This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json) Hash identifier: Y8ZLkYND2pM1VQZGVU2XI4E1Mc9TGYlnvaE9GuuGtso= Subject key identifier: E1:E2:8B:11:ED:50:34:49:59:4D:84:C0:FA:4F:F7:B4:F0:5B:F6:D5 Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4 Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4 Certificate serial: 019AF12DF0C151CCA4D96C827DBE5F7F33B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft Manifest number: 0C91 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: 4xUQ79FD0N4tvvWnasx1rjwFIIzveKEoanxjGz4baCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f0:c1:51:cc:a4:d9:6c:82:7d:be:5f:7f:33:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=e1e28b11ed503449594d84c0fa4ff7b4f05bf6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bf:2a:c8:55:55:a7:3a:7c:1f:75:98:ff:df: 51:2a:8b:90:bc:3c:5b:a4:ec:3a:73:e4:55:eb:08: cf:d8:78:9e:bc:9e:08:a9:0b:03:1a:92:3a:45:e5: 08:ab:f9:3f:ce:64:79:02:8f:ac:b5:2b:4a:d3:b0: 02:16:07:d2:21:1c:93:e3:e8:e6:02:e1:20:5a:52: 69:27:ed:dd:65:b6:37:d9:8e:17:b0:0c:1a:07:75: 68:5e:79:3b:b0:10:0c:51:1b:19:76:92:f7:07:1b: 45:ab:23:ac:6b:ba:9c:ff:64:4a:ce:e5:5e:17:28: 28:c4:89:d9:96:8a:72:95:00:0c:e7:1c:6f:bc:41: f4:ab:25:5e:0a:4f:69:4a:51:0f:44:df:0b:4b:fe: c9:37:f0:d0:08:60:dd:1a:14:c9:36:ff:0e:63:95: 0f:b7:38:b2:f9:06:3a:0a:c8:8a:c3:67:22:57:9c: b9:69:82:38:c7:e3:aa:78:96:7a:a2:2b:1e:cb:3b: d7:2c:e0:ba:86:a3:90:03:24:8b:3b:82:92:38:63: c4:5d:e5:75:ef:65:74:25:14:0d:c8:eb:06:e7:4b: dd:fe:a2:cd:ab:29:65:8f:eb:c6:56:99:df:42:44: f5:d6:a4:71:38:f4:5a:65:a8:5f:7c:09:71:30:f3: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E2:8B:11:ED:50:34:49:59:4D:84:C0:FA:4F:F7:B4:F0:5B:F6:D5 X509v3 Authority Key Identifier: keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:73:4a:68:64:19:c8:d7:cc:ae:9f:d5:c4:d1:15:6a:e5:bc: ba:cb:b7:aa:08:73:58:a7:17:84:5f:66:9e:30:70:a5:d0:9c: eb:7a:3c:a8:fa:16:59:02:d4:e2:33:35:0f:5a:0c:20:b2:7a: 24:ab:50:64:67:fe:84:f5:b6:dd:cd:8c:6f:ac:7d:4b:5a:05: 9e:b8:0c:17:c8:59:19:03:de:1c:20:95:8a:c0:88:af:ee:b1: 77:62:05:d8:08:05:6f:39:d1:d0:0f:a7:fa:45:91:a2:a5:2e: 9b:63:bc:85:93:f1:a8:05:f3:a9:95:5b:a9:24:88:ef:31:10: 51:d3:fa:6a:3c:d9:93:36:5b:5f:11:56:f4:32:eb:f3:a3:b4: 49:18:cf:dd:f6:8f:2c:6e:56:b2:83:46:42:c7:31:55:a3:2b: 98:e1:1e:4f:2f:63:c7:e8:f5:2a:34:f7:a7:7b:96:aa:87:de: 18:74:ec:11:07:0d:fc:7b:7f:7e:cb:2e:28:3f:50:b0:0d:0d: e3:13:21:c9:d1:55:f6:8e:d5:b8:dd:a7:11:93:2a:26:15:83: 47:dc:a6:71:30:7d:15:b5:4b:ce:6c:68:85:6f:d7:35:02:33: b9:32:d0:93:0d:4f:ee:3e:74:db:2f:49:98:73:4f:70:e8:36: d7:6e:4a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfDBUcyk2WyCfb5ffzOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1 YmU2YzQwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EyhlMWUyOGIxMWVkNTAzNDQ5NTk0ZDg0YzBmYTRmZjdiNGYwNWJmNmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr8qyFVVpzp8H3WY/99RKouQvDxb pOw6c+RV6wjP2HievJ4IqQsDGpI6ReUIq/k/zmR5Ao+stStK07ACFgfSIRyT4+jm AuEgWlJpJ+3dZbY32Y4XsAwaB3VoXnk7sBAMURsZdpL3BxtFqyOsa7qc/2RKzuVe FygoxInZlopylQAM5xxvvEH0qyVeCk9pSlEPRN8LS/7JN/DQCGDdGhTJNv8OY5UP tziy+QY6CsiKw2ciV5y5aYI4x+OqeJZ6oiseyzvXLOC6hqOQAySLO4KSOGPEXeV1 72V0JRQNyOsG50vd/qLNqyllj+vGVpnfQkT11qRxOPRaZahffAlxMPOZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHiixHtUDRJWU2EwPpP97TwW/bVMB8GA1UdIwQY MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2 LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3NKaGQZ yNfMrp/VxNEVauW8usu3qghzWKcXhF9mnjBwpdCc63o8qPoWWQLU4jM1D1oMILJ6 JKtQZGf+hPW23c2Mb6x9S1oFnrgMF8hZGQPeHCCVisCIr+6xd2IF2AgFbznR0A+n +kWRoqUum2O8hZPxqAXzqZVbqSSI7zEQUdP6ajzZkzZbXxFW9DLr86O0SRjP3faP LG5WsoNGQscxVaMrmOEeTy9jx+j1KjT3p3uWqofeGHTsEQcN/Ht/fssuKD9QsA0N 4xMhydFV9o7VuN2nEZMqJhWDR9ymcTB9FbVLzmxohW/XNQIzuTLQkw1P7j502y9J mHNPcOg2125KEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:19 2025 by rpki-client