This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json) Hash identifier: CYCCm8Tyl7sZJoUdYwT8tTgLhimrXg/4o+ZXFGRsiqI= Subject key identifier: 56:EC:CB:66:20:DC:51:DF:30:C4:00:F9:5B:9C:E8:57:86:33:27:7B Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac Certificate serial: 019AF23F9E0C6D521DE5A5831750ACD3260C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft Manifest number: 01BC Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: JVILi8xLUZW7zLArLMmwJ3xLrykq49Sid60yvAVvU80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9e:0c:6d:52:1d:e5:a5:83:17:50:ac:d3:26:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=56eccb6620dc51df30c400f95b9ce8578633277b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:59:7c:0f:9b:cf:cf:c5:2a:3d:13:a2:d1:e9: a9:f0:02:e7:20:d1:48:68:56:b7:b1:29:ab:e6:81: 76:00:49:79:e0:e9:0b:71:27:e7:fe:4a:a4:93:05: 81:c1:ad:ca:57:b3:b5:97:3e:0e:d2:5f:04:ba:4c: b5:60:b3:88:e6:07:a8:1a:da:c8:10:7a:ac:fb:ec: a5:49:1c:f8:79:7b:18:64:e0:27:c6:c4:11:b7:9d: 9a:85:e6:b3:99:a6:c6:d1:5e:4c:9c:17:bb:b4:82: 8a:f4:4c:f2:4e:e9:8f:c3:7f:3d:43:34:fa:83:10: ea:88:f3:4a:b8:2d:c0:31:cd:ae:3a:03:0b:60:8e: 56:fa:08:4e:57:05:47:10:a2:17:0b:30:88:e6:c3: e7:05:26:7f:db:60:d4:9d:b9:fb:94:e0:81:3f:aa: ea:25:34:8c:a7:de:41:7e:29:60:99:1a:e3:f4:46: 2e:89:14:57:3f:75:10:2a:96:13:45:e9:5e:7b:ce: 5a:96:5b:c3:a2:47:eb:bd:8a:4b:d8:78:df:b0:3f: 10:08:93:8c:4a:da:1b:d8:40:3b:5b:8c:5d:64:e8: b7:93:01:40:06:01:ee:54:15:6a:82:17:f4:0f:3f: 9e:ee:04:de:2f:5e:98:af:b8:17:f3:1c:8f:69:07: e4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EC:CB:66:20:DC:51:DF:30:C4:00:F9:5B:9C:E8:57:86:33:27:7B X509v3 Authority Key Identifier: keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c9:fd:d4:df:08:2b:16:e6:b0:33:f0:f4:30:e8:a0:7d:88: 94:89:e8:be:77:40:0c:69:a9:74:53:97:2c:d0:ff:30:ec:a9: 19:ab:ef:ef:38:95:78:bc:90:d6:61:88:42:05:b4:a1:a2:26: ae:12:e9:36:98:71:e0:71:91:ee:9b:81:d0:65:41:ee:d1:1e: dc:b7:a2:60:12:4a:e8:db:2d:c1:9f:d5:99:48:fb:3a:90:a4: 8f:dd:fe:b0:77:69:60:1e:0a:5d:b4:0f:41:6b:f1:5d:e1:9a: 3b:87:7a:0e:cf:74:7a:20:d3:5f:08:2f:a4:ad:24:80:97:a0: 46:08:e6:79:da:3c:28:cc:d5:82:ee:26:d7:0e:e2:72:99:7f: d6:d1:a9:ce:aa:9a:be:9e:95:90:8e:4d:67:67:e9:e8:c6:0f: 9e:7e:1a:9a:fd:c2:93:d8:6e:31:ab:7d:50:d0:53:17:ba:c3: 7a:72:71:fa:15:38:8f:8a:80:f3:21:a4:c2:32:b1:30:9e:a4: 87:c4:5c:5e:68:49:8e:10:1e:29:16:95:0a:24:a2:80:6f:1f: 0a:ae:24:b1:15:27:d3:56:72:fa:f0:55:2a:e8:98:3b:e2:c2: 8b:9a:2c:f1:a2:ed:1e:23:8d:08:9f:51:c3:29:bf:01:2b:2c: 04:6a:30:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP54MbVId5aWDF1Cs0yYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjU1MTBkYTE0YTkzMGFkNzFlMWRlM2E1MjljN2NjMWJm NGM1YWMwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg1NmVjY2I2NjIwZGM1MWRmMzBjNDAwZjk1YjljZTg1Nzg2MzMyNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnll8D5vPz8UqPROi0emp8ALnINFI aFa3sSmr5oF2AEl54OkLcSfn/kqkkwWBwa3KV7O1lz4O0l8Euky1YLOI5geoGtrI EHqs++ylSRz4eXsYZOAnxsQRt52aheazmabG0V5MnBe7tIKK9EzyTumPw389QzT6 gxDqiPNKuC3AMc2uOgMLYI5W+ghOVwVHEKIXCzCI5sPnBSZ/22DUnbn7lOCBP6rq JTSMp95BfilgmRrj9EYuiRRXP3UQKpYTRelee85allvDokfrvYpL2HjfsD8QCJOM Stob2EA7W4xdZOi3kwFABgHuVBVqghf0Dz+e7gTeL16Yr7gX8xyPaQfkqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbsy2Yg3FHfMMQA+Vuc6FeGMyd7MB8GA1UdIwQY MBaAFES1UQ2hSpMK1x4d46Upx8wb9MWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUt ODZjM2IzMWEyZjhjLzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUtODZjM2IzMWEyZjhj LzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8n91N8I KxbmsDPw9DDooH2IlInovndADGmpdFOXLND/MOypGavv7ziVeLyQ1mGIQgW0oaIm rhLpNphx4HGR7puB0GVB7tEe3LeiYBJK6NstwZ/VmUj7OpCkj93+sHdpYB4KXbQP QWvxXeGaO4d6Ds90eiDTXwgvpK0kgJegRgjmedo8KMzVgu4m1w7icpl/1tGpzqqa vp6VkI5NZ2fp6MYPnn4amv3Ck9huMat9UNBTF7rDenJx+hU4j4qA8yGkwjKxMJ6k h8RcXmhJjhAeKRaVCiSigG8fCq4ksRUn01Zy+vBVKuiYO+LCi5os8aLtHiONCJ9R wym/ASssBGowTw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:18 2025 by rpki-client