This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json) Hash identifier: 5ZhisUto96hqSQKBNcvOB+EqoN/yApYKlUT+o+OCOVM= Subject key identifier: E4:2A:6F:1B:5B:1E:02:6A:63:35:E0:0B:B4:50:31:2C:7F:BE:96:44 Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89 Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889 Certificate serial: 019AF163D449738F8C97872E4CF60D77F622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft Manifest number: 16DC Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: f14DqaK7MhkI8xza7qRcm74CNBnxmG8tk9z57D8RjcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d4:49:73:8f:8c:97:87:2e:4c:f6:0d:77:f6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=e42a6f1b5b1e026a6335e00bb450312c7fbe9644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:4e:8f:aa:82:b8:bb:1c:c4:f8:e1:4f:4d: 4d:9d:ca:21:90:8d:c3:25:ed:89:5d:c7:c5:cc:e0: dd:93:96:97:b0:2e:a6:18:e5:05:b9:81:34:6f:a2: d4:91:6e:84:55:a3:94:c1:82:c9:24:37:2d:71:fa: 23:34:93:ba:2e:7c:e0:8b:13:a2:0c:a6:bb:e4:3f: 0a:02:45:c0:f2:32:48:88:b0:6e:7e:ad:f8:3f:4e: cd:fe:15:6a:44:83:a2:16:c5:86:15:cd:65:32:77: 82:e4:89:0f:c3:8f:21:c5:89:b9:e4:a3:ef:4e:ed: 82:f8:bc:9f:7d:82:c1:3a:32:ea:2d:1b:e1:3c:f7: 11:c4:ef:70:fd:05:b3:d4:ed:d4:d6:ae:48:ca:77: a1:b6:10:0d:05:6d:35:3c:92:0b:70:d5:0d:23:6d: d5:c6:eb:13:5b:1a:df:e2:30:f0:47:41:49:7f:c2: 1a:4f:a5:41:66:12:5e:c8:4b:0b:7f:33:a1:95:d5: d3:e5:3e:7c:01:41:5b:d5:9f:28:69:54:3b:87:11: f2:28:4c:52:b2:cb:d0:c1:82:89:3c:18:db:d0:fd: 5b:9f:71:19:5e:9f:7b:62:3b:a7:1c:8c:b4:9e:dd: bd:a5:ec:ef:d9:5b:1a:87:2a:a7:43:36:e2:58:f9: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2A:6F:1B:5B:1E:02:6A:63:35:E0:0B:B4:50:31:2C:7F:BE:96:44 X509v3 Authority Key Identifier: keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:60:0d:db:73:12:02:f6:18:db:f5:b3:8b:79:64:07:90:0f: 98:0a:cd:a4:95:75:a1:d0:65:64:28:ee:9e:fd:2d:85:14:73: f6:45:0c:b1:cd:e4:52:3c:07:c0:fb:86:c9:a6:0f:14:75:9b: 6e:ab:97:62:0d:83:14:8b:d1:9d:4f:ae:b1:7e:b6:08:67:a3: 67:41:d9:e7:71:ff:d3:ca:e2:60:b0:fa:8b:c0:92:5f:97:02: e1:d3:d1:36:ff:25:b2:75:4b:f1:f7:28:16:bf:74:e7:84:2d: a8:a4:25:93:4e:55:1a:59:53:c4:bb:f1:40:f9:1b:4f:a8:09: 0e:e5:e5:fc:d5:f8:7d:35:48:bc:24:84:89:b2:bf:bd:8d:f9: 58:26:d5:17:b2:57:6f:56:02:b0:75:4c:6c:f4:c9:5f:8f:77: dd:4c:ba:06:41:aa:c9:59:d0:8c:0d:e5:e5:ed:22:b8:4d:e3: 40:b0:95:e6:4e:50:cb:98:2b:3b:d1:6b:13:5e:08:4b:6b:84: 51:ab:a8:ea:33:6c:d9:1e:11:eb:5e:8a:4d:d3:6d:cd:06:df: ad:5a:62:60:2c:b5:15:68:3e:21:8c:bd:00:7f:63:af:96:7f: b1:e4:ea:09:14:09:43:d5:23:4a:91:11:e7:5c:ab:12:a6:28: a0:35:b3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9RJc4+Ml4cuTPYNd/YiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWRjNzc3N2I3N2EyYjM0NzdjNjdhYjlkMjZjYzdhYTAy ZjM4ODkwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EyhlNDJhNmYxYjViMWUwMjZhNjMzNWUwMGJiNDUwMzEyYzdmYmU5NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVhOj6qCuLscxPjhT01NncohkI3D Je2JXcfFzODdk5aXsC6mGOUFuYE0b6LUkW6EVaOUwYLJJDctcfojNJO6LnzgixOi DKa75D8KAkXA8jJIiLBufq34P07N/hVqRIOiFsWGFc1lMneC5IkPw48hxYm55KPv Tu2C+LyffYLBOjLqLRvhPPcRxO9w/QWz1O3U1q5IynehthANBW01PJILcNUNI23V xusTWxrf4jDwR0FJf8IaT6VBZhJeyEsLfzOhldXT5T58AUFb1Z8oaVQ7hxHyKExS ssvQwYKJPBjb0P1bn3EZXp97YjunHIy0nt29pezv2VsahyqnQzbiWPlEbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQqbxtbHgJqYzXgC7RQMSx/vpZEMB8GA1UdIwQY MBaAFK1dx3d7d6KzR3xnq50mzHqgLziJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NTU4NjgtM2I3OS00NDQ3LWI0NjUt ZjQwOTQ1OGMwNGQ1LzEvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NTU4NjgtM2I3OS00NDQ3LWI0NjUtZjQwOTQ1OGMwNGQ1 LzEvclYzSGQzdDNvck5IZkdlcm5TYk1lcUF2T0lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWAN23MS AvYY2/Wzi3lkB5APmArNpJV1odBlZCjunv0thRRz9kUMsc3kUjwHwPuGyaYPFHWb bquXYg2DFIvRnU+usX62CGejZ0HZ53H/08riYLD6i8CSX5cC4dPRNv8lsnVL8fco Fr9054QtqKQlk05VGllTxLvxQPkbT6gJDuXl/NX4fTVIvCSEibK/vY35WCbVF7JX b1YCsHVMbPTJX4933Uy6BkGqyVnQjA3l5e0iuE3jQLCV5k5Qy5grO9FrE14IS2uE Uauo6jNs2R4R616KTdNtzQbfrVpiYCy1FWg+IYy9AH9jr5Z/seTqCRQJQ9UjSpER 51yrEqYooDWz9g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:38 2025 by rpki-client