This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json) Hash identifier: XrC9UWqZtkVCrKv50OAj73cfwfrWHXOiQ1Z61SceHkE= Subject key identifier: C9:31:D5:42:B8:6F:AB:F6:41:96:31:A9:6C:F4:51:F9:9B:BD:15:AD Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Certificate serial: 019AF389B52807A5E770417A01FCCCC15495 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft Manifest number: 0740 Signing time: Sat 06 Dec 2025 12:01:19 +0000 Manifest this update: Sat 06 Dec 2025 12:01:19 +0000 Manifest next update: Sun 07 Dec 2025 12:01:19 +0000 Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: Ya6dSgbg/oDYh61eSa/iPGB0vPOitc8H0UBYK6o6rIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b5:28:07:a5:e7:70:41:7a:01:fc:cc:c1:54:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5 Validity Not Before: Dec 6 12:01:19 2025 GMT Not After : Dec 7 12:01:19 2025 GMT Subject: CN=c931d542b86fabf6419631a96cf451f99bbd15ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:47:8b:d9:3d:67:21:53:58:bb:4a:fd:34: cd:1f:93:44:b7:03:89:d1:92:d4:72:94:81:06:6f: 5a:55:bf:50:6d:5f:77:61:4d:6b:55:c6:cd:1f:35: 40:49:4f:da:af:a2:92:fd:1b:d0:d3:3c:b7:dd:9b: c6:c6:bb:d4:a2:1a:c3:ca:ea:8d:f2:f7:ea:60:74: bc:3c:05:82:df:f2:3a:8a:ae:06:47:e6:ff:9f:4c: 00:3d:66:29:4d:60:79:66:07:2a:1e:5d:81:4d:7e: 8b:fd:36:75:f0:e5:21:e0:31:7c:49:c9:c5:31:42: 78:e7:44:a3:a7:58:3c:f4:3b:f0:6c:ae:a5:82:63: e0:4d:7c:2c:20:42:42:6d:71:28:c8:1b:6d:44:ce: 14:d1:28:02:d7:7d:fc:36:19:ca:92:b9:00:b2:f4: 1a:ae:55:02:c0:8e:a8:25:92:cb:75:5b:d0:fc:d3: 95:98:fe:df:ed:8f:42:f3:c5:3b:78:30:7b:03:b7: b8:68:34:84:3f:ab:e5:bd:59:33:f7:b3:1c:d5:ca: 0c:d9:f3:dc:16:b2:42:05:5d:44:f7:32:b0:49:66: fe:0e:53:c3:36:d7:e1:6f:19:2b:b7:38:aa:d6:74: fa:3d:0d:af:2d:07:d5:dd:6f:ed:69:5b:b3:a6:17: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:31:D5:42:B8:6F:AB:F6:41:96:31:A9:6C:F4:51:F9:9B:BD:15:AD X509v3 Authority Key Identifier: keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:06:aa:34:c2:fb:f5:08:d7:26:23:9f:ea:92:a2:ab:e2: fc:f2:6d:b2:f0:f3:ec:d6:4f:cd:50:44:1c:56:5a:c6:7e:14: 98:68:5d:b0:4d:4e:87:bd:c1:ff:62:7f:27:5a:51:66:eb:fe: d9:8c:2b:89:c9:93:5a:59:d7:5f:aa:01:1b:e1:de:87:8e:f6: 84:a2:02:1b:e1:33:8f:25:cd:50:e3:d8:d2:d3:aa:a5:75:35: c7:67:7e:10:ca:c4:71:21:55:1b:f4:f9:ba:b1:06:e9:e9:5b: 33:e0:3b:64:03:bb:9d:2a:86:cb:aa:65:3a:3d:55:50:0a:0f: 40:da:4d:c2:41:80:13:e7:15:14:a2:18:64:77:99:c1:96:c3: 1f:a9:ce:4c:d3:44:34:75:09:78:41:8f:98:4e:89:c5:09:f5: 30:c2:b4:2b:0a:b0:d2:9f:39:ff:2d:46:f0:2b:b0:66:d8:ae: f9:0f:d5:d6:71:f0:7a:bc:25:63:70:db:f6:3e:17:0b:0c:04: 4e:47:77:08:2a:70:7f:e3:d8:eb:e5:91:6b:e7:df:3d:90:ef: 56:78:73:8b:21:e5:1f:4a:50:22:ce:fe:64:83:cf:39:b6:d3: 7b:80:26:9f:e8:47:cf:14:35:55:d7:65:fa:7b:c1:47:5e:c4: 82:a4:bb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibUoB6XncEF6AfzMwVSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZWE1M2Q5NjJkNjdhMDE0OGU2MzdiNGI0Njg5YmU0ZDA4 NGE5ZTUwHhcNMjUxMjA2MTIwMTE5WhcNMjUxMjA3MTIwMTE5WjAzMTEwLwYDVQQD EyhjOTMxZDU0MmI4NmZhYmY2NDE5NjMxYTk2Y2Y0NTFmOTliYmQxNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptpHi9k9ZyFTWLtK/TTNH5NEtwOJ 0ZLUcpSBBm9aVb9QbV93YU1rVcbNHzVASU/ar6KS/RvQ0zy33ZvGxrvUohrDyuqN 8vfqYHS8PAWC3/I6iq4GR+b/n0wAPWYpTWB5ZgcqHl2BTX6L/TZ18OUh4DF8ScnF MUJ450Sjp1g89DvwbK6lgmPgTXwsIEJCbXEoyBttRM4U0SgC1338NhnKkrkAsvQa rlUCwI6oJZLLdVvQ/NOVmP7f7Y9C88U7eDB7A7e4aDSEP6vlvVkz97Mc1coM2fPc FrJCBV1E9zKwSWb+DlPDNtfhbxkrtziq1nT6PQ2vLQfV3W/taVuzphfKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkx1UK4b6v2QZYxqWz0UfmbvRWtMB8GA1UdIwQY MBaAFGvqU9li1noBSOY3tLRom+TQhKnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEt ZTIwYjdlNjc5NjIyLzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi85Yzg1NzEtYzlkNy00NTUwLTg4NDEtZTIwYjdlNjc5NjIy LzEvYS1wVDJXTFdlZ0ZJNWplMHRHaWI1TkNFcWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrgGqjTC +/UI1yYjn+qSoqvi/PJtsvDz7NZPzVBEHFZaxn4UmGhdsE1Oh73B/2J/J1pRZuv+ 2YwricmTWlnXX6oBG+Heh472hKICG+EzjyXNUOPY0tOqpXU1x2d+EMrEcSFVG/T5 urEG6elbM+A7ZAO7nSqGy6plOj1VUAoPQNpNwkGAE+cVFKIYZHeZwZbDH6nOTNNE NHUJeEGPmE6JxQn1MMK0Kwqw0p85/y1G8CuwZtiu+Q/V1nHwerwlY3Db9j4XCwwE Tkd3CCpwf+PY6+WRa+ffPZDvVnhziyHlH0pQIs7+ZIPPObbTe4Amn+hHzxQ1Vddl +nvBR17EgqS7vw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:15 2025 by rpki-client