This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json) Hash identifier: QtulAu5AU5EapDFx0bTofaK1ML2DDobReHphDz7BSgg= Subject key identifier: B8:AE:0A:A4:E9:3C:C7:E8:9E:00:3E:44:63:9A:27:37:32:A2:3A:98 Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e Certificate serial: 019AF12EB09F14CE3272F77ECF66C1D445A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft Manifest number: 0CE2 Signing time: Sat 06 Dec 2025 01:02:40 +0000 Manifest this update: Sat 06 Dec 2025 01:02:40 +0000 Manifest next update: Sun 07 Dec 2025 01:02:40 +0000 Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: vd37+mmzurCWTM2HDttssyYguZtGzBrmkLP4MeE1kB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b0:9f:14:ce:32:72:f7:7e:cf:66:c1:d4:45:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e Validity Not Before: Dec 6 01:02:40 2025 GMT Not After : Dec 7 01:02:40 2025 GMT Subject: CN=b8ae0aa4e93cc7e89e003e44639a273732a23a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:96:5d:f7:08:53:25:3c:4b:61:dc:01:84: ed:fc:f6:cf:44:5e:66:5f:dc:a3:c6:f0:ce:c4:f5: 33:3d:45:d5:f5:1c:a1:ba:1b:72:c0:c7:d7:f1:e0: 5c:e5:7c:b8:2a:2f:bc:a0:a1:fa:a7:a4:af:45:73: 38:0a:bd:be:14:02:d3:ed:6a:34:40:86:70:e1:1f: 78:8b:ae:3c:33:ba:54:f9:88:0e:56:84:d7:8e:4f: 07:0f:60:2e:bd:c3:88:69:2a:7a:2c:af:1e:a7:8b: 7f:e4:8f:c4:15:67:59:85:ec:40:0b:1a:c0:cf:4c: a7:b0:29:7f:71:eb:b2:ee:e0:82:40:20:d7:5d:1f: c0:18:18:95:0b:06:db:78:b0:ca:9d:46:4c:a6:4b: 1d:b7:03:68:39:2d:30:93:da:5c:18:13:c2:1e:e5: 06:e7:4b:42:72:e8:eb:b7:c1:96:9d:3a:3e:9e:e2: 0f:0b:45:68:c2:35:7e:e2:15:f2:b0:15:f4:3a:c1: 24:02:39:99:b1:d4:46:2b:4a:29:38:e3:24:3e:bc: 70:19:e7:db:38:cc:3f:91:16:a6:5d:2b:eb:a4:db: ef:76:f7:c3:ad:bf:c8:2f:f7:cf:f2:96:fa:ef:e7: 61:8d:df:96:78:fb:eb:59:64:a9:d2:72:08:48:c4: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AE:0A:A4:E9:3C:C7:E8:9E:00:3E:44:63:9A:27:37:32:A2:3A:98 X509v3 Authority Key Identifier: keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2f:c1:f7:46:c3:3d:9c:dc:58:37:ee:64:ce:cc:9c:61:96: c1:3a:89:f0:17:ae:0b:d8:de:bc:b5:92:b2:19:a6:5a:94:94: 56:32:b5:4e:28:0e:c7:3d:4a:00:07:92:a2:d6:06:ad:c4:7f: 44:c6:9f:0e:05:6f:f0:fe:d3:72:c8:87:55:8e:2a:35:d8:98: e6:ce:44:bb:a7:0f:74:41:d0:47:ad:f1:51:f0:c4:73:23:81: 3b:4e:1c:ac:10:8a:ee:0a:fc:4d:26:dd:7e:f8:dc:27:2a:6b: 5d:5c:95:8d:78:d8:b0:00:95:a9:f6:bb:6f:92:3c:0b:55:eb: 57:9b:4b:55:ce:b0:f9:21:8a:ae:77:4a:bb:e5:24:86:bc:46: ba:4a:2b:45:ec:2c:ca:ac:b5:d2:d5:c1:a1:96:a6:3f:99:ff: 67:90:6c:c5:a9:b8:05:5a:ac:fe:39:98:c3:22:4c:06:a5:13: 97:02:bc:a0:1f:62:fa:0a:b4:bf:d5:d3:bb:a7:f7:6f:fd:6c: 72:fd:47:5e:21:7f:dd:2b:18:21:b9:0c:0d:da:59:26:59:6c: 78:3c:87:96:3a:d9:76:b6:d8:9a:89:7f:49:4d:50:2f:37:d9: 7f:2f:96:72:62:64:57:85:13:5a:c2:46:48:66:9c:d4:72:1f: f4:b2:f4:90 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLrCfFM4ycvd+z2bB1EWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYmU1MmQ4MzRlMjY4ZGM2OTg4MzAyOTJmZGU0YjYzYzdk YTM5MmUwHhcNMjUxMjA2MDEwMjQwWhcNMjUxMjA3MDEwMjQwWjAzMTEwLwYDVQQD EyhiOGFlMGFhNGU5M2NjN2U4OWUwMDNlNDQ2MzlhMjczNzMyYTIzYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDWWXfcIUyU8S2HcAYTt/PbPRF5m X9yjxvDOxPUzPUXV9RyhuhtywMfX8eBc5Xy4Ki+8oKH6p6SvRXM4Cr2+FALT7Wo0 QIZw4R94i648M7pU+YgOVoTXjk8HD2AuvcOIaSp6LK8ep4t/5I/EFWdZhexACxrA z0ynsCl/ceuy7uCCQCDXXR/AGBiVCwbbeLDKnUZMpksdtwNoOS0wk9pcGBPCHuUG 50tCcujrt8GWnTo+nuIPC0VowjV+4hXysBX0OsEkAjmZsdRGK0opOOMkPrxwGefb OMw/kRamXSvrpNvvdvfDrb/IL/fP8pb67+dhjd+WePvrWWSp0nIISMT6ewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLiuCqTpPMfongA+RGOaJzcyojqYMB8GA1UdIwQY MBaAFPu+Utg04mjcaYgwKS/eS2PH2jkuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03NVMyRFRpYU54cGlEQXBMOTVMWThmYU9TNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0YjdhLTdlYjAtNDZhMi04YThh LTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFwTDk1TFk4ZmFPUzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M5L2Q4NGI3YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMx ZjUvMS8xLTc1UzJEVGlhTnhwaURBcEw5NUxZOGZhT1M0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy/B 90bDPZzcWDfuZM7MnGGWwTqJ8BeuC9jevLWSshmmWpSUVjK1TigOxz1KAAeSotYG rcR/RMafDgVv8P7TcsiHVY4qNdiY5s5Eu6cPdEHQR63xUfDEcyOBO04crBCK7gr8 TSbdfvjcJyprXVyVjXjYsACVqfa7b5I8C1XrV5tLVc6w+SGKrndKu+UkhrxGukor Rewsyqy10tXBoZamP5n/Z5Bsxam4BVqs/jmYwyJMBqUTlwK8oB9i+gq0v9XTu6f3 b/1scv1HXiF/3SsYIbkMDdpZJllseDyHljrZdrbYmol/SU1QLzfZfy+WcmJkV4UT WsJGSGac1HIf9LL0kA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:26 2025 by rpki-client