This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json) Hash identifier: Q/aP0Q1TwCzkAfEAUABe8EwjInQXzwmJQxO2fBPY9ss= Subject key identifier: CE:47:9F:8E:05:AA:E4:51:9D:6A:68:98:E3:C7:9D:C5:1F:A1:8E:57 Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970 Certificate serial: 019AF1D208F4D27758224FB7F94A822A4B29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft Manifest number: 05A1 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: DnU/0WZymnHxMmBXHCT3+PGDpcqXpG6/aAQPnafz2n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:08:f4:d2:77:58:22:4f:b7:f9:4a:82:2a:4b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7862c299d6088718760a96168272fccbfda970 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=ce479f8e05aae4519d6a6898e3c79dc51fa18e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:0b:7b:16:b4:04:81:94:88:f9:f7:94:1a: 01:89:d1:0c:dd:f7:74:e6:91:7a:46:77:6c:2b:5b: 00:6c:1a:1c:db:cb:71:4a:48:ca:4c:53:0d:09:14: e6:96:42:4f:0a:4e:b0:77:cf:b3:13:d6:97:f3:a8: cd:f5:fc:cc:a7:8c:f6:31:c2:c2:b8:39:4c:9a:e9: 97:f4:8e:f7:5e:9a:4f:28:ce:a1:aa:c2:cf:16:21: 44:93:60:67:a5:42:fa:f9:c1:f8:f3:63:3d:cc:76: d4:96:c5:60:73:1c:d3:7f:cd:a6:e8:48:31:b7:31: 0f:a3:45:55:7e:e5:27:32:3b:17:cb:f5:99:ce:c1: 8d:ba:4a:ce:51:a5:0d:c1:16:c3:2b:14:3e:5a:d3: e7:f4:57:0e:78:40:3d:d3:b1:8d:20:2c:9e:73:d5: 64:56:e7:93:dc:93:ef:a0:82:a4:db:27:4a:ea:e4: 63:19:68:72:7a:6d:86:5c:15:25:5e:71:4e:96:a8: e5:bd:ac:b2:58:6f:3d:99:ff:ff:08:be:0e:49:7b: 5d:89:ad:b3:d3:6d:d7:fd:a3:2c:84:39:09:b7:93: bc:5c:fc:b3:71:15:45:49:43:1c:9a:57:8a:a9:f7: 20:be:b9:66:1a:31:43:cc:3b:f0:c1:7c:47:4b:f0: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:47:9F:8E:05:AA:E4:51:9D:6A:68:98:E3:C7:9D:C5:1F:A1:8E:57 X509v3 Authority Key Identifier: keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b5:7d:9a:ea:9e:11:cc:ad:c3:ba:1e:a8:6f:08:c6:79:23: 63:9f:e0:b8:36:a4:b0:65:0b:28:36:c4:7c:33:f0:a4:1a:5e: 97:ae:2e:d8:5c:83:2f:6a:57:a5:d0:1c:c8:fc:19:57:b4:45: 7e:e7:b1:f4:41:2e:54:83:43:dd:59:51:0f:a6:d3:0d:3c:48: ad:13:f2:2f:de:27:26:2e:7c:45:42:d9:d2:e8:a0:f4:97:ac: fc:72:fb:43:0a:c5:0b:cf:2a:f0:96:37:4c:0a:8d:43:eb:61: f9:27:3a:3e:e6:f9:f3:d8:ef:c8:dc:6c:a2:97:9a:da:7a:a9: 9f:4e:14:c4:d2:d8:7e:df:b4:3f:3f:f4:d9:62:cc:a8:f5:7a: da:28:75:59:47:16:3d:0b:47:6b:f6:1e:5c:3f:78:90:ff:61: 95:c1:e7:7c:11:fb:4a:c5:e3:04:71:2e:47:f1:4d:d2:31:0a: 7b:a2:a6:ac:e0:4d:1e:05:ee:ba:f5:1a:a5:a6:95:c1:39:1e: 70:f7:1a:7d:c7:58:da:55:f5:32:ac:39:51:d3:4d:6f:e2:e5: 3f:5a:95:c0:53:f9:bf:fa:6d:19:b8:2b:2f:47:46:71:83:70: a8:1b:b0:62:e1:c7:b3:fa:d8:d6:d5:7b:fc:70:f3:1f:66:fb: 1d:ba:3e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gj00ndYIk+3+UqCKkspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzg2MmMyOTlkNjA4ODcxODc2MGE5NjE2ODI3MmZjY2Jm ZGE5NzAwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD EyhjZTQ3OWY4ZTA1YWFlNDUxOWQ2YTY4OThlM2M3OWRjNTFmYTE4ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BgLexa0BIGUiPn3lBoBidEM3fd0 5pF6RndsK1sAbBoc28txSkjKTFMNCRTmlkJPCk6wd8+zE9aX86jN9fzMp4z2McLC uDlMmumX9I73XppPKM6hqsLPFiFEk2BnpUL6+cH482M9zHbUlsVgcxzTf82m6Egx tzEPo0VVfuUnMjsXy/WZzsGNukrOUaUNwRbDKxQ+WtPn9FcOeEA907GNICyec9Vk VueT3JPvoIKk2ydK6uRjGWhyem2GXBUlXnFOlqjlvayyWG89mf//CL4OSXtdia2z 023X/aMshDkJt5O8XPyzcRVFSUMcmleKqfcgvrlmGjFDzDvwwXxHS/Ca9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5Hn44FquRRnWpomOPHncUfoY5XMB8GA1UdIwQY MBaAFKx4YsKZ1giHGHYKlhaCcvzL/alwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAt ZmEyZmFkZWIwMjgxLzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAtZmEyZmFkZWIwMjgx LzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrV9muqe Ecytw7oeqG8IxnkjY5/guDaksGULKDbEfDPwpBpel64u2FyDL2pXpdAcyPwZV7RF fuex9EEuVIND3VlRD6bTDTxIrRPyL94nJi58RULZ0uig9Jes/HL7QwrFC88q8JY3 TAqNQ+th+Sc6Pub589jvyNxsopea2nqpn04UxNLYft+0Pz/02WLMqPV62ih1WUcW PQtHa/YeXD94kP9hlcHnfBH7SsXjBHEuR/FN0jEKe6KmrOBNHgXuuvUapaaVwTke cPcafcdY2lX1Mqw5UdNNb+LlP1qVwFP5v/ptGbgrL0dGcYNwqBuwYuHHs/rY1tV7 /HDzH2b7Hbo+6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:46 2025 by rpki-client