This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json) Hash identifier: 80SdJcslkpiGVIl9yxNmOZCPbzS8dp1K/ljhSfxdM9s= Subject key identifier: C8:6C:D9:2F:6A:CE:5B:65:9B:A5:27:BE:4F:48:C5:4E:E7:8B:FC:F1 Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Certificate serial: 019B405B917BC523E295FD285C465854AD67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 10:01:41 +0000 Manifest this update: Sun 21 Dec 2025 10:01:41 +0000 Manifest next update: Mon 22 Dec 2025 10:01:41 +0000 Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: Z1rimCHwQ3AVxDMLdqUQI+wid/pi2vu0izfDqtYZzRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:91:7b:c5:23:e2:95:fd:28:5c:46:58:54:ad:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825 Validity Not Before: Dec 21 10:01:41 2025 GMT Not After : Dec 22 10:01:41 2025 GMT Subject: CN=c86cd92f6ace5b659ba527be4f48c54ee78bfcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a3:44:11:cf:00:c5:5f:35:1a:c6:a2:90:23: c9:de:fe:59:06:9e:f8:6c:63:5f:5e:c4:8c:7e:ac: f8:60:44:0f:4f:f7:4e:f6:f2:33:ff:60:30:bd:8a: 56:2b:bd:87:c7:14:34:ea:bb:78:78:3f:20:ec:c9: 38:dc:1b:de:d6:bf:76:00:bf:2f:ab:e3:61:6a:2d: a4:e0:d0:80:8f:96:91:1c:89:dd:f7:55:c3:89:83: 67:1f:98:0f:58:7f:61:ed:20:04:9c:bd:da:e0:60: fd:10:ac:19:69:25:aa:60:33:a0:5f:6c:22:82:bd: 99:4d:db:27:c2:3f:92:87:48:da:48:78:ec:37:97: c4:16:b4:37:3f:93:ef:0a:07:91:79:a2:27:9a:4c: 5e:ec:44:31:6d:c8:d4:99:5d:08:2b:1b:2e:7f:80: 6e:1b:3f:11:f7:88:24:81:07:f9:93:74:41:db:84: ab:db:e9:7f:57:ba:35:35:db:13:03:d6:64:1e:bf: 93:fc:33:56:73:6b:9d:78:42:05:4f:0f:43:43:2b: f2:c3:cb:b2:d0:90:80:4d:e5:ab:7c:a7:13:5c:c0: 6b:d6:94:15:61:cf:ce:70:6d:72:1a:81:db:6c:e5: ad:8a:6a:b5:c0:62:e4:5b:ba:23:37:ba:ea:26:a1: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:D9:2F:6A:CE:5B:65:9B:A5:27:BE:4F:48:C5:4E:E7:8B:FC:F1 X509v3 Authority Key Identifier: keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1d:8c:6a:1a:0a:2f:5e:3f:ea:b1:56:6d:dd:7b:0d:d2:e3: d1:c6:4c:cb:72:3c:13:9b:2d:16:14:b5:ec:bc:17:ef:9c:9e: 61:e6:fb:75:8f:fe:59:d5:2b:78:57:a2:3b:9d:83:ea:ac:ee: 6d:de:a9:d3:6d:0b:19:7b:71:50:25:9c:fe:3a:4f:8d:80:91: 9e:a3:00:c0:b0:c2:02:cc:c8:71:ee:ca:7f:30:bc:6a:a0:31: a8:ce:e1:ab:3e:62:ed:bb:29:e2:1a:88:6d:f9:2b:c3:8a:4d: 8f:2b:4c:f8:b4:b3:48:03:65:93:25:9c:ef:b8:a9:d3:27:39: 07:b9:67:8b:84:ae:a9:2c:ae:7b:9b:2e:10:49:4d:b5:81:b2: 08:7b:2d:76:20:1c:66:7b:93:90:47:13:13:42:3d:ce:77:ab: 63:e6:8c:db:19:69:30:78:c3:5f:55:54:27:b8:64:54:7f:5a: 37:9b:05:18:29:3d:e7:2f:60:04:c4:ad:6e:cd:44:9b:b6:b9: 38:71:8e:49:5f:db:c2:bd:5e:3d:1a:fe:0b:1b:3a:7a:83:33: a4:f3:54:8a:12:4a:8c:b8:ec:a5:61:c6:ff:10:e5:fb:4f:60: ef:cf:00:e8:bd:e6:70:b9:7c:89:b9:b3:21:53:28:b6:09:16: 5a:98:9a:f8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtAW5F7xSPilf0oXEZYVK1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2Y3MzM3NmViNjNmMWRjZmIyNzA0MDJiZmRjZjMwMzFm NWQ4MjUwHhcNMjUxMjIxMTAwMTQxWhcNMjUxMjIyMTAwMTQxWjAzMTEwLwYDVQQD EyhjODZjZDkyZjZhY2U1YjY1OWJhNTI3YmU0ZjQ4YzU0ZWU3OGJmY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqNEEc8AxV81GsaikCPJ3v5ZBp74 bGNfXsSMfqz4YEQPT/dO9vIz/2AwvYpWK72HxxQ06rt4eD8g7Mk43Bve1r92AL8v q+Nhai2k4NCAj5aRHInd91XDiYNnH5gPWH9h7SAEnL3a4GD9EKwZaSWqYDOgX2wi gr2ZTdsnwj+Sh0jaSHjsN5fEFrQ3P5PvCgeReaInmkxe7EQxbcjUmV0IKxsuf4Bu Gz8R94gkgQf5k3RB24Sr2+l/V7o1NdsTA9ZkHr+T/DNWc2udeEIFTw9DQyvyw8uy 0JCATeWrfKcTXMBr1pQVYc/OcG1yGoHbbOWtimq1wGLkW7ojN7rqJqFw8wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMhs2S9qzltlm6Unvk9IxU7ni/zxMB8GA1UdIwQY MBaAFPvPczdutj8dz7JwQCv9zzAx9dglMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04OXpOMjYyUHgzUHNuQkFLXzNQTURIMTJDVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvNjI2MmIzLWY1Y2MtNDg2OC04YjIx LTkwOTJjY2Q1ZDllMy8xLzEtODl6TjI2MlB4M1BzbkJBS18zUE1ESDEyQ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y0LzYyNjJiMy1mNWNjLTQ4NjgtOGIyMS05MDkyY2NkNWQ5 ZTMvMS8xLTg5ek4yNjJQeDNQc25CQUtfM1BNREgxMkNVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB2M ahoKL14/6rFWbd17DdLj0cZMy3I8E5stFhS17LwX75yeYeb7dY/+WdUreFeiO52D 6qzubd6p020LGXtxUCWc/jpPjYCRnqMAwLDCAszIce7KfzC8aqAxqM7hqz5i7bsp 4hqIbfkrw4pNjytM+LSzSANlkyWc77ip0yc5B7lni4SuqSyue5suEElNtYGyCHst diAcZnuTkEcTE0I9znerY+aM2xlpMHjDX1VUJ7hkVH9aN5sFGCk95y9gBMStbs1E m7a5OHGOSV/bwr1ePRr+Cxs6eoMzpPNUihJKjLjspWHG/xDl+09g788A6L3mcLl8 ibmzIVMotgkWWpia+A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:56:29 2025 by rpki-client