This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft File: 1-9F4zWAolpi3zZXd17FpF0kLRAc.mft (raw, json) Hash identifier: tf220DyCdx173reAD60NMZMAC6/moJTtt82LZK+9QK4= Subject key identifier: 10:90:C8:3F:72:88:77:38:81:36:3A:70:01:78:AA:50:CB:E7:24:BB Authority key identifier: FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07 Certificate issuer: /CN=fbd178cd60289698b7cd95ddd7b16917490b4407 Certificate serial: 019AF50BC9CC0DE500A509DA8BB8D23B8A27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft Manifest number: 0C31 Signing time: Sat 06 Dec 2025 19:03:01 +0000 Manifest this update: Sat 06 Dec 2025 19:03:01 +0000 Manifest next update: Sun 07 Dec 2025 19:03:01 +0000 Files and hashes: 1: 1-9F4zWAolpi3zZXd17FpF0kLRAc.crl (hash: LrFBtotrQ8pnYcAne2jADm/9xdwroFhw/efx1bmTGuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c9:cc:0d:e5:00:a5:09:da:8b:b8:d2:3b:8a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd178cd60289698b7cd95ddd7b16917490b4407 Validity Not Before: Dec 6 19:03:01 2025 GMT Not After : Dec 7 19:03:01 2025 GMT Subject: CN=1090c83f7288773881363a700178aa50cbe724bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:e4:a9:d6:a0:12:07:db:6e:e4:c0:ee:7b: 15:c0:57:79:06:66:c9:c2:e1:c6:db:be:b5:c9:b2: 6f:e5:00:c0:ff:50:4b:cd:33:ad:a5:75:21:88:e0: 91:76:2f:30:1b:99:ce:b2:c5:89:c9:c7:d1:db:68: e5:31:a4:48:2f:7d:c4:38:f1:c8:1f:98:8a:0f:0b: 62:00:68:3c:e9:65:57:df:30:6f:f5:21:5c:13:49: ad:24:f3:fd:b3:51:19:66:df:9e:e1:89:f7:08:76: ab:c3:c2:01:b5:42:20:f0:c9:1e:ca:96:d4:56:14: 0c:78:88:fb:b0:68:c1:46:26:63:36:a9:e8:5a:ff: 84:0e:c1:55:4a:eb:37:b7:3e:28:b5:3d:57:9f:50: 8f:a4:cd:60:15:d3:b4:1e:d7:77:f4:1a:ec:3e:43: da:9d:14:7b:10:bc:7a:cb:e3:9f:56:c1:b1:d0:c2: 9b:b3:d2:76:4b:ce:8e:84:f9:a0:ca:02:6a:a7:c7: 5e:30:73:6e:1d:6c:05:27:36:32:86:a1:05:a7:f1: d7:1c:d8:1f:ab:8b:f5:16:51:76:c0:fc:8d:55:28: 0c:e9:58:5b:7f:e9:8d:fe:77:ca:fb:b0:d2:41:0b: 79:8e:01:a1:58:eb:5f:78:1c:4d:a8:f4:9f:c5:04: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:90:C8:3F:72:88:77:38:81:36:3A:70:01:78:AA:50:CB:E7:24:BB X509v3 Authority Key Identifier: keyid:FB:D1:78:CD:60:28:96:98:B7:CD:95:DD:D7:B1:69:17:49:0B:44:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9F4zWAolpi3zZXd17FpF0kLRAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27bf2a-82a4-48d9-b4e2-2b71fc333663/1/1-9F4zWAolpi3zZXd17FpF0kLRAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:3b:61:a2:9c:66:40:1a:b4:c1:e0:2f:e9:5c:a7:0f:2d:4b: