This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json) Hash identifier: tFA3WY/ToeygGfbTSmyWwYP2GJEmOBIDbAUdmIE5sMg= Subject key identifier: 73:5F:A3:A1:21:FE:18:D4:15:E1:7F:43:74:60:27:80:9A:74:52:3A Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863 Certificate serial: 019AF12CF75A1E34665F62367CE343B9207F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft Manifest number: 0B29 Signing time: Sat 06 Dec 2025 01:00:47 +0000 Manifest this update: Sat 06 Dec 2025 01:00:47 +0000 Manifest next update: Sun 07 Dec 2025 01:00:47 +0000 Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: Lz+KXGiw9kP7UZiUulSQ7lSe1CUNgKPv6txbCX1ZJHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f7:5a:1e:34:66:5f:62:36:7c:e3:43:b9:20:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983ea291971990dc486f93812783fadd87ade863 Validity Not Before: Dec 6 01:00:47 2025 GMT Not After : Dec 7 01:00:47 2025 GMT Subject: CN=735fa3a121fe18d415e17f43746027809a74523a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:72:f5:6a:81:a4:70:2c:3a:5a:70:ee:eb: ca:b9:69:b0:bc:cd:e1:7f:5c:63:0e:91:4d:93:0e: 53:ec:b7:da:45:6d:a5:ea:96:8b:06:39:1c:13:82: 50:3b:f9:14:f8:08:4f:7b:cf:02:b8:63:87:2e:87: 2b:84:e4:67:7e:11:43:7b:38:d8:17:86:76:e9:9a: a2:8e:17:8b:b1:e1:6f:33:dd:5a:25:2a:ef:e3:48: fb:73:fe:cc:ee:2f:45:35:bb:6f:01:5b:5b:59:16: d6:6c:be:ac:1f:45:6a:3f:60:bb:2e:17:f2:02:96: cc:53:ce:a4:e8:a0:e1:e8:d8:15:f6:23:5c:c6:88: bf:47:74:e6:a6:52:fe:20:97:dd:6b:c3:47:58:b2: 23:24:b9:17:46:a4:26:ba:b4:1a:69:78:29:bc:64: f1:45:64:6f:b4:13:f1:fa:7c:62:3b:98:c9:92:4f: 83:bf:45:ab:ef:30:18:51:53:98:a4:e8:d6:d7:d5: bb:2f:7d:bc:9a:d7:aa:ac:d7:d4:3d:2d:4c:48:28: 4f:ec:11:a4:1b:4d:ac:a7:7f:61:d4:11:19:0e:25: f4:9d:b7:63:0c:ac:58:cc:9f:49:cb:7c:25:cf:99: ff:cd:29:7f:33:f1:79:d6:58:e3:1b:bd:39:d8:a7: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:A3:A1:21:FE:18:D4:15:E1:7F:43:74:60:27:80:9A:74:52:3A X509v3 Authority Key Identifier: keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:8f:a2:93:aa:8c:65:8f:b0:fd:41:ae:11:be:8a:cc:2a: fe:ee:f9:58:36:c3:65:2a:93:87:2f:c6:98:fd:7b:2b:a7:8f: d4:90:50:ae:22:26:c5:9b:bb:32:cf:9c:e7:34:b7:47:5d:ee: b1:d6:14:ab:3c:59:90:3b:e1:1e:27:63:f9:84:af:32:fd:87: ad:0f:89:25:04:3e:0b:7c:38:5f:a4:5d:99:db:8f:13:77:77: 7e:26:79:09:79:08:58:5e:27:a7:a6:6a:fd:c5:56:f1:3a:a8: 5d:6d:15:2a:4c:8a:55:e2:78:b6:dc:d1:62:8e:1a:b0:98:2a: 2c:fa:39:f3:54:ba:a6:38:75:0d:cd:5b:59:75:bb:f0:33:9b: e4:40:30:47:97:71:44:bb:ae:36:16:9f:67:c6:3b:1e:df:93: 29:2b:e4:8b:1e:2c:21:3c:b9:ea:5d:83:84:a7:94:f9:05:b6: ee:51:bf:1c:8b:dc:7e:c8:1f:35:8d:7c:62:db:1b:5d:93:15: 16:92:60:18:29:a3:bb:13:01:e2:f3:69:25:7d:be:cb:44:cf: 2a:a7:74:59:1c:54:8f:89:20:f2:2d:9d:29:67:3d:64:25:88: fe:d1:f5:4d:1e:3b:08:93:23:07:63:91:8a:b1:03:d0:8c:db: 8b:4a:24:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPdaHjRmX2I2fONDuSB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2VhMjkxOTcxOTkwZGM0ODZmOTM4MTI3ODNmYWRkODdh ZGU4NjMwHhcNMjUxMjA2MDEwMDQ3WhcNMjUxMjA3MDEwMDQ3WjAzMTEwLwYDVQQD Eyg3MzVmYTNhMTIxZmUxOGQ0MTVlMTdmNDM3NDYwMjc4MDlhNzQ1MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJdy9WqBpHAsOlpw7uvKuWmwvM3h f1xjDpFNkw5T7LfaRW2l6paLBjkcE4JQO/kU+AhPe88CuGOHLocrhORnfhFDezjY F4Z26ZqijheLseFvM91aJSrv40j7c/7M7i9FNbtvAVtbWRbWbL6sH0VqP2C7Lhfy ApbMU86k6KDh6NgV9iNcxoi/R3TmplL+IJfda8NHWLIjJLkXRqQmurQaaXgpvGTx RWRvtBPx+nxiO5jJkk+Dv0Wr7zAYUVOYpOjW19W7L328mteqrNfUPS1MSChP7BGk G02sp39h1BEZDiX0nbdjDKxYzJ9Jy3wlz5n/zSl/M/F51ljjG7052KfG/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNfo6Eh/hjUFeF/Q3RgJ4CadFI6MB8GA1UdIwQY MBaAFJg+opGXGZDcSG+TgSeD+t2HrehjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQt YzZlOWUwZmQ3MDgwLzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQtYzZlOWUwZmQ3MDgw LzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDyPopOq jGWPsP1BrhG+iswq/u75WDbDZSqThy/GmP17K6eP1JBQriImxZu7Ms+c5zS3R13u sdYUqzxZkDvhHidj+YSvMv2HrQ+JJQQ+C3w4X6RdmduPE3d3fiZ5CXkIWF4np6Zq /cVW8TqoXW0VKkyKVeJ4ttzRYo4asJgqLPo581S6pjh1Dc1bWXW78DOb5EAwR5dx RLuuNhafZ8Y7Ht+TKSvkix4sITy56l2DhKeU+QW27lG/HIvcfsgfNY18YtsbXZMV FpJgGCmjuxMB4vNpJX2+y0TPKqd0WRxUj4kg8i2dKWc9ZCWI/tH1TR47CJMjB2OR irED0Izbi0oklg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:07 2025 by rpki-client