This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json) Hash identifier: QSe9valtwygQkNcJl1X8Z2fZ8E6cfCAgoUDG72QkK04= Subject key identifier: 96:91:AD:77:79:F2:54:57:96:A0:99:93:1B:C4:13:72:93:02:E8:82 Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Certificate serial: 019AF577E740F24024EEC326F5F6D6EBCC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft Manifest number: 0CBB Signing time: Sat 06 Dec 2025 21:01:06 +0000 Manifest this update: Sat 06 Dec 2025 21:01:06 +0000 Manifest next update: Sun 07 Dec 2025 21:01:06 +0000 Files and hashes: 1: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: 3RmtHG5BECFg9dNqSyvvREzpUrrf2d05Eyt7U1GkAtU=) 2: 9R7qE2JixKC-vbV8JeqORUi7upg.roa (hash: qMwpouu0cneK+WPX+gDmDCVwU3yx/zaa1DbEZEykJcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e7:40:f2:40:24:ee:c3:26:f5:f6:d6:eb:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Validity Not Before: Dec 6 21:01:06 2025 GMT Not After : Dec 7 21:01:06 2025 GMT Subject: CN=9691ad7779f2545796a099931bc413729302e882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:47:6a:14:8d:13:06:d7:e6:e8:2c:8f:71: fe:9c:02:86:30:fa:30:50:f1:6e:3f:d9:af:27:29: a8:d6:8d:28:b1:9b:ae:5d:b2:af:56:c1:53:f1:2c: 84:ba:ec:12:5a:d3:cb:72:e3:43:43:33:0b:5f:e3: 78:54:d2:e1:df:49:29:ec:4a:cf:81:3c:5d:cd:e1: ff:2c:f1:70:4f:fc:47:e3:85:47:33:85:e6:ff:ad: 00:5f:07:10:e7:19:8d:0c:51:79:f4:de:5f:07:aa: 9e:ad:aa:dd:81:f3:19:ab:bb:19:e8:6a:dc:fa:d1: f3:76:a7:4b:48:a3:ae:8b:b4:52:0f:57:53:22:84: f3:41:47:59:1f:d6:70:d8:15:e2:28:17:95:01:86: 69:d4:3f:58:56:9f:7f:17:80:5b:7d:58:68:27:1b: 24:ba:da:dc:19:31:b2:c0:18:ce:f7:1f:d4:e9:01: 07:15:e0:3a:56:85:81:36:8e:71:d9:23:36:ae:b8: b4:c8:ef:94:76:e4:dc:47:f2:5c:c0:8e:66:06:67: 99:b2:09:12:92:28:e1:ed:f2:85:e0:3e:ff:4e:9b: ed:be:ed:57:f3:65:a8:c1:35:52:c7:c4:a3:f3:78: 8c:8e:ef:3b:c7:7d:c2:ff:36:f1:10:b9:42:b8:8b: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:91:AD:77:79:F2:54:57:96:A0:99:93:1B:C4:13:72:93:02:E8:82 X509v3 Authority Key Identifier: keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3d:52:97:a7:58:4d:53:d3:bc:8a:12:a3:5c:ff:76:99:af: e9:24:2e:c6:77:37:03:5a:ed:4e:e5:39:11:8b:64:f7:ce:b9: 30:3c:be:81:b8:34:20:5c:af:86:e4:48:27:db:77:86:82:df: 5f:f3:71:20:79:e1:1b:d4:80:6a:3d:3e:56:c5:18:ca:3e:6f: 96:10:e9:d8:30:45:e8:a6:51:6b:09:43:50:1a:67:b9:a8:6c: 18:11:e4:e7:50:57:a7:94:45:de:1a:03:c1:1b:78:ec:42:b4: c3:bb:9e:65:fb:00:fa:f0:f3:52:28:48:c8:e1:a5:36:09:5f: 0b:a3:0f:1e:32:6d:31:99:73:34:af:8b:e4:56:d3:1c:71:19: 9a:ae:36:07:b5:34:61:39:5b:bd:20:a6:ae:52:48:3d:23:15: f1:da:26:5f:6c:f2:77:1f:06:34:52:fd:0b:d1:b8:a4:27:e9: 5f:3b:bc:2d:c5:e2:19:4e:9b:28:7d:ab:a5:81:8e:aa:f9:06: 8a:48:77:bf:26:e7:e8:5d:7a:06:8c:13:95:19:d7:57:e5:52: 78:0d:0f:18:3f:e0:2b:94:5d:4f:db:6d:8b:23:96:82:b7:1c: 74:45:9c:21:cc:44:e7:fd:7a:44:3a:71:54:73:02:2e:e3:07: 78:ef:e1:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+dA8kAk7sMm9fbW68wAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNTRlNTIwZTdiYjdlMTNmNTMyY2VjZjA1YTgyZDJiNzk3 OTUyYTIwHhcNMjUxMjA2MjEwMTA2WhcNMjUxMjA3MjEwMTA2WjAzMTEwLwYDVQQD Eyg5NjkxYWQ3Nzc5ZjI1NDU3OTZhMDk5OTMxYmM0MTM3MjkzMDJlODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7lHahSNEwbX5ugsj3H+nAKGMPow UPFuP9mvJymo1o0osZuuXbKvVsFT8SyEuuwSWtPLcuNDQzMLX+N4VNLh30kp7ErP gTxdzeH/LPFwT/xH44VHM4Xm/60AXwcQ5xmNDFF59N5fB6qerardgfMZq7sZ6Grc +tHzdqdLSKOui7RSD1dTIoTzQUdZH9Zw2BXiKBeVAYZp1D9YVp9/F4BbfVhoJxsk utrcGTGywBjO9x/U6QEHFeA6VoWBNo5x2SM2rri0yO+UduTcR/JcwI5mBmeZsgkS kijh7fKF4D7/Tpvtvu1X82WowTVSx8Sj83iMju87x33C/zbxELlCuIst1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaRrXd58lRXlqCZkxvEE3KTAuiCMB8GA1UdIwQY MBaAFPNU5SDnu34T9TLOzwWoLSt5eVKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzkt Y2E1MWZiMzBlZGRmLzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzktY2E1MWZiMzBlZGRm LzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj1Sl6dY TVPTvIoSo1z/dpmv6SQuxnc3A1rtTuU5EYtk9865MDy+gbg0IFyvhuRIJ9t3hoLf X/NxIHnhG9SAaj0+VsUYyj5vlhDp2DBF6KZRawlDUBpnuahsGBHk51BXp5RF3hoD wRt47EK0w7ueZfsA+vDzUihIyOGlNglfC6MPHjJtMZlzNK+L5FbTHHEZmq42B7U0 YTlbvSCmrlJIPSMV8domX2zydx8GNFL9C9G4pCfpXzu8LcXiGU6bKH2rpYGOqvkG ikh3vybn6F16BowTlRnXV+VSeA0PGD/gK5RdT9ttiyOWgrccdEWcIcxE5/16RDpx VHMCLuMHeO/h0w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:43 2025 by rpki-client