This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json) Hash identifier: kFyrQaSyLpvrBmrojGKgR85UPH1qDwnuZh39JnQv4M4= Subject key identifier: C0:6E:D1:A4:D1:30:FA:97:7F:CC:E7:65:0D:90:E8:4C:68:E7:37:F6 Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61 Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961 Certificate serial: 019AF3C002065B1A625AC6951C9CF6A2548E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft Manifest number: 0B34 Signing time: Sat 06 Dec 2025 13:00:38 +0000 Manifest this update: Sat 06 Dec 2025 13:00:38 +0000 Manifest next update: Sun 07 Dec 2025 13:00:38 +0000 Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: 8AL3gxHXgxRMO7JRaLzxCbLkGCQ8Sn1QIi2kwpdvycY=) 2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:02:06:5b:1a:62:5a:c6:95:1c:9c:f6:a2:54:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961 Validity Not Before: Dec 6 13:00:38 2025 GMT Not After : Dec 7 13:00:38 2025 GMT Subject: CN=c06ed1a4d130fa977fcce7650d90e84c68e737f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:b3:82:74:bf:31:ec:b6:e2:a2:8a:a9:e4: 41:fe:6c:23:a3:23:85:49:51:8f:b1:ce:a3:04:e9: e9:87:f7:b4:82:70:69:c2:3c:ac:5c:08:a7:90:2a: 34:2f:12:21:57:f2:c6:bc:68:fb:ca:00:8b:ff:87: eb:eb:8a:ae:2f:78:4d:bd:92:4a:d4:79:a3:e4:d0: 1f:c4:f4:24:3f:0a:88:61:f2:73:5d:eb:16:8d:26: 62:e9:1d:8d:36:a5:33:ae:7f:89:2b:b3:ee:e9:e2: 46:ff:aa:09:d9:e5:cc:d7:68:e1:be:be:31:59:c8: 91:c2:77:c3:24:da:0c:a1:8c:5a:1e:b6:e9:a6:e8: 98:c7:91:0c:69:a7:2a:6e:23:47:38:e5:15:4b:d4: ae:6b:cf:e4:bc:35:1c:fd:47:d9:a2:05:d7:5f:53: f3:fd:bb:87:fe:2a:09:4f:fb:5d:d5:56:95:89:53: ab:94:20:20:37:98:4d:de:0e:fa:44:32:9c:38:2c: 98:ae:00:6b:c4:be:2f:c8:a4:cd:22:8b:71:06:f8: fc:03:c8:03:0a:d0:7f:e0:5d:5d:41:c8:67:43:e7: 22:de:df:66:a0:b4:bb:48:ad:52:6f:37:1a:5d:59: 8e:98:2c:07:00:01:41:80:81:c7:21:6f:ac:89:a2: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6E:D1:A4:D1:30:FA:97:7F:CC:E7:65:0D:90:E8:4C:68:E7:37:F6 X509v3 Authority Key Identifier: keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:96:bd:36:b2:15:09:45:d9:4e:68:37:b0:d4:0e:32:5c:a3: 04:ad:9c:ea:6e:c2:11:67:ce:9d:51:33:43:73:bf:31:a2:de: c5:2a:a0:81:f8:94:1b:d1:d3:74:88:f7:f1:78:ae:b0:da:88: 96:e8:6d:fc:16:82:58:9a:c9:93:ac:67:66:df:2d:11:2e:ee: dc:84:19:f7:64:6a:21:51:fb:ef:56:ea:53:82:c2:0a:0e:01: 3b:98:b6:f6:0e:02:69:81:29:ef:d1:d0:89:da:8f:59:90:8c: 0b:17:37:99:cb:d4:24:46:01:61:c2:32:24:2c:17:41:43:2c: 61:99:f6:4c:75:f6:30:96:b8:7a:dd:f6:43:19:7f:47:09:1e: 6b:00:5d:ce:20:55:73:28:c5:75:b8:42:18:40:15:98:f7:21: 0b:fa:5c:74:b2:b2:0d:f0:2c:ea:60:c7:03:4c:7f:60:df:20: 2b:ac:34:2d:f7:1f:76:86:4c:47:15:db:22:2a:bf:f3:43:fe: cd:29:1d:67:2e:e4:b6:1d:4a:09:02:80:cc:08:49:c3:02:10: e4:b0:41:9a:7e:f8:84:9c:06:c9:c9:06:70:5a:38:b3:d5:af: 22:ed:3b:95:7e:d7:5a:ca:10:48:27:72:21:53:82:53:eb:19: 0a:7b:5f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAIGWxpiWsaVHJz2olSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTI4MGIxMzM4ZjEyZmM2ZjYyMWM0YzkwNTYwYzdiYzU5 MDg5NjEwHhcNMjUxMjA2MTMwMDM4WhcNMjUxMjA3MTMwMDM4WjAzMTEwLwYDVQQD EyhjMDZlZDFhNGQxMzBmYTk3N2ZjY2U3NjUwZDkwZTg0YzY4ZTczN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rqzgnS/Mey24qKKqeRB/mwjoyOF SVGPsc6jBOnph/e0gnBpwjysXAinkCo0LxIhV/LGvGj7ygCL/4fr64quL3hNvZJK 1Hmj5NAfxPQkPwqIYfJzXesWjSZi6R2NNqUzrn+JK7Pu6eJG/6oJ2eXM12jhvr4x WciRwnfDJNoMoYxaHrbppuiYx5EMaacqbiNHOOUVS9Sua8/kvDUc/UfZogXXX1Pz /buH/ioJT/td1VaViVOrlCAgN5hN3g76RDKcOCyYrgBrxL4vyKTNIotxBvj8A8gD CtB/4F1dQchnQ+ci3t9moLS7SK1SbzcaXVmOmCwHAAFBgIHHIW+siaJaDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBu0aTRMPqXf8znZQ2Q6Exo5zf2MB8GA1UdIwQY MBaAFHESgLEzjxL8b2IcTJBWDHvFkIlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgt YmI0MTdlYzY0OWFiLzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgtYmI0MTdlYzY0OWFi LzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5a9NrIV CUXZTmg3sNQOMlyjBK2c6m7CEWfOnVEzQ3O/MaLexSqggfiUG9HTdIj38XiusNqI luht/BaCWJrJk6xnZt8tES7u3IQZ92RqIVH771bqU4LCCg4BO5i29g4CaYEp79HQ idqPWZCMCxc3mcvUJEYBYcIyJCwXQUMsYZn2THX2MJa4et32Qxl/RwkeawBdziBV cyjFdbhCGEAVmPchC/pcdLKyDfAs6mDHA0x/YN8gK6w0LfcfdoZMRxXbIiq/80P+ zSkdZy7kth1KCQKAzAhJwwIQ5LBBmn74hJwGyckGcFo4s9WvIu07lX7XWsoQSCdy IVOCU+sZCntfrA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:36 2025 by rpki-client