This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft File: adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json) Hash identifier: M58+iIDcqMLoKJ/7WBrmHu08veB4oyOnu/MX+2DqkDQ= Subject key identifier: F6:9D:9D:8A:5B:FA:9A:E1:BB:1D:FA:7D:C0:79:77:51:0D:45:B1:DC Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D Certificate issuer: /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d Certificate serial: 019AF12D093C4F6D8164A31F2CF2415362E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft Manifest number: 0973 Signing time: Sat 06 Dec 2025 01:00:51 +0000 Manifest this update: Sat 06 Dec 2025 01:00:51 +0000 Manifest next update: Sun 07 Dec 2025 01:00:51 +0000 Files and hashes: 1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: brdVMYgplrqzPtkg/SQUh+M6DZWBMwuH7LfIdtM/vDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:09:3c:4f:6d:81:64:a3:1f:2c:f2:41:53:62:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d Validity Not Before: Dec 6 01:00:51 2025 GMT Not After : Dec 7 01:00:51 2025 GMT Subject: CN=f69d9d8a5bfa9ae1bb1dfa7dc07977510d45b1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:18:4d:66:ba:ff:78:c7:b7:a6:44:58:1d: d1:25:c6:8a:97:18:37:73:83:b7:d7:c6:5a:d1:44: fd:8c:0c:fc:9a:23:6e:0b:da:d0:6b:64:fd:e6:fe: 94:a5:86:c0:2a:f9:e5:a6:26:84:34:e4:9c:74:87: 99:44:2f:4d:85:ec:74:80:a2:5c:b8:d5:0b:86:36: 52:5e:72:da:c4:8d:42:1b:1b:d2:4f:04:9e:7c:e4: 28:b0:8f:41:76:c2:cf:21:3a:a8:f3:08:7f:dc:45: 54:07:b7:85:d6:dd:24:1b:4c:84:4c:cc:6b:c2:f1: 06:f6:0f:03:dc:3e:75:90:5f:b7:b0:0a:91:1e:a6: 07:36:8e:ba:5c:01:0a:9a:d8:ec:45:d9:0b:7c:c5: 52:e5:4c:59:bd:55:6b:3f:7b:30:16:ca:c2:37:6e: 67:01:30:53:d2:9e:78:06:6a:d3:dd:f1:84:f7:67: f4:15:88:3a:d0:84:f1:b6:78:63:28:42:5e:ed:39: 58:a3:61:94:ea:60:5f:04:7c:a9:be:40:0b:52:07: 00:7b:87:3e:c0:0c:2c:34:12:b6:f7:51:4c:67:f2: 13:13:60:a0:41:03:c4:11:a1:65:5d:3e:27:6e:28: 48:c2:90:94:d3:b2:99:4c:39:22:9c:2a:22:1f:23: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9D:9D:8A:5B:FA:9A:E1:BB:1D:FA:7D:C0:79:77:51:0D:45:B1:DC X509v3 Authority Key Identifier: keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d1:32:a6:d1:d8:3c:86:3a:6e:35:40:a9:48:4a:38:cc:f6: ca:4e:69:5a:ce:ba:68:d8:07:7d:9f:23:33:f3:df:a9:6c:9c: fa:4d:52:6c:68:d1:e9:64:d2:e7:04:85:66:ea:65:86:fa:a8: 97:8a:bd:42:fe:5d:81:2e:d4:e8:88:57:bb:42:b1:0f:cd:dd: 86:9f:65:a8:6d:fd:b8:4f:92:3e:a5:40:7d:9d:a9:fd:fa:15: 7e:b9:e6:cc:5f:06:8e:76:94:c2:98:48:5d:ed:f6:5a:eb:52: 3f:75:3a:21:67:79:bc:26:b2:5b:f9:b1:56:cb:21:1f:fc:c4: 9c:68:d2:9b:13:cc:ca:c1:a8:f1:c1:0b:c4:38:85:4b:f1:ac: a0:17:0b:e0:6a:e3:7f:da:b3:9b:b8:07:45:d9:a7:55:df:86: 95:f0:0c:53:e1:88:38:86:9a:56:3e:0b:c2:e7:36:0d:f6:d8: ea:2b:f8:ed:ad:82:fe:c9:7b:d1:b1:28:c2:f1:6b:89:7d:09: 67:52:fd:17:34:dd:50:16:40:1c:2d:69:99:07:d3:c5:bd:fa: 5d:16:ac:d3:cc:56:4f:ee:24:3e:3d:72:df:b0:40:a7:71:f9: b0:55:44:91:cf:c0:2a:3f:8f:a6:f3:33:bb:52:b3:96:99:7d: ba:01:24:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQk8T22BZKMfLPJBU2LpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDExNzU2ZGQwMzZmNTllZTExZTdmODFhNDg3YTZmZGQy MzEzNmQwHhcNMjUxMjA2MDEwMDUxWhcNMjUxMjA3MDEwMDUxWjAzMTEwLwYDVQQD EyhmNjlkOWQ4YTViZmE5YWUxYmIxZGZhN2RjMDc5Nzc1MTBkNDViMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8MYTWa6/3jHt6ZEWB3RJcaKlxg3 c4O318Za0UT9jAz8miNuC9rQa2T95v6UpYbAKvnlpiaENOScdIeZRC9Nhex0gKJc uNULhjZSXnLaxI1CGxvSTwSefOQosI9BdsLPITqo8wh/3EVUB7eF1t0kG0yETMxr wvEG9g8D3D51kF+3sAqRHqYHNo66XAEKmtjsRdkLfMVS5UxZvVVrP3swFsrCN25n ATBT0p54BmrT3fGE92f0FYg60ITxtnhjKEJe7TlYo2GU6mBfBHypvkALUgcAe4c+ wAwsNBK291FMZ/ITE2CgQQPEEaFlXT4nbihIwpCU07KZTDkinCoiHyN4RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPadnYpb+prhux36fcB5d1ENRbHcMB8GA1UdIwQY MBaAFGnRF1bdA29Z7hHn+BpIem/dIxNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRFWFZ0MERiMW51RWVmNEdraDZiOTBqRTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80ZmUyODctMDk4Ny00MjBiLWE4NTUt Y2ZiNDcyOWM4OTk0LzEvYWRFWFZ0MERiMW51RWVmNEdraDZiOTBqRTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80ZmUyODctMDk4Ny00MjBiLWE4NTUtY2ZiNDcyOWM4OTk0 LzEvYWRFWFZ0MERiMW51RWVmNEdraDZiOTBqRTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNEyptHY PIY6bjVAqUhKOMz2yk5pWs66aNgHfZ8jM/PfqWyc+k1SbGjR6WTS5wSFZuplhvqo l4q9Qv5dgS7U6IhXu0KxD83dhp9lqG39uE+SPqVAfZ2p/foVfrnmzF8GjnaUwphI Xe32WutSP3U6IWd5vCayW/mxVsshH/zEnGjSmxPMysGo8cELxDiFS/GsoBcL4Grj f9qzm7gHRdmnVd+GlfAMU+GIOIaaVj4Lwuc2DfbY6iv47a2C/sl70bEowvFriX0J Z1L9FzTdUBZAHC1pmQfTxb36XRas08xWT+4kPj1y37BAp3H5sFVEkc/AKj+PpvMz u1Kzlpl9ugEkjA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:27 2025 by rpki-client