This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json) Hash identifier: CUCt+FrxUlVC7JS5W0pDXMExkOGFh7Ocv+zJ4O2IFvo= Subject key identifier: 65:4C:72:15:E0:E5:60:AB:4E:DD:17:DA:00:08:D3:63:2A:D6:A1:24 Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04 Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104 Certificate serial: 019AF38994A1BEEBCDDEA02AFC8EC9084A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft Manifest number: 0D3C Signing time: Sat 06 Dec 2025 12:01:11 +0000 Manifest this update: Sat 06 Dec 2025 12:01:11 +0000 Manifest next update: Sun 07 Dec 2025 12:01:11 +0000 Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: RNEIRnD0zL9kosA+zRFsGvxR3RK/RcY+zyv3PKS00OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:94:a1:be:eb:cd:de:a0:2a:fc:8e:c9:08:4a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104 Validity Not Before: Dec 6 12:01:11 2025 GMT Not After : Dec 7 12:01:11 2025 GMT Subject: CN=654c7215e0e560ab4edd17da0008d3632ad6a124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:04:9c:fa:47:d6:1e:cf:23:e8:c9:77:5d: 99:f7:1d:3e:42:64:4f:9c:2d:7b:b7:3a:22:f2:e1: a5:aa:40:07:52:7c:e4:bc:f7:18:56:ec:32:eb:a7: 4c:43:1c:83:63:9a:67:53:7d:7a:ec:45:23:0c:00: cf:54:9c:f5:fd:de:e1:df:41:70:cc:96:0a:85:06: 11:b8:a4:04:97:2c:20:1e:df:3c:c6:2b:ba:8d:8e: 62:ee:cf:26:5c:24:e3:25:b6:c2:0d:73:d3:d8:ed: 3b:bd:46:fa:58:44:32:ee:c8:96:ba:55:2c:5f:91: d6:8b:9f:31:34:87:ee:70:87:c2:10:de:19:60:02: e1:91:c7:8a:56:93:54:16:85:c8:79:f3:c8:c3:73: 7e:4d:8c:3d:d9:31:12:30:83:78:ba:47:22:e7:0e: 2c:2a:5a:e0:d4:81:a4:a2:84:ff:2a:37:e5:09:29: 32:ed:7e:16:e0:74:fb:ad:8c:16:04:09:ec:64:01: 81:ac:2d:07:14:62:e7:bd:dc:bb:de:67:3c:cd:31: 1c:88:95:96:d3:27:d2:2e:56:fa:7f:3c:75:2e:7a: e8:3c:7a:36:3a:90:8e:71:aa:0a:84:58:df:3d:d8: e7:2c:2f:fe:62:ef:c8:0c:a6:db:6e:17:90:74:6d: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:72:15:E0:E5:60:AB:4E:DD:17:DA:00:08:D3:63:2A:D6:A1:24 X509v3 Authority Key Identifier: keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:71:53:c8:23:63:97:71:50:1e:9f:a2:8b:c6:c2:38:72:9e: 23:73:ff:25:80:03:1b:86:e4:3f:82:e9:5c:a8:25:83:25:51: 99:5e:96:9f:67:aa:20:6f:3e:4e:e5:6d:28:25:5a:eb:64:72: 5a:ac:76:c3:4e:07:db:6a:9b:bf:80:c0:d7:b2:01:58:32:ab: 26:c1:1c:7d:d4:a1:62:ed:d7:b2:37:22:db:9e:a5:42:72:b7: 7b:fa:01:eb:67:d9:1e:d2:55:13:dc:c0:13:cc:f0:a2:45:f8: eb:fa:9a:6b:e0:14:2b:17:13:32:d8:f3:43:bc:0e:8e:61:d9: 95:21:fd:4d:21:80:31:9d:e4:1f:7f:12:8a:59:0e:ed:4e:f2: 5e:dd:0e:4e:5b:68:8d:46:6a:9e:20:13:d2:fe:26:72:ff:b4: 07:98:e3:d9:9c:dc:5c:5f:21:10:89:2e:3f:15:84:a0:58:d6: a6:6a:74:81:1a:ef:02:24:35:62:29:ca:63:3e:0a:fe:6b:68: 12:e7:26:63:fc:c4:16:2b:e0:74:e7:7e:a6:cb:f2:9d:ba:95: 40:34:71:44:d2:06:79:3e:14:4b:94:9e:79:71:e2:91:84:99: fc:c9:60:89:a3:4a:14:7d:bb:55:84:12:85:c8:70:fe:84:7a: b3:3e:03:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZShvuvN3qAq/I7JCEpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGU1OTQ3ZDliZGY2YjA4MTU2YTkzOWJkMjBkOTM0OTJj NzExMDQwHhcNMjUxMjA2MTIwMTExWhcNMjUxMjA3MTIwMTExWjAzMTEwLwYDVQQD Eyg2NTRjNzIxNWUwZTU2MGFiNGVkZDE3ZGEwMDA4ZDM2MzJhZDZhMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oMEnPpH1h7PI+jJd12Z9x0+QmRP nC17tzoi8uGlqkAHUnzkvPcYVuwy66dMQxyDY5pnU3167EUjDADPVJz1/d7h30Fw zJYKhQYRuKQElywgHt88xiu6jY5i7s8mXCTjJbbCDXPT2O07vUb6WEQy7siWulUs X5HWi58xNIfucIfCEN4ZYALhkceKVpNUFoXIefPIw3N+TYw92TESMIN4ukci5w4s Klrg1IGkooT/KjflCSky7X4W4HT7rYwWBAnsZAGBrC0HFGLnvdy73mc8zTEciJWW 0yfSLlb6fzx1LnroPHo2OpCOcaoKhFjfPdjnLC/+Yu/IDKbbbheQdG3rKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVMchXg5WCrTt0X2gAI02Mq1qEkMB8GA1UdIwQY MBaAFCHeWUfZvfawgVapOb0g2TSSxxEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQt NDgyMzMxMTcxNzhjLzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQtNDgyMzMxMTcxNzhj LzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnFTyCNj l3FQHp+ii8bCOHKeI3P/JYADG4bkP4LpXKglgyVRmV6Wn2eqIG8+TuVtKCVa62Ry Wqx2w04H22qbv4DA17IBWDKrJsEcfdShYu3Xsjci256lQnK3e/oB62fZHtJVE9zA E8zwokX46/qaa+AUKxcTMtjzQ7wOjmHZlSH9TSGAMZ3kH38SilkO7U7yXt0OTlto jUZqniAT0v4mcv+0B5jj2ZzcXF8hEIkuPxWEoFjWpmp0gRrvAiQ1YinKYz4K/mto EucmY/zEFivgdOd+psvynbqVQDRxRNIGeT4US5SeeXHikYSZ/MlgiaNKFH27VYQS hchw/oR6sz4DJg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:15 2025 by rpki-client