This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft File: rIpdP4uUYpQnOEoSDHdHYFY611o.mft (raw, json) Hash identifier: YotGePZD2F7UK2WJBmQS43to0eP1YRG00mLCFfOPfNc= Subject key identifier: C6:8A:1D:E7:DB:FE:D2:72:7A:12:8B:3B:B1:79:D1:C9:1B:6D:EE:9A Authority key identifier: AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A Certificate issuer: /CN=ac8a5d3f8b94629427384a120c774760563ad75a Certificate serial: 019AF50B1A9FCD1F46704252EA8E20C9470D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft Manifest number: 1140 Signing time: Sat 06 Dec 2025 19:02:16 +0000 Manifest this update: Sat 06 Dec 2025 19:02:16 +0000 Manifest next update: Sun 07 Dec 2025 19:02:16 +0000 Files and hashes: 1: rIpdP4uUYpQnOEoSDHdHYFY611o.crl (hash: J05higY0E2mwSuLxWjRGms1fH/49y7Svv61+3y/tw8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:1a:9f:cd:1f:46:70:42:52:ea:8e:20:c9:47:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a5d3f8b94629427384a120c774760563ad75a Validity Not Before: Dec 6 19:02:16 2025 GMT Not After : Dec 7 19:02:16 2025 GMT Subject: CN=c68a1de7dbfed2727a128b3bb179d1c91b6dee9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:33:b6:36:fd:6e:67:dd:29:d5:34:42:33: 30:26:04:68:7f:7f:4d:45:88:0c:b2:59:fc:45:40: de:c0:dc:40:d7:6c:ca:2c:d1:7a:31:82:7e:a1:80: f0:bf:c5:b7:61:41:f9:75:65:26:5c:a9:f9:57:96: 19:80:24:af:5c:31:b5:18:0e:06:16:0a:36:58:8f: a0:9b:2a:db:db:c1:ac:f4:f7:ca:91:d8:05:f9:8f: d2:31:5f:08:5c:0a:d6:69:de:f0:0d:23:c7:58:78: 9d:0b:87:af:cf:fe:7f:bf:39:87:9b:8c:d3:f0:40: af:a4:cc:1b:f7:de:7d:f0:a4:37:2c:9f:09:14:b0: b4:0f:b3:00:f1:12:10:0b:1e:93:49:e8:08:db:ae: 3b:74:80:91:d9:9b:03:cd:18:4a:92:16:5f:92:29: 48:9c:3b:9e:7e:ff:2b:af:67:3c:e9:81:f6:30:97: f3:ca:16:b6:76:f3:8a:e2:41:00:1b:1a:6c:f5:3f: c8:da:d4:e2:93:fd:70:a2:e9:a5:80:5f:5c:7c:3d: 9b:9f:62:a3:aa:9b:ed:07:2a:d1:d4:e0:46:7c:c5: e3:a5:8a:8d:61:c4:15:03:40:a9:c8:93:b6:d5:0f: 16:b9:0c:e3:9a:40:a7:41:0e:d6:fb:ba:9d:a6:a6: 5b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:1D:E7:DB:FE:D2:72:7A:12:8B:3B:B1:79:D1:C9:1B:6D:EE:9A X509v3 Authority Key Identifier: keyid:AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ac:a1:e5:ce:37:ca:8e:57:2e:f8:84:ea:b7:85:15:38:bc: 8e:ef:d6:21:b2:07:45:48:2b:b7:7c:57:0e:28:e8:2a:4a:66: 6a:3d:9d:1b:06:3c:a7:e3:57:dc:2a:b8:39:a8:2c:42:44:05: 