This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json) Hash identifier: 78adkayws/cCFdh1SkdFRjtSiXnRBGGE+5JEx7FJPx0= Subject key identifier: DF:99:30:55:02:C9:D1:D3:80:30:83:15:28:66:68:6C:5C:6B:03:1B Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01 Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001 Certificate serial: 019AF19B0318A40A3A2B067812F72F2E409B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft Manifest number: 015C Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: fQyFAYXrw4QOyQ9q8jYNwgjyviygl7w+bKmKnoOXSWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:03:18:a4:0a:3a:2b:06:78:12:f7:2f:2e:40:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=df99305502c9d1d3803083152866686c5c6b031b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:c9:90:8d:b3:fe:80:50:71:87:42:77:6d: c9:f1:67:22:3a:f2:06:8d:d7:9a:58:ae:b1:8b:7b: d4:d8:6a:39:2e:26:2d:7b:14:53:64:b1:79:54:d8: 86:20:f0:b9:3b:fa:9c:01:b6:b6:38:b5:d0:c1:75: 9c:dd:9f:d9:1e:e6:02:28:15:49:36:5b:64:2e:7c: c2:fe:f2:e9:7e:a6:fb:cd:96:6b:e6:dc:5c:8c:ed: 05:71:3b:13:2c:7a:2e:da:3a:ec:98:18:1e:b9:2b: e6:7d:d4:07:42:32:1e:3c:d9:fb:9f:c3:ac:2d:9a: db:ce:1f:a3:05:2b:f3:b1:19:ba:16:07:bc:0c:26: 61:e5:ce:96:19:a4:ad:ba:1f:65:6a:1c:b0:bd:16: ce:d6:7a:48:43:a2:f3:12:44:9a:3f:49:cb:b1:f3: 8b:f6:d6:15:88:1a:67:98:e9:03:bb:47:c6:ef:3c: 85:d5:99:d6:a0:e9:00:01:62:cc:b0:5d:52:8c:a1: 02:de:89:16:33:6c:56:9f:96:9d:04:93:6d:9c:73: ba:0c:fc:06:3b:59:4f:de:c7:bd:bb:f9:86:b1:76: 68:57:f0:50:88:28:dc:cd:91:00:26:4f:b8:e3:7d: 99:96:db:d8:92:a6:0e:f1:c0:83:85:47:50:27:19: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:99:30:55:02:C9:D1:D3:80:30:83:15:28:66:68:6C:5C:6B:03:1B X509v3 Authority Key Identifier: keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:99:26:71:7f:66:a0:9b:02:f3:57:69:e0:81:59:3a:01:b9: 7f:3e:43:22:c0:9d:19:ad:bf:40:14:d2:23:23:15:23:9c:1d: de:07:9d:3a:2b:0c:ea:20:c0:29:3c:41:e7:7f:ed:2e:84:7e: f6:99:04:1b:a3:18:21:fc:4e:b8:8c:4f:c1:74:15:21:b9:d0: 1c:ae:3a:26:ea:2b:46:f7:bb:1b:cb:72:64:a4:76:b6:a9:af: ad:3b:bf:cf:c9:d9:90:90:cb:2e:0f:d6:9b:25:1a:84:5f:cc: e1:13:8c:ab:54:21:d7:d7:b0:25:8c:31:01:b4:29:ec:90:6c: 59:76:e1:1c:dd:2f:ed:fa:9a:96:d5:e3:d3:d2:e7:c7:67:b9: a9:48:a2:0e:3d:99:fe:78:39:b1:76:21:d8:fa:d6:1a:42:e3: ca:7b:1c:ef:b7:48:0b:95:f3:2c:0b:15:90:cb:d2:99:7b:71: 94:5d:a8:b5:b0:ee:78:be:e8:93:a2:72:ed:90:fa:be:5f:73: 7d:73:3f:63:46:86:7f:8a:0e:36:c7:b4:1a:ff:c4:42:8c:77: 7c:81:2c:c5:13:dd:cf:59:2f:75:12:cc:70:71:1b:1f:e6:04: 10:88:aa:a4:10:c1:bb:2c:2a:51:10:b5:14:8e:7f:05:1e:01: 0e:bd:12:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwMYpAo6KwZ4EvcvLkCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZGQ4N2FiMTE1NGZlZDVmOWJkMmI4YjU1MWExNTJiMTI3 NWMwMDEwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EyhkZjk5MzA1NTAyYzlkMWQzODAzMDgzMTUyODY2Njg2YzVjNmIwMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5zJkI2z/oBQcYdCd23J8WciOvIG jdeaWK6xi3vU2Go5LiYtexRTZLF5VNiGIPC5O/qcAba2OLXQwXWc3Z/ZHuYCKBVJ NltkLnzC/vLpfqb7zZZr5txcjO0FcTsTLHou2jrsmBgeuSvmfdQHQjIePNn7n8Os LZrbzh+jBSvzsRm6Fge8DCZh5c6WGaStuh9lahywvRbO1npIQ6LzEkSaP0nLsfOL 9tYViBpnmOkDu0fG7zyF1ZnWoOkAAWLMsF1SjKEC3okWM2xWn5adBJNtnHO6DPwG O1lP3se9u/mGsXZoV/BQiCjczZEAJk+4432ZltvYkqYO8cCDhUdQJxme+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+ZMFUCydHTgDCDFShmaGxcawMbMB8GA1UdIwQY MBaAFB/dh6sRVP7V+b0ri1UaFSsSdcABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUt YjQxN2FjOWJiZmEzLzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NjZiYTQtZTY4My00YjA0LTlmNDUtYjQxN2FjOWJiZmEz LzEvSDkySHF4RlVfdFg1dlN1TFZSb1ZLeEoxd0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZkmcX9m oJsC81dp4IFZOgG5fz5DIsCdGa2/QBTSIyMVI5wd3gedOisM6iDAKTxB53/tLoR+ 9pkEG6MYIfxOuIxPwXQVIbnQHK46JuorRve7G8tyZKR2tqmvrTu/z8nZkJDLLg/W myUahF/M4ROMq1Qh19ewJYwxAbQp7JBsWXbhHN0v7fqaltXj09Lnx2e5qUiiDj2Z /ng5sXYh2PrWGkLjynsc77dIC5XzLAsVkMvSmXtxlF2otbDueL7ok6Jy7ZD6vl9z fXM/Y0aGf4oONse0Gv/EQox3fIEsxRPdz1kvdRLMcHEbH+YEEIiqpBDBuywqURC1 FI5/BR4BDr0S6g== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:11 2025 by rpki-client