This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json) Hash identifier: JjRQ9PVq20S+1+qXNbWno3AcJulEBm0H70pPL+GFMBc= Subject key identifier: A5:1E:92:9C:62:DD:C3:2C:11:A5:CE:17:CE:2B:F3:64:67:12:57:B2 Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5 Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5 Certificate serial: 019AF0880A9126AADB660BF6D03A07E356C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft Manifest number: 0B49 Signing time: Fri 05 Dec 2025 22:00:38 +0000 Manifest this update: Fri 05 Dec 2025 22:00:38 +0000 Manifest next update: Sat 06 Dec 2025 22:00:38 +0000 Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: MnLrhbNP3Q7JgJKUggNATOtcGjbGdKEtEVCHKewzyFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0a:91:26:aa:db:66:0b:f6:d0:3a:07:e3:56:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5 Validity Not Before: Dec 5 22:00:38 2025 GMT Not After : Dec 6 22:00:38 2025 GMT Subject: CN=a51e929c62ddc32c11a5ce17ce2bf364671257b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:ab:cd:46:41:f3:5d:ae:bf:1f:d4:9d:30: 1e:81:4b:26:5b:a9:a2:f2:bf:db:89:53:75:3e:85: 5e:9a:9c:a2:a6:84:9a:b1:a6:bf:d3:72:12:35:7b: 52:3a:c0:1f:2b:13:21:4a:c0:86:cf:9b:15:1a:14: 36:0b:1d:82:10:c9:63:63:03:bd:2a:6f:10:4e:8b: c3:1e:46:a9:1d:80:81:65:d8:05:11:03:42:20:b4: f7:8b:da:73:da:d0:8a:56:55:ff:72:8f:50:de:5f: 90:62:12:a7:47:12:03:43:e6:db:5d:19:67:47:eb: d6:91:5a:b2:c5:75:f9:d6:6f:1e:58:97:99:4f:c5: 86:5f:f0:fd:be:8b:41:19:95:ed:0a:6a:8e:9b:33: a6:b0:e5:d1:85:6b:de:f5:ef:b1:36:30:a2:84:de: 49:9a:52:cb:a5:d8:7e:98:49:9e:e1:62:73:10:7b: 33:b8:31:6f:a1:9f:be:de:8b:12:c2:f6:28:d8:6d: 8f:0e:d0:20:61:08:26:2a:c1:50:fa:2b:36:29:93: 1d:9d:b8:ea:1a:75:e9:10:4e:17:21:91:f1:a4:1e: f4:21:da:06:a8:39:bc:a1:dc:77:3e:5d:e7:8a:86: 12:50:82:84:04:f3:24:01:ab:ba:32:57:7b:49:62: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:92:9C:62:DD:C3:2C:11:A5:CE:17:CE:2B:F3:64:67:12:57:B2 X509v3 Authority Key Identifier: keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0a:32:99:9e:60:e0:19:5d:ab:32:23:dc:bd:dc:f9:56:e9: 4f:fa:2b:e6:50:af:31:e2:26:2f:a3:50:e2:c8:aa:c1:ef:65: 65:2b:fa:76:e8:20:4d:10:1f:d3:78:21:e9:c7:69:cf:15:0d: a3:26:c3:9c:e0:78:8c:0a:c1:55:d5:7f:e9:8d:c0:f3:58:72: a1:96:7c:60:bc:8d:c4:33:70:ab:93:b2:5b:7d:53:24:34:0b: 93:66:c9:12:53:ba:fe:e2:bc:51:ca:bc:5b:d6:8e:22:03:ff: 1c:29:95:5b:18:fe:48:f2:f1:5b:2e:fa:8e:be:92:48:c2:a5: d5:78:a0:36:aa:23:50:43:ae:2e:f0:d7:18:11:04:28:8f:d7: 9e:b1:b0:9f:12:e7:1b:a4:92:c7:57:ac:7f:9e:6e:ef:4a:dc: b8:bc:15:2d:5f:55:b1:8f:8d:b0:02:2f:d7:be:ba:a2:28:30: 5f:cc:c9:58:0d:b7:a5:43:50:47:8d:03:8b:e4:d0:be:6d:ad: 49:91:44:69:b0:36:cd:5b:f2:c1:a2:b4:0f:4d:31:91:82:47: f5:d6:23:6b:e5:d1:4c:fc:e8:15:2e:ac:7e:bd:1a:1a:79:72: 9d:6f:5b:35:9d:b9:83:87:92:2c:f5:a9:fb:4e:9c:90:cd:64: 7c:03:95:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAqRJqrbZgv20DoH41bJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzcwODExNmIwNGJjMmI3Njc1M2UxYTQzMGI3Y2JlZTA5 Y2RiYTUwHhcNMjUxMjA1MjIwMDM4WhcNMjUxMjA2MjIwMDM4WjAzMTEwLwYDVQQD EyhhNTFlOTI5YzYyZGRjMzJjMTFhNWNlMTdjZTJiZjM2NDY3MTI1N2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsqrzUZB812uvx/UnTAegUsmW6mi 8r/biVN1PoVempyipoSasaa/03ISNXtSOsAfKxMhSsCGz5sVGhQ2Cx2CEMljYwO9 Km8QTovDHkapHYCBZdgFEQNCILT3i9pz2tCKVlX/co9Q3l+QYhKnRxIDQ+bbXRln R+vWkVqyxXX51m8eWJeZT8WGX/D9votBGZXtCmqOmzOmsOXRhWve9e+xNjCihN5J mlLLpdh+mEme4WJzEHszuDFvoZ++3osSwvYo2G2PDtAgYQgmKsFQ+is2KZMdnbjq GnXpEE4XIZHxpB70IdoGqDm8odx3Pl3nioYSUIKEBPMkAau6Mld7SWJp/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUekpxi3cMsEaXOF84r82RnEleyMB8GA1UdIwQY MBaAFAg3CBFrBLwrdnU+GkMLfL7gnNulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUt MGYyOTI5OTZmODZjLzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUtMGYyOTI5OTZmODZj LzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwoymZ5g 4BldqzIj3L3c+VbpT/or5lCvMeImL6NQ4siqwe9lZSv6duggTRAf03gh6cdpzxUN oybDnOB4jArBVdV/6Y3A81hyoZZ8YLyNxDNwq5OyW31TJDQLk2bJElO6/uK8Ucq8 W9aOIgP/HCmVWxj+SPLxWy76jr6SSMKl1XigNqojUEOuLvDXGBEEKI/XnrGwnxLn G6SSx1esf55u70rcuLwVLV9VsY+NsAIv1766oigwX8zJWA23pUNQR40Di+TQvm2t SZFEabA2zVvywaK0D00xkYJH9dYja+XRTPzoFS6sfr0aGnlynW9bNZ25g4eSLPWp +06ckM1kfAOVyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:10 2025 by rpki-client