This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json) Hash identifier: ziUjEpjG4qYCYmTeZ7r7E6IvI3aSZfgcaN1fOFBpd7I= Subject key identifier: 68:7A:E8:10:A7:EE:ED:7E:63:BA:8E:DA:91:6A:84:8F:3D:08:60:4D Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19 Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619 Certificate serial: 019AF276C5C2D841CBA2A62967131C52EBA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:01 +0000 Manifest this update: Sat 06 Dec 2025 07:01:01 +0000 Manifest next update: Sun 07 Dec 2025 07:01:01 +0000 Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: 6cm7RWP9D80AZpdAheASyFXaqa03iZ7J2Q1qHT7/YWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c5:c2:d8:41:cb:a2:a6:29:67:13:1c:52:eb:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619 Validity Not Before: Dec 6 07:01:01 2025 GMT Not After : Dec 7 07:01:01 2025 GMT Subject: CN=687ae810a7eeed7e63ba8eda916a848f3d08604d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:82:47:ba:00:04:a3:1e:66:86:bb:e6:33: 68:dc:7a:93:81:e1:f5:0c:1e:3b:a2:c8:25:3a:6c: 4e:e2:d2:e2:70:30:ad:b2:33:97:b9:e3:a2:f2:a9: 67:2d:c7:76:ec:69:65:60:39:c1:45:b4:ea:ba:ba: ca:af:36:29:27:0f:a0:07:23:62:9f:3a:05:de:6e: 5d:a7:72:28:e0:66:b5:e8:94:c6:7a:df:c4:7b:e1: 85:5d:75:64:ed:6e:ca:6a:e8:d7:bf:23:6b:7a:d3: c1:c3:a5:02:7b:83:58:b0:8b:06:79:1f:7c:33:35: 64:e2:d1:fd:47:ce:c6:26:ea:65:38:61:53:52:d6: a1:d8:1d:6c:0e:62:d4:d2:31:b3:2c:d8:33:70:c7: fa:45:56:aa:8a:f9:62:a3:61:44:6b:e1:25:5a:71: c6:b3:3c:10:b3:25:c5:13:e3:a4:4a:0d:86:b9:47: 57:9a:52:dd:17:fa:ca:6c:54:6c:d8:a1:53:62:6f: 63:d9:14:1e:a7:7d:1a:55:d5:b1:e5:9d:ff:c6:78: f4:d7:d2:7c:f2:df:c8:97:d4:68:1f:74:18:21:d7: 10:d2:dc:74:8d:e6:aa:51:8a:07:0f:78:1c:54:cb: f1:2c:67:55:db:09:ff:06:02:90:74:7a:16:87:99: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:E8:10:A7:EE:ED:7E:63:BA:8E:DA:91:6A:84:8F:3D:08:60:4D X509v3 Authority Key Identifier: keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:49:fa:3f:c9:e4:72:73:1b:cb:76:b0:2d:46:79:53:27:b5: e8:9d:15:e6:30:50:c0:ca:79:33:b6:a8:0f:15:5a:55:b2:84: c3:3c:97:1d:59:a5:3d:66:1f:05:58:b7:a3:05:9e:64:48:8d: c1:b8:c8:b3:f2:4e:27:1d:1e:16:ee:08:4d:cc:84:11:82:0e: c9:e1:6f:28:81:c7:65:84:c9:2a:ac:b3:b2:dc:25:7f:50:b2: 08:22:e8:48:84:41:bb:55:38:95:8f:c5:7e:6f:a9:34:bb:1e: 2f:a3:78:cc:17:22:73:4d:f3:87:7a:bd:13:01:58:29:11:18: 6a:da:ae:50:e2:55:17:ca:af:7d:9f:be:4e:ad:f9:05:20:1a: 53:3b:03:c3:46:db:a4:3b:3d:9c:32:1c:7d:dd:93:f8:88:5d: b3:e2:18:44:b6:ea:da:ba:59:f8:78:e3:83:e0:f0:2d:77:50: 31:18:51:bc:74:53:7d:b4:a5:19:ad:40:4b:a9:5b:a3:5c:c1: 6f:d8:6e:e2:86:9b:a4:c0:9b:6f:48:6c:e0:2d:c5:27:65:78: 07:65:56:3f:c2:38:45:42:f3:29:61:e0:17:be:34:13:e2:f7: 55:a1:fb:64:56:0b:fa:31:2e:2c:73:56:b1:ee:4c:6c:1d:4b: 7c:2b:99:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsXC2EHLoqYpZxMcUuulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NTZlZTdlNDg0YWUyZWYwOTIwZDA5NWJjYWUyNjhmYWZk Njk2MTkwHhcNMjUxMjA2MDcwMTAxWhcNMjUxMjA3MDcwMTAxWjAzMTEwLwYDVQQD Eyg2ODdhZTgxMGE3ZWVlZDdlNjNiYThlZGE5MTZhODQ4ZjNkMDg2MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjyCR7oABKMeZoa75jNo3HqTgeH1 DB47osglOmxO4tLicDCtsjOXueOi8qlnLcd27GllYDnBRbTqurrKrzYpJw+gByNi nzoF3m5dp3Io4Ga16JTGet/Ee+GFXXVk7W7KaujXvyNretPBw6UCe4NYsIsGeR98 MzVk4tH9R87GJuplOGFTUtah2B1sDmLU0jGzLNgzcMf6RVaqivlio2FEa+ElWnHG szwQsyXFE+OkSg2GuUdXmlLdF/rKbFRs2KFTYm9j2RQep30aVdWx5Z3/xnj019J8 8t/Il9RoH3QYIdcQ0tx0jeaqUYoHD3gcVMvxLGdV2wn/BgKQdHoWh5mxlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh66BCn7u1+Y7qO2pFqhI89CGBNMB8GA1UdIwQY MBaAFNRW7n5ISuLvCSDQlbyuJo+v1pYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUt NTRlOWZmZDNiYmUwLzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUtNTRlOWZmZDNiYmUw LzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEn6P8nk cnMby3awLUZ5Uye16J0V5jBQwMp5M7aoDxVaVbKEwzyXHVmlPWYfBVi3owWeZEiN wbjIs/JOJx0eFu4ITcyEEYIOyeFvKIHHZYTJKqyzstwlf1CyCCLoSIRBu1U4lY/F fm+pNLseL6N4zBcic03zh3q9EwFYKREYatquUOJVF8qvfZ++Tq35BSAaUzsDw0bb pDs9nDIcfd2T+Ihds+IYRLbq2rpZ+Hjjg+DwLXdQMRhRvHRTfbSlGa1AS6lbo1zB b9hu4oabpMCbb0hs4C3FJ2V4B2VWP8I4RULzKWHgF740E+L3VaH7ZFYL+jEuLHNW se5MbB1LfCuZmw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:18 2025 by rpki-client