This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft File: Adm2sACkY7CVvgtY_HIaT6nApGY.mft (raw, json) Hash identifier: sDZ3l3Hxkidyx6z5zdjP8Diuu8bCQGDsenjUM2uaEbU= Subject key identifier: 6A:00:EC:6D:4E:27:A9:3C:36:94:C9:3B:31:14:47:0F:A8:CF:B0:C3 Authority key identifier: 01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66 Certificate issuer: /CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466 Certificate serial: 019AF1D232CA2EAE2CAB52DC50CC9990D313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft Manifest number: 0810 Signing time: Sat 06 Dec 2025 04:01:15 +0000 Manifest this update: Sat 06 Dec 2025 04:01:15 +0000 Manifest next update: Sun 07 Dec 2025 04:01:15 +0000 Files and hashes: 1: Adm2sACkY7CVvgtY_HIaT6nApGY.crl (hash: TU3AmLr3Q8d1UltBkkx0iTQJijULD+z3wigAv7SUmmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:32:ca:2e:ae:2c:ab:52:dc:50:cc:99:90:d3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d9b6b000a463b095be0b58fc721a4fa9c0a466 Validity Not Before: Dec 6 04:01:15 2025 GMT Not After : Dec 7 04:01:15 2025 GMT Subject: CN=6a00ec6d4e27a93c3694c93b3114470fa8cfb0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:60:df:60:41:8a:cc:48:60:9f:34:09:e2: ea:d7:f5:0f:e5:74:5c:20:f0:a1:35:4e:34:51:42: ca:c3:9f:69:5c:69:07:6c:cb:e6:be:b8:fd:ad:03: 0c:a7:2f:0d:84:e9:4e:2e:a9:71:f9:c8:b8:28:7a: e4:c9:24:23:00:fa:3e:26:68:af:31:02:06:fa:85: 33:f7:a9:ec:a8:b6:b7:ce:fd:a5:2f:d8:a5:a8:21: 8f:43:28:38:fa:b0:23:df:75:7b:99:30:38:7c:b5: 09:e2:eb:07:1a:ae:88:da:7b:47:9b:c0:d0:fc:56: 54:5b:56:57:7c:b7:8b:9a:8c:59:5d:59:f5:7d:eb: b4:18:ea:ba:32:ad:b1:6f:0c:7e:a8:d5:14:ac:19: e5:32:97:49:a9:b0:63:1c:9e:0c:c5:54:43:05:31: 10:e2:d0:e3:9d:ae:6b:c7:02:ac:32:0a:2d:36:0a: 2f:a3:c2:d9:32:9c:a7:b3:7d:b3:6a:4c:ab:5f:d7: 5e:5e:da:bd:09:7c:30:52:d5:e9:9c:da:2e:fd:54: 4f:79:50:6e:8a:90:73:fd:81:91:ab:19:ef:f1:d5: 0b:4c:56:d1:3f:e1:c4:27:6c:5a:48:97:c9:51:03: e2:33:18:70:1b:6e:29:43:3e:0a:27:ae:41:07:46: 5b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:EC:6D:4E:27:A9:3C:36:94:C9:3B:31:14:47:0F:A8:CF:B0:C3 X509v3 Authority Key Identifier: keyid:01:D9:B6:B0:00:A4:63:B0:95:BE:0B:58:FC:72:1A:4F:A9:C0:A4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Adm2sACkY7CVvgtY_HIaT6nApGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/7c04cc-c9ec-4d37-9cd3-d665ea8d3194/1/Adm2sACkY7CVvgtY_HIaT6nApGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:9e:fc:eb:d4:69:93:9d:55:b6:79:7a:e4:bc:f4:a1:9e:96: 