This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json) Hash identifier: 0SdYYx3b5T2vY+gdy/KznnL9O0y85iMgTCjuLYh8ONg= Subject key identifier: CD:AE:82:A0:B3:C0:87:D9:24:EA:49:7C:57:20:82:9B:AF:E8:B4:4C Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb Certificate serial: 019AF12CF295455ECAFA2FD12243909A6125 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: TZGjKpUeJe/J2tghzIjaXL4W2jdtqfxF+wDdn9J9rnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f2:95:45:5e:ca:fa:2f:d1:22:43:90:9a:61:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=cdae82a0b3c087d924ea497c5720829bafe8b44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1b:58:a5:6e:ea:5d:3e:15:82:60:9a:f2:f0: f3:59:92:d7:fb:ba:60:4a:2c:44:7a:63:93:9e:87: 77:f1:e7:f2:32:04:62:dc:58:58:36:4b:92:19:d4: 7f:43:29:63:b4:7c:c6:29:2d:e7:ec:73:07:38:c8: 2a:24:7e:de:89:5e:d8:b5:f6:28:5e:cf:86:8d:dd: ee:55:59:9b:cd:32:72:5b:ae:2b:32:3e:bc:9f:78: 15:39:06:de:ec:7e:75:79:ad:4d:16:9a:48:a4:25: 01:9d:ae:df:af:a8:3c:b2:97:52:08:d8:29:b8:0d: b2:0c:5c:54:c7:58:45:f8:53:3d:55:40:cb:2b:92: d8:5c:e1:3c:2a:76:cf:81:9b:f2:63:8f:3a:7f:40: e0:24:16:56:dc:17:4d:b0:9c:18:2e:45:01:19:7c: d9:e5:e4:01:b0:1e:ad:66:d9:73:b7:ea:78:47:81: 01:d7:99:60:72:4e:9f:46:04:09:80:09:02:f6:9c: ef:3b:f7:e6:2d:47:f6:d5:7d:1d:20:05:3b:f6:74: 1b:71:33:04:9f:d3:82:d3:46:cd:de:64:82:df:86: fd:aa:38:13:30:cc:18:19:0a:e7:af:d6:68:fc:6e: 0e:e1:76:6a:53:ed:d1:57:09:db:37:3a:87:1b:a4: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AE:82:A0:B3:C0:87:D9:24:EA:49:7C:57:20:82:9B:AF:E8:B4:4C X509v3 Authority Key Identifier: keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f5:48:d9:72:88:20:1d:ac:a9:d8:a9:32:23:aa:46:f6:60: c9:98:13:cb:ac:4f:88:cb:10:c3:6b:fd:3a:05:ed:5b:37:f3: 3e:f7:3e:a1:6d:10:b9:3b:58:3a:9d:03:ff:fc:e5:07:39:03: d8:ff:5f:84:0c:ee:5b:c1:4a:32:e7:91:56:36:7e:32:c8:a8: d1:65:bc:d8:d0:03:2a:42:98:5d:93:03:75:ce:6e:f1:d6:5a: d6:20:43:e5:c8:bc:c1:76:cf:04:7b:7e:bb:47:38:15:21:be: f0:12:c9:d9:1a:1f:00:f8:fa:f2:96:47:b8:e4:1d:7b:74:c2: 84:2d:e6:9b:8a:64:6a:da:35:ab:79:49:09:28:fe:1b:df:17: da:36:57:77:ec:23:dc:ef:25:8a:76:02:ed:72:75:d5:89:70: 28:48:48:b2:c7:fd:11:34:c0:83:ec:63:9d:c8:a5:4b:e9:65: ac:f2:dc:d3:9f:43:69:ba:e4:cd:a2:2f:b2:42:b4:fb:6e:e2: b2:bb:81:89:c0:44:79:19:eb:ea:80:ab:e1:4a:d0:d6:90:10: 1a:c3:d5:20:b8:b3:9a:7c:0e:47:af:9c:22:11:1d:21:dc:7d: c7:dd:e0:a9:da:69:7b:40:12:e1:e5:d4:d7:9f:e4:3d:07:1a: 2d:80:44:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPKVRV7K+i/RIkOQmmElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDE3MjU3Y2I2MzY2ZmYzNTcyMzNiMjZkMjVkZDU4ODdk YTg5ZmIwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhjZGFlODJhMGIzYzA4N2Q5MjRlYTQ5N2M1NzIwODI5YmFmZThiNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3htYpW7qXT4VgmCa8vDzWZLX+7pg SixEemOTnod38efyMgRi3FhYNkuSGdR/QyljtHzGKS3n7HMHOMgqJH7eiV7YtfYo Xs+Gjd3uVVmbzTJyW64rMj68n3gVOQbe7H51ea1NFppIpCUBna7fr6g8spdSCNgp uA2yDFxUx1hF+FM9VUDLK5LYXOE8KnbPgZvyY486f0DgJBZW3BdNsJwYLkUBGXzZ 5eQBsB6tZtlzt+p4R4EB15lgck6fRgQJgAkC9pzvO/fmLUf21X0dIAU79nQbcTME n9OC00bN3mSC34b9qjgTMMwYGQrnr9Zo/G4O4XZqU+3RVwnbNzqHG6Rk0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2ugqCzwIfZJOpJfFcggpuv6LRMMB8GA1UdIwQY MBaAFKdBclfLY2b/NXIzsm0l3ViH2on7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQt ZmY4ZmUyNTUyNmM2LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQtZmY4ZmUyNTUyNmM2 LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPVI2XKI IB2sqdipMiOqRvZgyZgTy6xPiMsQw2v9OgXtWzfzPvc+oW0QuTtYOp0D//zlBzkD 2P9fhAzuW8FKMueRVjZ+Msio0WW82NADKkKYXZMDdc5u8dZa1iBD5ci8wXbPBHt+ u0c4FSG+8BLJ2RofAPj68pZHuOQde3TChC3mm4pkato1q3lJCSj+G98X2jZXd+wj 3O8linYC7XJ11YlwKEhIssf9ETTAg+xjncilS+llrPLc059DabrkzaIvskK0+27i sruBicBEeRnr6oCr4UrQ1pAQGsPVILizmnwOR6+cIhEdIdx9x93gqdppe0AS4eXU 15/kPQcaLYBE1w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:04 2025 by rpki-client