This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json) Hash identifier: ktJsbB63Gd4l3c5C9qtIT8DMhEw0RtMfwSFPdCtj3iA= Subject key identifier: 82:CB:F8:8B:22:10:46:04:1E:E6:3E:6C:6C:84:9D:62:25:67:89:C2 Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e Certificate serial: 019B3C7F52B21C0C6EE01A491B32E9C2981C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft Manifest number: 0D09 Signing time: Sat 20 Dec 2025 16:02:15 +0000 Manifest this update: Sat 20 Dec 2025 16:02:15 +0000 Manifest next update: Sun 21 Dec 2025 16:02:15 +0000 Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: TBk04A438WEXfbLafqG6HqD7S1u5K5p09P2G1zdKivk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:52:b2:1c:0c:6e:e0:1a:49:1b:32:e9:c2:98:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e Validity Not Before: Dec 20 16:02:15 2025 GMT Not After : Dec 21 16:02:15 2025 GMT Subject: CN=82cbf88b221046041ee63e6c6c849d62256789c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:dc:10:08:9c:9f:b7:d7:7f:33:53:73:c5: 64:62:bc:1a:eb:a3:a2:1f:4d:e7:c9:c9:b4:ce:a8: 96:06:1d:16:ac:88:ca:df:ca:b6:a4:17:2c:f2:e4: aa:d3:40:12:d4:55:4d:67:56:88:cd:0b:a1:43:73: 15:7d:06:a5:ae:f3:a2:d5:ee:b6:7c:10:00:e9:e8: 7d:b4:31:48:95:98:ea:d7:2a:1e:ae:3d:e9:f6:da: d4:6c:be:2b:a9:9c:23:8c:54:e3:a5:ae:ea:d4:38: 91:b0:60:c7:e7:7f:be:9a:22:da:95:cb:d1:11:cf: 2b:a6:af:5e:ca:05:70:fd:22:8f:a0:84:f2:55:77: bb:dd:aa:f7:f9:42:11:2e:89:3c:6e:68:69:13:c3: c8:2a:a7:b5:6a:4e:a7:db:b1:91:8c:39:64:e1:34: 21:96:6d:5b:3a:5b:dd:6b:1a:94:04:7b:3a:08:61: 76:14:94:43:19:cc:36:6a:bb:52:b9:b4:e7:47:a6: 9e:1f:33:2d:81:39:b6:24:f2:38:c5:87:0e:02:48: ef:1f:e3:df:9d:1b:df:e9:a1:17:a9:0d:b3:ef:b9: 1a:fa:35:58:bd:f4:55:49:b9:7e:82:57:d4:fb:de: a3:66:42:d4:57:8c:39:b1:ff:ff:95:4d:22:84:fa: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CB:F8:8B:22:10:46:04:1E:E6:3E:6C:6C:84:9D:62:25:67:89:C2 X509v3 Authority Key Identifier: keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8c:15:70:cd:ab:a7:09:a1:8d:4b:bc:99:a8:87:a6:95:0a: d4:e6:38:f9:b9:61:40:00:b0:7f:8b:ce:67:a9:c7:da:f4:45: 16:bf:f7:67:24:23:fd:e7:0c:6a:a3:c0:15:95:ed:5b:74:ad: 26:9e:87:9a:d6:16:dd:4b:81:e3:27:a3:e2:8e:ca:8c:c3:85: 97:b5:32:44:3e:73:ba:cb:90:84:3b:cc:2b:2a:d4:a5:2a:9d: 66:e9:3d:9f:f9:09:fe:11:d0:dc:94:b3:ad:85:00:3b:f9:48: ca:9f:39:41:d6:5b:ac:76:0d:27:41:c5:0c:a1:57:33:74:b2: bd:c5:1b:71:89:48:a4:05:32:2a:35:de:ee:18:3b:59:c1:5a: 6b:73:54:5a:23:11:88:ce:b3:b5:e9:05:b9:28:e8:b9:7e:90: 09:75:b0:90:d9:40:62:85:43:a2:f8:52:eb:9a:ed:05:e8:74: 98:0f:c2:9a:5a:f7:8f:ac:23:92:15:32:fd:44:ba:ab:db:06: 23:70:f2:fe:c4:8c:94:a7:9d:a1:d1:09:d7:45:74:c1:19:93: 85:66:f2:d1:4d:61:e6:bb:19:80:8f:cf:a0:46:0f:42:9e:d3: 3d:9a:f0:32:4b:72:47:c0:cb:18:d3:11:3a:80:7e:27:89:ff: f5:cc:ca:a3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8f1KyHAxu4BpJGzLpwpgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYmU1MmQ4MzRlMjY4ZGM2OTg4MzAyOTJmZGU0YjYzYzdk YTM5MmUwHhcNMjUxMjIwMTYwMjE1WhcNMjUxMjIxMTYwMjE1WjAzMTEwLwYDVQQD Eyg4MmNiZjg4YjIyMTA0NjA0MWVlNjNlNmM2Yzg0OWQ2MjI1Njc4OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvcEAicn7fXfzNTc8VkYrwa66Oi H03nycm0zqiWBh0WrIjK38q2pBcs8uSq00AS1FVNZ1aIzQuhQ3MVfQalrvOi1e62 fBAA6eh9tDFIlZjq1yoerj3p9trUbL4rqZwjjFTjpa7q1DiRsGDH53++miLalcvR Ec8rpq9eygVw/SKPoITyVXe73ar3+UIRLok8bmhpE8PIKqe1ak6n27GRjDlk4TQh lm1bOlvdaxqUBHs6CGF2FJRDGcw2artSubTnR6aeHzMtgTm2JPI4xYcOAkjvH+Pf nRvf6aEXqQ2z77ka+jVYvfRVSbl+glfU+96jZkLUV4w5sf//lU0ihPo8NwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFILL+IsiEEYEHuY+bGyEnWIlZ4nCMB8GA1UdIwQY MBaAFPu+Utg04mjcaYgwKS/eS2PH2jkuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03NVMyRFRpYU54cGlEQXBMOTVMWThmYU9TNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvZDg0YjdhLTdlYjAtNDZhMi04YThh LTAyNjYyNmFlMzFmNS8xLzEtNzVTMkRUaWFOeHBpREFwTDk1TFk4ZmFPUzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2M5L2Q4NGI3YS03ZWIwLTQ2YTItOGE4YS0wMjY2MjZhZTMx ZjUvMS8xLTc1UzJEVGlhTnhwaURBcEw5NUxZOGZhT1M0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIwV cM2rpwmhjUu8maiHppUK1OY4+blhQACwf4vOZ6nH2vRFFr/3ZyQj/ecMaqPAFZXt W3StJp6HmtYW3UuB4yej4o7KjMOFl7UyRD5zusuQhDvMKyrUpSqdZuk9n/kJ/hHQ 3JSzrYUAO/lIyp85QdZbrHYNJ0HFDKFXM3SyvcUbcYlIpAUyKjXe7hg7WcFaa3NU WiMRiM6ztekFuSjouX6QCXWwkNlAYoVDovhS65rtBeh0mA/Cmlr3j6wjkhUy/US6 q9sGI3Dy/sSMlKedodEJ10V0wRmThWby0U1h5rsZgI/PoEYPQp7TPZrwMktyR8DL GNMROoB+J4n/9czKow== -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:34 2025 by rpki-client