6b:95:43:78:e0:dd:bb:c1:36:62:bd:01:6d:48:ee:6b:f0:b1: 40:e9:9f:f5:67:a6:f1:c4:8a:25:a2:24:ee:18:ac:71:fd:df: f7:e2:f6:94:90:c2:e0:a9:d0:b4:13:34:eb:65:9b:6d:3a:ae: a6:6b:94:c2:05:5f:30:6f:77:4b:10:35:5b:76:47:ad:3a:a6: 44:fb:bb:c4:90:9a:26:9c:85:8f:95:92:30:08:11:cc:76:26: bc:be:9f:e1:87:e2:a7:ba:a9:0e:c4:e2:2e:61:43:d8:60:1c: c9:cc:29:6d:f4:a9:5b:59:c9:df:12:d6:03:89:61:08:08:01: 92:23:c8:10:32:a1:5c:c7:02:45:0e:d3:8c:4e:3c:40:8a:75: 96:2c:24:37:31:9e:6f:f0:77:32:f3:3d:ca:94:4d:69:19:f5: f4:9b:3c:03:82:97:45:74:c0:25:d0:67:5f:61:99:76:1e:5b: 31:85:33:c6:b1:63:e4:53:ef:2f:f1:64:e8:8f:aa:1e:e5:a5: 30:d8:56:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CxqfzR9GcEJS6o4gyUcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGE1ZDNmOGI5NDYyOTQyNzM4NGExMjBjNzc0NzYwNTYz YWQ3NWEwHhcNMjUxMjA2MTkwMjE2WhcNMjUxMjA3MTkwMjE2WjAzMTEwLwYDVQQD EyhjNjhhMWRlN2RiZmVkMjcyN2ExMjhiM2JiMTc5ZDFjOTFiNmRlZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1Mztjb9bmfdKdU0QjMwJgRof39N RYgMsln8RUDewNxA12zKLNF6MYJ+oYDwv8W3YUH5dWUmXKn5V5YZgCSvXDG1GA4G Fgo2WI+gmyrb28Gs9PfKkdgF+Y/SMV8IXArWad7wDSPHWHidC4evz/5/vzmHm4zT 8ECvpMwb99598KQ3LJ8JFLC0D7MA8RIQCx6TSegI2647dICR2ZsDzRhKkhZfkilI nDuefv8rr2c86YH2MJfzyha2dvOK4kEAGxps9T/I2tTik/1woumlgF9cfD2bn2Kj qpvtByrR1OBGfMXjpYqNYcQVA0CpyJO21Q8WuQzjmkCnQQ7W+7qdpqZb/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaKHefb/tJyehKLO7F50ckbbe6aMB8GA1UdIwQY MBaAFKyKXT+LlGKUJzhKEgx3R2BWOtdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklwZFA0dVVZcFFuT0VvU0RIZEhZRlk2MTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lMjRiYjYtNzM2My00NDQyLWI1Njgt YzgwZGVjODdjZDA5LzEvcklwZFA0dVVZcFFuT0VvU0RIZEhZRlk2MTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lMjRiYjYtNzM2My00NDQyLWI1NjgtYzgwZGVjODdjZDA5 LzEvcklwZFA0dVVZcFFuT0VvU0RIZEhZRlk2MTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfayh5c43 yo5XLviE6reFFTi8ju/WIbIHRUgrt3xXDijoKkpmaj2dGwY8p+NX3Cq4OagsQkQF a5VDeODdu8E2Yr0BbUjua/CxQOmf9Wem8cSKJaIk7hiscf3f9+L2lJDC4KnQtBM0 62WbbTqupmuUwgVfMG93SxA1W3ZHrTqmRPu7xJCaJpyFj5WSMAgRzHYmvL6f4Yfi p7qpDsTiLmFD2GAcycwpbfSpW1nJ3xLWA4lhCAgBkiPIEDKhXMcCRQ7TjE48QIp1 liwkNzGeb/B3MvM9ypRNaRn19Js8A4KXRXTAJdBnX2GZdh5bMYUzxrFj5FPvL/Fk 6I+qHuWlMNhWZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:21:16 2025 by rpki-client