This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json) Hash identifier: 40EmGWqlhGJMx6sfE5a9S1qnj0hfy13T17svH1UoAPI= Subject key identifier: BE:AD:E7:59:99:50:A9:E9:D4:1A:D6:4A:9E:C8:FF:CB:5A:7A:98:71 Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd Certificate serial: 019AF464CBB41BD4FECB4CCBB402A368335F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft Manifest number: 01E9 Signing time: Sat 06 Dec 2025 16:00:37 +0000 Manifest this update: Sat 06 Dec 2025 16:00:37 +0000 Manifest next update: Sun 07 Dec 2025 16:00:37 +0000 Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: dQIyYrZ4rz+xapEZv0DlqKTXPD97qf+lbX10uyZ2hRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:cb:b4:1b:d4:fe:cb:4c:cb:b4:02:a3:68:33:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd Validity Not Before: Dec 6 16:00:37 2025 GMT Not After : Dec 7 16:00:37 2025 GMT Subject: CN=beade7599950a9e9d41ad64a9ec8ffcb5a7a9871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:d6:0c:f9:ef:7f:be:01:27:65:28:40:b7: 68:16:2a:c4:78:98:d5:8a:4c:38:de:26:47:02:1c: e5:93:74:31:f6:35:69:49:1a:bd:91:d1:7b:30:ae: e0:cf:7d:a2:20:5d:50:29:94:40:2d:6a:b2:db:ab: e3:d8:1a:6c:f6:71:ce:83:d1:b5:c9:18:c2:fd:9c: fb:98:8a:45:38:83:96:f9:32:38:d3:d2:de:88:61: d2:93:96:e3:e8:2b:b2:5e:e5:0e:19:06:ec:a0:d3: 52:1d:37:13:56:0a:6c:bd:62:85:de:81:1e:29:0f: b4:42:f8:d1:54:46:d6:8d:2d:28:78:8c:4c:76:d9: ed:1e:5d:08:81:d4:bc:44:cc:b7:13:58:7e:51:02: 3c:3b:cd:23:a1:07:bc:f8:8a:e2:5d:43:64:d8:d8: bb:e2:eb:5d:d6:35:30:53:97:fd:75:d8:3c:d5:12: 76:22:a4:49:fe:f7:90:af:48:ad:6d:be:6c:fd:2e: 8d:92:85:42:e6:0c:6f:1f:eb:7e:07:56:3e:4e:7b: bd:b3:ad:52:4e:b6:5c:5e:ea:9f:2e:ac:20:46:07: 72:a4:f3:54:ff:81:b1:a2:54:15:2f:f0:61:24:9a: fc:a7:2f:c8:b3:c8:e1:bd:ac:90:ee:c5:e0:38:83: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:E7:59:99:50:A9:E9:D4:1A:D6:4A:9E:C8:FF:CB:5A:7A:98:71 X509v3 Authority Key Identifier: keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1d:cd:95:7d:d6:cd:e9:51:91:00:ac:72:60:d8:40:93:8c: 37:8d:a6:20:14:92:4b:8a:15:ac:c2:d2:98:ff:d4:f4:54:51: ad:78:89:ea:df:28:2f:78:12:1b:7f:71:f6:2d:77:0e:5e:32: 4d:db:7c:3e:54:64:e9:4c:eb:b8:c6:36:57:13:dd:ba:7e:6b: 37:b5:0a:4d:84:fa:c7:e9:ee:e3:31:64:57:58:e0:69:39:aa: a5:fb:0e:d6:b1:51:bc:11:ae:1f:87:c8:a7:22:67:26:68:50: 1b:34:47:93:b0:2d:f0:39:ac:fe:0b:e0:96:39:22:73:7d:6d: 02:24:fb:ad:b6:15:f7:f7:b1:70:ae:f6:b1:92:19:eb:4c:b5: b7:07:0f:c9:fa:0d:be:b9:82:4b:83:6d:96:47:f4:48:f2:2e: 8a:90:30:32:2f:5e:31:52:28:09:6e:85:af:72:c7:c8:71:e2: f3:e9:92:f8:71:a2:f5:4b:a5:53:ad:72:68:da:45:dc:77:4f: 4f:67:e8:10:fd:45:79:7e:a0:bb:d6:3d:28:42:bf:55:66:a2: 20:19:62:c3:fa:68:e8:9e:ce:96:54:6e:68:0c:56:2b:27:9f: 67:4f:63:d7:90:40:98:1c:df:4b:6a:a3:12:50:d9:48:0e:6e: 45:f0:14:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMu0G9T+y0zLtAKjaDNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZDZmMGEyNzI2NzYzNGVjZTE5NTljZGRhMDNjZWJkY2U1 OGE3YmQwHhcNMjUxMjA2MTYwMDM3WhcNMjUxMjA3MTYwMDM3WjAzMTEwLwYDVQQD EyhiZWFkZTc1OTk5NTBhOWU5ZDQxYWQ2NGE5ZWM4ZmZjYjVhN2E5ODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZzWDPnvf74BJ2UoQLdoFirEeJjV ikw43iZHAhzlk3Qx9jVpSRq9kdF7MK7gz32iIF1QKZRALWqy26vj2Bps9nHOg9G1 yRjC/Zz7mIpFOIOW+TI409LeiGHSk5bj6CuyXuUOGQbsoNNSHTcTVgpsvWKF3oEe KQ+0QvjRVEbWjS0oeIxMdtntHl0IgdS8RMy3E1h+UQI8O80joQe8+IriXUNk2Ni7 4utd1jUwU5f9ddg81RJ2IqRJ/veQr0itbb5s/S6NkoVC5gxvH+t+B1Y+Tnu9s61S TrZcXuqfLqwgRgdypPNU/4GxolQVL/BhJJr8py/Is8jhvayQ7sXgOIOSQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6t51mZUKnp1BrWSp7I/8taephxMB8GA1UdIwQY MBaAFKzW8KJyZ2NOzhlZzdoDzr3OWKe9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck5id29uSm5ZMDdPR1ZuTjJnUE92YzVZcDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZjRkNTAtOGRhMC00Y2E2LWEzN2Yt MDEyNGZmNTI5YmY3LzEvck5id29uSm5ZMDdPR1ZuTjJnUE92YzVZcDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZjRkNTAtOGRhMC00Y2E2LWEzN2YtMDEyNGZmNTI5YmY3 LzEvck5id29uSm5ZMDdPR1ZuTjJnUE92YzVZcDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx3NlX3W zelRkQCscmDYQJOMN42mIBSSS4oVrMLSmP/U9FRRrXiJ6t8oL3gSG39x9i13Dl4y Tdt8PlRk6UzruMY2VxPdun5rN7UKTYT6x+nu4zFkV1jgaTmqpfsO1rFRvBGuH4fI pyJnJmhQGzRHk7At8Dms/gvgljkic31tAiT7rbYV9/excK72sZIZ60y1twcPyfoN vrmCS4Ntlkf0SPIuipAwMi9eMVIoCW6Fr3LHyHHi8+mS+HGi9UulU61yaNpF3HdP T2foEP1FeX6gu9Y9KEK/VWaiIBliw/po6J7OllRuaAxWKyefZ09j15BAmBzfS2qj ElDZSA5uRfAUrA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:51 2025 by rpki-client