This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json) Hash identifier: 6crHn0CjD7bStH9KlO1E3esssC+CFYf9sLvak7901fo= Subject key identifier: DC:5A:7E:FA:B3:88:5C:40:63:98:FA:16:84:DB:4F:40:25:26:EF:5D Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62 Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362 Certificate serial: 019AF2768E1C21C9E66F642A9B8C7E45098D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft Manifest number: 011B Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: XyOf8j2ZrQH+N++WnoFDzwBIgLsoZeFwiY8qKO6/lws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8e:1c:21:c9:e6:6f:64:2a:9b:8c:7e:45:09:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=dc5a7efab3885c406398fa1684db4f402526ef5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:92:9b:29:c0:eb:87:4e:4e:d6:15:5e:ed:9f: c8:7a:82:ef:5b:03:5b:5f:4e:5e:ab:86:9a:49:41: f4:a6:48:d2:a7:7b:ef:04:ce:4a:a4:9d:1d:2c:b3: e6:f6:cf:f4:5d:9d:33:5f:51:06:b9:4b:87:ec:db: d6:00:a0:d1:68:89:4b:30:91:92:76:53:97:8a:58: cb:1b:fe:22:a0:9d:70:3a:06:46:12:f1:35:ae:90: ca:56:e7:31:b3:d5:57:7b:a5:36:af:1f:b5:7b:e1: 74:a6:93:78:b8:0b:be:2f:c7:c5:cc:66:93:12:1c: 7c:25:36:a7:4c:ea:be:cb:70:92:9c:b8:1c:0c:00: 8b:5e:9d:91:f4:f8:7d:89:bf:39:e0:59:da:7f:b4: 61:4f:1b:8d:95:5f:e3:5b:69:1a:8c:68:e5:f8:40: ec:f6:3c:ba:7e:22:65:76:a3:e0:6d:94:ba:b9:46: 70:a8:28:4f:51:48:06:8f:cd:b6:d4:bc:a0:9c:9c: 07:04:08:b0:79:2b:ec:62:fd:f7:b6:75:db:65:8e: 9f:f1:93:cd:84:5a:a3:57:57:27:17:77:fb:15:8a: 21:45:be:63:f8:fd:83:44:28:15:87:57:ce:b2:4e: b6:e2:1f:80:02:64:d4:aa:b7:52:ff:50:dd:1e:94: 91:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5A:7E:FA:B3:88:5C:40:63:98:FA:16:84:DB:4F:40:25:26:EF:5D X509v3 Authority Key Identifier: keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ed:f7:6c:8c:57:09:0c:4c:22:62:90:76:5e:e0:a5:11:c3: e5:5e:f3:38:ee:6d:0b:1b:a8:19:d7:12:f2:9f:a8:12:ab:25: fc:62:d2:99:0e:33:62:31:20:0e:64:7e:a1:6b:51:d0:bc:da: 49:05:11:21:07:f8:f9:43:ba:d2:7f:46:ca:04:25:a5:47:1d: 94:6e:21:4f:5c:a8:43:58:de:3b:b2:fa:47:a2:d2:4a:02:d6: 73:f6:62:30:10:2c:0b:2e:8c:14:d5:fb:ba:07:93:5f:35:68: 82:23:fd:ac:63:02:fa:dd:5b:c8:b8:e8:d8:98:38:97:aa:39: 8d:7c:ad:ed:55:1f:2f:92:09:f5:d4:e0:1e:72:7f:6c:bf:e0: f7:26:ed:54:fb:67:a1:2c:f5:98:ba:3e:51:e5:30:e2:7b:31: b0:e9:f5:a9:be:06:ae:3d:67:a3:1e:e2:ee:75:fc:06:1e:b2: ac:c7:76:4a:7c:af:b1:9d:b5:6a:f4:14:55:da:2f:e5:f9:23: fa:a3:66:3c:c3:29:b3:8b:19:18:d8:ec:10:6a:2f:e5:0b:ef: ea:9b:36:8f:6b:c3:e8:8c:68:9d:e1:3a:bc:50:3e:fa:6e:28: 7e:f5:3a:c0:0d:8e:f9:b2:bd:65:9a:cf:ba:4b:0d:51:77:90: bf:aa:88:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo4cIcnmb2Qqm4x+RQmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YzFmN2JmMWJkY2NlMzU4YmEwYmZkY2ZiZjY5NjRmM2Jl YTIzNjIwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EyhkYzVhN2VmYWIzODg1YzQwNjM5OGZhMTY4NGRiNGY0MDI1MjZlZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JKbKcDrh05O1hVe7Z/IeoLvWwNb X05eq4aaSUH0pkjSp3vvBM5KpJ0dLLPm9s/0XZ0zX1EGuUuH7NvWAKDRaIlLMJGS dlOXiljLG/4ioJ1wOgZGEvE1rpDKVucxs9VXe6U2rx+1e+F0ppN4uAu+L8fFzGaT Ehx8JTanTOq+y3CSnLgcDACLXp2R9Ph9ib854Fnaf7RhTxuNlV/jW2kajGjl+EDs 9jy6fiJldqPgbZS6uUZwqChPUUgGj8221LygnJwHBAiweSvsYv33tnXbZY6f8ZPN hFqjV1cnF3f7FYohRb5j+P2DRCgVh1fOsk624h+AAmTUqrdS/1DdHpSRTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxafvqziFxAY5j6FoTbT0AlJu9dMB8GA1UdIwQY MBaAFNXB978b3M41i6C/3Pv2lk876iNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWNIM3Z4dmN6aldMb0xfYy1fYVdUenZxSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jOTZmNWItNDkxNy00NzQzLWI2Yjkt NjgwNzYxMzI1NWIyLzEvMWNIM3Z4dmN6aldMb0xfYy1fYVdUenZxSTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jOTZmNWItNDkxNy00NzQzLWI2YjktNjgwNzYxMzI1NWIy LzEvMWNIM3Z4dmN6aldMb0xfYy1fYVdUenZxSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+33bIxX CQxMImKQdl7gpRHD5V7zOO5tCxuoGdcS8p+oEqsl/GLSmQ4zYjEgDmR+oWtR0Lza SQURIQf4+UO60n9GygQlpUcdlG4hT1yoQ1jeO7L6R6LSSgLWc/ZiMBAsCy6MFNX7 ugeTXzVogiP9rGMC+t1byLjo2Jg4l6o5jXyt7VUfL5IJ9dTgHnJ/bL/g9ybtVPtn oSz1mLo+UeUw4nsxsOn1qb4Grj1nox7i7nX8Bh6yrMd2SnyvsZ21avQUVdov5fkj +qNmPMMps4sZGNjsEGov5Qvv6ps2j2vD6IxoneE6vFA++m4ofvU6wA2O+bK9ZZrP uksNUXeQv6qIgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:11 2025 by rpki-client