This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json) Hash identifier: Pe1ijV4baBv/Q+30FnbyyvJ1gCMQs2SYW5NbW8NOFpU= Subject key identifier: 61:F8:56:AF:68:83:5D:DD:42:4D:74:F6:04:FA:8D:3A:3C:41:CF:13 Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d Certificate serial: 019AF27721B7A8B69A3C0A06611AFC55A217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft Manifest number: 0F66 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: g1o2j4Tz5KI2sL84HvMRCOGBIec6i/b0X4iXRY4+mU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:21:b7:a8:b6:9a:3c:0a:06:61:1a:fc:55:a2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=61f856af68835ddd424d74f604fa8d3a3c41cf13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:35:63:f0:43:4e:be:cc:27:f9:ba:4b:38: 8e:e7:63:ce:ff:7d:10:79:88:8b:ac:97:e2:cb:c6: b5:22:92:cb:16:8f:c1:ed:10:bb:09:99:93:83:8f: 9d:be:94:24:ea:c1:aa:2e:2f:16:f0:a7:3b:6e:56: 05:74:0b:96:b8:a2:05:aa:27:ee:9f:98:ec:44:03: 7e:5f:49:d5:be:f7:53:cb:7a:c0:32:99:0a:eb:08: d4:1b:45:0c:e1:b3:27:37:97:be:d8:00:88:68:c7: 91:6c:6d:b0:d8:12:5d:ca:a4:e6:24:bb:58:6f:e5: 0c:c2:14:de:99:46:6b:d1:cb:ee:18:05:a5:0f:02: 17:f8:b2:bd:7a:39:c9:6f:ac:47:d5:ef:ee:53:b4: a2:91:b0:6b:15:71:5e:5b:b7:db:2d:1d:24:1b:7e: 12:cd:ee:f3:cc:e9:71:a4:94:0e:2b:68:2a:f9:ab: 9e:33:52:c1:88:ae:af:c7:bf:98:4d:f6:e8:28:7c: 7d:64:5b:7d:04:d0:4d:95:15:1c:cd:47:5e:20:53: 25:27:19:26:83:19:0e:c2:64:7a:da:bd:5e:ed:97: 94:73:64:8f:8c:30:6e:47:6f:b6:81:10:4f:84:f6: 84:7b:44:1d:dd:d4:a3:e2:dc:de:9d:b8:66:41:2a: bf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:56:AF:68:83:5D:DD:42:4D:74:F6:04:FA:8D:3A:3C:41:CF:13 X509v3 Authority Key Identifier: keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d3:65:2e:08:65:42:5e:bd:e7:2a:9d:57:cc:8a:80:7d:8c: 18:4e:fe:b2:f5:d7:b7:22:77:0d:3f:89:77:d7:67:55:e1:e3: 0c:db:26:fa:da:45:e3:fb:88:78:a6:d8:4f:ed:99:fc:a6:cb: d5:b4:8f:05:31:4d:8c:87:a0:c4:8a:7d:1f:02:fb:63:a0:09: 2a:c2:d5:39:d9:02:38:91:d3:f0:b0:84:b1:65:ad:3e:cf:dc: e8:7f:c2:a0:44:6f:04:74:59:26:e3:bd:90:82:ee:e1:4e:74: 92:b6:3d:6a:33:eb:0c:9a:af:a2:e1:77:82:6c:33:58:16:df: 30:fc:0d:04:2d:0f:87:76:02:87:a7:a9:57:d7:11:e2:1a:f5: e2:89:69:4a:aa:5b:42:4a:72:e0:bf:33:d8:b5:44:77:0e:f3: 5a:b2:b9:a7:f1:99:b4:57:f5:58:6a:cb:6a:a6:00:42:a7:52: 6c:ac:f5:e5:ac:53:da:be:3a:29:e7:93:05:00:b9:43:28:19: ff:3e:ee:62:49:bf:1f:9e:8e:a1:5f:ad:8b:f0:e0:2d:2d:6a: 21:b9:16:a4:65:b1:32:b7:3b:d7:5f:da:40:40:0d:47:f1:13: 08:a4:12:a0:47:78:db:6d:65:58:94:a5:8d:77:55:e5:0e:f5: 50:12:1a:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyG3qLaaPAoGYRr8VaIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzc5YTY3MTNlNzllNTk4ZDlmZWFhNjZkY2ExNjkxODhl MDIxOGQwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD Eyg2MWY4NTZhZjY4ODM1ZGRkNDI0ZDc0ZjYwNGZhOGQzYTNjNDFjZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmU1Y/BDTr7MJ/m6SziO52PO/30Q eYiLrJfiy8a1IpLLFo/B7RC7CZmTg4+dvpQk6sGqLi8W8Kc7blYFdAuWuKIFqifu n5jsRAN+X0nVvvdTy3rAMpkK6wjUG0UM4bMnN5e+2ACIaMeRbG2w2BJdyqTmJLtY b+UMwhTemUZr0cvuGAWlDwIX+LK9ejnJb6xH1e/uU7SikbBrFXFeW7fbLR0kG34S ze7zzOlxpJQOK2gq+aueM1LBiK6vx7+YTfboKHx9ZFt9BNBNlRUczUdeIFMlJxkm gxkOwmR62r1e7ZeUc2SPjDBuR2+2gRBPhPaEe0Qd3dSj4tzenbhmQSq/VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGH4Vq9og13dQk109gT6jTo8Qc8TMB8GA1UdIwQY MBaAFHA3mmcT555ZjZ/qpm3KFpGI4CGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGIt Mjk0NGFlYWQ5Y2RhLzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGItMjk0NGFlYWQ5Y2Rh LzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdNlLghl Ql695yqdV8yKgH2MGE7+svXXtyJ3DT+Jd9dnVeHjDNsm+tpF4/uIeKbYT+2Z/KbL 1bSPBTFNjIegxIp9HwL7Y6AJKsLVOdkCOJHT8LCEsWWtPs/c6H/CoERvBHRZJuO9 kILu4U50krY9ajPrDJqvouF3gmwzWBbfMPwNBC0Ph3YCh6epV9cR4hr14olpSqpb Qkpy4L8z2LVEdw7zWrK5p/GZtFf1WGrLaqYAQqdSbKz15axT2r46KeeTBQC5QygZ /z7uYkm/H56OoV+ti/DgLS1qIbkWpGWxMrc711/aQEANR/ETCKQSoEd4221lWJSl jXdV5Q71UBIa/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:15 2025 by rpki-client