 Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Certificate serial: 019AF31C6B213886B6A264782370F3F317CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft Manifest number: 12E0 Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: IbiVuXYbewqrQZCCDofH7HkjzhxtrClt7/nllAJXciM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6b:21:38:86:b6:a2:64:78:23:70:f3:f3:17:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=a3398773455b8143473b27bdc9540c6c32a2cb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:c2:8e:6b:b2:cb:81:af:70:a9:38:af:d8: 5a:74:02:ae:69:0a:8a:ba:4c:67:67:be:aa:87:7d: 29:5e:3a:c2:fb:23:17:c6:ed:e0:0a:ed:fe:29:e0: e7:be:54:3d:d1:2c:f1:5f:0e:6d:60:45:ee:6e:cd: 74:11:e0:32:07:9d:a5:48:cc:d4:77:93:87:a5:18: 98:df:74:f8:a5:96:24:28:21:8b:ff:f2:03:75:1c: b3:28:21:49:52:06:ee:bd:d6:ae:f4:50:28:f9:04: f9:27:6a:b0:b6:63:b9:a4:f5:3d:c6:e7:63:68:78: 14:74:b3:21:8d:dc:d8:44:3d:c8:90:3f:09:71:f4: f1:b5:0b:95:8f:fd:73:44:1a:09:b2:47:16:99:83: be:3c:6e:84:34:cd:b5:a4:34:21:b1:1d:0b:87:a8: 11:19:1e:42:9a:29:28:57:0b:69:a0:23:18:e6:24: c4:b0:22:05:68:83:01:d0:a1:f6:05:a0:a1:5f:ac: b1:1f:39:56:11:6e:67:39:49:2b:e7:68:db:56:23: 54:e0:d6:3c:90:82:f9:99:07:65:ea:00:44:a5:70: 1d:05:ec:3a:60:22:ed:df:76:3c:4f:39:cf:42:37: 3f:0a:f3:62:44:b0:a0:c1:76:b0:ac:29:a3:7e:a6: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:39:87:73:45:5B:81:43:47:3B:27:BD:C9:54:0C:6C:32:A2:CB:63 X509v3 Authority Key Identifier: keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:77:d6:02:15:2f:16:da:9e:c5:7f:53:f1:29:42:35:f1:9b: c6:23:76:81:0a:47:5d:a0:7c:a4:54:3a:c8:c0:79:d9:02:28: f5:ba:76:c9:95:e1:c6:96:28:8d:04:ac:ef:d8:f7:8d:d4:33: e5:cc:07:6e:0c:64:55:96:a9:7c:4c:f4:87:35:52:14:c1:82: a4:b2:78:91:03:36:04:97:45:df:89:f3:a7:34:6c:69:e6:4e: 99:57:ae:82:4f:db:0d:37:67:27:27:07:ef:67:54:93:3f:29: 4b:ca:6a:b9:41:38:8a:e9:22:a5:d1:84:b1:98:04:c3:9b:18: 68:a3:84:b4:23:e5:d3:9e:33:55:e2:2b:5b:88:11:a1:0c:e9: 56:c3:25:6d:c0:91:0f:ab:25:78:dc:d3:85:bb:f8:6d:76:69: e8:46:d4:49:9f:7a:4c:1d:66:72:76:c2:eb:5a:90:a8:1b:dc: 09:d7:a0:16:6b:62:74:17:e9:49:b6:2a:95:b7:4b:08:43:b4: cd:ca:6a:66:66:41:36:7c:86:c0:6e:0e:e2:60:c5:5e:56:55: de:ba:79:47:21:15:c3:1f:e4:ab:13:7a:77:1a:49:02:f1:5a: 4a:17:da:e6:3c:23:5d:89:fe:07:f6:61:e3:bf:35:72:d6:2b: a9:2d:1e:e7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHGshOIa2omR4I3Dz8xfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy MWI1YjUwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD EyhhMzM5ODc3MzQ1NWI4MTQzNDczYjI3YmRjOTU0MGM2YzMyYTJjYjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI7Cjmuyy4GvcKk4r9hadAKuaQqK ukxnZ76qh30pXjrC+yMXxu3gCu3+KeDnvlQ90SzxXw5tYEXubs10EeAyB52lSMzU d5OHpRiY33T4pZYkKCGL//IDdRyzKCFJUgbuvdau9FAo+QT5J2qwtmO5pPU9xudj aHgUdLMhjdzYRD3IkD8JcfTxtQuVj/1zRBoJskcWmYO+PG6ENM21pDQhsR0Lh6gR GR5CmikoVwtpoCMY5iTEsCIFaIMB0KH2BaChX6yxHzlWEW5nOUkr52jbViNU4NY8 kIL5mQdl6gBEpXAdBew6YCLt33Y8TznPQjc/CvNiRLCgwXawrCmjfqaj/QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKM5h3NFW4FDRzsnvclUDGwyostjMB8GA1UdIwQY MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3 LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3fW AhUvFtqexX9T8SlCNfGbxiN2gQpHXaB8pFQ6yMB52QIo9bp2yZXhxpYojQSs79j3 jdQz5cwHbgxkVZapfEz0hzVSFMGCpLJ4kQM2BJdF34nzpzRsaeZOmVeugk/bDTdn JycH72dUkz8pS8pquUE4iukipdGEsZgEw5sYaKOEtCPl054zVeIrW4gRoQzpVsMl bcCRD6sleNzThbv4bXZp6EbUSZ96TB1mcnbC61qQqBvcCdegFmtidBfpSbYqlbdL CEO0zcpqZmZBNnyGwG4O4mDFXlZV3rp5RyEVwx/kqxN6dxpJAvFaShfa5jwjXYn+ B/Zh4781ctYrqS0e5w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:18 2025 by rpki-client