This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json) Hash identifier: 8a+Is/Ob6fbZhYXxRD2ekKDHqvFwziKNquiPCNjLG9Q= Subject key identifier: 6A:2F:B1:76:3D:FE:EB:74:24:88:B7:E0:56:97:07:05:D4:DE:1A:0F Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07 Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07 Certificate serial: 019AF31C25441E2B782E1C43AA7765E03263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft Manifest number: 0ABE Signing time: Sat 06 Dec 2025 10:01:39 +0000 Manifest this update: Sat 06 Dec 2025 10:01:39 +0000 Manifest next update: Sun 07 Dec 2025 10:01:39 +0000 Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: zbEmPlPU9ZjDiV64RR8ERTjUwwTBQQXMlAsTl8z2W8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:25:44:1e:2b:78:2e:1c:43:aa:77:65:e0:32:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07 Validity Not Before: Dec 6 10:01:39 2025 GMT Not After : Dec 7 10:01:39 2025 GMT Subject: CN=6a2fb1763dfeeb742488b7e056970705d4de1a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:71:92:25:8f:87:50:9c:aa:69:f3:6d:c3: 49:fe:4d:03:8f:f9:04:a5:0a:e6:17:81:49:9e:ed: 39:31:2f:1f:61:c6:08:f2:b8:a3:32:8c:52:2d:79: 49:a7:92:5c:ed:13:8c:be:7e:5c:17:71:b2:d7:6e: be:43:77:99:6b:23:72:69:32:a5:e7:15:97:47:6d: 0c:a0:34:57:28:ce:99:43:b0:73:60:7b:e9:23:12: 4f:98:21:b0:00:99:34:1a:82:aa:62:49:cb:b0:83: 9a:3b:ad:74:c5:3c:3b:77:d2:5f:30:3c:23:47:0b: b7:d1:f3:e7:ef:24:49:e7:05:eb:de:6c:88:d1:25: c0:3d:23:47:e2:9c:f3:4d:65:b6:ac:5f:26:16:cc: e0:48:98:5c:b3:6a:f9:84:8c:66:64:c9:cc:5e:70: f1:aa:9a:83:57:e9:eb:15:01:53:4e:72:3f:70:cc: 03:14:a0:a3:33:b9:4d:56:b1:07:33:85:c2:a7:8c: b7:bc:e0:12:c5:45:33:e7:fe:e7:16:34:ce:ee:3a: 78:2f:91:60:34:42:4b:71:fa:30:6c:18:99:16:df: b7:b7:c5:87:f1:34:08:12:73:39:3b:4c:27:57:de: c8:70:4f:84:04:b4:b5:1c:83:ae:2d:bd:b3:a5:4d: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2F:B1:76:3D:FE:EB:74:24:88:B7:E0:56:97:07:05:D4:DE:1A:0F X509v3 Authority Key Identifier: keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d4:de:c7:45:56:25:46:4c:c8:27:2e:f0:55:e6:c0:6e:0e: 05:00:52:3d:4f:84:f3:b0:c5:5a:24:4c:6c:f3:94:09:4c:8f: 1c:83:f6:30:a8:99:3f:c8:36:8e:d9:79:d0:25:64:68:5b:0c: d4:ea:74:40:60:1a:3e:4d:b5:c0:5e:e7:4b:c6:90:47:b7:c1: 26:07:97:f0:3c:1e:9d:21:60:52:76:1e:e7:43:99:65:20:43: 0f:1f:91:18:c5:f7:c5:e4:44:cf:ef:2d:04:8d:fe:8f:84:11: 41:3d:ce:9f:1e:52:f4:95:df:2d:d2:45:f7:0c:71:b9:83:3a: 4e:60:fb:a3:bc:fe:f3:34:44:45:77:87:56:a4:05:1d:5c:48: fe:8b:4d:7a:47:f6:64:89:8c:f0:7f:37:24:2a:f9:3f:12:3c: a6:8c:65:60:0b:41:27:11:40:65:81:4e:6e:f0:27:ca:18:fe: 4d:6d:21:dc:e3:87:85:8d:54:7d:3f:1b:70:3c:24:5d:78:06: 9b:d1:5b:f2:fc:f9:a6:19:bf:c7:b8:6f:ee:7c:3b:d9:80:11: da:68:67:57:21:6c:2d:97:ee:88:82:44:d3:b0:c3:29:c1:56: dd:2e:67:38:17:24:94:f8:38:28:0c:75:a1:0e:ba:33:39:0f: 05:54:6a:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCVEHit4LhxDqndl4DJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx NGJiMDcwHhcNMjUxMjA2MTAwMTM5WhcNMjUxMjA3MTAwMTM5WjAzMTEwLwYDVQQD Eyg2YTJmYjE3NjNkZmVlYjc0MjQ4OGI3ZTA1Njk3MDcwNWQ0ZGUxYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygpxkiWPh1CcqmnzbcNJ/k0Dj/kE pQrmF4FJnu05MS8fYcYI8rijMoxSLXlJp5Jc7ROMvn5cF3Gy126+Q3eZayNyaTKl 5xWXR20MoDRXKM6ZQ7BzYHvpIxJPmCGwAJk0GoKqYknLsIOaO610xTw7d9JfMDwj Rwu30fPn7yRJ5wXr3myI0SXAPSNH4pzzTWW2rF8mFszgSJhcs2r5hIxmZMnMXnDx qpqDV+nrFQFTTnI/cMwDFKCjM7lNVrEHM4XCp4y3vOASxUUz5/7nFjTO7jp4L5Fg NEJLcfowbBiZFt+3t8WH8TQIEnM5O0wnV97IcE+EBLS1HIOuLb2zpU12kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGovsXY9/ut0JIi34FaXBwXU3hoPMB8GA1UdIwQY MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1 LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9Tex0VW JUZMyCcu8FXmwG4OBQBSPU+E87DFWiRMbPOUCUyPHIP2MKiZP8g2jtl50CVkaFsM 1Op0QGAaPk21wF7nS8aQR7fBJgeX8DwenSFgUnYe50OZZSBDDx+RGMX3xeREz+8t BI3+j4QRQT3Onx5S9JXfLdJF9wxxuYM6TmD7o7z+8zRERXeHVqQFHVxI/otNekf2 ZImM8H83JCr5PxI8poxlYAtBJxFAZYFObvAnyhj+TW0h3OOHhY1UfT8bcDwkXXgG m9Fb8vz5phm/x7hv7nw72YAR2mhnVyFsLZfuiIJE07DDKcFW3S5nOBcklPg4KAx1 oQ66MzkPBVRqkw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:32 2025 by rpki-client