This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft File: grQaKruE3kSzFPizq8zqGKSIFyc.mft (raw, json) Hash identifier: pRyPc4ui2isgQzs25x1rHxEJncov6u6xEGLcCsc1bSI= Subject key identifier: AD:E3:2A:DF:DC:DA:21:B9:0F:77:A4:15:83:51:65:3E:35:82:61:64 Authority key identifier: 82:B4:1A:2A:BB:84:DE:44:B3:14:F8:B3:AB:CC:EA:18:A4:88:17:27 Certificate issuer: /CN=82b41a2abb84de44b314f8b3abccea18a4881727 Certificate serial: 019AF4D2ADDA72E2202B5524E1836E7A90FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft Manifest number: F9 Signing time: Sat 06 Dec 2025 18:00:39 +0000 Manifest this update: Sat 06 Dec 2025 18:00:39 +0000 Manifest next update: Sun 07 Dec 2025 18:00:39 +0000 Files and hashes: 1: grQaKruE3kSzFPizq8zqGKSIFyc.crl (hash: ik2/kgR6ykXe2XthpCpVL+1FnC5CqyNKkFwcx/T/cJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.crl rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:ad:da:72:e2:20:2b:55:24:e1:83:6e:7a:90:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82b41a2abb84de44b314f8b3abccea18a4881727 Validity Not Before: Dec 6 18:00:39 2025 GMT Not After : Dec 7 18:00:39 2025 GMT Subject: CN=ade32adfdcda21b90f77a4158351653e35826164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:63:59:90:3f:3b:88:47:c9:25:35:01:6b: ed:b4:65:35:7b:c5:27:5f:6a:c2:e8:b9:78:e0:5c: 4c:ca:f7:1e:3b:66:bb:a3:de:3b:65:bf:c8:d4:9b: 60:d7:1e:0d:5c:5d:62:70:b4:36:06:80:d5:b0:32: 26:63:0f:7b:dd:76:71:79:f6:0a:eb:66:f9:61:62: 48:7a:39:ee:f5:ee:c4:a7:7f:1e:62:43:ab:68:04: 64:7c:3a:06:f4:ca:c1:e4:6d:d9:4a:f1:b6:4d:61: 42:63:14:fc:e1:64:bc:a1:1e:c5:69:b1:b3:b6:93: c9:88:49:0f:09:9c:f4:3f:f2:6f:6a:45:f2:eb:bd: 22:53:4a:18:29:45:af:22:c3:fc:1e:b8:7f:43:23: 36:38:6c:d0:ae:dc:89:8b:a9:bb:ac:a0:bc:9c:ab: 0c:49:f6:56:58:7e:9b:8b:37:84:68:a0:58:05:e3: 48:a8:25:b2:2a:d8:ae:96:a0:f6:53:68:a6:33:a2: b0:42:9f:32:df:ab:d0:9d:66:4f:54:1c:1f:a6:33: 55:8e:86:63:c7:37:6c:53:f8:ea:4f:73:33:21:c0: 00:59:07:00:72:f7:50:46:4a:f4:1a:69:29:b4:d0: b5:29:20:50:c1:4a:a4:a0:f6:4d:c8:14:18:a9:6d: cf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E3:2A:DF:DC:DA:21:B9:0F:77:A4:15:83:51:65:3E:35:82:61:64 X509v3 Authority Key Identifier: keyid:82:B4:1A:2A:BB:84:DE:44:B3:14:F8:B3:AB:CC:EA:18:A4:88:17:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:27:60:8e:09:25:1f:d6:90:9f:15:85:59:ed:1b:7e:71:ed: 4e:72:8f:18:81:30:c0:25:1e:0d:c6:12:9d:65:b3:b3:02:f9: 