ed:ce:d3:00:57:5c:28:34:5d:25:ce:b5:e2:8c:18:b7:f6:f2: 7b:d5:e8:dd:02:fc:4e:63:fa:1c:27:75:bb:28:15:19:95:8a: 69:8e:3b:a6:bc:cc:a4:6d:88:c3:3d:e5:18:8a:36:28:47:b5: 75:4d:c4:21:b9:a2:82:92:1f:88:27:7c:0c:ed:71:1f:bc:90: aa:d6:35:36:d7:9d:4b:58:77:e9:61:26:4f:75:41:a8:8b:13: 0b:c0:77:ea:cf:f0:69:ec:cd:8f:61:e8:0b:10:05:b4:f7:74: 93:26:89:81:36:09:21:df:82:37:de:7d:ac:07:36:78:46:98: 05:52:82:93:9c:9a:d8:fb:19:25:ce:cc:6d:cb:80:53:6d:b2: b3:46:11:06:ff:c4:4e:c7:a6:02:35:7a:87:40:ba:d9:e6:0e: cb:1e:b5:18:0c:b1:6b:b8:42:54:72:28:45:57:9e:88:bc:70: f7:cf:b2:52:63:e4:cf:88:21:61:87:9d:17:ea:ca:9c:cc:01: f6:68:e9:98:99:fe:4c:2e:f1:22:55:a4:55:74:97:c7:50:d4: fa:f9:58:ca:90:b5:11:67:3e:3a:71:dc:29:8f:1b:10:63:ef: 49:3f:dd:d8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1C8nMDeUApQnai7jSO4onMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDE3OGNkNjAyODk2OThiN2NkOTVkZGQ3YjE2OTE3NDkw YjQ0MDcwHhcNMjUxMjA2MTkwMzAxWhcNMjUxMjA3MTkwMzAxWjAzMTEwLwYDVQQD EygxMDkwYzgzZjcyODg3NzM4ODEzNjNhNzAwMTc4YWE1MGNiZTcyNGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1HkqdagEgfbbuTA7nsVwFd5BmbJ wuHG2761ybJv5QDA/1BLzTOtpXUhiOCRdi8wG5nOssWJycfR22jlMaRIL33EOPHI H5iKDwtiAGg86WVX3zBv9SFcE0mtJPP9s1EZZt+e4Yn3CHarw8IBtUIg8MkeypbU VhQMeIj7sGjBRiZjNqnoWv+EDsFVSus3tz4otT1Xn1CPpM1gFdO0Htd39BrsPkPa nRR7ELx6y+OfVsGx0MKbs9J2S86OhPmgygJqp8deMHNuHWwFJzYyhqEFp/HXHNgf q4v1FlF2wPyNVSgM6Vhbf+mN/nfK+7DSQQt5jgGhWOtfeBxNqPSfxQTDPQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBCQyD9yiHc4gTY6cAF4qlDL5yS7MB8GA1UdIwQY MBaAFPvReM1gKJaYt82V3dexaRdJC0QHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05RjR6V0FvbHBpM3paWGQxN0ZwRjBrTFJBYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvMjdiZjJhLTgyYTQtNDhkOS1iNGUy LTJiNzFmYzMzMzY2My8xLzEtOUY0eldBb2xwaTN6WlhkMTdGcEYwa0xSQWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2MzLzI3YmYyYS04MmE0LTQ4ZDktYjRlMi0yYjcxZmMzMzM2 NjMvMS8xLTlGNHpXQW9scGkzelpYZDE3RnBGMGtMUkFjLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjth opxmQBq0weAv6VynDy1L7c7TAFdcKDRdJc614owYt/bye9Xo3QL8TmP6HCd1uygV GZWKaY47przMpG2Iwz3lGIo2KEe1dU3EIbmigpIfiCd8DO1xH7yQqtY1NtedS1h3 6WEmT3VBqIsTC8B36s/waezNj2HoCxAFtPd0kyaJgTYJId+CN959rAc2eEaYBVKC k5ya2PsZJc7MbcuAU22ys0YRBv/ETsemAjV6h0C62eYOyx61GAyxa7hCVHIoRVee iLxw98+yUmPkz4ghYYedF+rKnMwB9mjpmJn+TC7xIlWkVXSXx1DU+vlYypC1EWc+ OnHcKY8bEGPvST/d2A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:30 2025 by rpki-client