This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json) Hash identifier: OmwIBiAroSUmd20ehib4+oKjV6laXWoCORbOwJake2o= Subject key identifier: 2F:C7:C1:64:32:1C:8F:E4:E0:59:12:09:80:71:98:A0:09:0E:00:82 Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db Certificate serial: 019B191603238A338B5EDA4AA9D106C9803F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft Manifest number: 1171 Signing time: Sat 13 Dec 2025 19:00:31 +0000 Manifest this update: Sat 13 Dec 2025 19:00:31 +0000 Manifest next update: Sun 14 Dec 2025 19:00:31 +0000 Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: pbx4D6j8hB7SOE7vHOjfoh90e9gR5H386fNOZkZ7TAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:03:23:8a:33:8b:5e:da:4a:a9:d1:06:c9:80:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91084f454139347933876d52634b41a1dd099db Validity Not Before: Dec 13 19:00:31 2025 GMT Not After : Dec 14 19:00:31 2025 GMT Subject: CN=2fc7c164321c8fe4e0591209807198a0090e0082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:9e:d6:a8:27:f9:a4:de:4a:d7:bb:bd:13: bf:3a:ad:48:d8:ca:49:8a:50:90:85:76:8c:61:68: 8b:8d:c2:b4:15:7a:5b:30:5a:c3:84:28:a6:42:8c: 86:83:e8:db:c1:52:53:4e:48:38:6a:7b:ea:03:a3: c0:13:35:73:d4:e9:56:87:f4:3c:d9:09:fe:6f:1c: 7d:13:fb:d2:34:f8:3a:ca:03:fe:b0:b7:ab:af:c3: 08:c8:8f:a2:5b:f1:ae:24:75:f0:3a:16:9a:1c:17: 4e:94:ff:9e:5f:1c:cc:3f:ac:50:3f:47:6a:4e:85: 11:d7:01:2d:65:2c:fe:8e:ea:df:c2:fe:2e:a8:5f: da:0e:ff:16:bc:e0:49:e5:ea:f9:c4:aa:5e:8d:4a: 48:fa:a9:fe:36:e2:76:1a:70:37:6a:24:94:cf:fd: ff:70:fc:bb:a4:6a:40:21:1d:7e:19:3b:a6:10:0a: be:8e:3a:1e:be:c3:01:e3:47:67:79:91:02:83:38: f7:69:ef:3d:e3:1f:b2:b2:87:30:3d:8d:81:f2:64: fb:2d:db:9d:81:7d:27:7f:a1:c9:d1:fe:49:1a:b0: 08:12:ab:d9:4c:30:82:11:76:b1:db:4a:38:92:e2: 5e:83:e2:3c:76:61:fe:3b:7a:9a:dd:0a:c2:47:8d: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:C1:64:32:1C:8F:E4:E0:59:12:09:80:71:98:A0:09:0E:00:82 X509v3 Authority Key Identifier: keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8f:ba:43:fc:f8:3d:bd:fe:ea:87:6a:b6:20:a9:a8:7a:90: 74:34:3e:87:82:3b:cc:3e:17:34:f8:7b:26:fe:dd:ab:10:62: d2:72:4f:94:cc:4b:a9:a9:93:d3:9b:ec:a2:15:aa:72:28:36: 6e:e4:d3:ac:5d:a3:4b:d5:e0:1f:7f:50:ef:61:b0:7e:8f:03: 7e:22:a6:c0:70:bb:8f:79:4d:7f:7f:69:d5:09:10:00:73:3a: 64:b2:1b:99:bc:55:1b:d7:eb:62:1b:97:74:53:bb:92:b3:20: 19:2f:9b:b2:a7:92:81:63:0f:5a:2d:37:cf:03:ce:7c:1b:43: 96:43:69:99:32:b9:e0:d9:b4:23:38:87:4f:76:0b:df:e5:98: 2f:d7:3a:e8:ad:06:41:e1:d3:b8:07:28:6b:da:9e:50:f1:14: a8:d6:17:1b:ab:0a:cc:08:b6:d0:7a:cf:4e:20:ae:c1:7c:8f: 12:0c:ae:aa:09:65:f9:02:be:aa:85:3d:04:a2:13:f8:6c:d0: 29:2d:58:aa:24:17:43:c7:cb:61:12:75:e0:b5:99:34:5b:ee: ce:f6:0a:12:6f:7e:57:14:d1:60:6c:24:e7:ba:8b:db:93:dd: 3c:2b:21:88:2b:c5:f8:75:8f:1a:0a:0e:a1:e9:c5:b6:4d:bc: 3b:bf:74:8c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsZFgMjijOLXtpKqdEGyYA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTA4NGY0NTQxMzkzNDc5MzM4NzZkNTI2MzRiNDFhMWRk MDk5ZGIwHhcNMjUxMjEzMTkwMDMxWhcNMjUxMjE0MTkwMDMxWjAzMTEwLwYDVQQD EygyZmM3YzE2NDMyMWM4ZmU0ZTA1OTEyMDk4MDcxOThhMDA5MGUwMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpOe1qgn+aTeSte7vRO/Oq1I2MpJ ilCQhXaMYWiLjcK0FXpbMFrDhCimQoyGg+jbwVJTTkg4anvqA6PAEzVz1OlWh/Q8 2Qn+bxx9E/vSNPg6ygP+sLerr8MIyI+iW/GuJHXwOhaaHBdOlP+eXxzMP6xQP0dq ToUR1wEtZSz+jurfwv4uqF/aDv8WvOBJ5er5xKpejUpI+qn+NuJ2GnA3aiSUz/3/ cPy7pGpAIR1+GTumEAq+jjoevsMB40dneZECgzj3ae894x+ysocwPY2B8mT7Ldud gX0nf6HJ0f5JGrAIEqvZTDCCEXax20o4kuJeg+I8dmH+O3qa3QrCR41pOQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC/HwWQyHI/k4FkSCYBxmKAJDgCCMB8GA1UdIwQY MBaAFPkQhPRUE5NHkzh21SY0tBod0JnbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQ0U5RlFUazBlVE9IYlZKalMwR2gzUW1kcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvOTRkOWViLTIyZGEtNDc1Zi1iZjNh LTFhNmZkMmM0NDgxNi8xLzEtUkNFOUZRVGswZVRPSGJWSmpTMEdoM1FtZHMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk1Lzk0ZDllYi0yMmRhLTQ3NWYtYmYzYS0xYTZmZDJjNDQ4 MTYvMS8xLVJDRTlGUVRrMGVUT0hiVkpqUzBHaDNRbWRzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY+6 Q/z4Pb3+6odqtiCpqHqQdDQ+h4I7zD4XNPh7Jv7dqxBi0nJPlMxLqamT05vsohWq cig2buTTrF2jS9XgH39Q72Gwfo8DfiKmwHC7j3lNf39p1QkQAHM6ZLIbmbxVG9fr YhuXdFO7krMgGS+bsqeSgWMPWi03zwPOfBtDlkNpmTK54Nm0IziHT3YL3+WYL9c6 6K0GQeHTuAcoa9qeUPEUqNYXG6sKzAi20HrPTiCuwXyPEgyuqgll+QK+qoU9BKIT +GzQKS1YqiQXQ8fLYRJ14LWZNFvuzvYKEm9+VxTRYGwk57qL25PdPCshiCvF+HWP GgoOoenFtk28O790jA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:49 2025 by rpki-client