This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json) Hash identifier: wNnm6zitNXDtilBZc+dpSXpFdgP5aUCBXpuuopkXc9g= Subject key identifier: C4:5A:8B:27:E7:31:47:6D:27:3D:C3:89:62:12:DD:5C:A4:BB:6E:ED Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c Certificate serial: 019AF31C10554D7DFB835452307E613A1A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft Manifest number: 0E97 Signing time: Sat 06 Dec 2025 10:01:33 +0000 Manifest this update: Sat 06 Dec 2025 10:01:33 +0000 Manifest next update: Sun 07 Dec 2025 10:01:33 +0000 Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: quul1gF/3uk4ZFuxI5vp5QGeSM2EPzoa2yzoZPIHAes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:10:55:4d:7d:fb:83:54:52:30:7e:61:3a:1a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c Validity Not Before: Dec 6 10:01:33 2025 GMT Not After : Dec 7 10:01:33 2025 GMT Subject: CN=c45a8b27e731476d273dc3896212dd5ca4bb6eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:07:a7:49:e9:57:85:5b:a8:20:ae:f9:e0:93: 8f:d5:15:b2:8c:5a:23:c9:1d:15:7d:85:70:aa:49: a1:48:ed:00:aa:2f:1e:46:1a:d8:2f:58:c4:ca:fa: e3:89:e3:05:24:51:b3:99:90:07:8e:26:e3:7d:9d: a9:47:5e:a5:f9:27:ae:c8:9c:f7:f9:fb:c1:bc:a6: 4b:41:df:3d:45:d3:d6:65:51:05:79:38:5b:83:04: 68:63:ae:c1:58:92:ce:5a:e0:84:7a:3f:e5:41:5b: 5e:24:ee:15:66:d6:15:4b:93:08:cb:01:b1:64:c3: 6d:0d:bd:87:a3:39:32:dc:05:b5:5e:4e:3b:db:0a: 66:ba:c1:a7:44:63:cd:e6:e0:75:40:b6:be:bd:f6: a7:2f:56:78:0d:b3:e9:16:69:31:55:04:29:07:03: 5f:de:ed:7d:d6:e4:3d:9c:86:fb:91:12:00:0b:40: d1:bb:99:91:3b:6f:0c:d1:e3:d9:3c:69:a5:e3:1c: d1:6b:3a:be:ae:74:3b:f1:2b:e9:c5:03:e7:92:a4: e4:64:2c:c8:f7:80:76:60:aa:85:55:8b:50:36:11: 72:d1:b7:9d:26:21:25:24:64:b2:fe:0c:fe:6d:74: 35:8c:15:9e:c3:a9:8b:0f:69:58:e6:68:0d:ab:bc: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5A:8B:27:E7:31:47:6D:27:3D:C3:89:62:12:DD:5C:A4:BB:6E:ED X509v3 Authority Key Identifier: keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:39:3f:6a:40:ae:5b:02:40:25:53:84:2c:33:6c:5d:9b:84: 56:2b:d1:37:6d:fe:bb:31:55:3b:da:3e:36:77:34:60:6d:54: 4e:e6:74:ae:d5:ac:7e:f7:43:5a:21:d6:e2:98:16:14:93:59: 7d:05:13:aa:39:45:36:b3:d9:61:55:38:16:1c:e8:f2:e4:0b: 3b:07:1f:29:83:c4:ab:27:2d:d8:ef:e9:90:9e:10:1d:2a:40: a5:c6:f5:e7:69:8e:46:17:c7:66:3d:c3:3e:a4:00:8a:da:05: 2f:6c:5f:88:a6:c4:20:09:d6:53:69:2c:46:77:c9:ad:bd:90: a0:47:6d:9e:d2:0a:e0:50:65:25:55:3a:52:82:75:19:d9:25: 1e:63:5b:08:46:44:58:19:f1:4a:14:57:73:8d:28:b2:10:20: dc:58:40:af:b4:14:fc:74:70:66:b0:4a:66:5c:95:55:e1:d2: 24:92:ce:84:83:63:d9:27:47:fd:b3:92:55:88:2a:cc:8b:14: 29:cd:f4:e0:ec:d5:90:59:33:3f:5a:a0:3c:93:2c:c7:9e:27: 77:2a:ca:34:2a:a8:f4:f9:ab:01:e8:c4:56:a6:b4:cd:9b:04: 75:95:7e:d7:be:74:7f:17:e3:9e:6f:08:0e:31:b5:3b:5c:a5: cd:e1:0e:fc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHBBVTX37g1RSMH5hOhpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMWE4M2ZiYjNlMWI5YjYzODMxYTY4MWY2YjcyMmEyNjUw MTZjOWMwHhcNMjUxMjA2MTAwMTMzWhcNMjUxMjA3MTAwMTMzWjAzMTEwLwYDVQQD EyhjNDVhOGIyN2U3MzE0NzZkMjczZGMzODk2MjEyZGQ1Y2E0YmI2ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQenSelXhVuoIK754JOP1RWyjFoj yR0VfYVwqkmhSO0Aqi8eRhrYL1jEyvrjieMFJFGzmZAHjibjfZ2pR16l+SeuyJz3 +fvBvKZLQd89RdPWZVEFeThbgwRoY67BWJLOWuCEej/lQVteJO4VZtYVS5MIywGx ZMNtDb2Hozky3AW1Xk472wpmusGnRGPN5uB1QLa+vfanL1Z4DbPpFmkxVQQpBwNf 3u191uQ9nIb7kRIAC0DRu5mRO28M0ePZPGml4xzRazq+rnQ78SvpxQPnkqTkZCzI 94B2YKqFVYtQNhFy0bedJiElJGSy/gz+bXQ1jBWew6mLD2lY5mgNq7zCgQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMRaiyfnMUdtJz3DiWIS3Vyku27tMB8GA1UdIwQY MBaAFPoag/uz4bm2ODGmgfa3IqJlAWycMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1ocUQtN1BodWJZNE1hYUI5cmNpb21VQmJKdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvNTkyZDQzLTQwZDItNGRlYi05NmI0 LWQwMTI2YTVlMzczMy8xLzEtaHFELTdQaHViWTRNYWFCOXJjaW9tVUJiSncubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2RlLzU5MmQ0My00MGQyLTRkZWItOTZiNC1kMDEyNmE1ZTM3 MzMvMS8xLWhxRC03UGh1Ylk0TWFhQjlyY2lvbVVCYkp3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjk/ akCuWwJAJVOELDNsXZuEVivRN23+uzFVO9o+Nnc0YG1UTuZ0rtWsfvdDWiHW4pgW FJNZfQUTqjlFNrPZYVU4Fhzo8uQLOwcfKYPEqyct2O/pkJ4QHSpApcb152mORhfH Zj3DPqQAitoFL2xfiKbEIAnWU2ksRnfJrb2QoEdtntIK4FBlJVU6UoJ1GdklHmNb CEZEWBnxShRXc40oshAg3FhAr7QU/HRwZrBKZlyVVeHSJJLOhINj2SdH/bOSVYgq zIsUKc304OzVkFkzP1qgPJMsx54ndyrKNCqo9PmrAejEVqa0zZsEdZV+1750fxfj nm8IDjG1O1ylzeEO/A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:01:54 2025 by rpki-client