This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json) Hash identifier: KU+xbu/Skt8G9o0xJg1dIiGB9TpMdFiWWVtLxFCD7Yk= Subject key identifier: 53:39:79:3C:B0:B2:1D:D1:30:C9:0B:AD:F2:2A:08:27:3E:27:56:B0 Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Certificate serial: 019AF276D07B0C10C13BD73E2975752FCC9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft Manifest number: 1446 Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: d2Szm3bVFSxlJptVwsWFAooBiG0FWb1LA+EyKEdUOZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d0:7b:0c:10:c1:3b:d7:3e:29:75:75:2f:cc:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=5339793cb0b21dd130c90badf22a08273e2756b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:22:40:a8:e0:b5:3b:bc:31:de:b8:4d:25: 78:5a:6d:e4:63:ec:c0:0f:dc:0c:6d:eb:4e:e2:eb: 03:7c:c1:50:46:68:fe:6e:e4:95:3f:e6:07:87:b0: 4b:8f:de:63:da:63:2e:cb:7f:cf:01:b3:5b:99:f1: dc:09:53:24:e3:9a:b1:5e:66:f2:ff:2f:3c:52:1d: be:3f:e6:be:d3:74:9b:98:52:96:43:33:c1:8a:c5: fb:d5:41:5d:39:ad:ab:d8:f1:4c:fd:a2:3d:d8:3c: 04:9b:ec:fa:bd:48:4f:c7:06:ac:cb:61:0d:9f:74: 70:7d:0f:f1:15:a5:87:b1:a4:b6:a1:fb:a1:84:a4: 9f:a8:43:27:2f:9c:29:7b:d5:9f:f7:fb:ee:53:6c: 27:02:ce:e3:61:5b:72:fa:76:01:2c:84:ca:5a:00: 22:c2:96:fe:07:0d:45:0b:29:70:8f:45:5a:a4:5b: 95:87:d7:02:08:9e:f2:c9:00:03:14:a4:70:b1:41: 00:31:48:40:89:78:1e:17:d6:4c:0e:56:74:4c:a2: dc:dd:a3:54:db:9f:af:5f:64:2d:83:6e:bb:64:86: c6:68:a6:ca:70:25:b2:c0:87:de:82:b6:71:df:fd: 3b:30:cc:f9:6f:e2:a8:c6:72:cd:4f:3d:a5:1e:c4: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:79:3C:B0:B2:1D:D1:30:C9:0B:AD:F2:2A:08:27:3E:27:56:B0 X509v3 Authority Key Identifier: keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fd:78:30:70:88:a0:6d:bd:42:81:2e:f1:c8:cd:ae:90:c8: 8f:19:1b:1b:dd:49:f5:eb:7d:c5:98:c8:02:fb:16:a8:5a:ee: 4c:a7:0a:91:f0:79:55:77:53:e8:4b:0d:19:d9:b3:f5:c5:bb: a4:50:1a:19:d5:80:bb:d0:f1:9a:89:c0:51:1c:02:74:98:98: a0:ed:01:08:f3:ef:05:84:c9:23:d1:54:dd:17:e6:ad:15:07: c2:e3:01:78:d5:67:9a:95:ff:c4:cf:5e:71:3e:91:3d:dd:d4: fb:4a:3f:5d:bb:22:c3:dd:36:01:8a:7b:5d:4a:e6:20:c9:59: 5c:96:28:6b:20:48:f7:4b:64:80:71:35:ff:d5:87:f9:06:12: b4:0b:ca:cf:5e:8a:ff:20:29:0e:cd:d9:12:aa:c2:99:3d:69: 09:f5:f3:5f:9b:1d:e0:29:e9:7d:c0:05:13:79:cb:54:50:46: a7:0b:01:7c:2d:c9:81:77:d5:04:f4:31:f2:c4:0c:a3:66:8d: 3f:ee:85:0a:af:c1:13:0d:f7:16:2d:66:76:41:b4:f0:cd:33: b4:b4:c5:f7:83:ad:24:06:b5:16:4f:8e:1e:35:4c:5a:20:80: ea:74:84:e6:e3:1d:dd:36:94:f8:7d:3a:af:b8:83:9b:9d:62: 97:df:2d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtB7DBDBO9c+KXV1L8ycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODIzYTRjYTRkNzY4OTdiNWRkZmU3OTg4ZTI3MWZmNjgx MzE4ZjIwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD Eyg1MzM5NzkzY2IwYjIxZGQxMzBjOTBiYWRmMjJhMDgyNzNlMjc1NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUiQKjgtTu8Md64TSV4Wm3kY+zA D9wMbetO4usDfMFQRmj+buSVP+YHh7BLj95j2mMuy3/PAbNbmfHcCVMk45qxXmby /y88Uh2+P+a+03SbmFKWQzPBisX71UFdOa2r2PFM/aI92DwEm+z6vUhPxwasy2EN n3RwfQ/xFaWHsaS2ofuhhKSfqEMnL5wpe9Wf9/vuU2wnAs7jYVty+nYBLITKWgAi wpb+Bw1FCylwj0VapFuVh9cCCJ7yyQADFKRwsUEAMUhAiXgeF9ZMDlZ0TKLc3aNU 25+vX2Qtg267ZIbGaKbKcCWywIfegrZx3/07MMz5b+KoxnLNTz2lHsTUKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM5eTywsh3RMMkLrfIqCCc+J1awMB8GA1UdIwQY MBaAFNSCOkyk12iXtd3+eYjicf9oExjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEt NGUyZjg5Y2FlMWRhLzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEtNGUyZjg5Y2FlMWRh LzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP14MHCI oG29QoEu8cjNrpDIjxkbG91J9et9xZjIAvsWqFruTKcKkfB5VXdT6EsNGdmz9cW7 pFAaGdWAu9DxmonAURwCdJiYoO0BCPPvBYTJI9FU3RfmrRUHwuMBeNVnmpX/xM9e cT6RPd3U+0o/Xbsiw902AYp7XUrmIMlZXJYoayBI90tkgHE1/9WH+QYStAvKz16K /yApDs3ZEqrCmT1pCfXzX5sd4CnpfcAFE3nLVFBGpwsBfC3JgXfVBPQx8sQMo2aN P+6FCq/BEw33Fi1mdkG08M0ztLTF94OtJAa1Fk+OHjVMWiCA6nSE5uMd3TaU+H06 r7iDm51il98t+w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:25 2025 by rpki-client