This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft File: adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json) Hash identifier: n7ynQpLxy0jYSpeyk7PajGNJfJT2SHIP53jdSiWar9E= Subject key identifier: 0A:7A:79:D6:E6:BF:91:B5:C8:C0:01:C4:D9:04:E9:FF:45:CE:7C:54 Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5 Certificate issuer: /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5 Certificate serial: 019AF12D49196BF3AE2005CB969D113D5413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft Manifest number: 13F1 Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: sS4joOyUEl3L/FZUCV+dwNnVXhHDzyruaBvX3yeEyLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:49:19:6b:f3:ae:20:05:cb:96:9d:11:3d:54:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5 Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=0a7a79d6e6bf91b5c8c001c4d904e9ff45ce7c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:d2:1d:13:6b:dd:f1:56:c1:d3:ee:ff:a4: be:af:94:71:f1:70:fd:03:c1:67:74:5f:50:ed:2c: 41:d8:ba:c2:e6:94:e7:a0:d5:48:de:b3:a2:86:ab: b6:7a:c1:f5:39:da:a2:4a:f4:f5:0f:46:07:da:8c: 18:72:f7:08:fd:1f:6e:13:ef:9f:34:97:9c:b4:e6: e2:87:f9:5a:a7:cd:17:dc:1b:13:d7:42:71:cd:81: 69:87:39:5b:0e:01:60:a4:65:f4:eb:d1:1e:af:e8: 37:62:fe:47:45:3a:28:0d:ee:cc:91:8d:0c:df:91: c3:ac:eb:7c:a4:3a:f0:22:cf:3d:a3:9e:2a:7a:c8: c8:80:17:2d:c1:ac:f2:1d:25:6b:e6:fd:1b:9a:30: d0:ab:29:7f:be:f7:a5:3d:58:ce:63:b5:bd:38:43: 6a:e6:5c:f0:48:a0:f2:ec:bf:3c:aa:94:c8:80:5c: 4d:ea:0c:fb:ed:3e:2f:df:f4:43:ea:de:8b:82:2f: 08:7d:d0:6a:8c:87:85:6d:12:98:fb:ed:bb:65:cb: 01:10:f5:99:ad:ec:48:1b:eb:ff:bf:44:3b:2e:f4: a1:30:42:9e:d0:22:7c:a2:06:86:e3:74:9f:09:d3: 6e:90:fe:2f:c2:6a:3e:d1:19:b0:8b:68:08:18:f6: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7A:79:D6:E6:BF:91:B5:C8:C0:01:C4:D9:04:E9:FF:45:CE:7C:54 X509v3 Authority Key Identifier: keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a9:ef:c9:6a:d6:ec:ce:63:1d:64:ec:54:7e:dc:bb:2f:7e: 80:7a:0e:84:bd:07:ee:8e:a0:24:d9:de:27:94:58:d8:d9:9b: b1:3d:76:6e:74:8c:c5:aa:39:fc:ea:2f:08:37:6b:73:a9:4c: 33:5b:2b:4e:92:f3:92:93:05:f8:fb:dc:70:9d:6b:98:ed:b1: a6:30:8a:4e:43:47:14:b0:50:da:6c:70:6d:cd:2c:1b:5e:26: 4d:9c:10:53:90:97:a8:fb:a1:6d:37:c5:f9:71:d9:48:a3:aa: 43:57:cc:51:9a:03:d2:4c:73:fb:bf:a2:e9:43:a7:40:3b:68: 05:14:35:b0:1e:73:d2:a4:b1:84:34:d2:71:76:a6:18:43:a0: 33:af:91:f2:b3:0d:58:a6:1e:e1:4e:36:e4:3f:34:b3:69:5a: 7d:af:97:87:f1:2f:f1:f3:84:a6:32:18:8f:a8:63:eb:06:3d: 64:b4:f7:a9:85:54:7a:8a:c9:d0:12:3a:f7:f1:89:84:a8:32: a5:95:8d:0c:f6:a2:b4:ff:c1:a5:8e:d4:fb:45:bd:ac:12:a1: 7a:0f:05:6f:ae:82:d7:af:2b:93:3b:db:68:fc:ec:b4:b9:38: ad:d2:ae:f1:1d:2f:d2:1d:a0:27:61:40:f8:de:c8:b8:63:c5: 9c:cc:00:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUkZa/OuIAXLlp0RPVQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDAzZWIxMmJiM2ZlMmU0ZTk2NDUxYzljYzNlZjhlZTlk M2I1ZjUwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD EygwYTdhNzlkNmU2YmY5MWI1YzhjMDAxYzRkOTA0ZTlmZjQ1Y2U3YzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8HSHRNr3fFWwdPu/6S+r5Rx8XD9 A8FndF9Q7SxB2LrC5pTnoNVI3rOihqu2esH1OdqiSvT1D0YH2owYcvcI/R9uE++f NJectObih/lap80X3BsT10JxzYFphzlbDgFgpGX069Eer+g3Yv5HRTooDe7MkY0M 35HDrOt8pDrwIs89o54qesjIgBctwazyHSVr5v0bmjDQqyl/vvelPVjOY7W9OENq 5lzwSKDy7L88qpTIgFxN6gz77T4v3/RD6t6Lgi8IfdBqjIeFbRKY++27ZcsBEPWZ rexIG+v/v0Q7LvShMEKe0CJ8ogaG43SfCdNukP4vwmo+0Rmwi2gIGPY3KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp6edbmv5G1yMABxNkE6f9FznxUMB8GA1UdIwQY MBaAFGnQPrErs/4uTpZFHJzD747p07X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MjliYzYtZWUxYy00NWEzLWJjZGQt MDU3Y2VlMDVlMGUzLzEvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy84MjliYzYtZWUxYy00NWEzLWJjZGQtMDU3Y2VlMDVlMGUz LzEvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKnvyWrW 7M5jHWTsVH7cuy9+gHoOhL0H7o6gJNneJ5RY2NmbsT12bnSMxao5/OovCDdrc6lM M1srTpLzkpMF+PvccJ1rmO2xpjCKTkNHFLBQ2mxwbc0sG14mTZwQU5CXqPuhbTfF +XHZSKOqQ1fMUZoD0kxz+7+i6UOnQDtoBRQ1sB5z0qSxhDTScXamGEOgM6+R8rMN WKYe4U425D80s2lafa+Xh/Ev8fOEpjIYj6hj6wY9ZLT3qYVUeorJ0BI69/GJhKgy pZWNDPaitP/BpY7U+0W9rBKheg8Fb66C168rkzvbaPzstLk4rdKu8R0v0h2gJ2FA +N7IuGPFnMwAZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:12 2025 by rpki-client