This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json) Hash identifier: FNHgkvKDLU/q4pal02ZpFltOOw2cXYN+K0xiJSaeT8g= Subject key identifier: 2F:76:44:58:63:2B:66:5E:B4:69:A6:35:19:A5:D5:36:83:63:90:76 Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Certificate serial: 019B3A908E6BF58EA97312919BC801B5E98A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft Manifest number: 1305 Signing time: Sat 20 Dec 2025 07:01:50 +0000 Manifest this update: Sat 20 Dec 2025 07:01:50 +0000 Manifest next update: Sun 21 Dec 2025 07:01:50 +0000 Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: 7l6RrxFf7h/uwDU25bhaDkP3y/slOaqa9S7g3mvx6TY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:8e:6b:f5:8e:a9:73:12:91:9b:c8:01:b5:e9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5 Validity Not Before: Dec 20 07:01:50 2025 GMT Not After : Dec 21 07:01:50 2025 GMT Subject: CN=2f764458632b665eb469a63519a5d53683639076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:89:4d:a1:3a:1d:90:5b:97:7e:ee:3f:ad: 89:65:0c:08:7b:ea:cc:ac:53:10:a2:0b:23:62:f7: 51:4a:ba:5a:a0:91:65:e6:09:5b:e8:8a:9d:1d:5a: 77:c7:2e:5e:36:cf:a4:00:bf:27:82:2c:c7:00:6f: 4b:38:5f:0e:dd:27:a2:7f:4c:52:80:f0:3f:e5:61: 47:80:65:a5:98:9e:c9:2a:c0:e7:ea:c8:9e:6b:6b: 4d:67:3b:fb:f6:ad:49:8b:80:c8:92:21:f6:50:47: 78:cc:b9:5d:a3:1c:b2:5d:99:71:ea:8e:e0:81:7f: 8d:42:79:e9:08:67:5d:d6:20:36:50:db:09:6f:75: 61:ed:88:44:11:ca:07:da:82:ac:0a:a7:57:d2:bf: 5f:6a:93:d2:88:9a:fd:02:a5:f4:9f:20:d9:41:2c: 3b:b1:13:4e:11:61:a8:cb:ef:6e:85:78:ab:fe:0e: d8:2b:54:34:57:b3:13:fc:e5:76:f6:d9:83:dd:12: 2a:23:69:4f:47:a7:f2:44:a0:6f:9d:27:a0:da:6e: c8:f4:e2:56:68:26:ab:28:6a:f4:4a:2e:24:f0:a3: 6c:da:aa:1b:69:28:c2:6f:24:e7:3c:56:21:ee:97: 1a:e5:4a:5e:cc:f6:8e:39:c6:f6:85:2e:cd:7f:e7: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:76:44:58:63:2B:66:5E:B4:69:A6:35:19:A5:D5:36:83:63:90:76 X509v3 Authority Key Identifier: keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:72:f0:3b:1c:09:b6:cd:ea:6a:86:9d:14:d7:6c:db:ff:6c: 3c:38:33:fb:68:78:7c:9f:63:51:8a:27:f7:db:35:78:69:04: 7a:e9:03:14:c2:2f:7a:68:db:7e:f7:a8:ab:50:7b:c9:54:20: f7:c8:9a:4f:db:7e:f4:1d:99:05:9f:3a:ca:3b:b3:a6:a3:37: 72:b0:a2:44:f7:3e:af:2b:15:5a:1f:9c:2c:20:cb:2d:26:50: 46:d6:ab:83:38:35:f5:21:2b:74:4b:19:d5:89:74:ef:27:18: a1:b3:81:c2:6c:ea:06:5f:29:f8:93:87:21:af:2c:da:d9:06: 69:06:3b:03:3e:d1:82:1b:dd:0a:5d:75:c4:71:3e:81:08:b6: cb:e6:7a:fc:e6:05:85:9d:d7:2b:33:2c:c3:66:9d:e6:7b:cb: 8b:03:aa:71:70:aa:cc:19:55:f2:e7:51:40:51:9a:e9:3b:40: f7:b3:c2:76:61:e3:31:a0:2f:4d:bf:b9:c4:30:30:b9:a0:13: 90:0e:3e:ff:67:0d:93:32:38:dc:d8:4d:3f:4a:ed:b6:f7:25: 79:b5:18:76:0b:ee:3c:d8:79:97:98:19:77:bd:81:90:23:20: ab:03:52:c7:dd:1f:27:d0:4b:42:bf:d4:08:fc:05:63:fe:d7: 97:39:4c:46 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs6kI5r9Y6pcxKRm8gBtemKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy MWI1YjUwHhcNMjUxMjIwMDcwMTUwWhcNMjUxMjIxMDcwMTUwWjAzMTEwLwYDVQQD EygyZjc2NDQ1ODYzMmI2NjVlYjQ2OWE2MzUxOWE1ZDUzNjgzNjM5MDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoGJTaE6HZBbl37uP62JZQwIe+rM rFMQogsjYvdRSrpaoJFl5glb6IqdHVp3xy5eNs+kAL8ngizHAG9LOF8O3Seif0xS gPA/5WFHgGWlmJ7JKsDn6siea2tNZzv79q1Ji4DIkiH2UEd4zLldoxyyXZlx6o7g gX+NQnnpCGdd1iA2UNsJb3Vh7YhEEcoH2oKsCqdX0r9fapPSiJr9AqX0nyDZQSw7 sRNOEWGoy+9uhXir/g7YK1Q0V7MT/OV29tmD3RIqI2lPR6fyRKBvnSeg2m7I9OJW aCarKGr0Si4k8KNs2qobaSjCbyTnPFYh7pca5UpezPaOOcb2hS7Nf+euDQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC92RFhjK2ZetGmmNRml1TaDY5B2MB8GA1UdIwQY MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3 LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnLw OxwJts3qaoadFNds2/9sPDgz+2h4fJ9jUYon99s1eGkEeukDFMIvemjbfveoq1B7 yVQg98iaT9t+9B2ZBZ86yjuzpqM3crCiRPc+rysVWh+cLCDLLSZQRtargzg19SEr dEsZ1Yl07ycYobOBwmzqBl8p+JOHIa8s2tkGaQY7Az7RghvdCl11xHE+gQi2y+Z6 /OYFhZ3XKzMsw2ad5nvLiwOqcXCqzBlV8udRQFGa6TtA97PCdmHjMaAvTb+5xDAw uaATkA4+/2cNkzI43NhNP0rttvclebUYdgvuPNh5l5gZd72BkCMgqwNSx90fJ9BL Qr/UCPwFY/7XlzlMRg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:21 2025 by rpki-client