This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json) Hash identifier: kWdr2KBJtBlxKvjQQNmKdovzPczrJAWuGYxxWJwf3Ow= Subject key identifier: E0:70:B1:F5:D8:E3:19:E3:20:64:A6:92:21:11:01:2C:75:AE:46:3E Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Certificate serial: 019AF12DA70794F05D40D457C15AD9B2390A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: KzOzrjaYFMQPpKXeUwbZgXsHPwA1UNDzj3FTbHLvxL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a7:07:94:f0:5d:40:d4:57:c1:5a:d9:b2:39:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=e070b1f5d8e319e32064a6922111012c75ae463e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:e1:af:c5:ac:6d:27:a0:2b:71:e5:33:2a: 55:1e:ab:86:c8:bf:ac:84:46:ff:74:2d:36:c9:38: 60:43:fd:dc:c9:7e:da:7f:c4:fe:37:6e:78:01:a8: df:b4:6b:03:44:87:44:ee:b8:a8:0b:67:94:81:79: 7d:53:b6:85:b9:3e:25:d7:26:1a:69:60:22:30:f1: cf:d6:be:fb:a3:c8:2e:da:56:25:12:b9:20:50:1e: fa:55:af:ab:37:4c:30:b9:e3:64:69:60:e8:8b:c1: 7d:85:2e:10:c6:fb:2b:35:06:fc:02:fb:aa:cc:fc: bf:b7:cb:e5:82:26:1b:bf:86:f1:6e:6c:a2:57:a6: 7c:b5:80:34:3e:6e:ca:6b:74:51:ac:dc:2b:b1:d4: 6b:66:7c:0f:33:87:34:e8:d9:76:90:9b:fe:d9:35: 0a:ae:eb:5f:62:57:6c:f5:da:6a:0b:a1:01:0d:49: 63:91:84:72:dc:21:cc:67:91:d8:d5:af:a1:7f:a5: 5c:9d:8e:42:66:49:69:84:44:8b:dc:46:84:a3:a6: fe:ea:bf:66:34:3f:6e:ce:59:06:7a:ca:48:9b:87: 6b:77:43:ea:5b:ef:3b:a0:30:cf:87:99:bd:c1:fc: eb:aa:3e:19:78:94:61:d8:2b:b6:ce:69:35:31:e2: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:70:B1:F5:D8:E3:19:E3:20:64:A6:92:21:11:01:2C:75:AE:46:3E X509v3 Authority Key Identifier: keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b1:83:a2:55:24:ad:5c:f6:0a:b2:0a:1f:1c:d3:63:a7:d0: ab:5b:4a:83:f7:c0:fa:4a:b7:41:1f:86:a4:84:00:cd:d6:a4: f6:e0:f1:c6:49:a8:9e:e5:61:44:05:7e:e7:46:33:4a:34:ee: 35:38:01:f9:7c:18:7c:1d:70:fc:ad:09:73:15:6a:b3:43:9a: ff:0a:ee:72:08:7d:bc:60:fe:ca:cf:d1:7e:50:c4:f6:ec:30: 06:a5:c0:5f:6c:ec:76:7a:1f:f4:86:af:b9:5e:d7:93:8c:09: fd:8f:64:a0:94:6f:d1:35:d3:1c:2d:2c:64:df:20:28:e5:3f: 36:a5:bc:d2:2e:9b:96:90:2e:61:6d:5d:71:96:3f:75:a6:dd: be:18:cf:26:66:16:2c:2e:28:a6:25:41:cc:7e:8c:ec:99:07: 9d:ef:d4:80:fb:bf:e0:d7:64:8d:8b:fc:b5:39:09:04:50:c0: 01:e8:b1:58:2d:88:f9:23:26:e9:4b:65:e8:b2:01:7f:f6:de: 39:fb:af:cb:1b:ff:d6:a6:87:8f:ea:46:a0:f9:80:8c:8d:62: 32:6c:24:79:85:fc:aa:4c:52:18:31:7e:d3:34:13:b3:8b:02: 70:82:08:3e:12:e4:6c:e9:cf:89:98:fa:ff:ca:b5:8e:49:c5: 66:e0:17:64 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLacHlPBdQNRXwVrZsjkKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2Y3MzM3NmViNjNmMWRjZmIyNzA0MDJiZmRjZjMwMzFm NWQ4MjUwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD EyhlMDcwYjFmNWQ4ZTMxOWUzMjA2NGE2OTIyMTExMDEyYzc1YWU0NjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLThr8WsbSegK3HlMypVHquGyL+s hEb/dC02yThgQ/3cyX7af8T+N254AajftGsDRIdE7rioC2eUgXl9U7aFuT4l1yYa aWAiMPHP1r77o8gu2lYlErkgUB76Va+rN0wwueNkaWDoi8F9hS4QxvsrNQb8Avuq zPy/t8vlgiYbv4bxbmyiV6Z8tYA0Pm7Ka3RRrNwrsdRrZnwPM4c06Nl2kJv+2TUK rutfYlds9dpqC6EBDUljkYRy3CHMZ5HY1a+hf6VcnY5CZklphESL3EaEo6b+6r9m ND9uzlkGespIm4drd0PqW+87oDDPh5m9wfzrqj4ZeJRh2Cu2zmk1MeJKZQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOBwsfXY4xnjIGSmkiERASx1rkY+MB8GA1UdIwQY MBaAFPvPczdutj8dz7JwQCv9zzAx9dglMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04OXpOMjYyUHgzUHNuQkFLXzNQTURIMTJDVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjI2MmIzLWY1Y2MtNDg2OC04YjIx LTkwOTJjY2Q1ZDllMy8xLzEtODl6TjI2MlB4M1BzbkJBS18zUE1ESDEyQ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0LzYyNjJiMy1mNWNjLTQ4NjgtOGIyMS05MDkyY2NkNWQ5 ZTMvMS8xLTg5ek4yNjJQeDNQc25CQUtfM1BNREgxMkNVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbGD olUkrVz2CrIKHxzTY6fQq1tKg/fA+kq3QR+GpIQAzdak9uDxxkmonuVhRAV+50Yz SjTuNTgB+XwYfB1w/K0JcxVqs0Oa/wrucgh9vGD+ys/RflDE9uwwBqXAX2zsdnof 9IavuV7Xk4wJ/Y9koJRv0TXTHC0sZN8gKOU/NqW80i6blpAuYW1dcZY/dabdvhjP JmYWLC4opiVBzH6M7JkHne/UgPu/4NdkjYv8tTkJBFDAAeixWC2I+SMm6Utl6LIB f/beOfuvyxv/1qaHj+pGoPmAjI1iMmwkeYX8qkxSGDF+0zQTs4sCcIIIPhLkbOnP iZj6/8q1jknFZuAXZA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:29 2025 by rpki-client