62:23:bf:c7:9c:eb:63:25:68:3d:d7:fe:50:ba:b2:64:1c:10: 97:b0:86:7e:a8:30:cd:0d:db:5e:e2:34:4e:ad:2d:c4:a7:09: bd:98:2b:c1:3a:54:fb:9e:7e:f0:b7:59:60:eb:a2:63:d8:97: d5:af:7f:bc:5e:d3:e1:af:a7:db:64:0c:37:d8:47:5c:1a:5c: 56:5c:b2:3b:21:be:da:94:dc:4e:1e:78:b1:6d:e8:3c:be:95: 0d:52:c0:41:79:71:bd:48:08:a6:c6:b1:a4:22:a6:bb:b3:f3: 4e:56:d2:41:b9:47:91:36:48:47:cb:5f:ac:9a:16:29:a1:55: 84:35:a0:29:c0:45:a7:16:60:c0:70:70:c9:6f:25:44:32:4a: ec:57:81:75:37:71:27:b5:2b:fc:cb:46:e7:e0:a7:f1:d2:7f: 1d:ae:36:97:a0:77:79:9e:83:7e:2a:38:5a:0a:f1:91:f4:db: a5:52:70:64:31:93:05:b3:52:c0:a1:f6:62:68:99:37:cb:ea: 53:81:c0:19:a3:ce:bc:e6:e4:55:7c:5c:ad:de:c3:82:36:a3: 9b:34:a6:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00q3acuIgK1Uk4YNuepD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYjQxYTJhYmI4NGRlNDRiMzE0ZjhiM2FiY2NlYTE4YTQ4 ODE3MjcwHhcNMjUxMjA2MTgwMDM5WhcNMjUxMjA3MTgwMDM5WjAzMTEwLwYDVQQD EyhhZGUzMmFkZmRjZGEyMWI5MGY3N2E0MTU4MzUxNjUzZTM1ODI2MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4xjWZA/O4hHySU1AWvttGU1e8Un X2rC6Ll44FxMyvceO2a7o947Zb/I1Jtg1x4NXF1icLQ2BoDVsDImYw973XZxefYK 62b5YWJIejnu9e7Ep38eYkOraARkfDoG9MrB5G3ZSvG2TWFCYxT84WS8oR7FabGz tpPJiEkPCZz0P/JvakXy670iU0oYKUWvIsP8Hrh/QyM2OGzQrtyJi6m7rKC8nKsM SfZWWH6bizeEaKBYBeNIqCWyKtiulqD2U2imM6KwQp8y36vQnWZPVBwfpjNVjoZj xzdsU/jqT3MzIcAAWQcAcvdQRkr0GmkptNC1KSBQwUqkoPZNyBQYqW3PyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3jKt/c2iG5D3ekFYNRZT41gmFkMB8GA1UdIwQY MBaAFIK0Giq7hN5EsxT4s6vM6hikiBcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3JRYUtydUUza1N6RlBpenE4enFHS1NJRnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82OTBmODctMjhjOS00NDgyLTg1ZjIt OTg5NjcxMDAxZTkxLzEvZ3JRYUtydUUza1N6RlBpenE4enFHS1NJRnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82OTBmODctMjhjOS00NDgyLTg1ZjItOTg5NjcxMDAxZTkx LzEvZ3JRYUtydUUza1N6RlBpenE4enFHS1NJRnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCdgjgkl H9aQnxWFWe0bfnHtTnKPGIEwwCUeDcYSnWWzswL5YiO/x5zrYyVoPdf+ULqyZBwQ l7CGfqgwzQ3bXuI0Tq0txKcJvZgrwTpU+55+8LdZYOuiY9iX1a9/vF7T4a+n22QM N9hHXBpcVlyyOyG+2pTcTh54sW3oPL6VDVLAQXlxvUgIpsaxpCKmu7PzTlbSQblH kTZIR8tfrJoWKaFVhDWgKcBFpxZgwHBwyW8lRDJK7FeBdTdxJ7Ur/MtG5+Cn8dJ/ Ha42l6B3eZ6Dfio4WgrxkfTbpVJwZDGTBbNSwKH2YmiZN8vqU4HAGaPOvObkVXxc rd7DgjajmzSmWA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:02 2025 by rpki-client