This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json) Hash identifier: 26hobcCpuaTyAAjYRL+tgYJWCT9IdnwpFP9cDGIQor8= Subject key identifier: 80:F4:67:EE:B9:92:73:EE:C8:ED:76:55:5B:BF:41:6A:4D:B2:BC:6D Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18 Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818 Certificate serial: 019B432539FA855DE9677B16388743B4325D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 23:01:11 +0000 Manifest this update: Sun 21 Dec 2025 23:01:11 +0000 Manifest next update: Mon 22 Dec 2025 23:01:11 +0000 Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: ejXGxyP2Z/etF13GB5iABOOREcB8gQeXCjB4Zphc0TY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:39:fa:85:5d:e9:67:7b:16:38:87:43:b4:32:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818 Validity Not Before: Dec 21 23:01:11 2025 GMT Not After : Dec 22 23:01:11 2025 GMT Subject: CN=80f467eeb99273eec8ed76555bbf416a4db2bc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:aa:43:d2:90:fe:16:71:97:c1:e5:d3:fb:c9: b9:d9:5e:f4:81:0a:47:d3:29:c2:af:7a:6e:5b:5c: 29:39:d4:70:6c:a6:56:56:59:ef:dd:37:dc:c3:0f: ed:d8:5f:51:fa:67:6f:59:fd:05:31:aa:5e:c7:23: 17:6b:da:48:0f:ba:4b:19:28:a8:76:cf:75:b9:d5: 36:35:b9:4f:56:28:0e:26:75:bb:89:48:8b:da:8c: d1:0c:46:fb:25:83:e6:6e:14:3f:ba:47:be:11:05: 15:e7:5b:d9:4b:97:47:d0:91:05:1d:62:a9:58:69: 18:46:bd:bd:ba:7b:12:9f:6e:24:88:37:6b:9d:6a: 45:4d:4d:89:68:b4:53:4c:25:7e:ce:aa:ff:67:9e: 92:e8:4a:93:3b:88:f7:ac:73:62:c9:c1:00:46:92: e6:5f:83:38:eb:ae:da:d9:61:f3:16:c6:a8:e0:ea: 26:6c:01:e7:f8:c7:d7:77:8a:93:29:d2:4f:53:2f: 1a:20:89:22:2f:a3:d8:86:5a:86:f6:82:85:f4:f6: 4f:7d:ea:25:d1:c8:e5:12:c7:06:7c:0c:6e:b1:7f: 12:dd:45:9d:49:ab:b0:3b:78:64:b8:24:1b:79:fd: 90:a3:73:95:19:ea:0d:d5:b1:5b:f9:ad:af:bb:68: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F4:67:EE:B9:92:73:EE:C8:ED:76:55:5B:BF:41:6A:4D:B2:BC:6D X509v3 Authority Key Identifier: keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:00:2c:6b:9b:15:49:b6:35:7c:dc:08:49:84:c4:26:b2:f2: 2d:e5:bc:64:31:11:7a:0d:b1:67:8a:15:45:36:21:35:79:db: 93:d3:a3:5f:19:1d:e3:45:fd:cd:d0:ce:7a:48:46:ed:0e:68: af:92:ac:ec:a0:55:ba:69:6f:3c:f8:f3:70:c5:61:43:b2:36: 6c:bc:05:cf:6f:28:9c:6f:f0:1b:9b:2e:7e:c4:84:a8:f6:1d: b9:61:66:4f:bb:42:9f:1c:7f:a7:f0:3b:cf:89:e8:d2:d4:a3: 82:7c:a7:99:66:89:9b:bf:ac:81:a2:03:cb:5b:13:12:e1:ff: a1:e8:f8:b7:7f:6f:05:bc:27:10:75:d4:4e:7b:53:07:f6:de: c5:8b:6c:69:10:86:33:e4:3d:d7:e5:31:2e:2f:9b:f8:8e:a4: 89:99:5a:5d:5f:be:06:1e:4e:16:02:d2:70:4e:38:30:38:e5: 6c:08:27:88:83:ef:44:37:68:15:f1:1c:f4:73:2a:7a:6c:42: 91:e3:ef:7a:3b:d1:6b:96:b5:27:a8:0c:ff:c1:9c:fe:41:90: 9d:76:5c:e6:7a:97:5b:cb:ef:18:82:e3:c5:f5:9b:cf:34:a3: ad:64:0a:f1:14:a0:d3:ab:d1:34:19:76:d2:d2:bd:93:d4:73: 13:91:7e:a8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtDJTn6hV3pZ3sWOIdDtDJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzM1NjZjOGM1YjgzYjJmM2UxNjk4Yjk3MTEyNTk0ZTgy MTA4MTgwHhcNMjUxMjIxMjMwMTExWhcNMjUxMjIyMjMwMTExWjAzMTEwLwYDVQQD Eyg4MGY0NjdlZWI5OTI3M2VlYzhlZDc2NTU1YmJmNDE2YTRkYjJiYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0apD0pD+FnGXweXT+8m52V70gQpH 0ynCr3puW1wpOdRwbKZWVlnv3Tfcww/t2F9R+mdvWf0FMapexyMXa9pID7pLGSio ds91udU2NblPVigOJnW7iUiL2ozRDEb7JYPmbhQ/uke+EQUV51vZS5dH0JEFHWKp WGkYRr29unsSn24kiDdrnWpFTU2JaLRTTCV+zqr/Z56S6EqTO4j3rHNiycEARpLm X4M4667a2WHzFsao4OombAHn+MfXd4qTKdJPUy8aIIkiL6PYhlqG9oKF9PZPfeol 0cjlEscGfAxusX8S3UWdSauwO3hkuCQbef2Qo3OVGeoN1bFb+a2vu2ilewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFID0Z+65knPuyO12VVu/QWpNsrxtMB8GA1UdIwQY MBaAFPozVmyMW4Oy8+Fpi5cRJZToIQgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qTldiSXhiZzdMejRXbUxseEVsbE9naENCZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTMxMzQ3LWQ3OWItNDE0NC04NzQ5 LWMzMzM3OTRhN2I5Ny8xLzEtak5XYkl4Ymc3THo0V21MbHhFbGxPZ2hDQmcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFjL2UzMTM0Ny1kNzliLTQxNDQtODc0OS1jMzMzNzk0YTdi OTcvMS8xLWpOV2JJeGJnN0x6NFdtTGx4RWxsT2doQ0JnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwAs a5sVSbY1fNwISYTEJrLyLeW8ZDEReg2xZ4oVRTYhNXnbk9OjXxkd40X9zdDOekhG 7Q5or5Ks7KBVumlvPPjzcMVhQ7I2bLwFz28onG/wG5sufsSEqPYduWFmT7tCnxx/ p/A7z4no0tSjgnynmWaJm7+sgaIDy1sTEuH/oej4t39vBbwnEHXUTntTB/bexYts aRCGM+Q91+UxLi+b+I6kiZlaXV++Bh5OFgLScE44MDjlbAgniIPvRDdoFfEc9HMq emxCkePvejvRa5a1J6gM/8Gc/kGQnXZc5nqXW8vvGILjxfWbzzSjrWQK8RSg06vR NBl20tK9k9RzE5F+qA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:48:46 2025 by rpki-client