This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json) Hash identifier: OpcrVfQh1AKeW90awldWpjmNh1OmVNQnoW1xTVSf7fQ= Subject key identifier: CD:89:49:E6:50:E4:FE:FB:25:8C:A7:FB:80:97:54:CE:DD:4D:6B:A4 Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54 Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54 Certificate serial: 019AF12D6095E57ABD43AB309675E3CB6087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft Manifest number: 05C8 Signing time: Sat 06 Dec 2025 01:01:14 +0000 Manifest this update: Sat 06 Dec 2025 01:01:14 +0000 Manifest next update: Sun 07 Dec 2025 01:01:14 +0000 Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: xfPBUjJOoeAC9PIDsYWkLEViPR0oYQ5miJmb1zZpHFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:60:95:e5:7a:bd:43:ab:30:96:75:e3:cb:60:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54 Validity Not Before: Dec 6 01:01:14 2025 GMT Not After : Dec 7 01:01:14 2025 GMT Subject: CN=cd8949e650e4fefb258ca7fb809754cedd4d6ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:d1:6e:f3:1e:0f:42:66:34:05:cc:24:6b: 54:98:27:a4:36:74:18:b8:aa:06:28:d9:53:09:b2: 7d:6d:c4:44:80:b8:cb:85:02:7f:46:67:61:d5:42: 98:e5:3b:ce:76:75:07:d5:7b:49:35:8f:87:12:ff: 2d:a8:fe:81:25:9a:48:98:16:98:70:ad:59:53:e4: bb:43:d8:d9:67:12:d0:30:aa:a2:4e:5e:cc:63:ff: dd:75:cc:96:5e:47:fd:fc:77:20:b7:6b:60:32:cb: 68:b6:fc:c2:73:45:f2:ca:8a:c9:45:89:08:bc:dc: 29:b9:89:b0:f6:82:0d:13:0c:7e:aa:d9:6b:8f:6a: dc:f1:0b:24:da:47:41:73:af:07:9e:e9:d3:c3:b3: b3:90:72:6d:2b:a9:b9:05:c7:e2:ac:86:ac:16:35: e6:67:b3:cc:a5:98:ef:b6:e3:85:a5:4b:1b:d5:51: 96:f1:63:b4:59:f9:57:0f:40:3d:a9:51:0c:a6:dc: 82:29:a8:0f:58:8e:fd:a7:c1:b4:7e:b4:c8:44:d0: 85:9c:b8:46:90:b9:46:b5:8e:63:b0:ae:c2:31:cb: d1:5d:89:a2:d4:ed:99:b3:f9:ef:11:43:f4:c6:4d: 70:77:17:db:dc:ed:fd:c6:d0:23:a9:25:f7:1a:49: b0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:89:49:E6:50:E4:FE:FB:25:8C:A7:FB:80:97:54:CE:DD:4D:6B:A4 X509v3 Authority Key Identifier: keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:cc:5a:fe:4e:2e:1b:0b:ac:35:da:71:73:f3:76:cc:36: e2:c4:f2:c4:1e:4a:8c:bd:32:65:7e:ad:46:c6:fa:64:41:e8: 1a:4f:15:66:2c:b1:34:55:90:92:49:49:c9:19:36:75:cc:6e: a8:84:df:9d:4e:27:2f:db:ee:53:d7:fb:f1:6b:da:f5:ba:eb: 8e:ec:4c:40:13:e8:bb:a9:fd:0c:70:b9:a6:8a:54:de:57:35: c1:f7:65:96:44:83:7b:05:9b:90:6e:18:c5:04:85:3d:a2:6e: f3:6d:b0:e6:b4:8f:df:46:75:ac:64:0c:03:5e:17:ad:b0:43: 97:2b:86:22:f7:ba:d6:37:a7:35:f1:32:36:e4:60:84:c5:ed: 9e:a9:92:da:3d:c5:58:6e:fc:25:24:90:c3:7c:61:9a:4b:c6: b5:0b:79:af:88:fd:5c:91:ba:99:46:a2:c1:af:a0:f6:0f:35: 5a:c7:8b:8d:99:e6:57:4a:51:cd:90:8b:57:61:1e:08:ef:17: a0:55:3e:a0:2b:6b:5a:e6:8c:fb:2d:d3:cb:d5:88:f4:3f:56: dd:6f:82:e5:db:01:37:a6:e4:3a:94:04:a2:f1:31:4a:06:96: 47:04:2f:b1:f4:18:b6:37:ec:9d:e9:b6:fb:6d:5c:2f:4b:47: 7b:c6:0c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWCV5Xq9Q6swlnXjy2CHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZmQ0MDE3NDFlNjY5ZTkyMGIwM2M2Yzc2YWEzYTc4NzE0 MDNmNTQwHhcNMjUxMjA2MDEwMTE0WhcNMjUxMjA3MDEwMTE0WjAzMTEwLwYDVQQD EyhjZDg5NDllNjUwZTRmZWZiMjU4Y2E3ZmI4MDk3NTRjZWRkNGQ2YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+rRbvMeD0JmNAXMJGtUmCekNnQY uKoGKNlTCbJ9bcREgLjLhQJ/Rmdh1UKY5TvOdnUH1XtJNY+HEv8tqP6BJZpImBaY cK1ZU+S7Q9jZZxLQMKqiTl7MY//ddcyWXkf9/Hcgt2tgMstotvzCc0XyyorJRYkI vNwpuYmw9oINEwx+qtlrj2rc8Qsk2kdBc68HnunTw7OzkHJtK6m5BcfirIasFjXm Z7PMpZjvtuOFpUsb1VGW8WO0WflXD0A9qVEMptyCKagPWI79p8G0frTIRNCFnLhG kLlGtY5jsK7CMcvRXYmi1O2Zs/nvEUP0xk1wdxfb3O39xtAjqSX3GkmwrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2JSeZQ5P77JYyn+4CXVM7dTWukMB8GA1UdIwQY MBaAFDH9QBdB5mnpILA8bHaqOnhxQD9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWYxQUYwSG1hZWtnc0R4c2RxbzZlSEZBUDFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iYTM2NWItNjk0Yi00ZmJhLTg2NTMt ZGUzNmJmMjBiYTRmLzEvTWYxQUYwSG1hZWtnc0R4c2RxbzZlSEZBUDFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iYTM2NWItNjk0Yi00ZmJhLTg2NTMtZGUzNmJmMjBiYTRm LzEvTWYxQUYwSG1hZWtnc0R4c2RxbzZlSEZBUDFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4/MWv5O LhsLrDXacXPzdsw24sTyxB5KjL0yZX6tRsb6ZEHoGk8VZiyxNFWQkklJyRk2dcxu qITfnU4nL9vuU9f78Wva9brrjuxMQBPou6n9DHC5popU3lc1wfdllkSDewWbkG4Y xQSFPaJu822w5rSP30Z1rGQMA14XrbBDlyuGIve61jenNfEyNuRghMXtnqmS2j3F WG78JSSQw3xhmkvGtQt5r4j9XJG6mUaiwa+g9g81WseLjZnmV0pRzZCLV2EeCO8X oFU+oCtrWuaM+y3Ty9WI9D9W3W+C5dsBN6bkOpQEovExSgaWRwQvsfQYtjfsnem2 +21cL0tHe8YMVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:41 2025 by rpki-client