This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json) Hash identifier: givu2GKuPXUSbFXzQjZ4FW7EJNgOMgQivkgjT2sabOY= Subject key identifier: C3:C4:D6:8D:FB:03:CF:24:27:26:A0:E9:FD:0D:12:8A:13:76:30:51 Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87 Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187 Certificate serial: 019AF12CCE420D46E5A79DDDC0502EF4AAFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: a3vnUv5KbYcBbF91t8NhZtuKxVwv1N0xMl++XMhNm+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ce:42:0d:46:e5:a7:9d:dd:c0:50:2e:f4:aa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=c3c4d68dfb03cf242726a0e9fd0d128a13763051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:1d:61:14:83:72:c2:ce:1b:f8:bc:c5:d3: 42:4a:75:c1:37:7a:8c:ac:43:d1:08:0f:3b:67:39: 73:8d:00:cb:72:f1:34:6d:5a:cc:3c:8b:bc:1d:9f: 62:aa:b5:32:7e:19:36:77:cb:d4:1f:bb:5b:d2:7c: 61:a8:d5:f5:93:d2:fb:17:55:05:34:59:51:70:c4: 8c:ac:d4:7f:8d:74:a1:ee:12:44:96:ff:ab:ba:d7: 34:a8:48:eb:92:d8:b7:88:de:a2:c3:59:4b:c5:42: 38:6f:59:64:4b:0c:1a:67:7b:3c:a5:68:07:bc:da: c3:98:18:81:70:79:f1:c0:31:97:39:ff:86:bc:2b: d7:26:33:8f:44:fe:94:33:a9:6f:b7:85:c6:b0:b2: ba:1c:4e:92:71:60:a4:81:c5:2f:f7:9c:e6:ff:f7: 73:4b:1d:a7:74:43:24:c1:73:88:21:2a:be:4a:dd: 8e:c2:bd:8e:97:e2:4c:29:ec:93:56:2c:8f:10:be: ab:73:ff:94:86:ff:f8:e3:3c:1c:1c:cd:22:c9:c2: a6:b1:39:30:2e:37:d3:b9:29:2e:a4:45:b9:27:9d: 73:64:31:51:be:a8:1b:fa:32:d5:63:a2:4c:19:96: 39:5d:96:b7:6e:46:2c:c8:a4:3f:6f:a5:9d:83:ed: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:D6:8D:FB:03:CF:24:27:26:A0:E9:FD:0D:12:8A:13:76:30:51 X509v3 Authority Key Identifier: keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e3:41:f2:bd:e9:a6:2f:f4:4a:3b:eb:e3:56:38:05:79:38: 9d:07:1c:76:6a:f7:6d:80:ad:a5:cc:dd:10:60:c2:e6:35:f8: 45:c5:e1:34:80:b8:63:24:13:4c:6f:57:63:8f:3b:e8:30:34: 2f:26:54:e1:c8:d2:c4:ce:d4:0d:51:40:86:82:b7:57:00:65: ff:01:be:57:66:8f:1d:d1:22:f1:99:5e:47:43:ae:df:1a:38: 2d:ef:f5:94:a9:0f:7b:a4:5d:88:fe:f3:d5:17:24:70:ac:e6: 04:eb:de:2e:17:a7:30:39:02:90:21:5c:94:66:42:9e:4a:aa: 49:83:6f:42:78:c5:e7:32:67:85:77:ac:7c:da:be:13:d8:ae: bb:48:d5:ae:fb:21:97:49:75:3a:ca:e7:9d:92:6a:d0:1b:dd: 1c:1c:a1:c7:2f:71:cb:44:83:c5:e9:b6:67:bc:c6:63:ab:24: e8:1a:22:2e:21:9b:25:14:92:be:c5:24:8c:6f:ac:3d:c1:ec: 12:d9:f0:04:57:1d:3a:4d:b3:7d:31:26:f1:67:1e:1f:77:f6: 5c:63:f1:fd:ed:e3:b2:d0:5a:da:ee:bb:c2:cf:77:24:00:28: bb:c7:a0:32:25:7c:c7:d9:2b:b9:f5:7e:4d:81:51:05:1e:2e: 90:91:09:05 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLM5CDUblp53dwFAu9Kr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYjViMWQ2MWUwOWE0ZTRiMGRkMWIwNWNlZDhlNjUxM2Jj NjYxODcwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EyhjM2M0ZDY4ZGZiMDNjZjI0MjcyNmEwZTlmZDBkMTI4YTEzNzYzMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu24dYRSDcsLOG/i8xdNCSnXBN3qM rEPRCA87ZzlzjQDLcvE0bVrMPIu8HZ9iqrUyfhk2d8vUH7tb0nxhqNX1k9L7F1UF NFlRcMSMrNR/jXSh7hJElv+rutc0qEjrkti3iN6iw1lLxUI4b1lkSwwaZ3s8pWgH vNrDmBiBcHnxwDGXOf+GvCvXJjOPRP6UM6lvt4XGsLK6HE6ScWCkgcUv95zm//dz Sx2ndEMkwXOIISq+St2Owr2Ol+JMKeyTViyPEL6rc/+Uhv/44zwcHM0iycKmsTkw LjfTuSkupEW5J51zZDFRvqgb+jLVY6JMGZY5XZa3bkYsyKQ/b6Wdg+1Q0wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMPE1o37A88kJyag6f0NEooTdjBRMB8GA1UdIwQY MBaAFPu1sdYeCaTksN0bBc7Y5lE7xmGHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03V3gxaDRKcE9TdzNSc0Z6dGptVVR2R1lZYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvZThhYTc5LTE1NzYtNGNmYS04OTRh LWIxZTAxMzUwNjc1Yi8xLzEtN1d4MWg0SnBPU3czUnNGenRqbVVUdkdZWWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VlL2U4YWE3OS0xNTc2LTRjZmEtODk0YS1iMWUwMTM1MDY3 NWIvMS8xLTdXeDFoNEpwT1N3M1JzRnp0am1VVHZHWVljLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFONB 8r3ppi/0Sjvr41Y4BXk4nQccdmr3bYCtpczdEGDC5jX4RcXhNIC4YyQTTG9XY487 6DA0LyZU4cjSxM7UDVFAhoK3VwBl/wG+V2aPHdEi8ZleR0Ou3xo4Le/1lKkPe6Rd iP7z1RckcKzmBOveLhenMDkCkCFclGZCnkqqSYNvQnjF5zJnhXesfNq+E9iuu0jV rvshl0l1OsrnnZJq0BvdHByhxy9xy0SDxem2Z7zGY6sk6BoiLiGbJRSSvsUkjG+s PcHsEtnwBFcdOk2zfTEm8WceH3f2XGPx/e3jstBa2u67ws93JAAou8egMiV8x9kr ufV+TYFRBR4ukJEJBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:59 2025 by rpki-client