This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json) Hash identifier: i19Ua9L8jPr5VRRm7aDaMooZ4D00/jPvXwcDNNczLOc= Subject key identifier: CF:C5:C6:5D:DA:58:1A:AE:EA:C7:DE:5C:24:DF:B6:E1:42:8D:B6:3B Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e Certificate serial: 019B2A4088A09088D1F6F190CA2F273CA82A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft Manifest number: 06A3 Signing time: Wed 17 Dec 2025 03:00:30 +0000 Manifest this update: Wed 17 Dec 2025 03:00:30 +0000 Manifest next update: Thu 18 Dec 2025 03:00:30 +0000 Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: v+1ZGdz9kg9WYHUDVcH7GbAZMnb8bHIudI/BR9gxv3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:40:88:a0:90:88:d1:f6:f1:90:ca:2f:27:3c:a8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e Validity Not Before: Dec 17 03:00:30 2025 GMT Not After : Dec 18 03:00:30 2025 GMT Subject: CN=cfc5c65dda581aaeeac7de5c24dfb6e1428db63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:8e:40:c8:e1:70:e1:2c:32:60:e9:72:39: cd:f7:ed:bd:7d:5f:ef:07:85:5f:5e:91:20:e6:46: 90:48:5c:35:b6:36:13:39:b1:26:35:37:4f:1b:26: 0e:5e:17:f2:5e:70:6e:b1:a2:50:d2:7d:f7:76:d6: 05:ad:a7:4d:a3:aa:a3:5f:f5:be:1b:d9:be:aa:c7: 7b:c5:8a:f4:6f:b7:ed:5a:e5:aa:0a:bb:fb:e0:94: eb:d4:49:d7:0b:f8:dc:31:32:58:6f:b8:12:2c:0e: 18:10:10:97:89:32:6c:a3:44:cd:be:53:0d:33:f4: 22:37:47:c3:35:e0:2b:a3:64:64:19:81:1b:b9:56: d1:5b:ad:b3:41:00:39:ad:49:27:f3:60:b5:14:5e: a1:55:32:6c:31:a8:33:ea:ea:a3:2c:d0:02:99:9a: bf:a9:f9:78:5f:35:50:aa:cb:b2:0d:7e:98:9f:e4: e2:b7:82:51:80:47:14:12:83:39:5a:7d:49:23:a9: f5:57:ef:a9:54:23:f3:88:c3:83:50:1a:dc:74:dc: ae:a0:37:7b:c8:11:c2:5a:03:06:0d:7d:46:f3:ef: e3:62:28:19:7b:29:64:a8:09:fc:1f:24:11:d6:ac: c6:26:2f:22:07:5a:6a:c3:40:bf:eb:09:67:21:d5: 4d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C5:C6:5D:DA:58:1A:AE:EA:C7:DE:5C:24:DF:B6:E1:42:8D:B6:3B X509v3 Authority Key Identifier: keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:92:cc:16:be:6e:9d:67:7b:2c:0b:a1:44:1a:bd:ba:5f:b6: 35:e5:64:d4:ba:82:6d:10:ab:15:81:72:50:53:be:8d:0d:a1: 9b:8a:b4:da:98:37:20:b3:23:ad:e8:3f:d7:2a:07:52:71:5e: 7c:4e:68:fe:0c:c0:ac:a6:82:a0:d1:7e:b3:bf:0e:9d:be:a1: 6d:1e:d9:9d:12:ad:93:f8:d0:11:51:83:63:0e:3d:0a:97:97: bd:c8:f6:a0:f7:49:bf:6d:e8:b9:67:eb:b1:d6:df:29:f7:5d: d2:bf:68:ca:ea:f9:69:79:e8:7c:ec:6e:89:29:f6:af:31:e8: 9f:ba:70:4c:26:a0:be:a1:22:8f:ff:46:f9:8c:10:46:f4:c1: 48:29:ab:d5:4a:50:1a:bf:5e:5a:fd:22:a6:2a:6a:c1:63:03: fb:2b:d3:ca:1e:c0:dc:4b:18:c2:12:5d:d0:6b:4f:cf:fd:02: 78:96:64:ba:54:17:46:be:23:0c:aa:29:ff:e9:b0:1c:6e:09: 96:8f:ba:0c:76:ef:cf:eb:ac:a1:07:d0:75:8b:f4:c7:18:7b: 2b:5a:e2:b5:d4:78:8c:76:b1:98:f1:88:be:55:e3:dc:f9:d2: c3:8e:50:77:64:df:c6:90:3d:85:77:2c:5a:1f:8e:e7:4f:4d: cf:13:72:d1 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsqQIigkIjR9vGQyi8nPKgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNmI5MDgwNDgxM2E2NTc2ODg3OThhZGRlN2JkYmQwZTZk MGU1M2UwHhcNMjUxMjE3MDMwMDMwWhcNMjUxMjE4MDMwMDMwWjAzMTEwLwYDVQQD EyhjZmM1YzY1ZGRhNTgxYWFlZWFjN2RlNWMyNGRmYjZlMTQyOGRiNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuaOQMjhcOEsMmDpcjnN9+29fV/v B4VfXpEg5kaQSFw1tjYTObEmNTdPGyYOXhfyXnBusaJQ0n33dtYFradNo6qjX/W+ G9m+qsd7xYr0b7ftWuWqCrv74JTr1EnXC/jcMTJYb7gSLA4YEBCXiTJso0TNvlMN M/QiN0fDNeAro2RkGYEbuVbRW62zQQA5rUkn82C1FF6hVTJsMagz6uqjLNACmZq/ qfl4XzVQqsuyDX6Yn+Tit4JRgEcUEoM5Wn1JI6n1V++pVCPziMODUBrcdNyuoDd7 yBHCWgMGDX1G8+/jYigZeylkqAn8HyQR1qzGJi8iB1pqw0C/6wlnIdVNHwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM/Fxl3aWBqu6sfeXCTftuFCjbY7MB8GA1UdIwQY MBaAFPprkIBIE6ZXaIeYrd5729Dm0OU+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tdVFnRWdUcGxkb2g1aXQzbnZiME9iUTVUNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2RiLTIyNmQtNDFlMi1iZTA5 LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0M252YjBPYlE1VDQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2L2E5ZTNkYi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1 OWYvMS8xLW11UWdFZ1RwbGRvaDVpdDNudmIwT2JRNVQ0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpLM Fr5unWd7LAuhRBq9ul+2NeVk1LqCbRCrFYFyUFO+jQ2hm4q02pg3ILMjreg/1yoH UnFefE5o/gzArKaCoNF+s78Onb6hbR7ZnRKtk/jQEVGDYw49CpeXvcj2oPdJv23o uWfrsdbfKfdd0r9oyur5aXnofOxuiSn2rzHon7pwTCagvqEij/9G+YwQRvTBSCmr 1UpQGr9eWv0ipipqwWMD+yvTyh7A3EsYwhJd0GtPz/0CeJZkulQXRr4jDKop/+mw HG4Jlo+6DHbvz+usoQfQdYv0xxh7K1ritdR4jHaxmPGIvlXj3PnSw45Qd2TfxpA9 hXcsWh+O509NzxNy0Q== -----END CERTIFICATE-----Generated at Wed Dec 17 09:48:06 2025 by rpki-client