This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft File: Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json) Hash identifier: vQPwXPe+r9bQ5ZoNrwHA4AUKw5sSLh/uGRIoVjlaqWU= Subject key identifier: 80:3F:09:10:87:76:44:D9:59:04:03:B4:9B:E8:B0:68:01:10:A3:20 Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87 Certificate issuer: /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687 Certificate serial: 019AF12F0C692239C7C77D3F01555CEF2C5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft Manifest number: 1152 Signing time: Sat 06 Dec 2025 01:03:03 +0000 Manifest this update: Sat 06 Dec 2025 01:03:03 +0000 Manifest next update: Sun 07 Dec 2025 01:03:03 +0000 Files and hashes: 1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: sQ8rAT8hP3ceB7lTtNnzKUQVDb9+Dvxg6Q+YJ6BPzoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:0c:69:22:39:c7:c7:7d:3f:01:55:5c:ef:2c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687 Validity Not Before: Dec 6 01:03:03 2025 GMT Not After : Dec 7 01:03:03 2025 GMT Subject: CN=803f0910877644d9590403b49be8b0680110a320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:66:c5:2d:a4:f5:16:4c:c7:e9:ae:6f:92: e6:b0:27:bb:49:bb:48:67:c2:1c:41:31:0c:20:03: c0:24:5d:bd:f8:26:fe:80:aa:c9:da:97:a5:0d:b0: b6:7c:37:ee:27:65:2b:83:57:10:fc:f4:25:bd:02: 1f:b3:d6:2a:48:4d:b9:1d:2c:9e:82:09:3c:25:93: db:01:fb:16:f3:64:9a:91:b4:69:38:5d:8b:14:64: 9c:df:9f:fc:45:2d:fc:ab:5a:6d:83:6d:0c:a1:62: 04:a5:7d:13:7b:42:00:bc:6b:fa:b6:58:01:96:d4: 67:57:18:7e:11:d6:f3:67:71:22:a3:f0:f9:cc:f6: c0:97:e5:20:84:48:33:f7:fa:44:10:75:57:be:c2: 91:5a:ad:ad:86:22:eb:12:66:b9:52:d3:e0:02:4b: 20:e5:ec:56:25:9e:84:09:f9:1a:8c:cc:a4:7e:56: 93:bb:7d:92:7e:bc:13:29:eb:5c:5b:46:65:d4:b9: 4f:fd:de:75:b7:07:94:98:18:6c:f4:56:60:00:4f: b5:3a:cb:41:d8:6d:37:bc:cb:c4:64:b0:5d:e3:a7: 5f:af:a9:50:f3:d9:77:5f:8b:b5:6a:59:75:d0:87: 81:f9:f3:bc:f0:da:a9:e4:86:c9:41:df:dd:26:af: 6e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3F:09:10:87:76:44:D9:59:04:03:B4:9B:E8:B0:68:01:10:A3:20 X509v3 Authority Key Identifier: keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:45:89:fe:01:74:e5:34:e6:e8:13:1c:17:94:72:e0:66:2f: a1:2a:70:09:76:13:d4:8b:1a:7a:5d:69:19:96:26:cf:0f:dd: 53:b4:f6:18:e3:b2:6e:93:5c:13:5a:81:c0:f2:e3:77:5c:6a: 97:d1:b0:54:a4:fc:b1:71:f8:e3:5c:b0:d3:02:e9:17:d1:90: e4:f6:b4:80:d4:62:42:b6:15:d5:67:7d:f8:a7:29:9e:92:a7: 67:4e:aa:8c:a1:2d:50:82:9d:17:9f:14:06:3f:55:a1:fd:61: e0:d1:77:3a:b7:17:6f:ec:bd:3c:19:d6:48:a5:60:17:c7:2a: 7e:e2:05:76:88:60:fd:da:53:3b:49:2f:a2:df:20:70:9c:a6: bb:e9:95:c2:15:ed:d4:d1:dd:cf:ae:1f:29:75:10:df:e6:d2: 6f:39:42:79:63:9f:59:e1:2a:0a:1a:13:be:69:4a:9f:c6:91: 09:30:f6:18:60:8f:40:54:74:ec:46:8e:c2:b5:36:88:5d:31: 7f:b1:13:9f:f2:80:fe:eb:be:37:90:2a:28:30:2b:48:4b:72: ae:94:e8:e6:26:44:6b:8f:09:f5:75:7f:39:35:de:b9:f8:db: 66:65:5d:5d:55:c7:89:f8:e0:6a:fc:53:12:cf:f4:6e:9d:0c: 63:81:46:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLwxpIjnHx30/AVVc7yxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZGQyMmJiYWRjOWVmOTdjOWMxYTM4NjFiNmQ2YjRjNGRk ZDg2ODcwHhcNMjUxMjA2MDEwMzAzWhcNMjUxMjA3MDEwMzAzWjAzMTEwLwYDVQQD Eyg4MDNmMDkxMDg3NzY0NGQ5NTkwNDAzYjQ5YmU4YjA2ODAxMTBhMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRdmxS2k9RZMx+mub5LmsCe7SbtI Z8IcQTEMIAPAJF29+Cb+gKrJ2pelDbC2fDfuJ2Urg1cQ/PQlvQIfs9YqSE25HSye ggk8JZPbAfsW82SakbRpOF2LFGSc35/8RS38q1ptg20MoWIEpX0Te0IAvGv6tlgB ltRnVxh+EdbzZ3Eio/D5zPbAl+UghEgz9/pEEHVXvsKRWq2thiLrEma5UtPgAksg 5exWJZ6ECfkajMykflaTu32SfrwTKetcW0Zl1LlP/d51tweUmBhs9FZgAE+1OstB 2G03vMvEZLBd46dfr6lQ89l3X4u1all10IeB+fO88Nqp5IbJQd/dJq9uDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA/CRCHdkTZWQQDtJvosGgBEKMgMB8GA1UdIwQY MBaAFAHdIrutye+XycGjhhtta0xN3YaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWQwaXU2M0o3NWZKd2FPR0cyMXJURTNkaG9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NTdhODMtNmVkMC00MWM2LWJkZDYt NzA3ZGIyNTI0ZTZiLzEvQWQwaXU2M0o3NWZKd2FPR0cyMXJURTNkaG9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NTdhODMtNmVkMC00MWM2LWJkZDYtNzA3ZGIyNTI0ZTZi LzEvQWQwaXU2M0o3NWZKd2FPR0cyMXJURTNkaG9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEWJ/gF0 5TTm6BMcF5Ry4GYvoSpwCXYT1Isael1pGZYmzw/dU7T2GOOybpNcE1qBwPLjd1xq l9GwVKT8sXH441yw0wLpF9GQ5Pa0gNRiQrYV1Wd9+KcpnpKnZ06qjKEtUIKdF58U Bj9Vof1h4NF3OrcXb+y9PBnWSKVgF8cqfuIFdohg/dpTO0kvot8gcJymu+mVwhXt 1NHdz64fKXUQ3+bSbzlCeWOfWeEqChoTvmlKn8aRCTD2GGCPQFR07EaOwrU2iF0x f7ETn/KA/uu+N5AqKDArSEtyrpTo5iZEa48J9XV/OTXeufjbZmVdXVXHifjgavxT Es/0bp0MY4FGuw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:42 2025 by rpki-client