This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json) Hash identifier: a2qoNWhhAK9FuIrEtsCRH9fBEAXdIVeeUeAv4JZtfjI= Subject key identifier: C0:3A:43:B0:7F:BE:4E:D1:1F:B4:BC:F4:34:78:E4:D0:C4:E2:8E:31 Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Certificate serial: 019AF389B96AD3E68E0FB087B2FD5FFA8B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 12:01:20 +0000 Manifest this update: Sat 06 Dec 2025 12:01:20 +0000 Manifest next update: Sun 07 Dec 2025 12:01:20 +0000 Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: VbgsM0sMuLLW12xw9wU8yiZ8JQ5edEr5G7d+SueRN60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b9:6a:d3:e6:8e:0f:b0:87:b2:fd:5f:fa:8b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Validity Not Before: Dec 6 12:01:20 2025 GMT Not After : Dec 7 12:01:20 2025 GMT Subject: CN=c03a43b07fbe4ed11fb4bcf43478e4d0c4e28e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:ca:ce:7c:e4:6e:01:c6:fc:84:3c:e5:5a: 98:a1:73:d6:89:05:08:76:4f:50:78:ff:91:47:c0: 70:70:4f:b5:76:d5:78:ef:76:cc:af:30:3d:4b:43: 96:51:99:c8:80:31:c3:ec:a2:ca:4a:2a:0e:6b:f4: d2:37:59:38:a0:01:6d:16:12:f5:4c:62:21:14:55: 5d:e6:7f:9c:1e:94:7d:d1:48:62:73:43:ee:30:ff: f6:f4:3c:d0:a4:03:bf:76:96:3e:72:07:15:63:49: 83:6c:8f:64:e3:d6:c3:7a:d2:87:f7:a7:61:4c:90: 3e:86:66:2c:85:21:94:68:79:f9:26:06:0a:69:3d: 08:e1:da:94:94:87:15:74:37:64:24:a8:b9:61:ff: aa:cd:6d:7b:15:8f:b3:a0:9f:29:6f:19:9d:22:67: 4d:22:6b:66:f8:d0:d7:38:62:a3:3f:12:31:78:df: 80:f5:b8:75:34:07:5d:1f:35:ce:7f:2b:85:0a:df: a1:de:41:52:a1:ba:a8:f7:bb:1a:4c:c7:e2:c5:87: 5c:16:77:ae:8b:94:92:2c:bd:0c:26:61:f0:22:b1: d4:8a:c2:d3:15:30:6f:8c:95:db:6a:18:ab:95:8d: 80:41:df:52:cf:97:4e:96:fb:a7:9c:54:4d:7e:ed: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3A:43:B0:7F:BE:4E:D1:1F:B4:BC:F4:34:78:E4:D0:C4:E2:8E:31 X509v3 Authority Key Identifier: keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f8:cd:5e:79:89:0b:3d:bf:d2:ef:29:15:8a:88:e4:62:af: 2c:a7:e6:86:58:8e:22:35:08:0d:cd:c6:38:44:53:15:0e:30: cf:1f:15:2b:fc:62:1c:7d:cb:32:68:54:3c:c7:96:2c:e5:09: 09:46:15:72:90:5e:84:8f:62:6a:34:1b:3c:fd:81:aa:ba:af: 77:0d:5e:3a:4f:a8:5a:ed:27:c7:50:6a:a0:fe:41:dc:0f:ae: 77:5c:ee:f5:d1:46:22:7e:8b:e6:81:02:f8:bf:e7:87:c6:c1: 6e:ef:4d:3d:c8:fb:36:0f:ba:ca:87:de:1d:fe:3b:c0:25:ea: f7:51:eb:2c:da:e1:6c:e5:ab:f8:cf:a2:89:02:f7:09:7f:3a: c0:08:b4:f0:08:ee:89:cb:ed:d0:48:f8:54:42:be:7c:c9:1d: 01:c2:36:06:97:52:2f:ec:38:78:3e:85:83:98:a1:16:af:ed: 77:77:07:24:8b:62:28:6d:b6:9c:78:bb:3f:aa:e9:cb:f9:9a: 5d:8b:17:cb:4b:96:e8:97:ad:55:ba:01:e2:62:be:02:e3:4c: 36:2f:cb:c8:f2:63:28:99:63:4e:c4:aa:0a:cc:17:d1:99:90: f1:11:46:2c:43:06:7e:a4:52:bb:4e:08:a4:58:70:68:92:e7: 74:e4:3c:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziblq0+aOD7CHsv1f+osaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3 ZGY3YWYwHhcNMjUxMjA2MTIwMTIwWhcNMjUxMjA3MTIwMTIwWjAzMTEwLwYDVQQD EyhjMDNhNDNiMDdmYmU0ZWQxMWZiNGJjZjQzNDc4ZTRkMGM0ZTI4ZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11TKznzkbgHG/IQ85VqYoXPWiQUI dk9QeP+RR8BwcE+1dtV473bMrzA9S0OWUZnIgDHD7KLKSioOa/TSN1k4oAFtFhL1 TGIhFFVd5n+cHpR90Uhic0PuMP/29DzQpAO/dpY+cgcVY0mDbI9k49bDetKH96dh TJA+hmYshSGUaHn5JgYKaT0I4dqUlIcVdDdkJKi5Yf+qzW17FY+zoJ8pbxmdImdN Imtm+NDXOGKjPxIxeN+A9bh1NAddHzXOfyuFCt+h3kFSobqo97saTMfixYdcFneu i5SSLL0MJmHwIrHUisLTFTBvjJXbahirlY2AQd9Sz5dOlvunnFRNfu3e3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA6Q7B/vk7RH7S89DR45NDE4o4xMB8GA1UdIwQY MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPjNXnmJ Cz2/0u8pFYqI5GKvLKfmhliOIjUIDc3GOERTFQ4wzx8VK/xiHH3LMmhUPMeWLOUJ CUYVcpBehI9iajQbPP2Bqrqvdw1eOk+oWu0nx1BqoP5B3A+ud1zu9dFGIn6L5oEC +L/nh8bBbu9NPcj7Ng+6yofeHf47wCXq91HrLNrhbOWr+M+iiQL3CX86wAi08Aju icvt0Ej4VEK+fMkdAcI2BpdSL+w4eD6Fg5ihFq/td3cHJItiKG22nHi7P6rpy/ma XYsXy0uW6JetVboB4mK+AuNMNi/LyPJjKJljTsSqCswX0ZmQ8RFGLEMGfqRSu04I pFhwaJLndOQ8Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:47 2025 by rpki-client