This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json) Hash identifier: 69hrGXe1MucDZRvZf+TB5JcFH2tTw/5J0frzGDueb6g= Subject key identifier: 7F:F9:DA:9A:C2:35:8D:FA:49:9D:B5:0E:48:80:65:B2:9A:E4:50:CF Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99 Certificate serial: 019B6CC7207CE17B0B991D832251912189FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft Manifest number: 179D Signing time: Tue 30 Dec 2025 01:02:27 +0000 Manifest this update: Tue 30 Dec 2025 01:02:27 +0000 Manifest next update: Wed 31 Dec 2025 01:02:27 +0000 Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: TXCkKEhwMnJkbOU3qU8It+NdHOw2v0exVd02jXNuBDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c7:20:7c:e1:7b:0b:99:1d:83:22:51:91:21:89:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99 Validity Not Before: Dec 30 01:02:27 2025 GMT Not After : Dec 31 01:02:27 2025 GMT Subject: CN=7ff9da9ac2358dfa499db50e488065b29ae450cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:6e:06:67:42:48:75:8e:53:0a:d6:75:69: 84:74:92:77:f9:68:ca:73:37:3d:a4:55:ed:96:c3: f5:8b:e1:47:73:ca:2c:a1:cd:65:12:0c:02:df:db: 09:32:28:3a:6c:4c:bd:31:80:f7:04:46:86:c7:8b: 73:a0:4a:5b:59:ed:8f:65:b6:df:b2:47:b2:b0:f8: 38:33:97:3e:f8:2d:76:dc:1f:ce:27:35:12:1f:ab: 23:19:01:94:e4:6a:02:6a:18:86:d7:43:93:37:f0: 05:d1:78:9e:4e:50:03:25:59:e1:88:b1:f3:8a:27: 0b:59:1f:da:9f:2d:13:9f:f6:39:a6:3e:cc:ae:28: 78:d1:c6:ff:d4:2d:88:d4:73:73:65:c8:27:0f:da: 82:c7:f9:68:3d:09:a7:f4:1c:73:7a:43:94:71:23: 67:9e:f5:16:8c:a5:61:b2:5d:0d:4f:60:c2:a2:90: a5:b2:30:e8:21:6c:b1:a1:0e:b9:5f:0f:bf:bc:1b: 92:76:8c:19:d4:42:96:35:6f:3e:2d:15:a3:78:4f: 92:59:50:87:cb:0f:84:5a:1f:75:5f:5c:61:ca:6b: 59:5c:de:aa:e0:c2:ce:49:f2:af:26:e2:c7:0a:48: 7b:97:63:08:57:89:ee:84:65:00:c0:b7:eb:2e:bb: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F9:DA:9A:C2:35:8D:FA:49:9D:B5:0E:48:80:65:B2:9A:E4:50:CF X509v3 Authority Key Identifier: keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:45:d5:ad:54:d4:10:ef:9b:65:67:8f:6c:29:96:ac:c9:73: 6c:93:de:b7:1d:1e:eb:c9:d3:73:1f:e8:bc:6e:76:c6:ff:ba: 22:bc:93:02:61:ba:07:81:f8:aa:66:40:6e:c9:6a:e8:fc:27: 8e:67:16:77:25:ba:42:8c:d9:32:e2:f6:44:de:20:1e:64:4f: 90:1f:20:51:2e:70:75:2c:22:83:1e:38:b0:cf:d6:fd:79:ce: c0:e5:6d:bc:96:f5:8c:b9:b5:d1:ae:ff:e1:95:75:5b:17:71: 69:09:6d:c2:9c:e8:19:ab:e8:b0:27:3f:df:02:f7:9b:08:ff: 92:97:7d:ef:9b:49:16:6e:b9:ba:e7:58:cd:7e:34:05:cb:b2: 8a:e8:31:5b:d3:2f:d1:41:83:9a:c4:d6:1e:06:cc:67:56:d7: 24:58:a0:e6:bf:88:05:aa:75:ab:d9:1a:a7:b1:98:20:b4:82: ff:2a:24:8d:1e:4e:8d:b1:ff:76:3e:15:77:ef:08:bc:f2:c3: 5a:f3:3e:9c:8a:6f:00:8d:28:86:d8:ed:b4:94:dd:e1:ac:73: 71:d2:ec:23:68:11:49:4e:0f:21:d3:fe:be:a4:2c:ef:50:d7: 68:8b:07:81:d6:70:9f:97:1a:f0:6d:a6:3f:14:ad:03:d0:2a: b1:60:eb:8b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtsxyB84XsLmR2DIlGRIYn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2 N2ZlOTkwHhcNMjUxMjMwMDEwMjI3WhcNMjUxMjMxMDEwMjI3WjAzMTEwLwYDVQQD Eyg3ZmY5ZGE5YWMyMzU4ZGZhNDk5ZGI1MGU0ODgwNjViMjlhZTQ1MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweVuBmdCSHWOUwrWdWmEdJJ3+WjK czc9pFXtlsP1i+FHc8osoc1lEgwC39sJMig6bEy9MYD3BEaGx4tzoEpbWe2PZbbf skeysPg4M5c++C123B/OJzUSH6sjGQGU5GoCahiG10OTN/AF0XieTlADJVnhiLHz iicLWR/any0Tn/Y5pj7Mrih40cb/1C2I1HNzZcgnD9qCx/loPQmn9BxzekOUcSNn nvUWjKVhsl0NT2DCopClsjDoIWyxoQ65Xw+/vBuSdowZ1EKWNW8+LRWjeE+SWVCH yw+EWh91X1xhymtZXN6q4MLOSfKvJuLHCkh7l2MIV4nuhGUAwLfrLrsysQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH/52prCNY36SZ21DkiAZbKa5FDPMB8GA1UdIwQY MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUXV rVTUEO+bZWePbCmWrMlzbJPetx0e68nTcx/ovG52xv+6IryTAmG6B4H4qmZAbslq 6PwnjmcWdyW6QozZMuL2RN4gHmRPkB8gUS5wdSwigx44sM/W/XnOwOVtvJb1jLm1 0a7/4ZV1WxdxaQltwpzoGavosCc/3wL3mwj/kpd975tJFm65uudYzX40Bcuyiugx W9Mv0UGDmsTWHgbMZ1bXJFig5r+IBap1q9kap7GYILSC/yokjR5OjbH/dj4Vd+8I vPLDWvM+nIpvAI0ohtjttJTd4axzcdLsI2gRSU4PIdP+vqQs71DXaIsHgdZwn5ca 8G2mPxStA9AqsWDriw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:22:02 2025 by rpki-client