This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json) Hash identifier: zNjaGem1LxYsilHub6aoth8MAYdnHsCU1/pEfK9RGAE= Subject key identifier: 6F:6C:BC:FE:A2:8B:4E:EC:B3:8E:17:A5:36:AC:7B:B3:04:44:47:1A Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07 Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07 Certificate serial: 019B2363C6BEB553B112D4CB958D4880DD94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft Manifest number: 0AD7 Signing time: Mon 15 Dec 2025 19:01:39 +0000 Manifest this update: Mon 15 Dec 2025 19:01:39 +0000 Manifest next update: Tue 16 Dec 2025 19:01:39 +0000 Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: zl8j+u3Z/DgYxyVJxVxPaWpiRNqXyQ5QUz/BwWsT4wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:c6:be:b5:53:b1:12:d4:cb:95:8d:48:80:dd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07 Validity Not Before: Dec 15 19:01:39 2025 GMT Not After : Dec 16 19:01:39 2025 GMT Subject: CN=6f6cbcfea28b4eecb38e17a536ac7bb30444471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:05:35:43:b7:3f:5d:51:6a:7e:0e:08:66: fd:a6:99:81:b5:05:86:2e:ea:0f:5d:40:0d:3b:e8: 84:33:81:6b:0a:bb:50:8a:59:d9:88:93:1e:aa:3c: 5d:94:b6:bd:f1:81:d2:d4:b4:78:60:e3:bc:d0:07: 55:a5:a8:a6:3f:7c:65:30:f2:e7:6a:a9:6a:03:e3: 5a:6d:1f:ec:fd:59:61:64:f0:57:51:8a:ae:81:a2: f5:09:f1:90:4e:9e:af:50:d4:91:e8:1a:af:12:10: 54:3d:37:4d:94:90:4f:aa:ac:c5:45:78:b4:2e:4d: e7:14:54:88:de:91:14:b1:a2:8f:de:58:70:f5:b1: 9b:af:95:0b:e4:07:5c:97:08:f6:41:40:34:2c:35: 0c:04:0b:fa:64:33:a7:30:e6:d6:62:5c:f6:98:2d: df:de:3e:bd:14:d8:e3:a2:ec:c0:01:4b:87:ce:7a: d3:2b:0e:bb:92:f7:75:3c:46:09:89:5a:df:d7:9b: 4c:2f:19:51:10:aa:3b:5f:bd:69:a1:1d:53:a9:c9: 91:5a:17:04:3a:1a:72:5b:24:ba:0f:85:dc:35:75: 18:ae:52:74:c1:81:0b:da:c0:74:a4:40:6e:de:44: 8a:42:3a:29:e4:55:31:93:1d:59:2e:4e:9f:27:8e: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:BC:FE:A2:8B:4E:EC:B3:8E:17:A5:36:AC:7B:B3:04:44:47:1A X509v3 Authority Key Identifier: keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:44:18:82:be:3a:bd:26:02:8b:8e:d8:d8:b9:d7:ad:89: ef:58:8f:0b:6b:55:4f:93:5e:ee:cc:33:0a:2b:d4:e1:f4:db: 29:0a:b0:4e:a0:28:91:33:13:87:b6:d6:8b:73:81:ba:1d:9c: 64:a1:e6:09:c5:0f:38:ce:09:d1:34:0e:36:38:80:9b:a9:a6: e7:d5:5e:ea:ae:7b:06:0f:af:c8:cf:22:6b:7a:09:32:be:02: e5:69:d7:ea:b9:a7:50:dc:e3:b9:2a:25:16:94:83:fd:9a:c0: 19:3d:7b:69:03:dd:09:33:37:40:02:69:f9:4f:d5:96:82:97: 1e:19:15:6d:2a:07:29:ca:17:00:c7:55:67:b7:4e:d2:d7:6c: a6:87:57:85:d7:eb:dc:2f:25:fc:99:b1:31:b3:10:9b:ae:71: 6f:f1:15:b7:26:18:34:54:60:53:fe:25:cf:e0:f6:b3:e1:07: 7f:d7:15:9d:d7:79:22:2a:13:30:ac:f4:57:76:7c:44:4b:62: 36:c7:2b:98:1f:b8:8c:91:99:e7:06:79:c9:63:4e:13:12:6c: 8b:d2:e9:9d:f1:1d:00:56:71:ff:99:b7:a1:d1:3d:d0:86:11: 52:54:8b:ec:b9:68:6d:aa:ed:94:ff:51:e2:5e:e9:43:a3:8b: 50:62:64:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY8a+tVOxEtTLlY1IgN2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx NGJiMDcwHhcNMjUxMjE1MTkwMTM5WhcNMjUxMjE2MTkwMTM5WjAzMTEwLwYDVQQD Eyg2ZjZjYmNmZWEyOGI0ZWVjYjM4ZTE3YTUzNmFjN2JiMzA0NDQ0NzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaYFNUO3P11Ran4OCGb9ppmBtQWG LuoPXUANO+iEM4FrCrtQilnZiJMeqjxdlLa98YHS1LR4YOO80AdVpaimP3xlMPLn aqlqA+NabR/s/VlhZPBXUYqugaL1CfGQTp6vUNSR6BqvEhBUPTdNlJBPqqzFRXi0 Lk3nFFSI3pEUsaKP3lhw9bGbr5UL5Adclwj2QUA0LDUMBAv6ZDOnMObWYlz2mC3f 3j69FNjjouzAAUuHznrTKw67kvd1PEYJiVrf15tMLxlREKo7X71poR1TqcmRWhcE OhpyWyS6D4XcNXUYrlJ0wYEL2sB0pEBu3kSKQjop5FUxkx1ZLk6fJ46Q+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9svP6ii07ss44XpTase7MEREcaMB8GA1UdIwQY MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1 LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB49EGIK+ Or0mAouO2Ni5162J71iPC2tVT5Ne7swzCivU4fTbKQqwTqAokTMTh7bWi3OBuh2c ZKHmCcUPOM4J0TQONjiAm6mm59Ve6q57Bg+vyM8ia3oJMr4C5WnX6rmnUNzjuSol FpSD/ZrAGT17aQPdCTM3QAJp+U/VloKXHhkVbSoHKcoXAMdVZ7dO0tdspodXhdfr 3C8l/JmxMbMQm65xb/EVtyYYNFRgU/4lz+D2s+EHf9cVndd5IioTMKz0V3Z8REti NscrmB+4jJGZ5wZ5yWNOExJsi9LpnfEdAFZx/5m3odE90IYRUlSL7LlobartlP9R 4l7pQ6OLUGJkRw== -----END CERTIFICATE-----Generated at Tue Dec 16 00:33:08 2025 by rpki-client