This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft File: rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json) Hash identifier: IEwNiqYLlhNMYvie6PAxgygMfI6URmPjQ6x8BCU+zp8= Subject key identifier: 93:A2:2A:1F:FD:4B:6B:22:0A:12:6B:64:1F:5F:73:15:C9:2B:A4:29 Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42 Certificate issuer: /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42 Certificate serial: 019AF208BA61EB6DB586E70134CFD7F88BC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft Manifest number: 0677 Signing time: Sat 06 Dec 2025 05:00:49 +0000 Manifest this update: Sat 06 Dec 2025 05:00:49 +0000 Manifest next update: Sun 07 Dec 2025 05:00:49 +0000 Files and hashes: 1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: rUXx/l5lsGz562Bi7saY7pOjV/4l1qGd/ucdfQrlblQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ba:61:eb:6d:b5:86:e7:01:34:cf:d7:f8:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42 Validity Not Before: Dec 6 05:00:49 2025 GMT Not After : Dec 7 05:00:49 2025 GMT Subject: CN=93a22a1ffd4b6b220a126b641f5f7315c92ba429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cb:cc:cf:fc:44:5d:89:06:c4:25:17:d3:23: 9d:3c:2d:5e:eb:2d:d8:ed:4b:0e:ea:1b:c6:eb:6e: a6:87:15:d9:83:d5:da:ed:15:a1:ff:6c:7b:97:3c: d4:b3:82:4e:67:78:db:b1:ed:f7:35:9b:36:41:0f: 29:bc:2f:46:06:fe:a9:aa:37:80:cb:88:41:09:68: e8:2d:90:b8:32:23:29:69:50:c4:cd:57:cb:f6:b6: ef:ac:0f:da:e2:ff:ed:65:6d:6e:9f:8f:bd:27:22: 00:8e:d0:36:6b:82:70:80:e4:a1:15:f8:6f:f1:7b: b2:57:3f:5a:69:51:a5:13:d8:e3:f9:12:45:77:1e: 55:f8:7c:e6:6d:c7:39:e7:8d:0f:a3:04:12:c2:0b: 0f:0d:d8:d4:e9:c9:34:65:e9:b6:6f:0b:30:94:b7: e0:1e:d0:36:4e:7a:b1:f6:af:5c:65:69:e7:d2:1a: f8:01:6c:96:af:7a:50:e2:07:b8:69:83:fb:0f:b7: 21:f6:90:fc:77:9e:6d:78:3d:51:0a:ab:25:e6:37: f7:02:00:12:a7:e9:66:a6:43:a0:8b:8e:22:87:bb: b7:39:56:ad:5b:d8:3f:50:e6:70:1c:94:e9:a8:a1: b6:74:0f:c5:04:7a:43:21:3f:22:eb:22:29:f1:73: 9d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A2:2A:1F:FD:4B:6B:22:0A:12:6B:64:1F:5F:73:15:C9:2B:A4:29 X509v3 Authority Key Identifier: keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:d2:62:8d:61:2c:79:37:ee:c5:0a:f2:5c:c7:d8:cf:74: 0a:a6:75:16:5e:a6:3e:ca:b7:47:18:ed:d9:88:a5:b8:25:e4: 20:25:2e:de:57:d9:f4:27:ff:c8:86:65:d2:8f:5e:fb:5e:51: ff:57:8e:58:22:34:c1:58:db:c5:f3:99:12:0a:15:7e:c1:b8: 95:ba:d1:91:ac:d6:ab:ac:62:5c:95:a0:b5:d5:bd:85:4f:6d: 12:d4:f8:b9:f2:d9:7f:84:af:ba:81:a9:b4:5c:08:01:74:68: 9d:2b:c1:76:df:ee:01:9e:61:4d:f5:41:73:b7:a3:19:d4:b1: e4:fd:be:6f:63:c3:e0:25:c9:d0:e2:dc:b3:ad:73:58:f5:3f: 01:45:b3:68:de:6c:b4:84:b2:af:24:af:12:14:31:82:14:5d: 36:ce:43:dc:7e:d2:29:9f:77:39:a4:55:d0:65:18:43:4e:b7: 86:35:5e:4c:7d:37:fc:0d:81:d5:b3:84:32:f3:fd:fb:e2:4a: 4d:0f:49:07:d2:f4:9f:82:f0:54:9f:0a:0b:1a:c2:1a:37:61: 48:7f:fa:98:99:f0:40:67:99:9f:04:40:c8:1a:3f:05:8e:9b: c8:86:30:89:6f:9c:9c:34:97:0d:ea:55:00:ad:29:19:4f:19: 89:da:bb:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLph6221hucBNM/X+IvAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMzY5MDkzYTMyZDFiN2UwZWJiZTMyNDQ1MWM1OGQ3NDhh ZWNkNDIwHhcNMjUxMjA2MDUwMDQ5WhcNMjUxMjA3MDUwMDQ5WjAzMTEwLwYDVQQD Eyg5M2EyMmExZmZkNGI2YjIyMGExMjZiNjQxZjVmNzMxNWM5MmJhNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78vMz/xEXYkGxCUX0yOdPC1e6y3Y 7UsO6hvG626mhxXZg9Xa7RWh/2x7lzzUs4JOZ3jbse33NZs2QQ8pvC9GBv6pqjeA y4hBCWjoLZC4MiMpaVDEzVfL9rbvrA/a4v/tZW1un4+9JyIAjtA2a4JwgOShFfhv 8XuyVz9aaVGlE9jj+RJFdx5V+Hzmbcc5540PowQSwgsPDdjU6ck0Zem2bwswlLfg HtA2Tnqx9q9cZWnn0hr4AWyWr3pQ4ge4aYP7D7ch9pD8d55teD1RCqsl5jf3AgAS p+lmpkOgi44ih7u3OVatW9g/UOZwHJTpqKG2dA/FBHpDIT8i6yIp8XOdfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOiKh/9S2siChJrZB9fcxXJK6QpMB8GA1UdIwQY MBaAFK02kJOjLRt+DrvjJEUcWNdIrs1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclRhUWs2TXRHMzRPdS1Na1JSeFkxMGl1elVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYjIyMmUtYTRiMy00ZmJlLTgzOWYt MzYzYTU1OGUxOWJlLzEvclRhUWs2TXRHMzRPdS1Na1JSeFkxMGl1elVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8zYjIyMmUtYTRiMy00ZmJlLTgzOWYtMzYzYTU1OGUxOWJl LzEvclRhUWs2TXRHMzRPdS1Na1JSeFkxMGl1elVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyPSYo1h LHk37sUK8lzH2M90CqZ1Fl6mPsq3Rxjt2YiluCXkICUu3lfZ9Cf/yIZl0o9e+15R /1eOWCI0wVjbxfOZEgoVfsG4lbrRkazWq6xiXJWgtdW9hU9tEtT4ufLZf4SvuoGp tFwIAXRonSvBdt/uAZ5hTfVBc7ejGdSx5P2+b2PD4CXJ0OLcs61zWPU/AUWzaN5s tISyrySvEhQxghRdNs5D3H7SKZ93OaRV0GUYQ063hjVeTH03/A2B1bOEMvP9++JK TQ9JB9L0n4LwVJ8KCxrCGjdhSH/6mJnwQGeZnwRAyBo/BY6byIYwiW+cnDSXDepV AK0pGU8Zidq7eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:14 2025 by rpki-client