This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft File: 97KiPZsF9XV53i8CRJtmYD4-Vzo.mft (raw, json) Hash identifier: wfB+coFhZGMSt3ktcCgrvQ7PD430darMKhyTtUFXTJc= Subject key identifier: 11:DD:21:9C:D9:4A:F7:60:9B:11:5D:FF:05:3B:E9:57:31:D3:DE:C5 Authority key identifier: F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A Certificate issuer: /CN=f7b2a23d9b05f57579de2f02449b66603e3e573a Certificate serial: 019AF2772F86D2FC5965FEDA2EF4F6F4BCFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft Manifest number: 1315 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 97KiPZsF9XV53i8CRJtmYD4-Vzo.crl (hash: Sl8jgagJtfwEt5H/lA9yzfBAyolezxxccjSJIMgqf4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2f:86:d2:fc:59:65:fe:da:2e:f4:f6:f4:bc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b2a23d9b05f57579de2f02449b66603e3e573a Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=11dd219cd94af7609b115dff053be95731d3dec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:cd:9f:9f:41:f1:31:8b:2f:0b:52:8c:23: 29:04:2d:60:52:cd:0a:e0:cd:9a:04:71:10:59:ce: 56:e9:a1:35:3e:c9:c4:db:f9:48:fa:87:16:2e:d1: c8:86:2b:72:d5:43:6a:12:8e:c2:45:41:74:81:49: ff:74:76:d5:9f:bc:04:38:bd:2e:2e:0a:ba:fc:8f: 38:81:d6:e7:b3:4f:bf:92:ec:79:1e:38:c2:05:7a: c9:1a:ea:0c:f0:b0:9f:ad:ae:94:e7:4b:e1:86:7a: a5:77:69:f3:e0:0e:9d:e3:62:2e:1e:fc:f8:d0:1d: da:44:22:d9:7a:62:aa:af:d0:ab:09:2b:af:f3:7c: 74:54:3d:da:0e:8d:ac:87:0d:1c:56:7c:fe:3a:42: 67:d2:47:ae:13:8c:e7:d5:76:ad:39:8e:33:38:a6: 1e:72:17:f8:09:a5:52:1b:7f:92:a4:42:08:52:00: 87:74:47:34:98:7b:41:ec:1e:63:bf:fa:1c:7b:1c: a2:d3:69:a3:3a:a9:0b:3d:96:70:44:93:ab:2d:cb: 10:33:48:b3:da:97:f7:13:33:aa:fc:d3:1a:b4:c8: 94:b8:e6:da:c7:30:59:6a:7c:92:36:e2:4c:f6:ba: 89:33:0a:a5:d9:b2:71:2a:c6:99:34:ed:47:4c:62: c8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DD:21:9C:D9:4A:F7:60:9B:11:5D:FF:05:3B:E9:57:31:D3:DE:C5 X509v3 Authority Key Identifier: keyid:F7:B2:A2:3D:9B:05:F5:75:79:DE:2F:02:44:9B:66:60:3E:3E:57:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97KiPZsF9XV53i8CRJtmYD4-Vzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0a1b7f-dfd2-46f9-8313-5be6a759f318/1/97KiPZsF9XV53i8CRJtmYD4-Vzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:62:81:d5:06:86:4d:5e:47:05:ca:c4:66:c7:b5:da:25: 97:08:04:fb:36:d1:09:63:77:a8:d0:c2:42:0d:25:23:fc:9c: 9c:90:3c:12:5b:61:6a:50:76:29:ee:6c:3c:68:26:44:69:23: 17:09:77:1b:1d:00:6f:18:18:38:30:1c:93:8d:b0:3f:cc:aa: 9f:79:6b:dc:99:04:7b:da:f0:79:e8:46:29:41:fc:9f:6c:3b: 16:ab:25:ac:48:fe:de:ec:61:bc:55:67:ad:f3:46:3c:62:0e: f3:72:c9:80:47:93:c9:17:60:6c:bd:18:d6:d0:eb:61:37:9a: cf:20:62:1d:54:31:81:49:69:aa:74:1f:be:fc:cd:25:7a:cb: 17:81:df:da:ed:16:72:f0:16:20:a2:b2:89:9f:45:45:2a:b4: 59:68:63:16:95:f0:df:d7:51:97:36:ba:f9:50:9d:28:12:b3: 61:4d:1e:30:01:c5:a3:79:34:ab:4c:9c:98:fa:45:48:9e:d5: 15:99:1e:fc:0f:71:67:61:2e:5d:a8:d9:ec:45:68:56:0b:b2: c8:f8:46:24:b9:62:24:3e:47:97:f8:98:53:c0:56:08:34:4b: 96:66:87:58:e2:d3:30:3b:08:81:83:f5:6a:13:23:ec:4c:d1: 15:c3:33:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy+G0vxZZf7aLvT29Lz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjJhMjNkOWIwNWY1NzU3OWRlMmYwMjQ0OWI2NjYwM2Uz ZTU3M2EwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EygxMWRkMjE5Y2Q5NGFmNzYwOWIxMTVkZmYwNTNiZTk1NzMxZDNkZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4XNn59B8TGLLwtSjCMpBC1gUs0K 4M2aBHEQWc5W6aE1PsnE2/lI+ocWLtHIhity1UNqEo7CRUF0gUn/dHbVn7wEOL0u Lgq6/I84gdbns0+/kux5HjjCBXrJGuoM8LCfra6U50vhhnqld2nz4A6d42IuHvz4 0B3aRCLZemKqr9CrCSuv83x0VD3aDo2shw0cVnz+OkJn0keuE4zn1XatOY4zOKYe chf4CaVSG3+SpEIIUgCHdEc0mHtB7B5jv/ocexyi02mjOqkLPZZwRJOrLcsQM0iz 2pf3EzOq/NMatMiUuObaxzBZanySNuJM9rqJMwql2bJxKsaZNO1HTGLIIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHdIZzZSvdgmxFd/wU76Vcx097FMB8GA1UdIwQY MBaAFPeyoj2bBfV1ed4vAkSbZmA+Plc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdLaVBac0Y5WFY1M2k4Q1JKdG1ZRDQtVnpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wYTFiN2YtZGZkMi00NmY5LTgzMTMt NWJlNmE3NTlmMzE4LzEvOTdLaVBac0Y5WFY1M2k4Q1JKdG1ZRDQtVnpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wYTFiN2YtZGZkMi00NmY5LTgzMTMtNWJlNmE3NTlmMzE4 LzEvOTdLaVBac0Y5WFY1M2k4Q1JKdG1ZRDQtVnpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEtigdUG hk1eRwXKxGbHtdollwgE+zbRCWN3qNDCQg0lI/ycnJA8ElthalB2Ke5sPGgmRGkj Fwl3Gx0AbxgYODAck42wP8yqn3lr3JkEe9rweehGKUH8n2w7FqslrEj+3uxhvFVn rfNGPGIO83LJgEeTyRdgbL0Y1tDrYTeazyBiHVQxgUlpqnQfvvzNJXrLF4Hf2u0W cvAWIKKyiZ9FRSq0WWhjFpXw39dRlza6+VCdKBKzYU0eMAHFo3k0q0ycmPpFSJ7V FZke/A9xZ2EuXajZ7EVoVguyyPhGJLliJD5Hl/iYU8BWCDRLlmaHWOLTMDsIgYP1 ahMj7EzRFcMzLw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:20 2025 by rpki-client