This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json) Hash identifier: OSV8Ob6NaEcB0xksb2Wpm3AtRejC8CLy1PtlcqTJXlA= Subject key identifier: 62:24:71:47:85:25:E0:8E:0F:93:D2:2E:47:D1:50:B0:79:EC:8F:B2 Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba Certificate serial: 019AF388F4F5E2A0E826F99D9EA940919F81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:00:30 +0000 Manifest this update: Sat 06 Dec 2025 12:00:30 +0000 Manifest next update: Sun 07 Dec 2025 12:00:30 +0000 Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: KkzsspxxLB0bUbhTjLURZ6Kj7OZyiWLTsg4yPPZmMSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:f4:f5:e2:a0:e8:26:f9:9d:9e:a9:40:91:9f:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba Validity Not Before: Dec 6 12:00:30 2025 GMT Not After : Dec 7 12:00:30 2025 GMT Subject: CN=622471478525e08e0f93d22e47d150b079ec8fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:2d:b1:1f:50:32:22:29:d6:cb:e6:18:2b: 35:fd:08:24:27:35:21:18:41:b6:d3:36:05:26:f0: f6:71:0f:69:ad:6a:76:0d:38:30:ca:99:b2:32:34: ef:1b:67:b4:e2:a7:59:a8:d0:bc:b1:74:c7:02:f4: cc:45:14:d5:d8:42:4e:6c:36:e1:45:c0:8a:bb:51: c0:e2:60:69:73:6b:a6:0b:24:dc:fc:43:29:4b:9d: 06:96:4a:f1:34:d0:30:b6:29:8b:53:84:a6:a4:ca: 63:6e:65:9e:a2:76:d1:45:8a:8c:8c:81:dc:b7:a5: e1:6e:13:7b:a9:06:cd:c7:c3:54:d9:62:45:53:41: 2d:70:6d:51:a3:e7:ad:71:1f:ef:38:5c:eb:d1:28: 39:78:c9:95:06:11:5c:b7:2b:3a:d1:de:5a:94:1c: 8f:5c:41:d7:c5:25:e3:cd:93:a4:d7:ad:81:bd:32: 1c:12:7f:2e:42:a0:62:70:84:00:f4:d2:ea:d0:48: b8:2c:0d:ac:6b:2b:2a:ed:8f:a9:f1:3a:42:b2:40: 35:04:69:8a:ee:95:a5:bf:af:0c:f1:53:64:6d:07: 58:e6:f0:24:e2:1e:e5:35:92:af:8f:6c:6d:30:76: 26:be:bf:59:9b:77:f7:5d:c2:9a:02:06:cf:f3:ef: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:24:71:47:85:25:E0:8E:0F:93:D2:2E:47:D1:50:B0:79:EC:8F:B2 X509v3 Authority Key Identifier: keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3e:96:5b:a2:1e:34:0c:76:6a:4e:6e:f3:8e:54:a6:88:f1: 27:15:07:1b:43:3c:be:ba:62:a9:3c:a1:0d:10:b9:1d:33:6f: 01:6d:0a:95:77:58:91:cf:9a:70:b9:1f:4c:73:a0:5f:f5:00: 0d:66:fa:e7:bd:f7:39:ab:04:7f:26:ca:7b:3f:a9:49:72:2f: af:19:e9:e7:8e:70:d0:3c:21:9c:77:e4:68:14:6e:c5:15:18: 21:cb:ae:12:b8:dc:d8:7b:99:27:a3:fc:ed:f4:c9:12:af:39: c6:34:e9:3b:02:8b:15:79:7b:fe:12:71:8f:55:44:69:a6:f0: 1b:14:4e:9a:41:07:3a:19:57:36:88:56:b4:6a:3f:aa:ae:5c: 65:c3:64:ca:d8:6f:7c:c7:c0:3f:ad:51:26:4d:ef:e8:42:6a: 45:a1:35:fb:b5:6e:d4:09:51:9d:81:d1:93:df:12:7b:99:f2: 62:ca:41:20:fc:ae:03:65:29:b0:30:36:e9:5e:16:92:75:ab: e0:b7:bd:ec:b1:0d:31:0e:23:e6:f4:0e:df:a7:70:bd:1e:e8: 23:a1:69:48:86:67:e5:d0:6f:10:66:2a:a0:52:24:5a:d3:50: 63:bc:49:4f:7b:e0:38:28:fa:7a:f8:96:d3:d7:8a:57:67:15: 39:55:0f:11 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrziPT14qDoJvmdnqlAkZ+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZjU0OWMxYzA5YzExMDkzYTM3MzNiODMwOGFlMDQ1MmNl NjI0YmEwHhcNMjUxMjA2MTIwMDMwWhcNMjUxMjA3MTIwMDMwWjAzMTEwLwYDVQQD Eyg2MjI0NzE0Nzg1MjVlMDhlMGY5M2QyMmU0N2QxNTBiMDc5ZWM4ZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRctsR9QMiIp1svmGCs1/QgkJzUh GEG20zYFJvD2cQ9prWp2DTgwypmyMjTvG2e04qdZqNC8sXTHAvTMRRTV2EJObDbh RcCKu1HA4mBpc2umCyTc/EMpS50GlkrxNNAwtimLU4SmpMpjbmWeonbRRYqMjIHc t6XhbhN7qQbNx8NU2WJFU0EtcG1Ro+etcR/vOFzr0Sg5eMmVBhFctys60d5alByP XEHXxSXjzZOk162BvTIcEn8uQqBicIQA9NLq0Ei4LA2saysq7Y+p8TpCskA1BGmK 7pWlv68M8VNkbQdY5vAk4h7lNZKvj2xtMHYmvr9Zm3f3XcKaAgbP8+8FFQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGIkcUeFJeCOD5PSLkfRULB57I+yMB8GA1UdIwQY MBaAFPr1ScHAnBEJOjczuDCK4EUs5iS6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS12Vkp3Y0NjRVFrNk56TzRNSXJnUlN6bUpMby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvN2RhNWI0LTRiOWItNGMyOC04NmM4 LWZlNTQxNzBkZWVhMS8xLzEtdlZKd2NDY0VRazZOek80TUlyZ1JTem1KTG8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VjLzdkYTViNC00YjliLTRjMjgtODZjOC1mZTU0MTcwZGVl YTEvMS8xLXZWSndjQ2NFUWs2TnpPNE1JcmdSU3ptSkxvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT6W W6IeNAx2ak5u845UpojxJxUHG0M8vrpiqTyhDRC5HTNvAW0KlXdYkc+acLkfTHOg X/UADWb65733OasEfybKez+pSXIvrxnp545w0DwhnHfkaBRuxRUYIcuuErjc2HuZ J6P87fTJEq85xjTpOwKLFXl7/hJxj1VEaabwGxROmkEHOhlXNohWtGo/qq5cZcNk ythvfMfAP61RJk3v6EJqRaE1+7Vu1AlRnYHRk98Se5nyYspBIPyuA2UpsDA26V4W knWr4Le97LENMQ4j5vQO36dwvR7oI6FpSIZn5dBvEGYqoFIkWtNQY7xJT3vgOCj6 eviW09eKV2cVOVUPEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:20 2025 by rpki-client