This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json) Hash identifier: TSs8673PJb47lRnZG1a/nhvIm2pN/noRCtBcwx8YH7I= Subject key identifier: 2C:80:22:E0:61:84:7B:F3:72:09:09:34:74:80:85:27:2F:B1:04:D2 Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87 Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387 Certificate serial: 019AF19AA916AF59E86916FD8C7CD81DDF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 03:00:35 +0000 Manifest this update: Sat 06 Dec 2025 03:00:35 +0000 Manifest next update: Sun 07 Dec 2025 03:00:35 +0000 Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: LcpCtSa5+Av6hO5HPcXG5Fq3XqNWzqtGy+JVwzv5fYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a9:16:af:59:e8:69:16:fd:8c:7c:d8:1d:df:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387 Validity Not Before: Dec 6 03:00:35 2025 GMT Not After : Dec 7 03:00:35 2025 GMT Subject: CN=2c8022e061847bf372090934748085272fb104d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:61:f6:26:90:cb:73:49:e4:ae:6c:ba:9c: d1:51:9d:47:99:d2:e1:4a:94:41:02:17:0f:01:31: 50:51:59:37:d6:82:c3:78:78:e1:5c:54:a1:29:0a: 17:3e:03:96:28:f1:f6:4e:82:ff:5b:8a:10:bb:29: 4f:cb:97:49:cf:de:7e:7f:3b:45:c8:a0:70:ea:4c: 0a:20:bb:16:64:88:6d:8d:7d:24:03:a2:4b:a1:94: c8:20:19:45:61:ca:3a:b6:f7:2f:70:0c:c8:66:8f: 77:17:e8:e9:2b:6a:b3:bf:d9:2b:e2:46:55:d8:88: 77:9e:ac:35:85:cb:11:c6:25:d2:69:f3:fe:04:0e: 24:c4:20:92:0e:96:88:e4:60:3d:af:08:92:c4:8e: 75:ff:22:b1:0e:66:dc:fb:52:68:da:f9:0c:1d:cd: 11:f2:48:1d:6b:d9:88:31:b1:ad:2c:53:47:d6:db: 03:d9:44:93:6d:da:ce:00:df:bc:a6:ac:f1:50:81: b2:34:02:a9:ba:19:2a:02:c9:2d:08:80:b5:68:aa: 2d:d4:b1:5e:94:78:03:29:11:0e:b9:05:45:a7:46: ea:ec:90:e9:62:48:51:fc:f3:00:72:b0:c9:e8:13: e6:d7:8f:9b:b5:84:51:bc:e1:ec:b2:7e:a7:61:78: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:80:22:E0:61:84:7B:F3:72:09:09:34:74:80:85:27:2F:B1:04:D2 X509v3 Authority Key Identifier: keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:eb:67:78:3a:7d:09:b2:41:b5:b3:b3:b9:68:43:f3:4c:36: a6:14:c2:7a:74:21:c9:66:60:22:3b:01:8c:1e:01:42:5f:1f: 97:a2:29:93:3e:25:c8:23:00:06:f8:a4:36:0a:84:13:74:f9: 2b:cc:47:e5:1f:08:50:25:73:8c:77:13:ec:7d:2c:a7:1b:cd: 49:ae:e4:01:72:b3:7c:bc:1d:19:39:4f:3a:59:4d:b8:46:89: de:c3:9c:4f:6e:95:a0:7c:97:be:e2:4b:49:6e:64:25:be:ea: 9e:c8:f8:f9:5d:4e:99:85:8b:dd:fc:5f:42:a4:0c:c7:d9:87: 9a:bd:85:50:bf:d7:96:a4:3b:d5:09:be:6b:bd:ae:66:04:45: 9f:6f:6d:f5:43:37:aa:17:f5:3b:27:e7:9e:a7:07:a2:ba:0e: 34:55:29:02:26:09:c2:99:99:ef:b6:92:b4:11:a0:00:58:12: e8:cc:f7:48:10:a6:a4:03:10:cb:89:bf:78:ee:8b:04:ce:01: 37:f9:33:30:d2:07:f3:83:ca:a1:77:27:c6:50:13:2d:b7:e4: ec:ff:73:c0:bf:09:24:43:5d:c4:f3:88:42:bf:d7:34:23:3b: 42:6b:c7:05:81:99:8f:10:48:fe:2b:82:7e:65:b9:3d:d7:6b: b3:3b:42:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqkWr1noaRb9jHzYHd+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjM2U2ZDU5ZDQ3ZTczN2VkYzMxYTY1ZjMxMDUxNGNkNGI5 NWQzODcwHhcNMjUxMjA2MDMwMDM1WhcNMjUxMjA3MDMwMDM1WjAzMTEwLwYDVQQD EygyYzgwMjJlMDYxODQ3YmYzNzIwOTA5MzQ3NDgwODUyNzJmYjEwNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVxh9iaQy3NJ5K5supzRUZ1HmdLh SpRBAhcPATFQUVk31oLDeHjhXFShKQoXPgOWKPH2ToL/W4oQuylPy5dJz95+fztF yKBw6kwKILsWZIhtjX0kA6JLoZTIIBlFYco6tvcvcAzIZo93F+jpK2qzv9kr4kZV 2Ih3nqw1hcsRxiXSafP+BA4kxCCSDpaI5GA9rwiSxI51/yKxDmbc+1Jo2vkMHc0R 8kgda9mIMbGtLFNH1tsD2USTbdrOAN+8pqzxUIGyNAKpuhkqAsktCIC1aKot1LFe lHgDKREOuQVFp0bq7JDpYkhR/PMAcrDJ6BPm14+btYRRvOHssn6nYXharwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyAIuBhhHvzcgkJNHSAhScvsQTSMB8GA1UdIwQY MBaAFKw+bVnUfnN+3DGmXzEFFM1LldOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEt NWFlNTNjMjFiOGNkLzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEtNWFlNTNjMjFiOGNk LzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOtneDp9 CbJBtbOzuWhD80w2phTCenQhyWZgIjsBjB4BQl8fl6Ipkz4lyCMABvikNgqEE3T5 K8xH5R8IUCVzjHcT7H0spxvNSa7kAXKzfLwdGTlPOllNuEaJ3sOcT26VoHyXvuJL SW5kJb7qnsj4+V1OmYWL3fxfQqQMx9mHmr2FUL/XlqQ71Qm+a72uZgRFn29t9UM3 qhf1OyfnnqcHoroONFUpAiYJwpmZ77aStBGgAFgS6Mz3SBCmpAMQy4m/eO6LBM4B N/kzMNIH84PKoXcnxlATLbfk7P9zwL8JJENdxPOIQr/XNCM7QmvHBYGZjxBI/iuC fmW5PddrsztCbA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:54 2025 by rpki-client