This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json) Hash identifier: VBoLfJ/OTCyzyxh9cq1Qye02PbaZ8fYT0dmAVSZNNyI= Subject key identifier: 5F:C4:13:66:CE:D0:2A:B1:2F:28:76:96:BE:26:82:EA:C8:BB:9F:5E Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d Certificate serial: 019B3532D143974F37BD47BB4834B62DBAC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft Manifest number: 06A3 Signing time: Fri 19 Dec 2025 06:01:21 +0000 Manifest this update: Fri 19 Dec 2025 06:01:21 +0000 Manifest next update: Sat 20 Dec 2025 06:01:21 +0000 Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: XtVj4lNx/ltgujrmbGnsJ38DCUGybOo2+Y8Qh+teELw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:d1:43:97:4f:37:bd:47:bb:48:34:b6:2d:ba:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d Validity Not Before: Dec 19 06:01:21 2025 GMT Not After : Dec 20 06:01:21 2025 GMT Subject: CN=5fc41366ced02ab12f287696be2682eac8bb9f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:27:f0:5d:62:1b:c0:08:1e:03:6b:1a:aa: 5b:f9:6c:81:94:b4:2b:e2:95:ee:d8:40:7c:1b:77: 1b:94:f5:c2:ca:22:a8:66:b9:ac:20:c2:67:05:ae: bb:d2:2d:ee:cc:e9:2b:03:c5:6a:31:5c:34:c2:88: c6:00:97:84:73:21:44:71:78:dc:0e:4f:21:23:52: db:b9:f8:fb:46:c9:6e:96:67:fa:5f:db:17:5e:6e: 1a:44:ba:e7:f5:4e:5e:fa:3f:28:ab:24:ba:a7:f8: 24:9e:d4:a8:db:11:55:5b:33:ff:44:09:e8:03:f6: 4e:ab:72:1a:63:21:ca:0c:ee:9e:e6:9c:1f:84:e5: ab:24:7f:4a:d2:94:8a:f9:95:10:e2:62:97:bc:18: e2:f9:f0:da:8d:11:00:91:01:11:81:b9:ca:88:db: 66:98:2a:e5:a5:dd:b2:36:b2:ab:ab:ce:7d:e1:2d: ad:6a:69:7e:39:14:7a:bb:e2:1e:ee:4d:0e:32:1d: 69:5b:0f:c7:07:30:5e:39:4c:62:f8:b5:b3:cd:22: e6:98:02:d8:71:ae:e6:0f:dd:9c:9c:21:b3:81:8a: 71:25:f7:ee:e3:7b:2e:4f:b6:d7:6b:68:37:b6:e5: 53:1d:6a:62:10:67:51:1b:62:48:7b:f0:44:c1:c7: 6b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C4:13:66:CE:D0:2A:B1:2F:28:76:96:BE:26:82:EA:C8:BB:9F:5E X509v3 Authority Key Identifier: keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:de:18:b0:bd:17:be:b1:2f:f2:75:b8:54:f1:67:9e:73:bf: 10:8d:4c:4f:89:39:62:57:ed:8b:b7:ae:b8:c0:fb:8a:f8:20: bf:18:26:11:fb:46:5a:37:1e:6f:04:52:0e:1f:0c:7b:9e:2f: 08:1f:41:b1:c8:8c:92:bd:fd:ca:08:a2:b9:68:2c:af:4b:30: 28:6c:af:86:6b:62:f2:9c:90:22:35:e7:bd:8b:d6:a8:33:ba: 85:31:68:c5:6a:22:9b:8a:b0:79:5c:8b:7b:79:4f:c4:f4:69: e1:4e:b0:f2:9d:63:af:88:d6:9a:20:d7:b9:1e:b9:cc:54:60: b3:17:49:c2:36:96:4f:af:71:af:06:58:2e:3c:79:38:2e:4b: c5:d5:bf:9a:a0:ba:cd:58:d9:08:4d:b0:86:8f:fd:a5:75:11: 20:f2:29:45:de:fd:9e:b2:8e:62:75:6a:36:06:31:0e:83:36: 50:e0:5f:69:00:89:1e:ae:c4:5d:73:97:cc:91:b0:4a:97:cb: 5b:f7:08:74:41:4c:38:90:bf:99:fb:47:03:f6:89:77:26:f7: d6:21:0b:86:af:93:fe:56:d2:64:34:e2:91:ca:8a:9b:6f:c6: b9:ae:80:86:6f:44:07:2d:09:bd:f7:49:29:ca:f1:7c:fb:db: 29:34:1c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MtFDl083vUe7SDS2LbrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMGIwYWU2NTRjMjlkN2YxZjBkNGUyZDM1MTZhYjdkZWYw Y2IyOWQwHhcNMjUxMjE5MDYwMTIxWhcNMjUxMjIwMDYwMTIxWjAzMTEwLwYDVQQD Eyg1ZmM0MTM2NmNlZDAyYWIxMmYyODc2OTZiZTI2ODJlYWM4YmI5ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/cn8F1iG8AIHgNrGqpb+WyBlLQr 4pXu2EB8G3cblPXCyiKoZrmsIMJnBa670i3uzOkrA8VqMVw0wojGAJeEcyFEcXjc Dk8hI1Lbufj7Rslulmf6X9sXXm4aRLrn9U5e+j8oqyS6p/gkntSo2xFVWzP/RAno A/ZOq3IaYyHKDO6e5pwfhOWrJH9K0pSK+ZUQ4mKXvBji+fDajREAkQERgbnKiNtm mCrlpd2yNrKrq8594S2taml+ORR6u+Ie7k0OMh1pWw/HBzBeOUxi+LWzzSLmmALY ca7mD92cnCGzgYpxJffu43suT7bXa2g3tuVTHWpiEGdRG2JIe/BEwcdrTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/EE2bO0CqxLyh2lr4mgurIu59eMB8GA1UdIwQY MBaAFKwLCuZUwp1/Hw1OLTUWq33vDLKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODct NjVmNDJlZmU1OWRlLzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80MzVkNDUtYmVlMi00OTFhLWIyODctNjVmNDJlZmU1OWRl LzEvckFzSzVsVENuWDhmRFU0dE5SYXJmZThNc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGN4YsL0X vrEv8nW4VPFnnnO/EI1MT4k5Ylfti7euuMD7ivggvxgmEftGWjcebwRSDh8Me54v CB9BsciMkr39ygiiuWgsr0swKGyvhmti8pyQIjXnvYvWqDO6hTFoxWoim4qweVyL e3lPxPRp4U6w8p1jr4jWmiDXuR65zFRgsxdJwjaWT69xrwZYLjx5OC5LxdW/mqC6 zVjZCE2who/9pXURIPIpRd79nrKOYnVqNgYxDoM2UOBfaQCJHq7EXXOXzJGwSpfL W/cIdEFMOJC/mftHA/aJdyb31iELhq+T/lbSZDTikcqKm2/Gua6Ahm9EBy0JvfdJ KcrxfPvbKTQcWw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:51:37 2025 by rpki-client