This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json) Hash identifier: tn+SLX+BpF2EWTaq/K3tovSM6exjdGPGo4efeRboXMs= Subject key identifier: 35:D6:C4:15:03:5D:16:47:09:F7:96:7B:9E:B8:60:DA:77:B7:8A:D1 Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1 Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1 Certificate serial: 019AF1D1AEBB3A923E875A8C43247F75D4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft Manifest number: 15E3 Signing time: Sat 06 Dec 2025 04:00:41 +0000 Manifest this update: Sat 06 Dec 2025 04:00:41 +0000 Manifest next update: Sun 07 Dec 2025 04:00:41 +0000 Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: ggf6DSJAtre9TKKLRkzsNcPwPiWjIuRq6q1v6KkoTng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ae:bb:3a:92:3e:87:5a:8c:43:24:7f:75:d4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1 Validity Not Before: Dec 6 04:00:41 2025 GMT Not After : Dec 7 04:00:41 2025 GMT Subject: CN=35d6c415035d164709f7967b9eb860da77b78ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:3a:cd:ee:d9:73:1a:cc:cd:bb:64:a0:e6: 4e:89:de:6e:2c:13:90:ff:c8:01:a5:86:32:c0:20: 58:c3:f8:a8:76:47:79:55:60:28:bb:60:d8:48:50: ba:aa:a2:db:08:3b:3f:2e:45:e5:f8:57:ed:57:38: d0:83:a7:f3:6d:93:34:2f:37:6b:1a:1e:8b:c5:c1: 22:ab:e4:88:19:18:0e:1d:c3:3b:4b:87:bb:f0:a0: 28:cf:c8:df:44:47:0d:dd:bb:62:a0:a7:7e:28:c5: a5:52:99:fc:2b:1e:18:51:a2:c4:a5:71:09:8d:cb: 8d:2e:fc:d7:7f:95:11:d1:88:60:fc:46:bf:9a:ae: 7f:e3:da:e1:53:76:13:1a:f8:39:82:af:45:65:e5: f1:fb:c0:bd:40:67:20:04:48:1d:61:70:14:6b:61: 1c:3f:a1:f3:b5:d1:c4:da:b2:5a:a2:78:cd:b7:95: c3:f2:54:80:44:2f:1e:82:11:94:af:23:88:f4:9d: d6:82:13:de:ae:e7:cf:00:f1:45:3b:2d:9a:40:59: a6:96:07:03:20:0f:e1:9f:8a:89:8e:75:d1:3a:12: fd:eb:1d:7f:21:a1:dc:a4:80:9c:4f:ce:bc:93:e4: 52:c9:56:a9:6a:61:a0:34:d8:f5:98:8e:c6:d8:22: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D6:C4:15:03:5D:16:47:09:F7:96:7B:9E:B8:60:DA:77:B7:8A:D1 X509v3 Authority Key Identifier: keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:93:68:e0:90:22:db:1d:05:8b:56:e1:47:00:22:ca:6f:3a: 83:f3:0a:73:03:b5:8b:37:f8:73:bc:a5:24:34:2b:af:26:c3: 73:b0:60:17:2d:b4:4b:b8:40:8a:1a:2f:6c:66:84:53:46:44: 80:ff:fb:c1:ac:16:87:8c:b1:1c:a8:4e:01:28:13:41:e5:d1: e3:6e:67:54:e7:55:7a:63:32:24:e0:74:27:80:14:81:de:97: 4a:d3:93:61:45:91:89:2c:ef:67:61:df:60:24:2e:71:c1:d8: 76:5c:eb:ea:64:13:9e:8d:b1:5a:df:d9:2c:80:38:3f:bf:b7: 8f:e8:99:8d:16:03:82:cb:08:52:36:93:99:25:a2:81:56:da: a9:ab:34:bc:05:6e:48:d1:15:2f:93:3a:c5:c0:d2:26:b3:f9: 19:61:ba:b3:4c:e4:73:96:0a:c1:f8:0f:b3:b1:74:05:54:c9: 88:04:5f:a5:ce:80:fa:12:87:b6:1b:26:c1:18:75:d5:90:26: d8:13:0b:a6:a0:7a:1b:71:98:3d:29:9d:10:db:1b:73:69:92: 65:b5:fe:d1:0d:41:34:89:79:9f:1f:03:51:70:a8:02:f3:34: ec:7e:04:34:ea:d0:3a:f1:a4:6d:56:39:45:32:75:68:f2:fd: cc:16:b9:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a67OpI+h1qMQyR/ddT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgzNmUzOTZiYzUwNjQ0MzYwNmI5ZmQ3MzM3YTkyMGU3 MWRlZDEwHhcNMjUxMjA2MDQwMDQxWhcNMjUxMjA3MDQwMDQxWjAzMTEwLwYDVQQD EygzNWQ2YzQxNTAzNWQxNjQ3MDlmNzk2N2I5ZWI4NjBkYTc3Yjc4YWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr886ze7ZcxrMzbtkoOZOid5uLBOQ /8gBpYYywCBYw/iodkd5VWAou2DYSFC6qqLbCDs/LkXl+FftVzjQg6fzbZM0Lzdr Gh6LxcEiq+SIGRgOHcM7S4e78KAoz8jfREcN3btioKd+KMWlUpn8Kx4YUaLEpXEJ jcuNLvzXf5UR0Yhg/Ea/mq5/49rhU3YTGvg5gq9FZeXx+8C9QGcgBEgdYXAUa2Ec P6HztdHE2rJaonjNt5XD8lSARC8eghGUryOI9J3WghPerufPAPFFOy2aQFmmlgcD IA/hn4qJjnXROhL96x1/IaHcpICcT868k+RSyVapamGgNNj1mI7G2CJ6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXWxBUDXRZHCfeWe564YNp3t4rRMB8GA1UdIwQY MBaAFGw4NuOWvFBkQ2Brn9czepIOcd7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMt ZWI2YjEzYzVlMjY4LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMtZWI2YjEzYzVlMjY4 LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJNo4JAi 2x0Fi1bhRwAiym86g/MKcwO1izf4c7ylJDQrrybDc7BgFy20S7hAihovbGaEU0ZE gP/7wawWh4yxHKhOASgTQeXR425nVOdVemMyJOB0J4AUgd6XStOTYUWRiSzvZ2Hf YCQuccHYdlzr6mQTno2xWt/ZLIA4P7+3j+iZjRYDgssIUjaTmSWigVbaqas0vAVu SNEVL5M6xcDSJrP5GWG6s0zkc5YKwfgPs7F0BVTJiARfpc6A+hKHthsmwRh11ZAm 2BMLpqB6G3GYPSmdENsbc2mSZbX+0Q1BNIl5nx8DUXCoAvM07H4ENOrQOvGkbVY5 RTJ1aPL9zBa5iA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:43 2025 by rpki-client