03:16:f4:03:ab:f1:54:41:b2:f0:77:a1:dc:19:60:2f:cf:8a: 5c:12:aa:c1:91:9a:0a:9c:d3:17:90:c8:3f:60:61:a6:27:52: a9:b8:03:e9:e9:da:fe:5d:06:7e:13:83:a4:45:67:a1:b5:47: d5:d1:6a:9f:a2:02:8e:17:62:d6:40:5a:de:30:65:03:3a:29: f1:81:e0:3e:9a:c3:6f:60:b2:18:11:c9:18:90:0c:1e:41:52: 26:ab:af:f3:79:e0:a7:02:08:12:76:df:f2:05:67:a0:2b:a0: 8d:8f:5c:61:12:d3:61:af:6e:91:05:99:52:7d:03:3a:fc:a4: 48:9c:01:73:8a:5c:f1:c1:c6:e9:37:50:14:07:34:9e:a0:82: ff:21:56:1f:7e:94:72:3f:ab:16:31:2e:64:06:24:66:39:f3: 03:b1:df:5c:2d:c5:92:45:e8:6b:63:f0:d6:5c:98:67:71:5a: a0:9f:22:0d:cf:df:27:3f:b8:be:2b:79:9d:bb:4d:de:6e:80: 66:a2:b0:aa:26:4f:c5:8a:87:8e:49:00:a8:05:90:a1:fd:7b: 54:67:6f:f0:74:5a:e5:a1:d2:20:bb:2a:f6:29:fb:e8:5c:43: 59:bf:6f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jLKLq4sq1LcUMyZkNMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDliNmIwMDBhNDYzYjA5NWJlMGI1OGZjNzIxYTRmYTlj MGE0NjYwHhcNMjUxMjA2MDQwMTE1WhcNMjUxMjA3MDQwMTE1WjAzMTEwLwYDVQQD Eyg2YTAwZWM2ZDRlMjdhOTNjMzY5NGM5M2IzMTE0NDcwZmE4Y2ZiMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz21g32BBisxIYJ80CeLq1/UP5XRc IPChNU40UULKw59pXGkHbMvmvrj9rQMMpy8NhOlOLqlx+ci4KHrkySQjAPo+Jmiv MQIG+oUz96nsqLa3zv2lL9ilqCGPQyg4+rAj33V7mTA4fLUJ4usHGq6I2ntHm8DQ /FZUW1ZXfLeLmoxZXVn1feu0GOq6Mq2xbwx+qNUUrBnlMpdJqbBjHJ4MxVRDBTEQ 4tDjna5rxwKsMgotNgovo8LZMpyns32zakyrX9deXtq9CXwwUtXpnNou/VRPeVBu ipBz/YGRqxnv8dULTFbRP+HEJ2xaSJfJUQPiMxhwG24pQz4KJ65BB0ZbtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoA7G1OJ6k8NpTJOzEURw+oz7DDMB8GA1UdIwQY MBaAFAHZtrAApGOwlb4LWPxyGk+pwKRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRtMnNBQ2tZN0NWdmd0WV9ISWFUNm5BcEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83YzA0Y2MtYzllYy00ZDM3LTljZDMt ZDY2NWVhOGQzMTk0LzEvQWRtMnNBQ2tZN0NWdmd0WV9ISWFUNm5BcEdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83YzA0Y2MtYzllYy00ZDM3LTljZDMtZDY2NWVhOGQzMTk0 LzEvQWRtMnNBQ2tZN0NWdmd0WV9ISWFUNm5BcEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ7869Rp k51Vtnl65Lz0oZ6WAxb0A6vxVEGy8Heh3BlgL8+KXBKqwZGaCpzTF5DIP2BhpidS qbgD6ena/l0GfhODpEVnobVH1dFqn6ICjhdi1kBa3jBlAzop8YHgPprDb2CyGBHJ GJAMHkFSJquv83ngpwIIEnbf8gVnoCugjY9cYRLTYa9ukQWZUn0DOvykSJwBc4pc 8cHG6TdQFAc0nqCC/yFWH36Ucj+rFjEuZAYkZjnzA7HfXC3FkkXoa2Pw1lyYZ3Fa oJ8iDc/fJz+4vit5nbtN3m6AZqKwqiZPxYqHjkkAqAWQof17VGdv8HRa5aHSILsq 9in76FxDWb9vOg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:16 2025 by rpki-client