This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft File: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft (raw, json) Hash identifier: gBbl+q1FqZZGNPSUKjH/VF2p2FlNxVe9bMgddRu5xyk= Subject key identifier: AF:14:D2:C1:E9:FE:3B:EB:7F:4F:43:14:44:AF:2E:59:6D:41:00:C5 Authority key identifier: D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17 Certificate issuer: /CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417 Certificate serial: 019B4626CEA5AB924B1F783D4D90AA069D17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft Manifest number: 0C71 Signing time: Mon 22 Dec 2025 13:01:46 +0000 Manifest this update: Mon 22 Dec 2025 13:01:46 +0000 Manifest next update: Tue 23 Dec 2025 13:01:46 +0000 Files and hashes: 1: 1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl (hash: XYpxEs4oSpEH/Yv1mjA92Fm7786FEHoV+JHPzcLsfDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:26:ce:a5:ab:92:4b:1f:78:3d:4d:90:aa:06:9d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d615b3bd7b04f4c06b2aafee9634ecdc1572f417 Validity Not Before: Dec 22 13:01:46 2025 GMT Not After : Dec 23 13:01:46 2025 GMT Subject: CN=af14d2c1e9fe3beb7f4f431444af2e596d4100c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:5b:8a:74:03:be:50:24:b0:16:df:30:9d: 6a:97:80:9d:4b:d9:8e:47:8f:fd:1d:4a:ee:14:de: 3d:b3:f5:ae:63:64:c3:06:ae:7d:e7:d1:28:cc:96: 9b:f1:65:0e:04:54:c8:42:55:cb:9b:3c:13:d4:79: c5:28:d2:cb:31:fb:ba:67:3f:6b:be:98:cb:dd:ba: 40:54:7e:b6:d2:55:53:16:37:e4:57:96:31:13:2e: c0:0a:47:c6:be:ed:b6:50:b0:48:06:ec:c2:b2:43: 28:21:57:7e:9b:d9:58:11:45:9f:0b:ef:10:a1:02: 83:69:c4:c4:05:10:40:90:44:48:b1:c6:c6:c5:db: df:18:ca:52:54:49:4b:ef:d1:54:2a:c8:6d:65:76: 93:51:14:55:51:23:60:e5:82:56:27:d8:13:f5:7b: 08:ce:de:74:fe:2c:d6:83:20:f6:5b:60:66:0f:bf: 2d:bb:95:ac:a7:8f:49:23:f6:38:52:01:fb:be:8c: c5:41:31:56:6c:0e:db:10:e2:f6:6d:52:a3:01:98: ad:9c:b7:aa:9f:7a:14:32:f2:56:02:7f:c8:ef:b0: f0:9d:fb:86:a3:f1:68:86:88:a8:c1:ed:e2:04:3d: 91:78:60:25:f4:c6:e2:93:54:a0:f7:04:f7:39:3e: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:14:D2:C1:E9:FE:3B:EB:7F:4F:43:14:44:AF:2E:59:6D:41:00:C5 X509v3 Authority Key Identifier: keyid:D6:15:B3:BD:7B:04:F4:C0:6B:2A:AF:EE:96:34:EC:DC:15:72:F4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hWzvXsE9MBrKq_uljTs3BVy9Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/18de35-b931-4a6c-babd-8d6651148560/1/1hWzvXsE9MBrKq_uljTs3BVy9Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:78:1d:3a:a6:44:92:dd:62:ec:d0:cc:f9:5b:9e:09:dc:16: 0e:a1:c7:49:93:d7:7f:e5:9c:7b:82:7d:db:26:0f:1c:5e:c6: 70:7e:41:c4:87:13:9d:ed:ae:43:2d:6e:e3:a7:54:4b:6f:e9: b6:c3:83:fc:35:fc:68:88:47:e0:74:4b:77:40:e0:48:24:f6: f0:7c:71:e9:1e:83:84:6e:27:02:56:7e:d5:fe:1d:84:ed:5b: fe:62:76:df:71:19:a9:d2:df:a7:22:52:86:59:96:c3:0b:0c: e8:0e:a5:58:f5:ce:a7:78:64:d7:9b:ac:7b:fc:bb:69:10:3a: ab:99:d8:1a:cb:3c:76:e1:9f:1d:ca:7d:6a:6d:54:1f:b3:60: a2:47:35:b6:09:c5:39:91:2a:87:2e:b2:0c:63:13:e4:e3:d3: 85:ad:c8:ca:ca:7a:2a:0d:7f:ab:52:c2:0e:f9:a3:9d:a4:95: 25:ec:e8:60:26:dc:f5:16:f1:65:7e:ff:64:aa:55:98:d1:c0: c0:f2:99:ad:56:86:52:bc:bb:da:25:40:ca:f4:ad:e1:2e:ab: 30:1d:41:b8:50:6d:a1:05:3b:b5:9e:47:f2:50:84:d9:ae:6b: ee:70:5b:75:45:d7:34:78:21:d8:75:07:4a:24:3a:2e:b9:b7: 10:37:f9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJs6lq5JLH3g9TZCqBp0XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MTViM2JkN2IwNGY0YzA2YjJhYWZlZTk2MzRlY2RjMTU3 MmY0MTcwHhcNMjUxMjIyMTMwMTQ2WhcNMjUxMjIzMTMwMTQ2WjAzMTEwLwYDVQQD EyhhZjE0ZDJjMWU5ZmUzYmViN2Y0ZjQzMTQ0NGFmMmU1OTZkNDEwMGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lBbinQDvlAksBbfMJ1ql4CdS9mO R4/9HUruFN49s/WuY2TDBq5959EozJab8WUOBFTIQlXLmzwT1HnFKNLLMfu6Zz9r vpjL3bpAVH620lVTFjfkV5YxEy7ACkfGvu22ULBIBuzCskMoIVd+m9lYEUWfC+8Q oQKDacTEBRBAkERIscbGxdvfGMpSVElL79FUKshtZXaTURRVUSNg5YJWJ9gT9XsI zt50/izWgyD2W2BmD78tu5Wsp49JI/Y4UgH7vozFQTFWbA7bEOL2bVKjAZitnLeq n3oUMvJWAn/I77DwnfuGo/Fohoiowe3iBD2ReGAl9Mbik1Sg9wT3OT73twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8U0sHp/jvrf09DFESvLlltQQDFMB8GA1UdIwQY MBaAFNYVs717BPTAayqv7pY07NwVcvQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQt OGQ2NjUxMTQ4NTYwLzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xOGRlMzUtYjkzMS00YTZjLWJhYmQtOGQ2NjUxMTQ4NTYw LzEvMWhXenZYc0U5TUJyS3FfdWxqVHMzQlZ5OUJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3gdOqZE kt1i7NDM+VueCdwWDqHHSZPXf+Wce4J92yYPHF7GcH5BxIcTne2uQy1u46dUS2/p tsOD/DX8aIhH4HRLd0DgSCT28Hxx6R6DhG4nAlZ+1f4dhO1b/mJ233EZqdLfpyJS hlmWwwsM6A6lWPXOp3hk15use/y7aRA6q5nYGss8duGfHcp9am1UH7Ngokc1tgnF OZEqhy6yDGMT5OPTha3Iysp6Kg1/q1LCDvmjnaSVJezoYCbc9RbxZX7/ZKpVmNHA wPKZrVaGUry72iVAyvSt4S6rMB1BuFBtoQU7tZ5H8lCE2a5r7nBbdUXXNHgh2HUH SiQ6Lrm3EDf5Ew== -----END CERTIFICATE-----Generated at Mon Dec 22 22:19:25 2025 by rpki-client