This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft File: cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json) Hash identifier: 2Ofn7tLx6eLtaCOuyBAeXBg80QRSDTbPRKJiOL2NSpg= Subject key identifier: DC:1D:CE:9C:28:0F:61:9C:36:4A:1B:F0:34:8E:4B:AC:FF:CD:26:A7 Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A Certificate issuer: /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a Certificate serial: 019AF12ECFF84867799D46955B56617C2CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 01:02:48 +0000 Manifest this update: Sat 06 Dec 2025 01:02:48 +0000 Manifest next update: Sun 07 Dec 2025 01:02:48 +0000 Files and hashes: 1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: edrPL2FR0bf+mnsmwQQcrskU1L8VHy7MkTnnRyd3TEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cf:f8:48:67:79:9d:46:95:5b:56:61:7c:2c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a Validity Not Before: Dec 6 01:02:48 2025 GMT Not After : Dec 7 01:02:48 2025 GMT Subject: CN=dc1dce9c280f619c364a1bf0348e4bacffcd26a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5c:23:01:bd:a1:5b:49:a6:08:f8:32:2b:d4: 33:b7:b9:18:45:6e:c3:78:35:82:ae:3a:84:c7:cf: 5a:b4:02:99:28:a8:50:79:24:22:18:0b:97:e8:ef: 3f:5e:85:30:f8:8c:91:26:c4:63:43:0e:b7:0e:9e: c9:a1:01:2b:a3:8f:5f:be:c8:96:a9:36:f7:dd:ba: 0a:53:df:20:b9:2d:10:58:49:ec:7a:f5:7d:d4:66: 80:9f:f2:f3:a2:96:b7:58:7d:e3:e3:1e:2b:96:74: 6a:5e:0d:78:91:26:ea:b1:e1:16:1f:cf:9e:64:be: 50:ba:61:26:01:18:6f:7e:36:ea:7e:3a:82:04:db: 1c:84:2c:a3:a3:03:28:8e:f2:1a:77:ca:15:7a:a1: e7:e6:c1:e6:85:b8:7b:6d:65:30:31:0f:6a:bd:1e: 74:2b:73:40:5f:7c:f6:c0:c7:12:3a:78:28:65:54: dd:5c:2b:14:aa:48:ad:35:db:01:1d:55:48:4c:06: db:df:88:5f:c9:a8:ca:21:f7:e4:5c:a2:56:0b:77: cf:a7:1b:6a:2f:2a:16:9c:0d:47:0a:8d:c6:98:7a: 23:dc:b8:ec:87:67:8d:3e:8b:29:73:63:02:18:92: c8:18:59:05:8d:e2:5a:99:14:89:31:ab:d1:5c:61: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:CE:9C:28:0F:61:9C:36:4A:1B:F0:34:8E:4B:AC:FF:CD:26:A7 X509v3 Authority Key Identifier: keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a7:60:41:35:5b:a8:69:09:42:84:b1:14:ce:5e:a7:ba:e8: 2b:04:9f:d7:e0:9c:5e:26:32:07:1f:20:22:da:50:db:56:7a: 01:91:21:5a:18:b4:54:7a:d8:ed:e9:ed:9f:49:cf:07:c5:c3: de:ea:d7:8c:03:bc:e7:56:a6:02:97:e5:18:a7:3b:6f:60:bf: 5f:d3:5b:c1:c4:eb:2c:7e:aa:f7:ef:e0:ab:2a:64:31:9e:c2: 63:62:73:ad:aa:81:7f:23:c6:38:b4:01:1c:df:f6:3d:44:7d: ef:c7:0e:15:07:0d:5c:49:86:a1:b9:fe:8c:c2:ab:4e:23:b7: 0e:82:17:4d:2d:3a:92:f9:32:61:9d:40:c6:55:90:ca:72:59: e5:83:a4:6e:ce:ab:1d:a6:1c:a5:74:38:3d:fd:47:f5:03:80: ab:d4:aa:71:c6:f9:73:10:f8:9d:30:d9:d2:4a:78:6c:06:cb: 58:46:d6:e4:96:11:ea:1a:73:42:f7:b5:35:58:a1:1b:2e:12: 4b:98:9d:28:bf:f0:a4:ec:49:ab:9b:5d:26:eb:33:76:65:b9: 07:bd:36:2d:92:db:8d:e9:36:79:40:bf:1c:9c:70:0b:dd:64: ef:ba:58:a2:7b:17:c8:15:14:81:0e:bd:0c:9e:e2:2f:09:ab: 4d:1d:60:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLs/4SGd5nUaVW1ZhfCzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNWQ5ZDE4MmM2M2FlZDgzOTdmYmUzNzJlMzYwMGY0M2Ri ZWViNmEwHhcNMjUxMjA2MDEwMjQ4WhcNMjUxMjA3MDEwMjQ4WjAzMTEwLwYDVQQD EyhkYzFkY2U5YzI4MGY2MTljMzY0YTFiZjAzNDhlNGJhY2ZmY2QyNmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FwjAb2hW0mmCPgyK9Qzt7kYRW7D eDWCrjqEx89atAKZKKhQeSQiGAuX6O8/XoUw+IyRJsRjQw63Dp7JoQEro49fvsiW qTb33boKU98guS0QWEnsevV91GaAn/Lzopa3WH3j4x4rlnRqXg14kSbqseEWH8+e ZL5QumEmARhvfjbqfjqCBNschCyjowMojvIad8oVeqHn5sHmhbh7bWUwMQ9qvR50 K3NAX3z2wMcSOngoZVTdXCsUqkitNdsBHVVITAbb34hfyajKIffkXKJWC3fPpxtq LyoWnA1HCo3GmHoj3Ljsh2eNPospc2MCGJLIGFkFjeJamRSJMavRXGGkzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwdzpwoD2GcNkob8DSOS6z/zSanMB8GA1UdIwQY MBaAFHFdnRgsY67YOX++Ny42APQ9vutqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgt ZTQzM2NmYzcyNDc3LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi80YmJhMWEtZWQwOC00ZmQ2LTlmYjgtZTQzM2NmYzcyNDc3 LzEvY1YyZEdDeGpydGc1Zjc0M0xqWUE5RDItNjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfadgQTVb qGkJQoSxFM5ep7roKwSf1+CcXiYyBx8gItpQ21Z6AZEhWhi0VHrY7entn0nPB8XD 3urXjAO851amApflGKc7b2C/X9NbwcTrLH6q9+/gqypkMZ7CY2JzraqBfyPGOLQB HN/2PUR978cOFQcNXEmGobn+jMKrTiO3DoIXTS06kvkyYZ1AxlWQynJZ5YOkbs6r HaYcpXQ4Pf1H9QOAq9Sqccb5cxD4nTDZ0kp4bAbLWEbW5JYR6hpzQve1NVihGy4S S5idKL/wpOxJq5tdJuszdmW5B702LZLbjek2eUC/HJxwC91k77pYonsXyBUUgQ69 DJ7iLwmrTR1gVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:10 2025 by rpki-client