This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json) Hash identifier: pJyMbcmE4UAYCbdxlMJluoxzF7k0YX/m4HNbx8t4Jpw= Subject key identifier: 5E:9E:AD:D6:79:6B:BC:57:CE:85:CC:29:41:12:74:63:1A:C7:0B:84 Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a Certificate serial: 019AF12DEDDBAE24604301CA9B5A21E2F558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft Manifest number: 1185 Signing time: Sat 06 Dec 2025 01:01:50 +0000 Manifest this update: Sat 06 Dec 2025 01:01:50 +0000 Manifest next update: Sun 07 Dec 2025 01:01:50 +0000 Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: tmjmWparkEs2fdSk0RabFYEhCmNHG1wol7ywXue04L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:ed:db:ae:24:60:43:01:ca:9b:5a:21:e2:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a Validity Not Before: Dec 6 01:01:50 2025 GMT Not After : Dec 7 01:01:50 2025 GMT Subject: CN=5e9eadd6796bbc57ce85cc29411274631ac70b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:49:ad:11:cc:6a:d0:0b:31:34:01:f6:6b:16: 7d:e4:64:d1:5f:1c:82:69:35:79:59:b8:d8:e2:9e: e6:1e:98:f6:23:dd:6e:3a:88:a8:91:10:88:f5:98: 9d:a5:04:cd:36:b5:af:39:1c:01:bf:03:85:ce:01: f5:89:85:b3:12:16:0b:8f:6b:16:ac:c8:87:d6:05: ca:c2:24:0f:74:c3:5c:3b:ad:1b:80:9b:0d:f0:1f: af:19:82:fe:7a:16:45:ae:a4:b3:29:78:7a:bf:bc: 19:6e:33:57:da:d2:87:b3:f3:02:0e:1f:dc:09:f2: e8:73:39:0a:37:08:90:33:59:d0:a5:1c:bc:98:d1: 12:2c:7d:2c:a1:9c:8c:5f:81:37:86:42:cd:a8:c8: 7a:4e:a3:3f:67:e7:37:03:cd:df:15:34:b8:ed:33: 18:a0:7c:ac:12:08:95:2b:3c:95:17:36:11:3b:28: 07:f1:ca:fd:cf:9f:3a:45:66:f7:92:40:d5:ea:cd: ae:14:21:73:2c:a1:1a:ad:f6:3f:dd:d9:31:a8:05: 6f:ab:a5:0d:b6:33:9b:4d:6c:fc:77:04:aa:a9:2e: 20:4f:23:66:26:11:39:ba:9b:92:10:ec:af:db:c2: 93:ef:c3:90:05:f0:e3:18:70:a3:bf:9c:0f:2a:3f: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9E:AD:D6:79:6B:BC:57:CE:85:CC:29:41:12:74:63:1A:C7:0B:84 X509v3 Authority Key Identifier: keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:14:87:70:ea:c5:40:a5:b6:db:31:4d:e0:f0:d0:c3:a1: 41:d6:04:2d:1f:f7:32:3a:c7:e3:72:4e:73:1c:78:3b:0a:96: 30:2a:40:43:ff:c2:68:a0:4d:b7:2f:0e:9f:45:7e:27:4f:f4: a7:cf:b0:54:57:c3:0d:4e:67:7c:42:0a:15:50:d1:66:fa:dc: 04:cd:95:03:06:3d:b7:b1:df:f5:20:8e:a8:5d:f3:a0:f7:97: 69:23:e8:d8:3b:3c:e7:58:bd:a9:6a:c7:75:57:35:e7:c9:f6: 22:ff:2d:98:17:93:5b:43:59:86:1b:0f:ee:01:10:fc:2e:e3: 4d:cc:a9:83:a1:92:34:9c:80:9c:a3:03:fc:bd:a5:43:a7:d7: 5f:80:be:a2:0f:44:84:87:f9:58:7b:8c:96:b3:1a:27:12:e3: cc:d1:6c:10:e4:1c:14:d5:18:b9:c0:78:28:f7:f0:2a:35:c1: 4b:f3:4a:94:ef:25:61:63:7a:42:ea:87:89:f6:0a:fb:b6:17: 9c:d9:44:ec:09:df:9f:54:83:3f:9e:13:9b:44:9b:12:9d:d4: 4d:28:d5:9e:19:9a:f4:d7:2e:27:12:07:44:ac:88:be:64:77: 48:31:ec:67:8b:f6:0b:12:ee:54:a5:68:f8:9d:8a:e8:da:27: 0a:07:79:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLe3briRgQwHKm1oh4vVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNGQ5ZDhiMDUwNDU1NTY3NmI5MThlZTM5MWRjMTUzYTk4 N2UzOGEwHhcNMjUxMjA2MDEwMTUwWhcNMjUxMjA3MDEwMTUwWjAzMTEwLwYDVQQD Eyg1ZTllYWRkNjc5NmJiYzU3Y2U4NWNjMjk0MTEyNzQ2MzFhYzcwYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEmtEcxq0AsxNAH2axZ95GTRXxyC aTV5WbjY4p7mHpj2I91uOoiokRCI9ZidpQTNNrWvORwBvwOFzgH1iYWzEhYLj2sW rMiH1gXKwiQPdMNcO60bgJsN8B+vGYL+ehZFrqSzKXh6v7wZbjNX2tKHs/MCDh/c CfLoczkKNwiQM1nQpRy8mNESLH0soZyMX4E3hkLNqMh6TqM/Z+c3A83fFTS47TMY oHysEgiVKzyVFzYROygH8cr9z586RWb3kkDV6s2uFCFzLKEarfY/3dkxqAVvq6UN tjObTWz8dwSqqS4gTyNmJhE5upuSEOyv28KT78OQBfDjGHCjv5wPKj9AEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6erdZ5a7xXzoXMKUESdGMaxwuEMB8GA1UdIwQY MBaAFDJNnYsFBFVWdrkY7jkdwVOph+OKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWsyZGl3VUVWVloydVJqdU9SM0JVNm1INDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xNmViMDMtNDE0YS00ODUyLTgxZGEt ZGIyNjFhYTQ2ZjIxLzEvTWsyZGl3VUVWVloydVJqdU9SM0JVNm1INDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xNmViMDMtNDE0YS00ODUyLTgxZGEtZGIyNjFhYTQ2ZjIx LzEvTWsyZGl3VUVWVloydVJqdU9SM0JVNm1INDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO8Uh3Dq xUClttsxTeDw0MOhQdYELR/3MjrH43JOcxx4OwqWMCpAQ//CaKBNty8On0V+J0/0 p8+wVFfDDU5nfEIKFVDRZvrcBM2VAwY9t7Hf9SCOqF3zoPeXaSPo2Ds851i9qWrH dVc158n2Iv8tmBeTW0NZhhsP7gEQ/C7jTcypg6GSNJyAnKMD/L2lQ6fXX4C+og9E hIf5WHuMlrMaJxLjzNFsEOQcFNUYucB4KPfwKjXBS/NKlO8lYWN6QuqHifYK+7YX nNlE7Anfn1SDP54Tm0SbEp3UTSjVnhma9NcuJxIHRKyIvmR3SDHsZ4v2CxLuVKVo +J2K6NonCgd5kw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:59 2025 by rpki-client