This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json) Hash identifier: AqMhJLCmpOejVaNj9BQ3563A6ZDKrZ451TVcsVcaouw= Subject key identifier: 87:A0:F6:52:FA:7B:0F:74:64:3C:1A:78:3C:8F:89:AA:DA:41:D7:F7 Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d Certificate serial: 019AF2AD76E7C73858A3F90A0B690747C1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft Manifest number: 0639 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: Kdm/p+g/MM4sOUCvOibBGCZd+C/nkIV+HXewecUTVRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:76:e7:c7:38:58:a3:f9:0a:0b:69:07:47:c1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=87a0f652fa7b0f74643c1a783c8f89aada41d7f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:e0:e2:25:39:7a:94:e4:b0:85:2a:87:78: 49:3c:20:05:bd:b1:13:bf:50:52:87:be:20:b2:56: a5:1d:24:97:b6:df:e3:2a:c6:62:49:ec:86:bf:28: c9:25:9e:ef:a8:f2:97:ca:e5:6c:d6:22:44:26:69: e5:aa:36:e0:59:84:af:f9:91:ca:73:9d:9c:dc:4a: 8e:ce:89:fb:9d:45:fb:e2:32:e4:a9:ca:4c:44:59: 57:61:9b:54:b1:63:09:f3:03:62:d1:7a:c3:66:fe: 26:a2:76:4b:2f:cd:92:bd:48:1c:f8:38:ce:08:c9: 5c:c0:8c:04:58:22:a2:e7:e6:0d:38:a6:73:17:2a: c9:0c:2e:13:fe:25:3f:a9:e8:40:dd:0f:42:64:49: 85:50:c1:45:67:05:77:71:28:14:69:f7:e9:2f:0d: 4b:c6:4d:40:42:5e:2c:9a:12:21:a8:2c:09:3a:d6: b7:5f:28:d9:bd:33:ec:92:3f:a8:f6:92:f9:71:6d: 0e:44:bd:dc:0b:ac:86:ce:d9:e9:08:8e:33:26:9a: ee:30:94:f3:b9:39:fd:c4:e3:23:ee:c0:86:e2:a7: 75:d3:46:ad:12:2a:ff:1e:ad:e7:2e:63:22:52:2b: df:a3:31:88:32:fc:e6:19:7d:69:7c:c6:84:65:68: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:F6:52:FA:7B:0F:74:64:3C:1A:78:3C:8F:89:AA:DA:41:D7:F7 X509v3 Authority Key Identifier: keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3a:7d:6d:6d:08:4d:f1:8b:68:b6:63:34:07:d7:ec:05:ba: 03:2d:ab:dc:c6:ef:de:c5:cc:ac:48:ea:e9:e8:a3:2d:bb:c1: 0b:37:70:8c:76:9e:80:3a:27:eb:8c:87:ea:e3:a1:63:0e:16: 6d:81:b9:5b:fc:b4:ac:c6:0a:ca:e1:d5:55:3b:f0:7b:c7:da: 69:28:b3:28:d1:4b:66:5b:95:8c:0b:d2:40:a7:b7:2f:b9:af: 12:13:28:f8:37:15:5a:e7:9e:67:9e:1c:62:9b:50:26:02:16: 7a:66:27:73:f3:d3:ca:dc:de:43:60:c5:27:9e:84:c0:4a:0e: dc:95:b1:79:32:bf:6f:4b:c5:0b:d3:e1:8f:1e:d6:69:c1:7b: 29:f1:39:88:97:0e:24:7f:bc:22:1c:11:4e:64:1b:75:15:6b: 01:d5:0d:ee:32:a8:8b:40:3a:8a:ad:36:d4:c5:96:d6:f1:63: c6:37:e4:ba:a5:98:86:aa:5c:0d:60:67:fc:61:4f:a6:07:a8: 21:31:5d:3a:21:31:8a:f2:8b:49:d8:6e:b4:6f:03:c8:a7:19: 25:94:4b:8c:37:86:3b:82:01:74:6a:22:7c:d8:ee:94:46:b9: 92:f0:8f:f9:ca:4b:2e:92:3d:55:d3:c1:e4:e2:d0:70:4b:d6: 1f:5c:40:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXbnxzhYo/kKC2kHR8HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjljNDg5YjRiYmM4NWRlNzM0NDE3ZWJiYTRlMTM3YjE3 YzA3OWQwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD Eyg4N2EwZjY1MmZhN2IwZjc0NjQzYzFhNzgzYzhmODlhYWRhNDFkN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Pg4iU5epTksIUqh3hJPCAFvbET v1BSh74gslalHSSXtt/jKsZiSeyGvyjJJZ7vqPKXyuVs1iJEJmnlqjbgWYSv+ZHK c52c3EqOzon7nUX74jLkqcpMRFlXYZtUsWMJ8wNi0XrDZv4monZLL82SvUgc+DjO CMlcwIwEWCKi5+YNOKZzFyrJDC4T/iU/qehA3Q9CZEmFUMFFZwV3cSgUaffpLw1L xk1AQl4smhIhqCwJOta3XyjZvTPskj+o9pL5cW0ORL3cC6yGztnpCI4zJpruMJTz uTn9xOMj7sCG4qd100atEir/Hq3nLmMiUivfozGIMvzmGX1pfMaEZWhy7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeg9lL6ew90ZDwaeDyPiaraQdf3MB8GA1UdIwQY MBaAFES5xIm0u8hd5zRBfruk4TexfAedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82Njk1NTQtMzY5Ny00ZDI5LThmYTMt NGViOTZlOWFjYjE2LzEvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS82Njk1NTQtMzY5Ny00ZDI5LThmYTMtNGViOTZlOWFjYjE2 LzEvUkxuRWliUzd5RjNuTkVGLXU2VGhON0Y4QjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjp9bW0I TfGLaLZjNAfX7AW6Ay2r3Mbv3sXMrEjq6eijLbvBCzdwjHaegDon64yH6uOhYw4W bYG5W/y0rMYKyuHVVTvwe8faaSizKNFLZluVjAvSQKe3L7mvEhMo+DcVWueeZ54c YptQJgIWemYnc/PTytzeQ2DFJ56EwEoO3JWxeTK/b0vFC9Phjx7WacF7KfE5iJcO JH+8IhwRTmQbdRVrAdUN7jKoi0A6iq021MWW1vFjxjfkuqWYhqpcDWBn/GFPpgeo ITFdOiExivKLSdhutG8DyKcZJZRLjDeGO4IBdGoifNjulEa5kvCP+cpLLpI9VdPB 5OLQcEvWH1xAig== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:57 2025 by rpki-client