This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft File: _mraoZRFOXtBXvSivmTq_PNbcpA.mft (raw, json) Hash identifier: YviA1RiWbaCMN4KGsO4VZdsSCNRFYDIIIP5dICFSOQs= Subject key identifier: D3:7E:22:3A:10:B7:B9:50:E6:26:14:FC:04:B2:9A:80:C2:57:66:AF Authority key identifier: FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90 Certificate issuer: /CN=fe6adaa19445397b415ef4a2be64eafcf35b7290 Certificate serial: 019AF2400C79028B71FE22B79BDE256AF265 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft Manifest number: 61 Signing time: Sat 06 Dec 2025 06:01:15 +0000 Manifest this update: Sat 06 Dec 2025 06:01:15 +0000 Manifest next update: Sun 07 Dec 2025 06:01:15 +0000 Files and hashes: 1: _mraoZRFOXtBXvSivmTq_PNbcpA.crl (hash: M4rib4fE9vKY/ZJAaOPGmUnRfVly06EOhjgGNXXhND4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:0c:79:02:8b:71:fe:22:b7:9b:de:25:6a:f2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe6adaa19445397b415ef4a2be64eafcf35b7290 Validity Not Before: Dec 6 06:01:15 2025 GMT Not After : Dec 7 06:01:15 2025 GMT Subject: CN=d37e223a10b7b950e62614fc04b29a80c25766af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fe:d8:86:4d:22:92:d7:31:f3:55:d4:bf:92: 3b:0d:17:4d:39:a9:a3:70:8e:d3:00:9f:9e:48:1b: dc:17:77:bb:9d:a7:20:f2:ef:0d:45:0c:16:cd:d7: 7d:59:1e:84:8e:ab:39:64:44:d7:f4:0e:b9:da:da: ed:02:72:87:a7:0a:72:fd:70:55:73:df:b7:8f:42: b6:62:24:19:b6:19:ba:3d:2f:58:ca:77:48:a9:2d: dd:24:aa:8b:d0:21:dd:a9:80:e3:ed:a2:e4:f3:f6: 68:c6:34:43:44:d0:34:1b:f0:58:ce:ee:7e:22:a8: c0:b1:e3:78:00:23:5b:00:2b:69:10:ad:71:54:98: 46:84:4a:1f:41:2f:a9:47:2a:a2:39:1b:6a:b1:ea: 21:56:85:8d:e5:17:24:97:fd:07:50:da:a2:90:00: cd:cb:51:da:03:34:34:68:d4:e4:37:14:d8:68:7f: 5b:4e:8d:65:45:fc:61:01:28:c0:90:03:32:aa:8b: ce:3e:ae:70:1d:26:cd:67:aa:a5:53:dc:c6:c6:89: 08:ab:54:a8:ba:5a:98:94:33:a7:8d:42:0d:41:30: 4e:a7:91:6c:0a:ed:ff:53:02:e1:71:b4:e9:01:0d: 8a:a7:2b:86:3c:04:c9:b0:83:30:14:19:63:7b:11: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7E:22:3A:10:B7:B9:50:E6:26:14:FC:04:B2:9A:80:C2:57:66:AF X509v3 Authority Key Identifier: keyid:FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9c:f2:a6:1b:7a:7e:f8:1e:24:75:56:1e:a6:96:e0:b3:a5: 1f:c6:53:9c:eb:4f:46:59:f8:f5:55:6f:f0:03:55:e2:6e:2c: f4:0d:d2:cf:2e:4b:00:0e:03:f0:5d:eb:76:62:4e:4a:ae:cb: 63:be:a6:2f:8a:6a:1b:6d:69:ad:c8:71:68:18:9c:50:0b:8e: 95:31:4d:a2:71:d9:52:50:d4:73:11:98:96:0b:d7:45:06:e7: c4:2a:6e:70:94:b2:c7:2f:1c:37:91:bb:e4:cc:1a:b3:be:7d: c9:6c:ed:40:dc:5b:a3:f7:04:cf:d8:6b:8b:27:9c:48:85:bb: 4a:cb:be:e0:bd:93:79:82:11:03:50:fb:37:c0:dc:3c:83:30: de:14:27:13:d9:d8:6c:21:fc:fb:e0:33:21:76:df:13:b6:3d: f5:00:8a:58:49:a9:a8:a5:94:8d:d0:03:cf:0f:f4:32:62:8f: f7:95:4b:86:85:91:db:0d:a2:d1:e5:10:d4:4a:8d:9a:80:96: 67:c7:58:a1:ba:15:9f:8f:2b:1f:82:33:23:61:25:36:f4:a7: 28:0e:55:51:69:6f:26:ef:1d:4e:00:db:a1:10:cd:a8:cc:08: 72:f1:bb:3a:87:ca:03:35:24:c9:b3:97:46:79:dc:d9:b8:fe: 73:8c:4c:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAx5Aotx/iK3m94lavJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNmFkYWExOTQ0NTM5N2I0MTVlZjRhMmJlNjRlYWZjZjM1 YjcyOTAwHhcNMjUxMjA2MDYwMTE1WhcNMjUxMjA3MDYwMTE1WjAzMTEwLwYDVQQD EyhkMzdlMjIzYTEwYjdiOTUwZTYyNjE0ZmMwNGIyOWE4MGMyNTc2NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv7Yhk0iktcx81XUv5I7DRdNOamj cI7TAJ+eSBvcF3e7nacg8u8NRQwWzdd9WR6Ejqs5ZETX9A652trtAnKHpwpy/XBV c9+3j0K2YiQZthm6PS9YyndIqS3dJKqL0CHdqYDj7aLk8/ZoxjRDRNA0G/BYzu5+ IqjAseN4ACNbACtpEK1xVJhGhEofQS+pRyqiORtqseohVoWN5Rckl/0HUNqikADN y1HaAzQ0aNTkNxTYaH9bTo1lRfxhASjAkAMyqovOPq5wHSbNZ6qlU9zGxokIq1So ulqYlDOnjUINQTBOp5FsCu3/UwLhcbTpAQ2KpyuGPATJsIMwFBljexHoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN+IjoQt7lQ5iYU/ASymoDCV2avMB8GA1UdIwQY MBaAFP5q2qGURTl7QV70or5k6vzzW3KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX21yYW9aUkZPWHRCWHZTaXZtVHFfUE5iY3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MjcxZjEtNmZiMy00ZTJiLWE3OWIt ZTMwOWIwOWQxZDU3LzEvX21yYW9aUkZPWHRCWHZTaXZtVHFfUE5iY3BBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84MjcxZjEtNmZiMy00ZTJiLWE3OWItZTMwOWIwOWQxZDU3 LzEvX21yYW9aUkZPWHRCWHZTaXZtVHFfUE5iY3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpzypht6 fvgeJHVWHqaW4LOlH8ZTnOtPRln49VVv8ANV4m4s9A3Szy5LAA4D8F3rdmJOSq7L Y76mL4pqG21prchxaBicUAuOlTFNonHZUlDUcxGYlgvXRQbnxCpucJSyxy8cN5G7 5Mwas759yWztQNxbo/cEz9hriyecSIW7Ssu+4L2TeYIRA1D7N8DcPIMw3hQnE9nY bCH8++AzIXbfE7Y99QCKWEmpqKWUjdADzw/0MmKP95VLhoWR2w2i0eUQ1EqNmoCW Z8dYoboVn48rH4IzI2ElNvSnKA5VUWlvJu8dTgDboRDNqMwIcvG7OofKAzUkybOX Rnnc2bj+c4xMHw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:19 2025 by rpki-client