This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json) Hash identifier: mpF374mlKzOZ2N5OlNphxgMPvRKOXf1/glEeU47WOnI= Subject key identifier: F8:35:BC:7D:B6:56:AF:7C:D0:58:EE:A4:D2:D7:76:FF:D0:06:E5:D0 Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Certificate serial: 019B1916003C2767F23B7FDC8BAE9820D7D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft Manifest number: 145A Signing time: Sat 13 Dec 2025 19:00:30 +0000 Manifest this update: Sat 13 Dec 2025 19:00:30 +0000 Manifest next update: Sun 14 Dec 2025 19:00:30 +0000 Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: WAGKBO8gkzlK/7Iw6riiIij04Rvdh8a46wJ2Pva4hIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:00:3c:27:67:f2:3b:7f:dc:8b:ae:98:20:d7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2 Validity Not Before: Dec 13 19:00:30 2025 GMT Not After : Dec 14 19:00:30 2025 GMT Subject: CN=f835bc7db656af7cd058eea4d2d776ffd006e5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ce:bd:b1:78:f1:94:69:5d:40:89:28:08:14: 77:cd:8e:b0:5e:25:ac:c7:81:b2:22:87:a4:fc:e4: 74:a8:41:ac:16:64:66:b3:23:b6:61:95:bb:d2:4c: f6:d3:7e:2d:59:77:ea:77:23:7d:da:0f:7f:a2:f7: b5:fd:16:34:47:90:24:19:75:15:e7:de:e8:39:39: 1c:80:dd:8b:8d:17:2d:48:7d:b9:a5:85:ab:69:88: ed:3f:3e:ea:ae:6b:d7:01:1f:4c:8c:fd:a2:67:02: bd:f4:0c:51:e9:98:b6:e7:f5:f1:8c:11:41:9e:b6: 6c:fa:3d:4d:e5:46:c0:75:91:a9:6f:c2:0b:e6:8c: 06:62:ea:79:c0:d5:ba:5c:99:c7:42:bc:05:2e:8c: a2:ec:48:22:c2:93:d2:a6:d7:c0:d1:ac:b4:0d:f9: 7a:a0:60:64:09:0e:1b:ac:50:65:fa:50:2d:39:87: 0d:0b:70:bc:a5:25:e1:1e:0c:92:28:ba:b0:2e:18: 02:d5:62:40:2b:67:47:f0:94:30:28:8c:a5:7f:65: 50:4a:80:40:cb:8c:b8:0c:b1:e5:1d:63:1a:3c:8c: e9:20:56:60:33:04:e7:da:17:64:f9:38:98:97:af: bc:84:9a:e9:4f:c5:62:2e:ec:3e:50:dd:09:c8:96: 39:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:35:BC:7D:B6:56:AF:7C:D0:58:EE:A4:D2:D7:76:FF:D0:06:E5:D0 X509v3 Authority Key Identifier: keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:62:49:31:ec:83:fe:a2:77:41:34:57:01:2e:24:8c:bf:80: 0e:d5:48:92:69:6b:41:3e:01:93:2a:dc:eb:03:48:02:8f:3b: ea:25:04:2f:e5:c7:f1:43:95:51:0b:9f:ab:1c:42:93:2d:50: 17:de:c4:3d:56:9f:d4:44:75:24:6e:d5:04:5a:a5:70:26:7e: 06:a3:9c:11:d6:5e:10:59:d4:6d:3b:32:b0:9a:17:5b:b5:7f: 7e:d9:0e:cf:93:19:d1:b7:15:5c:4d:2c:75:e3:f0:a1:f4:46: 7c:e6:c3:4a:ac:06:15:ae:0c:79:ff:f9:a8:db:a5:b1:30:0c: 70:62:26:6d:c6:68:b3:6b:0e:b7:ec:2e:8d:8e:8b:d9:4a:07: 36:e7:e5:6c:07:63:79:c3:7f:7a:0f:3f:90:97:55:99:b7:ab: ff:bc:e5:81:26:04:24:ec:d0:2b:01:c0:c2:14:42:ff:ef:db: 52:e1:6d:8c:d7:ed:1f:86:84:15:4e:85:18:22:e3:d0:2b:0a: 99:d4:ed:5a:40:36:04:09:f4:b3:24:cd:fc:05:27:99:15:b1: 07:d7:a2:77:36:ef:7f:e7:05:14:5e:c5:68:bc:fc:57:d5:3d: a8:28:eb:dd:ee:e2:00:25:88:4e:16:95:1d:b2:28:30:8a:9c: f8:a7:a9:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFgA8J2fyO3/ci66YINfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODIzYTRjYTRkNzY4OTdiNWRkZmU3OTg4ZTI3MWZmNjgx MzE4ZjIwHhcNMjUxMjEzMTkwMDMwWhcNMjUxMjE0MTkwMDMwWjAzMTEwLwYDVQQD EyhmODM1YmM3ZGI2NTZhZjdjZDA1OGVlYTRkMmQ3NzZmZmQwMDZlNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M69sXjxlGldQIkoCBR3zY6wXiWs x4GyIoek/OR0qEGsFmRmsyO2YZW70kz2034tWXfqdyN92g9/ove1/RY0R5AkGXUV 597oOTkcgN2LjRctSH25pYWraYjtPz7qrmvXAR9MjP2iZwK99AxR6Zi25/XxjBFB nrZs+j1N5UbAdZGpb8IL5owGYup5wNW6XJnHQrwFLoyi7EgiwpPSptfA0ay0Dfl6 oGBkCQ4brFBl+lAtOYcNC3C8pSXhHgySKLqwLhgC1WJAK2dH8JQwKIylf2VQSoBA y4y4DLHlHWMaPIzpIFZgMwTn2hdk+TiYl6+8hJrpT8ViLuw+UN0JyJY5SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg1vH22Vq980FjupNLXdv/QBuXQMB8GA1UdIwQY MBaAFNSCOkyk12iXtd3+eYjicf9oExjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEt NGUyZjg5Y2FlMWRhLzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEtNGUyZjg5Y2FlMWRh LzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWJJMeyD /qJ3QTRXAS4kjL+ADtVIkmlrQT4Bkyrc6wNIAo876iUEL+XH8UOVUQufqxxCky1Q F97EPVaf1ER1JG7VBFqlcCZ+BqOcEdZeEFnUbTsysJoXW7V/ftkOz5MZ0bcVXE0s dePwofRGfObDSqwGFa4Mef/5qNulsTAMcGImbcZos2sOt+wujY6L2UoHNuflbAdj ecN/eg8/kJdVmber/7zlgSYEJOzQKwHAwhRC/+/bUuFtjNftH4aEFU6FGCLj0CsK mdTtWkA2BAn0syTN/AUnmRWxB9eidzbvf+cFFF7FaLz8V9U9qCjr3e7iACWIThaV HbIoMIqc+KepVQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:30:17 2025 by rpki-client