This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json) Hash identifier: sSg0UskQwF5grbLTr2FJTI11cbtauz4AgUMULWACtPU= Subject key identifier: 26:A6:70:42:62:51:8A:B7:10:D2:B3:6E:6A:5A:D6:F9:8B:E2:DD:F1 Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61 Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61 Certificate serial: 019AF1D21ED26C8B0010C3EAAB0802A72024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: /1TUs7q7X2NwAZR0UhNvhQNxcFAdnO+IrmcKj0HyCHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1e:d2:6c:8b:00:10:c3:ea:ab:08:02:a7:20:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61 Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=26a6704262518ab710d2b36e6a5ad6f98be2ddf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e5:67:6b:0e:8d:2d:45:4d:ca:ae:be:73:07: f4:d2:1d:da:a2:cd:2f:cf:ec:4e:01:50:38:7a:ab: 6a:e3:cf:93:08:1c:b8:fb:fd:fb:b5:c6:93:ac:31: 1e:93:7c:eb:9a:d4:bb:80:01:9f:2d:83:e2:7f:14: 25:ba:0c:4f:ac:51:27:57:d1:a8:7a:17:1e:5f:72: 50:02:db:34:32:09:9b:6f:d5:1c:59:f9:9f:95:ca: fb:c8:d4:6e:86:4b:68:bd:03:7f:75:ab:6c:65:e5: fc:b8:33:9b:37:eb:cf:a9:9c:75:18:54:ba:e5:5a: 80:77:ab:f7:1f:85:cb:88:17:4d:a0:10:0e:20:64: 02:df:de:ed:84:89:66:9c:9f:ba:33:c1:3a:0e:7b: 0c:53:cc:1e:a8:c1:4e:61:dd:2c:6e:b4:eb:48:2f: 8e:6a:34:b8:ca:26:55:1b:10:64:5a:cd:e5:b0:b1: dd:ed:c7:09:5b:48:39:69:ae:0b:9c:33:5a:1d:42: 09:b3:d1:e3:cd:05:ef:cb:3f:6f:52:41:e4:be:df: f3:4b:14:d8:8a:b2:3c:55:54:f7:12:a3:f2:cb:83: ea:13:d6:40:f7:9f:e7:eb:14:f3:41:1f:9e:2a:12: 02:aa:df:e3:c9:6b:e2:23:7c:a4:5d:73:05:71:42: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A6:70:42:62:51:8A:B7:10:D2:B3:6E:6A:5A:D6:F9:8B:E2:DD:F1 X509v3 Authority Key Identifier: keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5a:ff:1d:5e:0e:6f:f4:1b:81:8b:c9:36:f5:1d:02:3c:6a: f2:6a:18:61:66:15:99:8f:56:de:7a:f2:d0:25:ca:09:13:4c: 98:3b:d4:9a:c3:ff:ea:f8:da:a2:f9:d1:6b:72:c9:02:78:c4: df:a9:0a:5c:12:64:06:11:b7:38:b2:17:7f:f4:84:9d:70:97: 53:4f:bf:09:e9:7f:03:f1:4b:9c:d6:67:ab:5c:bc:55:5d:6b: 57:89:97:83:5f:dd:ef:b6:b9:30:ff:7e:d7:1b:46:b4:b3:b1: c7:3c:51:95:21:32:dc:4d:5e:a4:ba:6e:f4:08:80:89:bd:fe: 65:47:f0:b6:a2:4e:78:00:c9:db:85:6a:85:1a:ab:d7:96:4b: 55:07:4f:eb:d2:fc:c6:37:f4:a6:5b:de:45:87:79:d7:e4:d1: 3c:e1:fd:c0:fd:97:e6:00:bf:67:63:c4:67:f0:c2:db:fc:4d: 06:f8:b8:3f:43:7b:7b:61:4b:f7:b1:94:34:44:9b:a4:11:e1: 06:7b:cc:32:6f:e2:12:79:7d:84:b3:78:3b:40:83:f4:1f:17: b2:d8:02:90:48:39:5f:ed:3d:3e:01:7b:31:12:8c:11:00:2b: 8b:d1:d4:fc:7e:69:25:46:c4:58:f5:fe:de:85:0d:4f:e2:7f: 6c:70:98:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h7SbIsAEMPqqwgCpyAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWYzODQ0MjkzYmFkNjUxZmZkODU3YzkxYWYwYmU1NjBh ZWNkNjEwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD EygyNmE2NzA0MjYyNTE4YWI3MTBkMmIzNmU2YTVhZDZmOThiZTJkZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OVnaw6NLUVNyq6+cwf00h3aos0v z+xOAVA4eqtq48+TCBy4+/37tcaTrDEek3zrmtS7gAGfLYPifxQlugxPrFEnV9Go ehceX3JQAts0Mgmbb9UcWfmflcr7yNRuhktovQN/datsZeX8uDObN+vPqZx1GFS6 5VqAd6v3H4XLiBdNoBAOIGQC397thIlmnJ+6M8E6DnsMU8weqMFOYd0sbrTrSC+O ajS4yiZVGxBkWs3lsLHd7ccJW0g5aa4LnDNaHUIJs9HjzQXvyz9vUkHkvt/zSxTY irI8VVT3EqPyy4PqE9ZA95/n6xTzQR+eKhICqt/jyWviI3ykXXMFcUI6MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCamcEJiUYq3ENKzbmpa1vmL4t3xMB8GA1UdIwQY MBaAFK/vOEQpO61lH/2FfJGvC+Vgrs1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUt YTliNDYxNGYwNzQ0LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iNGE0YzAtYzUzZi00NWJiLThlODUtYTliNDYxNGYwNzQ0 LzEvci04NFJDazdyV1VmX1lWOGthOEw1V0N1eldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1r/HV4O b/QbgYvJNvUdAjxq8moYYWYVmY9W3nry0CXKCRNMmDvUmsP/6vjaovnRa3LJAnjE 36kKXBJkBhG3OLIXf/SEnXCXU0+/Cel/A/FLnNZnq1y8VV1rV4mXg1/d77a5MP9+ 1xtGtLOxxzxRlSEy3E1epLpu9AiAib3+ZUfwtqJOeADJ24VqhRqr15ZLVQdP69L8 xjf0plveRYd51+TRPOH9wP2X5gC/Z2PEZ/DC2/xNBvi4P0N7e2FL97GUNESbpBHh BnvMMm/iEnl9hLN4O0CD9B8XstgCkEg5X+09PgF7MRKMEQAri9HU/H5pJUbEWPX+ 3oUNT+J/bHCYmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:07 2025 by rpki-client