This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json) Hash identifier: 6qvI1FX4AmHicL0En86pIUdd0oAqeAg2ukFKxyjSrBI= Subject key identifier: 88:0E:F1:53:C9:6E:8F:07:79:32:6E:15:2A:AB:7C:65:28:5D:8F:37 Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2 Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2 Certificate serial: 019AF19AB36632B3CF63F26E5782F727A40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft Manifest number: 07D5 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: 4LZ9UAUgl7VfpOGFYZRQLzIs+MrYVwUDABSpuVadv1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b3:66:32:b3:cf:63:f2:6e:57:82:f7:27:a4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2 Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=880ef153c96e8f0779326e152aab7c65285d8f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:89:72:1d:c4:50:3c:89:57:bd:f5:8b:88: 79:e6:c3:a2:d6:65:6f:42:8f:ac:f7:5d:3e:07:de: 9f:3e:d1:78:db:52:a5:9d:0a:85:73:03:25:a4:af: e5:c6:0c:87:61:16:03:fe:49:5b:ad:17:8c:95:0e: 85:d1:b0:12:de:d3:a7:4b:5e:a4:e9:a1:2b:64:f4: 36:ea:02:ad:eb:fa:fa:3d:28:75:c2:44:91:d3:0e: 53:31:a0:9b:b4:ea:30:81:ac:b6:ee:da:d6:a7:42: ab:09:ea:98:2f:c0:38:8f:e9:63:3b:5f:c6:40:cb: 53:59:77:c6:b9:3a:b5:bf:8e:be:12:0f:37:6d:ee: 7d:0b:f6:7a:81:f2:86:d8:90:8b:1d:85:c3:7b:d6: 08:1a:91:2c:02:67:8f:3d:e7:c5:d8:4d:da:af:63: f0:72:6b:90:c4:43:4c:e5:cb:ba:0a:67:9d:d4:c9: d9:14:80:1b:7f:37:54:21:05:48:76:a1:01:ce:ad: 57:ec:14:08:69:aa:b6:b4:a1:88:a4:f6:81:39:28: 57:17:17:0c:b0:be:98:8c:71:16:99:f9:8a:ce:08: ec:92:3c:67:b8:0c:b9:fd:f6:3e:22:df:42:87:f3: c9:7a:dc:7e:4b:60:58:b5:52:f2:ac:74:28:3e:68: b8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0E:F1:53:C9:6E:8F:07:79:32:6E:15:2A:AB:7C:65:28:5D:8F:37 X509v3 Authority Key Identifier: keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:dc:80:92:8c:b1:4d:69:1c:5c:7a:ad:6d:56:b4:72:33:f2: 34:01:1b:d5:b9:c9:10:68:66:9e:4c:93:9c:3c:02:08:7b:00: a9:6d:5e:24:fb:51:00:9a:23:81:ec:d6:3a:d2:e0:ff:a6:52: 67:bf:51:07:2d:6e:ab:45:8c:0d:b8:10:ba:d3:5b:d0:e6:cb: 49:82:5f:a8:46:cb:13:66:30:a4:d6:e5:46:78:d9:2f:fb:42: c0:99:63:47:aa:2a:c7:7a:e1:0b:50:2a:be:fa:b1:a1:ab:49: 66:50:62:da:7e:1b:3b:aa:62:14:d9:fb:ad:5d:4c:8e:89:bb: e2:c6:81:05:17:a5:bc:54:99:a6:27:2b:8d:c6:e4:5e:88:b3: b8:7a:64:4f:f8:78:20:8c:cc:d7:67:80:a3:0e:95:ec:86:4b: c9:35:17:b4:9b:72:0a:e6:3b:78:8f:b4:0d:ad:f2:ab:70:63: b2:12:93:d9:8c:d9:18:77:6a:b4:63:75:fa:b9:4a:96:45:79: d1:92:c6:9f:41:2f:78:c7:11:55:8e:1c:48:da:b8:48:ff:b6: 82:c0:3b:dc:4a:d8:48:15:c8:20:ba:b9:5a:d6:be:24:e9:ea: 89:5d:55:6f:e0:be:f1:68:62:92:38:f9:51:fa:12:cb:58:44: 8d:07:e1:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrNmMrPPY/JuV4L3J6QPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTJiNzI4OGM1NTllMWVkNGEzOTA1N2UwYWUwYzJiZWM0 MmRhYTIwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg4ODBlZjE1M2M5NmU4ZjA3NzkzMjZlMTUyYWFiN2M2NTI4NWQ4ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcqJch3EUDyJV731i4h55sOi1mVv Qo+s910+B96fPtF421KlnQqFcwMlpK/lxgyHYRYD/klbrReMlQ6F0bAS3tOnS16k 6aErZPQ26gKt6/r6PSh1wkSR0w5TMaCbtOowgay27trWp0KrCeqYL8A4j+ljO1/G QMtTWXfGuTq1v46+Eg83be59C/Z6gfKG2JCLHYXDe9YIGpEsAmePPefF2E3ar2Pw cmuQxENM5cu6Cmed1MnZFIAbfzdUIQVIdqEBzq1X7BQIaaq2tKGIpPaBOShXFxcM sL6YjHEWmfmKzgjskjxnuAy5/fY+It9Ch/PJetx+S2BYtVLyrHQoPmi4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgO8VPJbo8HeTJuFSqrfGUoXY83MB8GA1UdIwQY MBaAFHEStyiMVZ4e1KOQV+CuDCvsQtqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmIt MTU2ZjNjZmJjMTYxLzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmItMTU2ZjNjZmJjMTYx LzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9yAkoyx TWkcXHqtbVa0cjPyNAEb1bnJEGhmnkyTnDwCCHsAqW1eJPtRAJojgezWOtLg/6ZS Z79RBy1uq0WMDbgQutNb0ObLSYJfqEbLE2YwpNblRnjZL/tCwJljR6oqx3rhC1Aq vvqxoatJZlBi2n4bO6piFNn7rV1Mjom74saBBRelvFSZpicrjcbkXoizuHpkT/h4 IIzM12eAow6V7IZLyTUXtJtyCuY7eI+0Da3yq3BjshKT2YzZGHdqtGN1+rlKlkV5 0ZLGn0EveMcRVY4cSNq4SP+2gsA73ErYSBXIILq5Wta+JOnqiV1Vb+C+8Whikjj5 UfoSy1hEjQfh1g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:21 2025 by rpki-client