This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json) Hash identifier: j7k7CijnlH6y1Z0Eik54C05AVm2MC9pLm2UI653oLNk= Subject key identifier: A1:94:79:C2:C4:BF:E5:A6:5C:24:33:CE:BF:A0:47:A5:1E:1E:F6:90 Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f Certificate serial: 019B5A1A6E416AFBB7383E456C70436B3E00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft Manifest number: 0A48 Signing time: Fri 26 Dec 2025 10:00:40 +0000 Manifest this update: Fri 26 Dec 2025 10:00:40 +0000 Manifest next update: Sat 27 Dec 2025 10:00:40 +0000 Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: GhbMM8Fb8PygIOEDm32bBa3F8YKmkKvV6bM5UAcQ4dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:6e:41:6a:fb:b7:38:3e:45:6c:70:43:6b:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f Validity Not Before: Dec 26 10:00:40 2025 GMT Not After : Dec 27 10:00:40 2025 GMT Subject: CN=a19479c2c4bfe5a65c2433cebfa047a51e1ef690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:cf:47:31:35:4c:90:5f:86:4d:8a:f0:06: b3:9c:ac:c5:a6:54:14:25:0d:39:95:78:b6:9f:bc: 23:84:e5:46:c8:d3:5e:67:a2:17:57:3b:94:6f:d3: df:01:e4:a1:c2:70:d4:bd:d1:05:d4:3d:5a:e5:46: f9:43:18:0d:32:46:f4:b2:47:d8:51:a7:9a:88:70: 78:1e:50:67:8c:5f:c1:e4:60:a3:c1:79:9e:b4:28: 9c:6c:f8:50:57:a9:89:05:48:ac:c0:6f:36:b5:b2: cb:0c:da:db:c5:f5:a7:dc:70:07:46:f7:a9:d0:e6: dd:6d:e3:cd:36:47:87:1e:5a:06:b6:73:93:20:a7: 5a:62:41:c2:0f:40:85:8d:67:32:f0:14:ed:91:8a: 92:29:bf:29:7b:d7:9a:7d:a1:c5:55:5f:ae:cc:d8: f4:ea:70:3e:05:73:70:fa:7d:8c:17:44:a6:85:c4: 44:10:38:5a:34:13:40:6f:d5:42:01:93:b6:29:d3: 42:90:3e:09:8c:28:f8:7c:ed:de:a4:33:ec:e2:5e: 38:38:33:39:dc:c4:49:f4:6c:eb:bb:66:0e:f2:cd: dc:ca:29:76:35:48:d6:22:86:8f:77:ba:c6:e1:7f: ff:44:ee:8d:8c:e1:52:12:6f:48:73:1a:a0:b7:1f: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:79:C2:C4:BF:E5:A6:5C:24:33:CE:BF:A0:47:A5:1E:1E:F6:90 X509v3 Authority Key Identifier: keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:12:95:12:b7:ad:11:d1:3e:bb:45:e6:de:6c:51:15:c7:5b: 9c:18:95:6e:16:fa:db:e8:f8:08:6b:7b:a5:03:96:7e:40:02: fd:e5:e2:99:c3:62:ab:2d:5f:e9:87:65:39:72:73:d2:40:b2: 25:fa:6a:4b:8a:5b:fd:86:06:3d:8b:f1:45:26:1c:5f:c8:72: 57:f2:98:80:e0:8c:94:5b:a5:94:cb:98:0b:4b:ca:dc:aa:11: 82:1a:19:7e:e5:2b:a5:ad:bb:13:87:93:2f:60:7f:d9:5a:90: 6e:d3:ca:f8:1f:42:72:c2:0f:07:57:8c:37:67:2b:40:14:a3: db:80:04:1c:03:1c:e7:8b:54:84:e5:f0:ca:a6:72:4f:58:f9: 54:5f:b0:d8:8a:d2:c4:c5:16:77:6a:f7:76:ba:b2:51:58:2e: 42:d1:7b:92:42:02:85:67:44:e1:b1:1e:e8:6c:ce:23:f4:fe: 0a:1a:90:00:fa:f8:aa:7f:ac:75:db:5d:67:5c:00:3b:17:37: cc:b0:ec:2a:79:77:fe:fd:6b:59:46:75:6a:e4:37:86:48:f0: e4:91:e5:f3:a8:79:a5:3a:64:41:f0:80:9c:a9:91:5f:13:5c: 67:7c:b4:e0:ac:87:c1:e4:55:21:f6:4c:d9:fe:08:96:c2:9f: d9:00:ef:db -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtaGm5Bavu3OD5FbHBDaz4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4OWU4ODIyNzZmODBlNjc1MDQ5MGVlZjAwNmRlOTQzZGFj YjZlMGYwHhcNMjUxMjI2MTAwMDQwWhcNMjUxMjI3MTAwMDQwWjAzMTEwLwYDVQQD EyhhMTk0NzljMmM0YmZlNWE2NWMyNDMzY2ViZmEwNDdhNTFlMWVmNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfLPRzE1TJBfhk2K8AaznKzFplQU JQ05lXi2n7wjhOVGyNNeZ6IXVzuUb9PfAeShwnDUvdEF1D1a5Ub5QxgNMkb0skfY UaeaiHB4HlBnjF/B5GCjwXmetCicbPhQV6mJBUiswG82tbLLDNrbxfWn3HAHRvep 0ObdbePNNkeHHloGtnOTIKdaYkHCD0CFjWcy8BTtkYqSKb8pe9eafaHFVV+uzNj0 6nA+BXNw+n2MF0SmhcREEDhaNBNAb9VCAZO2KdNCkD4JjCj4fO3epDPs4l44ODM5 3MRJ9Gzru2YO8s3cyil2NUjWIoaPd7rG4X//RO6NjOFSEm9Icxqgtx/zNwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKGUecLEv+WmXCQzzr+gR6UeHvaQMB8GA1UdIwQY MBaAFPieiCJ2+A5nUEkO7wBt6UPay24PMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1KNklJbmI0RG1kUVNRN3ZBRzNwUTlyTGJnOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNjVlOTczLWI0MWItNDEwMy1hYTU2 LWZjY2NlYTY4MWI3YS8xLzEtSjZJSW5iNERtZFFTUTd2QUczcFE5ckxiZzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzk5LzY1ZTk3My1iNDFiLTQxMDMtYWE1Ni1mY2NjZWE2ODFi N2EvMS8xLUo2SUluYjREbWRRU1E3dkFHM3BROXJMYmc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBKV EretEdE+u0Xm3mxRFcdbnBiVbhb62+j4CGt7pQOWfkAC/eXimcNiqy1f6YdlOXJz 0kCyJfpqS4pb/YYGPYvxRSYcX8hyV/KYgOCMlFullMuYC0vK3KoRghoZfuUrpa27 E4eTL2B/2VqQbtPK+B9CcsIPB1eMN2crQBSj24AEHAMc54tUhOXwyqZyT1j5VF+w 2IrSxMUWd2r3drqyUVguQtF7kkIChWdE4bEe6GzOI/T+ChqQAPr4qn+sddtdZ1wA Oxc3zLDsKnl3/v1rWUZ1auQ3hkjw5JHl86h5pTpkQfCAnKmRXxNcZ3y04KyHweRV IfZM2f4IlsKf2QDv2w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:31 2025 by rpki-client