This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json) Hash identifier: 79md/4A8TxpIsVqNmLDvm9EcYGo3kHXndDgywtC7nFs= Subject key identifier: 78:F7:EB:F6:62:F5:31:83:1F:50:12:99:76:85:49:6D:65:B7:E0:41 Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec Certificate serial: 019AF19B18C0D06E0F78E3AFD87801D58288 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft Manifest number: 0202 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: d31lZexbULSeYD/a84wqeu92ALp4D5r+qpr1NkUR360=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:18:c0:d0:6e:0f:78:e3:af:d8:78:01:d5:82:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=78f7ebf662f531831f5012997685496d65b7e041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e5:0b:7b:55:dd:bd:19:50:b3:d7:d0:2d:2c: bd:05:26:78:21:c8:91:00:94:1a:37:c1:59:90:b7: 31:a5:53:b0:0d:e6:af:3a:82:6c:9e:22:f2:18:5c: e8:3b:60:f2:1c:90:77:a6:69:85:ae:60:1d:2e:1d: e1:88:cb:65:17:b1:80:96:5c:c4:ea:e2:93:9a:4e: 94:09:f0:52:4c:0e:2a:b9:d8:7d:16:c2:51:a6:50: 31:ac:7b:c0:19:8f:f1:dc:c0:57:e1:ea:19:94:f9: ac:a6:46:3d:74:15:20:22:fd:cf:81:1b:1a:a1:9a: cf:e1:82:b9:be:15:ab:f1:fd:93:91:8e:94:7f:58: 65:0d:5f:bd:70:46:2d:54:49:5a:ae:15:65:76:52: 42:70:eb:2e:6b:aa:ee:f7:2e:97:b1:4e:a9:44:45: 77:03:77:a2:3e:01:23:d6:bf:17:60:c8:5e:42:81: 52:de:b3:f3:bd:6b:07:33:56:dd:71:7c:ad:de:cd: 7f:03:c0:31:5d:4a:f4:65:ef:65:16:37:c1:25:b3: 3b:4f:fd:45:d5:df:a8:b8:0e:6f:5f:b1:05:37:21: 1c:dc:db:b4:fc:c2:29:34:cc:df:c5:82:67:ea:83: b9:b5:71:52:e3:f8:4d:2d:43:08:1f:72:18:4b:db: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F7:EB:F6:62:F5:31:83:1F:50:12:99:76:85:49:6D:65:B7:E0:41 X509v3 Authority Key Identifier: keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:c8:e8:e9:8d:4b:f0:1d:56:ba:97:44:9b:0c:df:91:b7:27: da:3d:e3:39:12:be:9f:68:f9:ca:13:b1:66:4f:f6:21:39:79: 08:a7:94:3c:48:94:5f:fe:1a:5d:7a:16:5f:1b:7e:1e:43:fc: 99:02:c8:4d:20:4c:bf:30:4a:0d:ae:26:39:5d:30:23:1b:58: 81:7e:69:a7:80:a0:04:1a:82:c6:2d:4e:86:5d:60:c2:1a:e4: 9d:55:20:4b:6c:84:f4:11:77:4b:7c:af:6e:0e:36:25:10:ce: 79:e3:db:e3:1e:4e:b4:ac:a5:ea:c4:45:de:9a:28:69:b5:60: 9e:5f:4c:ed:6d:f4:53:d5:d1:59:e1:c1:1e:d1:f2:d7:e3:94: 91:f3:ad:ff:f9:2d:ca:4b:40:f2:23:fb:bd:f8:4e:c9:c0:8e: f9:34:ce:78:1f:0d:23:4d:b0:19:c8:6a:d5:55:7e:cb:59:8e: 66:c3:23:e0:4b:72:95:ce:2b:ec:c5:34:fd:ee:88:84:27:b8: 42:8c:07:73:b3:03:9d:fb:4c:de:a8:a9:11:ff:e0:81:ee:c9: 5d:1e:1c:54:08:5d:9d:e0:07:83:87:1d:58:b4:0a:ba:7d:50: d8:de:4d:7a:38:54:3e:15:5a:3d:15:9b:57:bd:88:0a:7f:6f: c8:2a:e3:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxjA0G4PeOOv2HgB1YKIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWYzOWI0MjEwMDVmMzAyYjY5MTBmOTYzOTNmNGI2NTQ3 YThmZWMwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD Eyg3OGY3ZWJmNjYyZjUzMTgzMWY1MDEyOTk3Njg1NDk2ZDY1YjdlMDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OULe1XdvRlQs9fQLSy9BSZ4IciR AJQaN8FZkLcxpVOwDeavOoJsniLyGFzoO2DyHJB3pmmFrmAdLh3hiMtlF7GAllzE 6uKTmk6UCfBSTA4qudh9FsJRplAxrHvAGY/x3MBX4eoZlPmspkY9dBUgIv3PgRsa oZrP4YK5vhWr8f2TkY6Uf1hlDV+9cEYtVElarhVldlJCcOsua6ru9y6XsU6pREV3 A3eiPgEj1r8XYMheQoFS3rPzvWsHM1bdcXyt3s1/A8AxXUr0Ze9lFjfBJbM7T/1F 1d+ouA5vX7EFNyEc3Nu0/MIpNMzfxYJn6oO5tXFS4/hNLUMIH3IYS9vC0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHj36/Zi9TGDH1ASmXaFSW1lt+BBMB8GA1UdIwQY MBaAFK7vObQhAF8wK2kQ+WOT9LZUeo/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnU4NXRDRUFYekFyYVJENVk1UDB0bFI2ai13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMjAzNmEtMjdhNy00Y2RiLWI0ZmUt OTMxMTI3NWYzOGVhLzEvcnU4NXRDRUFYekFyYVJENVk1UDB0bFI2ai13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kMjAzNmEtMjdhNy00Y2RiLWI0ZmUtOTMxMTI3NWYzOGVh LzEvcnU4NXRDRUFYekFyYVJENVk1UDB0bFI2ai13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMjo6Y1L 8B1WupdEmwzfkbcn2j3jORK+n2j5yhOxZk/2ITl5CKeUPEiUX/4aXXoWXxt+HkP8 mQLITSBMvzBKDa4mOV0wIxtYgX5pp4CgBBqCxi1Ohl1gwhrknVUgS2yE9BF3S3yv bg42JRDOeePb4x5OtKyl6sRF3pooabVgnl9M7W30U9XRWeHBHtHy1+OUkfOt//kt yktA8iP7vfhOycCO+TTOeB8NI02wGchq1VV+y1mOZsMj4Etylc4r7MU0/e6IhCe4 QowHc7MDnftM3qipEf/gge7JXR4cVAhdneAHg4cdWLQKun1Q2N5NejhUPhVaPRWb V72ICn9vyCrjwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:15 2025 by rpki-client