This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft File: adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json) Hash identifier: ktpdsHIX4YyqorL4fvv8kJuEyOd7sEL19f6RwddVpt0= Subject key identifier: C8:E5:18:AA:CA:80:4D:69:79:BD:40:7E:BF:2C:7F:DB:A3:F7:E5:35 Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29 Certificate issuer: /CN=69d47017b515ee214b28420edbedb3015c16ee29 Certificate serial: 019B2EF933E002AD4F15CE117BA4B9E434B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 01:00:42 +0000 Manifest this update: Thu 18 Dec 2025 01:00:42 +0000 Manifest next update: Fri 19 Dec 2025 01:00:42 +0000 Files and hashes: 1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: c1xJWOUOkSRenmTJiERjAvmrvBf1Qf00G4G+id0DIjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:33:e0:02:ad:4f:15:ce:11:7b:a4:b9:e4:34:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29 Validity Not Before: Dec 18 01:00:42 2025 GMT Not After : Dec 19 01:00:42 2025 GMT Subject: CN=c8e518aaca804d6979bd407ebf2c7fdba3f7e535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:78:79:3e:d6:2e:5e:6c:e2:a2:f1:b2:b4: ee:01:60:08:c2:cf:91:d8:64:46:a1:95:7e:b7:88: d1:04:cd:54:bb:ef:9c:bd:ae:08:92:a8:79:ae:4b: 06:ee:a0:18:f2:59:44:a6:d3:60:7b:96:85:17:60: fc:db:cd:ea:9a:c7:86:73:30:e5:2d:6a:d1:7d:ca: 03:db:1a:0c:59:08:1b:b9:f3:79:4b:d7:be:92:57: f3:4d:9c:7f:80:4e:c6:cb:50:e5:eb:a2:6d:a5:8f: d9:e6:d8:34:00:fc:5c:fe:8b:f9:6c:24:dc:4f:f8: 11:ff:b7:98:d1:83:b4:ea:c4:ad:40:14:45:68:a4: 07:c4:6d:ed:ba:70:94:d3:48:7e:30:d0:e7:c5:fa: 71:70:88:8c:4d:62:5e:17:40:93:8f:be:34:24:78: 9c:76:8a:19:35:ca:54:3d:fb:c5:89:c2:bd:53:75: 03:a6:db:34:50:e4:49:da:93:f6:9b:d0:d7:5b:44: d8:44:1f:6b:c5:6c:a7:3f:5d:de:c5:3b:df:95:7e: ac:d6:d1:07:08:00:4f:8f:d7:b9:6c:47:a8:ef:d0: ca:4b:2b:c4:97:fd:97:f5:9f:52:81:9a:25:d0:f1: 8a:7d:f4:50:30:eb:c7:23:0e:c3:51:3c:3b:48:65: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E5:18:AA:CA:80:4D:69:79:BD:40:7E:BF:2C:7F:DB:A3:F7:E5:35 X509v3 Authority Key Identifier: keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1d:fa:27:41:55:ce:c6:e5:5d:80:19:be:bc:b7:d5:b7:2a: fc:b0:25:bb:77:ee:dd:5d:b0:c0:1d:e4:f2:42:46:63:52:1a: 36:c8:01:42:5b:e8:49:5a:61:92:93:ec:38:e4:85:e7:68:ba: 4e:ca:49:c6:df:96:85:98:50:a9:3b:70:56:87:21:2a:be:06: e8:69:82:31:84:f8:0e:68:66:78:1f:27:39:bb:09:27:bf:6b: 32:b0:ed:c1:6f:a1:f7:5c:44:48:b7:cb:44:24:19:ce:09:45: 88:1a:4f:fa:83:40:0e:b6:45:86:cc:e8:5f:5b:8d:0f:d8:55: 9c:9b:36:f5:de:f1:38:0e:1a:db:2d:b8:e0:52:b1:52:1c:5b: 45:ec:7b:5d:0a:8b:20:8b:1c:90:d3:db:13:43:e7:01:28:df: 77:54:14:59:bd:7d:32:99:3e:1f:74:84:a1:5e:6a:7e:00:c1: c4:11:7c:b4:aa:95:cd:76:7d:c4:e9:18:32:7e:78:19:b7:b0: 2d:fb:4d:cf:19:1f:84:8e:73:16:c1:03:63:b5:f2:cf:42:55: 0b:8e:bb:19:b5:86:6e:fe:95:f6:9a:eb:a9:4e:39:7c:9b:8e: 3b:63:4f:b7:c5:d9:ba:37:87:3b:dd:4b:ac:de:46:e2:9e:55: 82:08:ff:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+TPgAq1PFc4Re6S55DS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDQ3MDE3YjUxNWVlMjE0YjI4NDIwZWRiZWRiMzAxNWMx NmVlMjkwHhcNMjUxMjE4MDEwMDQyWhcNMjUxMjE5MDEwMDQyWjAzMTEwLwYDVQQD EyhjOGU1MThhYWNhODA0ZDY5NzliZDQwN2ViZjJjN2ZkYmEzZjdlNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnN4eT7WLl5s4qLxsrTuAWAIws+R 2GRGoZV+t4jRBM1Uu++cva4Ikqh5rksG7qAY8llEptNge5aFF2D8283qmseGczDl LWrRfcoD2xoMWQgbufN5S9e+klfzTZx/gE7Gy1Dl66JtpY/Z5tg0APxc/ov5bCTc T/gR/7eY0YO06sStQBRFaKQHxG3tunCU00h+MNDnxfpxcIiMTWJeF0CTj740JHic dooZNcpUPfvFicK9U3UDpts0UORJ2pP2m9DXW0TYRB9rxWynP13exTvflX6s1tEH CABPj9e5bEeo79DKSyvEl/2X9Z9SgZol0PGKffRQMOvHIw7DUTw7SGU82wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjlGKrKgE1peb1Afr8sf9uj9+U1MB8GA1UdIwQY MBaAFGnUcBe1Fe4hSyhCDtvtswFcFu4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQt MjNiNGM5MzM1NmY4LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC81MzdjZmMtMzcwYy00YjdiLTk4ZDQtMjNiNGM5MzM1NmY4 LzEvYWRSd0Y3VVY3aUZMS0VJTzItMnpBVndXN2lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJh36J0FV zsblXYAZvry31bcq/LAlu3fu3V2wwB3k8kJGY1IaNsgBQlvoSVphkpPsOOSF52i6 TspJxt+WhZhQqTtwVochKr4G6GmCMYT4DmhmeB8nObsJJ79rMrDtwW+h91xESLfL RCQZzglFiBpP+oNADrZFhszoX1uND9hVnJs29d7xOA4a2y244FKxUhxbRex7XQqL IIsckNPbE0PnASjfd1QUWb19Mpk+H3SEoV5qfgDBxBF8tKqVzXZ9xOkYMn54Gbew LftNzxkfhI5zFsEDY7Xyz0JVC467GbWGbv6V9prrqU45fJuOO2NPt8XZujeHO91L rN5G4p5Vggj/uA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:08:04 2025 by rpki-client