This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json) Hash identifier: NzyuTvb6igjg3GgXpN3ZAhWzEBAZVisae+Woq3pdavw= Subject key identifier: 00:80:37:B6:42:F9:97:8B:3F:92:38:DD:76:04:7B:F0:D3:D8:89:06 Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99 Certificate serial: 019AF12DB37799FF117AD27826A7D7E98E1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: UDbgBOVQxMGhIZTtjeMAeNjcvmxGy2nF6nMvXGj+Bi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b3:77:99:ff:11:7a:d2:78:26:a7:d7:e9:8e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99 Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=008037b642f9978b3f9238dd76047bf0d3d88906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:72:7d:9e:64:fc:82:33:2d:49:02:7c:05: ff:1a:e8:94:4c:48:8c:a7:08:86:2a:5d:2b:6f:e8: 0a:e3:a7:dc:9c:e4:37:98:8e:c1:0b:a8:cf:14:c7: e0:97:81:ae:61:da:c2:23:cf:5c:14:5d:97:89:47: 9d:d1:32:31:bd:ce:4d:f6:e5:d2:98:f7:a9:d2:77: ac:49:31:ec:14:e9:33:a8:21:ed:da:3e:eb:7e:96: 9f:40:2b:44:db:b4:eb:62:ac:34:2a:3a:06:a4:49: a7:28:c1:5c:12:8a:92:ec:f5:de:53:7f:cc:4d:33: 77:b4:0e:76:a4:eb:37:b8:8c:e7:7c:9b:f2:9b:ea: 82:f9:57:a6:a2:33:10:0a:5d:ec:f7:ed:4f:11:35: 9c:fc:48:cc:11:66:9e:d3:1f:82:36:c3:33:c3:c4: 3c:c2:dd:e6:17:84:3d:59:a0:11:7c:e4:04:13:5b: 96:5c:99:8a:63:e0:df:39:36:ef:0b:af:61:45:76: 77:96:34:9d:7a:44:da:b7:3f:f9:ed:f8:38:eb:87: 74:60:88:ca:cc:28:55:da:7b:4b:61:a2:85:d9:22: 03:88:22:a5:84:c8:1c:90:06:d2:74:cb:4b:98:02: 4a:67:aa:76:e4:0c:db:fb:7f:45:82:b1:6c:71:ea: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:80:37:B6:42:F9:97:8B:3F:92:38:DD:76:04:7B:F0:D3:D8:89:06 X509v3 Authority Key Identifier: keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1e:c2:c2:c1:0c:ce:ec:2c:a8:1c:90:74:24:12:5a:f4:bc: f9:f0:0a:1f:79:ae:81:9c:68:49:6e:6d:c2:f5:8c:76:35:e1: 0f:3b:65:0e:41:c9:d1:12:a9:d8:06:a3:c6:dc:92:b4:69:46: f7:27:9c:0a:68:0b:32:00:df:88:5a:72:dc:4e:93:14:08:72: 99:de:3b:90:27:8b:ee:6d:de:4f:8d:f6:49:d9:48:f9:20:4a: 4f:2c:96:bc:49:07:7d:4b:c4:78:44:95:1f:22:5f:be:3d:31: c4:19:f8:c0:f3:ca:cd:63:b8:c8:c9:0d:e1:64:f8:7d:9d:b2: 7d:b1:34:e4:92:5e:e6:a2:b3:41:96:d5:b7:5e:1b:f2:cc:a5: 6f:4c:db:28:0b:bc:a5:d4:67:96:76:06:e1:e5:6c:bb:d1:77: 99:37:be:d8:1c:3b:fd:08:5a:8c:e0:85:43:71:f9:cf:e6:fd: da:00:0b:b6:7a:11:e6:44:92:8b:cf:ef:0d:b0:2c:9d:1c:a8: 99:47:6c:d1:e4:64:8d:6f:49:80:0b:4e:95:bb:83:68:33:da: 5b:62:6c:c0:84:0e:04:98:d3:33:86:cd:53:01:4c:30:ee:22: ca:96:f4:86:9d:11:9b:8c:ea:24:c6:e6:18:af:47:a2:d7:60: d4:ad:6d:31 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLbN3mf8RetJ4JqfX6Y4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2 N2ZlOTkwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EygwMDgwMzdiNjQyZjk5NzhiM2Y5MjM4ZGQ3NjA0N2JmMGQzZDg4OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5RyfZ5k/IIzLUkCfAX/GuiUTEiM pwiGKl0rb+gK46fcnOQ3mI7BC6jPFMfgl4GuYdrCI89cFF2XiUed0TIxvc5N9uXS mPep0nesSTHsFOkzqCHt2j7rfpafQCtE27TrYqw0KjoGpEmnKMFcEoqS7PXeU3/M TTN3tA52pOs3uIznfJvym+qC+VemojMQCl3s9+1PETWc/EjMEWae0x+CNsMzw8Q8 wt3mF4Q9WaARfOQEE1uWXJmKY+DfOTbvC69hRXZ3ljSdekTatz/57fg464d0YIjK zChV2ntLYaKF2SIDiCKlhMgckAbSdMtLmAJKZ6p25Azb+39FgrFsceotfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFACAN7ZC+ZeLP5I43XYEe/DT2IkGMB8GA1UdIwQY MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB7C wsEMzuwsqByQdCQSWvS8+fAKH3mugZxoSW5twvWMdjXhDztlDkHJ0RKp2AajxtyS tGlG9yecCmgLMgDfiFpy3E6TFAhymd47kCeL7m3eT432SdlI+SBKTyyWvEkHfUvE eESVHyJfvj0xxBn4wPPKzWO4yMkN4WT4fZ2yfbE05JJe5qKzQZbVt14b8sylb0zb KAu8pdRnlnYG4eVsu9F3mTe+2Bw7/QhajOCFQ3H5z+b92gALtnoR5kSSi8/vDbAs nRyomUds0eRkjW9JgAtOlbuDaDPaW2JswIQOBJjTM4bNUwFMMO4iypb0hp0Rm4zq JMbmGK9Hotdg1K1tMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:45 2025 by rpki-client