This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft File: adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json) Hash identifier: Bg4h9DPeCRFX73gDMjO0HZoWkVvmho8apWLDvKVprIs= Subject key identifier: 02:1E:44:1E:2F:F1:89:CE:4B:84:0C:79:25:76:8B:3D:CC:1A:41:41 Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29 Certificate issuer: /CN=69d47017b515ee214b28420edbedb3015c16ee29 Certificate serial: 019B2D0AD1AA411E2A669C6CF901E4C8829F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 16:00:42 +0000 Manifest this update: Wed 17 Dec 2025 16:00:42 +0000 Manifest next update: Thu 18 Dec 2025 16:00:42 +0000 Files and hashes: 1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: Gjk1SC0ZfFrKVdOJg3quFtNYCnBr5HglpzuV6i8XvmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:d1:aa:41:1e:2a:66:9c:6c:f9:01:e4:c8:82:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29 Validity Not Before: Dec 17 16:00:42 2025 GMT Not After : Dec 18 16:00:42 2025 GMT Subject: CN=021e441e2ff189ce4b840c7925768b3dcc1a4141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3a:fe:9d:ba:9a:ac:c9:81:93:e4:45:f2:74: e4:c5:48:6c:a9:cc:09:66:7d:36:7e:46:ce:8f:15: 52:bd:41:35:51:9d:32:c6:32:a3:6c:14:ad:13:8d: 4f:41:46:37:5e:28:5c:d4:47:98:07:82:3d:c8:87: 81:25:21:28:d2:14:57:e1:f5:03:5f:1b:cd:69:a5: eb:4b:6a:2a:f9:7d:69:98:00:1e:a7:08:09:82:50: 49:98:58:6f:25:10:08:1d:69:8b:4d:6d:bc:af:f3: 6a:fd:fe:bc:45:3f:89:4a:4c:5b:d9:3d:27:c0:8a: 69:35:6f:ad:59:c8:27:d0:ba:ee:fd:a0:c1:c6:9a: ef:7e:6f:23:5f:96:3f:89:27:ab:f3:97:a2:cf:cd: 2d:c7:c0:9b:77:8d:56:e3:51:1a:03:20:f2:fc:7f: 7e:0b:59:64:c5:10:fd:0e:37:d9:03:4c:8f:34:25: 6f:3c:2f:a1:23:77:fa:a2:7e:d0:0a:44:bb:2e:bb: 32:73:0f:6e:65:22:e8:69:81:50:11:8a:7c:09:1c: 86:6d:2b:57:db:01:a3:b9:85:c9:0d:33:ba:9c:8d: aa:77:8e:ad:b8:60:83:3f:26:42:27:8f:cf:a1:76: bc:d0:d8:7c:01:87:1a:54:a7:4d:10:93:ea:c2:c0: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1E:44:1E:2F:F1:89:CE:4B:84:0C:79:25:76:8B:3D:CC:1A:41:41 X509v3 Authority Key Identifier: keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0d:cf:f5:d0:5b:7a:67:07:0d:c9:a8:ef:2e:d3:62:ef:27: 12:5d:30:cb:2c:42:d8:ed:f2:df:de:8c:72:f8:9c:92:e9:2a: 77:c1:67:5f:82:cd:0c:bf:c1:74:fb:44:79:43:00:80:09:19: 6e:25:8e:73:f8:2d:07:66:c5:d1:19:b9:2d:88:59:7c:0a:7b: d1:34:2e:96:84:53:8d:d9:af:a2:ca:d7:a4:62:2e:6f:8b:fd: cf:43:d3:2e:0d:28:65:5d:1b:c8:50:99:a3:df:34:09:5a:fa: fb:14:b7:b3:c5:35:2d:74:56:14:0f:eb:3c:e0:f2:56:59:24: aa:e1:93:f9:d9:3b:3c:cc:2c:dd:9c:5c:6e:05:10:05:33:02: a1:2c:eb:42:6e:e1:9d:1a:88:e7:76:66:ca:e7:ff:d0:a4:d6: 45:61:7d:ac:66:1c:e4:d6:e6:9f:e7:0e:dc:81:c5:cb:5f:fc: a9:19:46:07:44:c9:ad:1e:ad:82:f4:8a:e6:9f:74:38:a4:fb: 7c:e1:4c:d1:45:be:9e:c6:9d:c2:13:bb:b2:3e:80:ea:63:df: a0:32:b9:7e:70:f5:0a:be:95:38:42:8c:e2:d3:ea:6f:f5:a9: 5b:4d:6a:99:cd:49:82:10:a2:0e:75:5f:5f:ce:a7:69:0f:e9: cb:48:11:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCtGqQR4qZpxs+QHkyIKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDQ3MDE3YjUxNWVlMjE0YjI4NDIwZWRiZWRiMzAxNWMx NmVlMjkwHhcNMjUxMjE3MTYwMDQyWhcNMjUxMjE4MTYwMDQyWjAzMTEwLwYDVQQD EygwMjFlNDQxZTJmZjE4OWNlNGI4NDBjNzkyNTc2OGIzZGNjMWE0MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dr+nbqarMmBk+RF8nTkxUhsqcwJ Zn02fkbOjxVSvUE1UZ0yxjKjbBStE41PQUY3Xihc1EeYB4I9yIeBJSEo0hRX4fUD XxvNaaXrS2oq+X1pmAAepwgJglBJmFhvJRAIHWmLTW28r/Nq/f68RT+JSkxb2T0n wIppNW+tWcgn0Lru/aDBxprvfm8jX5Y/iSer85eiz80tx8Cbd41W41EaAyDy/H9+ C1lkxRD9DjfZA0yPNCVvPC+hI3f6on7QCkS7Lrsycw9uZSLoaYFQEYp8CRyGbStX 2wGjuYXJDTO6nI2qd46tuGCDPyZCJ4/PoXa80Nh8AYcaVKdNEJPqwsB3GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIeRB4v8YnOS4QMeSV2iz3MGkFBMB8GA1UdIwQY MBaAFGnUcBe1Fe4hSyhCDtvtswFcFu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQt MjNiNGM5MzM1NmY4LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQtMjNiNGM5MzM1NmY4 LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ3P9dBb emcHDcmo7y7TYu8nEl0wyyxC2O3y396Mcvickukqd8FnX4LNDL/BdPtEeUMAgAkZ biWOc/gtB2bF0Rm5LYhZfAp70TQuloRTjdmvosrXpGIub4v9z0PTLg0oZV0byFCZ o980CVr6+xS3s8U1LXRWFA/rPODyVlkkquGT+dk7PMws3ZxcbgUQBTMCoSzrQm7h nRqI53Zmyuf/0KTWRWF9rGYc5Nbmn+cO3IHFy1/8qRlGB0TJrR6tgvSK5p90OKT7 fOFM0UW+nsadwhO7sj6A6mPfoDK5fnD1Cr6VOEKM4tPqb/WpW01qmc1JghCiDnVf X86naQ/py0gRrA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:40 2025 by rpki-client