This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft File: aDjl4BZgX27c1MlhwZys9YFMeKM.mft (raw, json) Hash identifier: 2dM8iTCFB1c39ZkiwqR+EKBzK2om6TEaubYJILIL9mY= Subject key identifier: B0:EB:1B:CD:00:9F:1D:15:A6:C0:5C:02:14:74:5E:28:11:EA:CF:1E Authority key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3 Certificate issuer: /CN=6838e5e016605f6edcd4c961c19cacf5814c78a3 Certificate serial: 019AF5AEE2E4DD2BA986E4F5E0702BC7363D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft Manifest number: 119F Signing time: Sat 06 Dec 2025 22:01:10 +0000 Manifest this update: Sat 06 Dec 2025 22:01:10 +0000 Manifest next update: Sun 07 Dec 2025 22:01:10 +0000 Files and hashes: 1: aDjl4BZgX27c1MlhwZys9YFMeKM.crl (hash: wzyDPhsa/xp8pB2wo+BoDz25AEB8ubrL+UZz8YmQGpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:e2:e4:dd:2b:a9:86:e4:f5:e0:70:2b:c7:36:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3 Validity Not Before: Dec 6 22:01:10 2025 GMT Not After : Dec 7 22:01:10 2025 GMT Subject: CN=b0eb1bcd009f1d15a6c05c0214745e2811eacf1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6b:19:25:bf:e9:2a:b0:bc:14:48:d5:52:f9: c4:e8:6c:c7:42:5e:55:1e:be:8d:35:c5:1b:50:4a: 15:63:be:6b:52:a3:38:b4:60:82:0f:02:97:22:04: 53:d2:52:4a:bc:64:69:5c:41:ac:08:01:87:fd:60: 93:1e:7f:c3:25:d2:80:27:15:ba:e0:92:d3:00:66: 51:be:13:2c:37:4b:d3:30:eb:28:4f:03:a3:db:db: a5:10:18:a7:83:f6:1d:bf:ab:ef:9a:57:62:d6:82: 77:6c:01:ce:4c:18:35:c4:be:cf:57:e5:df:07:15: 83:b4:e3:01:dd:56:13:89:e2:b7:a6:eb:56:63:4d: e2:10:81:82:41:a6:5c:4c:67:fe:8f:9c:ab:fb:fa: 74:7d:4e:34:30:ae:5c:08:0d:06:13:a6:ac:2c:95: 03:f6:a9:a3:6a:3e:f5:40:a2:bd:d4:ac:35:98:99: eb:ba:b7:99:fd:66:12:01:b7:f6:c0:d3:77:7a:39: 20:ce:15:a4:6d:57:fd:65:88:25:14:70:a1:30:57: a9:72:81:03:03:6e:6f:3d:00:a0:76:13:ff:f4:76: a9:86:b6:de:13:a8:30:cf:7f:5a:32:4c:e4:0c:2b: 05:d1:9f:37:69:7d:4a:1c:6a:66:fd:09:d3:ba:f2: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EB:1B:CD:00:9F:1D:15:A6:C0:5C:02:14:74:5E:28:11:EA:CF:1E X509v3 Authority Key Identifier: keyid:68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b1:fe:d7:a8:53:7c:88:ce:0f:ca:0a:97:9a:6d:53:23:8e: aa:0b:82:f3:69:62:7f:92:28:31:9f:7d:72:81:88:bb:6e:01: cf:01:a4:e8:0d:63:93:b2:08:23:da:f8:3d:dc:f5:50:23:86: 8f:bf:a3:2e:4b:19:d5:6d:c6:4a:91:90:6e:42:e5:c8:79:fc: e0:81:d4:00:bb:c2:36:ae:60:b3:2d:4b:6d:12:a8:f7:5f:d0: 6d:9c:1f:77:0d:45:28:a0:ce:54:7c:0c:ff:bf:8f:f6:67:61: 10:0d:c6:58:e6:45:96:70:2b:2e:bd:fa:dd:74:be:60:18:56: cc:5d:59:3a:c9:12:b0:47:da:c8:dd:41:48:5f:c1:07:0f:d3: 16:2f:78:98:cd:9b:ff:d4:6a:70:09:33:a4:29:f5:3a:1e:c2: 26:29:a1:85:9b:3c:5b:18:c8:d9:bb:c2:87:1b:6a:dc:62:d9: b2:0a:7c:a9:17:5e:19:55:48:ff:88:29:60:76:74:f7:23:e0: f1:79:8a:c6:9a:92:79:d5:a9:dc:53:22:0c:d8:a4:72:4f:37: 31:d4:ff:11:e5:88:fd:6a:4e:53:22:cd:a7:56:b8:f3:94:6e: b2:d9:df:4a:4a:e4:1e:37:f8:9f:b8:c2:48:60:b7:1d:51:8a: 57:dd:a4:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ruLk3SuphuT14HArxzY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzhlNWUwMTY2MDVmNmVkY2Q0Yzk2MWMxOWNhY2Y1ODE0 Yzc4YTMwHhcNMjUxMjA2MjIwMTEwWhcNMjUxMjA3MjIwMTEwWjAzMTEwLwYDVQQD EyhiMGViMWJjZDAwOWYxZDE1YTZjMDVjMDIxNDc0NWUyODExZWFjZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWsZJb/pKrC8FEjVUvnE6GzHQl5V Hr6NNcUbUEoVY75rUqM4tGCCDwKXIgRT0lJKvGRpXEGsCAGH/WCTHn/DJdKAJxW6 4JLTAGZRvhMsN0vTMOsoTwOj29ulEBing/Ydv6vvmldi1oJ3bAHOTBg1xL7PV+Xf BxWDtOMB3VYTieK3putWY03iEIGCQaZcTGf+j5yr+/p0fU40MK5cCA0GE6asLJUD 9qmjaj71QKK91Kw1mJnrureZ/WYSAbf2wNN3ejkgzhWkbVf9ZYglFHChMFepcoED A25vPQCgdhP/9HaphrbeE6gwz39aMkzkDCsF0Z83aX1KHGpm/QnTuvLXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDrG80Anx0VpsBcAhR0XigR6s8eMB8GA1UdIwQY MBaAFGg45eAWYF9u3NTJYcGcrPWBTHijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURqbDRCWmdYMjdjMU1saHdaeXM5WUZNZUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83N2YxOTQtZmY1Zi00YTIzLWI4ODIt ZjRjYzI1YTU0NTNmLzEvYURqbDRCWmdYMjdjMU1saHdaeXM5WUZNZUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83N2YxOTQtZmY1Zi00YTIzLWI4ODItZjRjYzI1YTU0NTNm LzEvYURqbDRCWmdYMjdjMU1saHdaeXM5WUZNZUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebH+16hT fIjOD8oKl5ptUyOOqguC82lif5IoMZ99coGIu24BzwGk6A1jk7III9r4Pdz1UCOG j7+jLksZ1W3GSpGQbkLlyHn84IHUALvCNq5gsy1LbRKo91/QbZwfdw1FKKDOVHwM /7+P9mdhEA3GWOZFlnArLr363XS+YBhWzF1ZOskSsEfayN1BSF/BBw/TFi94mM2b /9RqcAkzpCn1Oh7CJimhhZs8WxjI2bvChxtq3GLZsgp8qRdeGVVI/4gpYHZ09yPg 8XmKxpqSedWp3FMiDNikck83MdT/EeWI/WpOUyLNp1a485RustnfSkrkHjf4n7jC SGC3HVGKV92k6A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:32:24 2025 by rpki-client