This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json) Hash identifier: 6ZrHkmUyKYmJCNaFF2h5Eh9zXGbiiLrIJMr7zANVQ2E= Subject key identifier: AD:26:35:D4:E7:17:1F:1C:A1:30:6D:89:F2:E0:87:2A:26:52:48:9E Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3 Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3 Certificate serial: 019AF1D1DE30DA05DA2735F99563C4BEE589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:54 +0000 Manifest this update: Sat 06 Dec 2025 04:00:54 +0000 Manifest next update: Sun 07 Dec 2025 04:00:54 +0000 Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: KjQ2jzmjveriTxeC/eKTJRoVJ8ifWeKQl3oRfyoPmy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:de:30:da:05:da:27:35:f9:95:63:c4:be:e5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3 Validity Not Before: Dec 6 04:00:54 2025 GMT Not After : Dec 7 04:00:54 2025 GMT Subject: CN=ad2635d4e7171f1ca1306d89f2e0872a2652489e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:00:0d:8e:8a:28:d7:61:7f:b4:3e:3c:1c: a3:99:42:1a:b3:84:f5:9a:b5:8f:9e:b0:42:47:a8: ad:1c:89:af:89:ba:5a:6e:9e:7f:cb:8b:ac:8c:77: 01:e1:87:ef:37:09:ee:aa:02:32:a6:c9:98:7f:b3: 32:53:df:78:ee:d2:a0:5a:19:ee:e6:87:27:c1:a0: 0e:13:50:66:4a:71:b2:5f:ed:e9:7b:29:0f:99:7e: c3:81:12:61:b2:28:08:0b:47:00:eb:8c:f2:b0:16: 64:97:cd:c3:38:a2:b9:c4:aa:9b:03:be:0d:4d:0d: 7b:e7:2b:72:19:41:0e:59:89:59:95:1c:87:28:45: be:d7:2f:4e:62:c7:aa:c7:b7:71:d5:d6:33:46:6d: 15:0e:67:f2:ae:95:6e:d9:39:df:80:05:1f:57:2c: b1:a0:d2:aa:d4:32:7f:c3:8b:a2:f3:fc:1d:41:1e: b0:0e:45:f8:1f:36:8d:b3:8a:fb:fc:9b:99:02:26: 3e:55:7c:ff:18:25:b4:2d:0d:99:3e:80:74:8b:b2: 92:6d:a0:b7:9a:fa:e9:f7:6c:82:13:1a:05:6a:7b: 15:2a:82:3c:e9:b5:c8:ec:5c:95:7b:39:4f:ac:bf: b9:f2:20:12:6b:52:5d:d7:be:e7:3f:fc:9f:5d:f7: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:26:35:D4:E7:17:1F:1C:A1:30:6D:89:F2:E0:87:2A:26:52:48:9E X509v3 Authority Key Identifier: keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0f:6b:34:9b:92:b6:8c:d6:b6:8a:9b:07:db:a9:1b:18:3b: 64:f6:ed:bc:dd:ce:4f:27:1d:88:18:aa:72:69:26:0b:67:c4: 5a:30:34:6c:51:3f:b7:6b:27:31:51:a8:52:5a:f9:0b:c7:ad: 5d:56:b3:08:1e:a5:ae:33:ca:62:73:24:bb:b3:b5:73:3e:4c: 6b:83:3c:b6:69:b2:c2:7c:59:3b:72:6c:5f:f3:bf:6f:fd:75: 05:5b:8c:d5:c2:fc:e6:b1:fd:f3:43:b5:ec:a5:da:1a:9b:66: ed:92:ed:a3:10:4e:59:ef:7f:58:38:3c:4b:63:c5:61:ce:d7: 6f:43:c6:69:96:37:18:a9:ab:5a:3f:67:45:4c:00:4e:b3:cf: 68:c9:df:d4:ce:a7:bb:08:22:c5:6c:a3:b1:77:ee:fc:d1:31: 80:14:83:09:57:96:7d:cb:53:cb:b6:a0:89:12:97:99:97:6a: 10:da:1e:d0:d3:d7:fc:59:9d:5e:cf:03:d7:16:88:72:03:83: 14:f4:aa:a4:d9:b0:37:c7:c7:09:26:94:8e:50:17:16:f2:58: 40:7c:21:c4:03:f9:84:ae:83:2e:b9:90:a7:c4:d5:e3:be:56: be:77:e0:68:63:f1:d8:39:2b:36:10:40:00:80:5b:b0:6f:1d: f6:50:17:b8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrx0d4w2gXaJzX5lWPEvuWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWIyN2MxZDU0M2FlMWVmZTgzYTE0MWJlMTI0NDRlOTI0 MThmZjMwHhcNMjUxMjA2MDQwMDU0WhcNMjUxMjA3MDQwMDU0WjAzMTEwLwYDVQQD EyhhZDI2MzVkNGU3MTcxZjFjYTEzMDZkODlmMmUwODcyYTI2NTI0ODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta4ADY6KKNdhf7Q+PByjmUIas4T1 mrWPnrBCR6itHImvibpabp5/y4usjHcB4YfvNwnuqgIypsmYf7MyU9947tKgWhnu 5ocnwaAOE1BmSnGyX+3peykPmX7DgRJhsigIC0cA64zysBZkl83DOKK5xKqbA74N TQ175ytyGUEOWYlZlRyHKEW+1y9OYseqx7dx1dYzRm0VDmfyrpVu2TnfgAUfVyyx oNKq1DJ/w4ui8/wdQR6wDkX4HzaNs4r7/JuZAiY+VXz/GCW0LQ2ZPoB0i7KSbaC3 mvrp92yCExoFansVKoI86bXI7FyVezlPrL+58iASa1Jd177nP/yfXfcjWQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFK0mNdTnFx8coTBtifLghyomUkieMB8GA1UdIwQY MBaAFPlbJ8HVQ64e/oOhQb4SRE6SQY/zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Wc253ZFZEcmg3LWc2RkJ2aEpFVHBKQmpfTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYWU4NTU0LTc0NGEtNDJkOS1iNTE4 LWFiYWQxZmZiODExYy8xLzEtVnNud2RWRHJoNy1nNkZCdmhKRVRwSkJqX00ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2NiL2FlODU1NC03NDRhLTQyZDktYjUxOC1hYmFkMWZmYjgx MWMvMS8xLVZzbndkVkRyaDctZzZGQnZoSkVUcEpCal9NLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA9r NJuStozWtoqbB9upGxg7ZPbtvN3OTycdiBiqcmkmC2fEWjA0bFE/t2snMVGoUlr5 C8etXVazCB6lrjPKYnMku7O1cz5Ma4M8tmmywnxZO3JsX/O/b/11BVuM1cL85rH9 80O17KXaGptm7ZLtoxBOWe9/WDg8S2PFYc7Xb0PGaZY3GKmrWj9nRUwATrPPaMnf 1M6nuwgixWyjsXfu/NExgBSDCVeWfctTy7agiRKXmZdqENoe0NPX/FmdXs8D1xaI cgODFPSqpNmwN8fHCSaUjlAXFvJYQHwhxAP5hK6DLrmQp8TV475WvnfgaGPx2Dkr NhBAAIBbsG8d9lAXuA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:12 2025 by rpki-client