This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json) Hash identifier: q4oaCua8Mtw0kwMFgGw1jwyVAWwbGyfAWyJcPbOlHWU= Subject key identifier: F6:DE:13:0D:F3:DD:43:01:76:C3:DD:FB:ED:02:13:C3:76:43:43:6F Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57 Certificate serial: 019AF1D25E5DEF70E1FBB8C5052CAE913087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft Manifest number: 06E8 Signing time: Sat 06 Dec 2025 04:01:27 +0000 Manifest this update: Sat 06 Dec 2025 04:01:27 +0000 Manifest next update: Sun 07 Dec 2025 04:01:27 +0000 Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: +WyIQW6H52XrKNje1KmeApjpXRGJ7aFEaH2vqc+TDWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5e:5d:ef:70:e1:fb:b8:c5:05:2c:ae:91:30:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57 Validity Not Before: Dec 6 04:01:27 2025 GMT Not After : Dec 7 04:01:27 2025 GMT Subject: CN=f6de130df3dd430176c3ddfbed0213c37643436f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e6:67:d7:64:74:90:b0:25:a2:b9:b4:6b:7e: cb:51:2c:fc:3c:97:4c:2b:22:b5:b9:ea:15:b8:39: 51:e0:b5:45:52:e2:bd:28:d9:2f:03:90:5a:99:fc: fd:06:d3:1b:2a:eb:9e:f3:e6:fe:35:87:20:8f:eb: 0c:89:8a:55:10:fd:92:8a:30:e4:a4:4d:24:12:cf: eb:d2:20:5f:6b:26:2c:8e:13:d5:02:ce:28:d9:7f: 3b:09:b1:f4:a0:68:46:8b:3f:64:01:2f:51:b4:e0: ba:13:c5:32:bc:80:24:97:12:45:25:67:07:71:43: 32:8d:a3:95:51:dd:5b:cc:92:45:9a:24:31:7a:e6: b9:bb:99:5c:b2:95:32:e4:d9:25:85:3b:d1:d0:e4: 27:8c:0b:3f:e0:7b:92:e0:72:4f:ab:71:5d:5f:e7: 5a:45:82:50:53:14:5e:e2:c4:cc:0b:b2:c4:87:af: b6:28:2f:d5:ee:bd:12:c3:0d:02:d0:ba:d3:65:0b: 2e:81:ad:29:fa:8d:4b:53:9b:be:ba:08:45:22:80: ce:5a:b2:14:50:de:77:92:7e:a5:02:ac:f7:cb:3f: df:94:8d:49:9a:83:8f:62:a3:67:7d:a0:39:fc:c6: 5c:55:3d:63:3a:16:52:50:41:38:1c:9e:71:eb:90: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DE:13:0D:F3:DD:43:01:76:C3:DD:FB:ED:02:13:C3:76:43:43:6F X509v3 Authority Key Identifier: keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3f:73:df:92:ba:35:c9:87:e8:df:31:80:59:ef:e7:24:12: 4b:a6:e7:be:f0:08:91:7a:24:03:a5:62:5d:40:a4:6b:ff:04: e4:e9:a3:75:5b:b9:bc:74:f0:98:b6:65:f4:49:21:9b:cb:05: 1e:99:f8:82:2d:7b:4f:58:ee:55:7e:85:62:5f:87:c3:b7:5d: 21:11:0b:60:8b:64:fb:0b:71:36:59:a7:06:6e:b5:e1:39:a0: c0:71:12:8e:c6:ef:84:a9:3c:29:69:8b:f7:11:0f:a2:4e:73: 29:6e:aa:3d:e1:c5:7a:ec:a5:5e:11:94:45:91:3d:8b:38:07: c6:0c:83:d3:51:4b:75:e0:76:11:95:e2:59:f4:d4:f6:1e:7a: 0d:04:08:33:42:c7:fe:68:3d:d0:4a:89:0d:64:5d:4a:21:fd: de:19:26:32:c0:66:23:e5:8b:1b:94:cf:20:c4:f7:64:fb:64: 43:df:5a:b6:10:83:01:6e:01:8c:9a:9c:34:63:4d:c1:64:b9: bc:5a:15:a4:57:fd:c9:64:20:50:8e:33:4a:58:bc:b4:6f:93: 54:8d:43:1d:e9:db:1e:25:96:8e:8e:29:42:de:b8:a3:ba:06: ec:2a:95:22:d9:14:ce:14:5d:5b:25:68:2b:7f:f5:c6:ce:2c: 9d:6a:19:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0l5d73Dh+7jFBSyukTCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODc2NDE0ZGM5OTVkMTRlZGUzYTAxYTMyM2I2MmI5MDZm ODNjNTcwHhcNMjUxMjA2MDQwMTI3WhcNMjUxMjA3MDQwMTI3WjAzMTEwLwYDVQQD EyhmNmRlMTMwZGYzZGQ0MzAxNzZjM2RkZmJlZDAyMTNjMzc2NDM0MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+Zn12R0kLAlorm0a37LUSz8PJdM KyK1ueoVuDlR4LVFUuK9KNkvA5Bamfz9BtMbKuue8+b+NYcgj+sMiYpVEP2SijDk pE0kEs/r0iBfayYsjhPVAs4o2X87CbH0oGhGiz9kAS9RtOC6E8UyvIAklxJFJWcH cUMyjaOVUd1bzJJFmiQxeua5u5lcspUy5NklhTvR0OQnjAs/4HuS4HJPq3FdX+da RYJQUxRe4sTMC7LEh6+2KC/V7r0Sww0C0LrTZQsuga0p+o1LU5u+ughFIoDOWrIU UN53kn6lAqz3yz/flI1JmoOPYqNnfaA5/MZcVT1jOhZSUEE4HJ5x65DFWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbeEw3z3UMBdsPd++0CE8N2Q0NvMB8GA1UdIwQY MBaAFNSHZBTcmV0U7eOgGjI7YrkG+DxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYt MTAyYzRiYThjYzRiLzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NjlhNzMtMmNmMy00Njg3LWFjYzYtMTAyYzRiYThjYzRi LzEvMUlka0ZOeVpYUlR0NDZBYU1qdGl1UWI0UEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEz9z35K6 NcmH6N8xgFnv5yQSS6bnvvAIkXokA6ViXUCka/8E5OmjdVu5vHTwmLZl9Ekhm8sF Hpn4gi17T1juVX6FYl+Hw7ddIRELYItk+wtxNlmnBm614TmgwHESjsbvhKk8KWmL 9xEPok5zKW6qPeHFeuylXhGURZE9izgHxgyD01FLdeB2EZXiWfTU9h56DQQIM0LH /mg90EqJDWRdSiH93hkmMsBmI+WLG5TPIMT3ZPtkQ99athCDAW4BjJqcNGNNwWS5 vFoVpFf9yWQgUI4zSli8tG+TVI1DHenbHiWWjo4pQt64o7oG7CqVItkUzhRdWyVo K3/1xs4snWoZIA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:50 2025 by rpki-client