This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json) Hash identifier: 2IXR2FVOViDhmpxRIifZmt0ZuNiWozFFYkN4QH972fM= Subject key identifier: 07:30:08:39:DD:6C:AF:89:C8:FE:06:ED:D7:8D:7F:B9:B2:7E:B1:A1 Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2 Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2 Certificate serial: 019AF31BFB42326E6AB0A96259F95ADB980D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: yBh/WFBbv9mXdVa4oK5FlJc5/sZUvKYk25aazjFj/go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fb:42:32:6e:6a:b0:a9:62:59:f9:5a:db:98:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2 Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=07300839dd6caf89c8fe06edd78d7fb9b27eb1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:73:ba:d3:a3:89:7e:67:a4:28:06:db:82: 07:a1:d1:60:3f:c6:cc:35:5b:b6:3e:91:07:b1:94: 5c:5c:9a:f0:ae:44:80:ef:02:da:5e:c0:b1:40:8b: 6e:0c:6c:0c:8f:b1:49:a7:ec:56:33:8a:b2:83:6a: b4:43:77:e2:e4:7c:97:b0:64:9f:d0:07:df:12:a7: bc:5e:56:14:f0:cc:e8:ba:58:94:e7:44:1e:4b:2c: eb:c3:20:2b:20:f1:8b:fe:ea:62:f4:eb:8e:83:d5: bd:2f:e2:a1:14:41:c6:c1:2e:01:70:dd:8b:c5:8a: c2:f5:11:a3:71:8e:e1:af:0f:3d:7b:12:1b:48:92: 79:b0:ba:02:65:08:48:28:54:e4:80:59:d5:d7:64: 93:7a:0e:0a:ed:f4:07:2d:61:21:ed:c7:8d:84:5a: 7a:bc:7c:1c:5a:8d:c6:1c:49:56:e7:73:eb:2f:13: bb:0b:d8:ea:36:f2:c5:17:67:3f:d7:4c:57:c5:91: c5:9d:97:04:45:72:b7:20:81:ca:6e:04:a8:61:e8: 34:c6:a2:e9:c9:f9:be:bb:e1:af:76:53:b7:3a:0d: 2a:a5:64:63:bd:84:5f:a1:a0:72:4b:a6:a3:45:44: 2c:06:6e:a1:f3:06:84:85:47:21:b3:39:f6:ac:68: 28:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:30:08:39:DD:6C:AF:89:C8:FE:06:ED:D7:8D:7F:B9:B2:7E:B1:A1 X509v3 Authority Key Identifier: keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4a:12:9f:8e:a5:72:0f:d5:0b:c8:75:87:5b:b2:f9:88:c9: 22:9e:c0:d4:d6:80:3a:b6:0c:d6:8d:bb:9e:5b:f2:70:fa:ec: 93:33:45:7a:3a:37:d2:9c:08:3b:40:09:fe:c6:ef:b5:dd:71: 17:5a:35:26:9c:c9:3c:9c:cc:c8:c7:03:27:f4:25:8a:bf:71: cc:b7:85:cc:ed:6e:86:ba:a4:76:8a:33:d2:f6:5f:0e:93:b0: 5e:92:44:a6:37:70:34:93:da:fa:1d:4f:f9:76:7a:ee:f9:07: 2e:a3:04:a5:97:a8:ee:54:0c:79:b8:92:0c:0e:9a:1f:23:36: fe:4e:7e:fc:67:f7:84:bd:ed:6f:89:f7:c3:a0:4f:3e:8d:e7: 82:8f:3a:76:c5:08:c9:c2:35:73:e3:3c:1b:04:0f:08:0b:95: 4c:79:0c:90:c9:d6:48:bb:5d:b7:fd:a7:0c:d0:40:fe:52:b0: 7c:52:9e:78:15:82:de:b2:27:68:4d:e7:2f:e4:9a:0a:54:2a: b9:aa:50:f8:93:d1:43:13:24:7e:ad:24:12:c7:f4:42:45:ed: 99:86:69:0b:1e:76:a5:99:9d:65:79:77:eb:23:2f:62:ba:6d: cc:61:9f:39:ea:2e:66:18:88:cd:f5:12:72:76:67:b6:03:a6: d0:ba:98:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/tCMm5qsKliWfla25gNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTcxZDVhNzZkM2JhYjkzNzJhY2NjOTI3M2ViYTdkZjFj NTljZjIwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EygwNzMwMDgzOWRkNmNhZjg5YzhmZTA2ZWRkNzhkN2ZiOWIyN2ViMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVNzutOjiX5npCgG24IHodFgP8bM NVu2PpEHsZRcXJrwrkSA7wLaXsCxQItuDGwMj7FJp+xWM4qyg2q0Q3fi5HyXsGSf 0AffEqe8XlYU8MzouliU50QeSyzrwyArIPGL/upi9OuOg9W9L+KhFEHGwS4BcN2L xYrC9RGjcY7hrw89exIbSJJ5sLoCZQhIKFTkgFnV12STeg4K7fQHLWEh7ceNhFp6 vHwcWo3GHElW53PrLxO7C9jqNvLFF2c/10xXxZHFnZcERXK3IIHKbgSoYeg0xqLp yfm+u+GvdlO3Og0qpWRjvYRfoaByS6ajRUQsBm6h8waEhUchszn2rGgorwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcwCDndbK+JyP4G7deNf7myfrGhMB8GA1UdIwQY MBaAFHEXHVp207q5NyrMySc+un3xxZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEt ODA2OTk1MjljY2ViLzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEtODA2OTk1MjljY2Vi LzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUoSn46l cg/VC8h1h1uy+YjJIp7A1NaAOrYM1o27nlvycPrskzNFejo30pwIO0AJ/sbvtd1x F1o1JpzJPJzMyMcDJ/Qlir9xzLeFzO1uhrqkdooz0vZfDpOwXpJEpjdwNJPa+h1P +XZ67vkHLqMEpZeo7lQMebiSDA6aHyM2/k5+/Gf3hL3tb4n3w6BPPo3ngo86dsUI ycI1c+M8GwQPCAuVTHkMkMnWSLtdt/2nDNBA/lKwfFKeeBWC3rInaE3nL+SaClQq uapQ+JPRQxMkfq0kEsf0QkXtmYZpCx52pZmdZXl36yMvYrptzGGfOeouZhiIzfUS cnZntgOm0LqYcw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:25:03 2025 by rpki-client