This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json) Hash identifier: Ou5Otadz01YVsU87A3m0radC72j13vkl52vBSp2n8Vg= Subject key identifier: 8F:41:50:D6:13:F0:04:DB:E4:AD:9E:F7:C1:3A:13:72:CC:39:BE:E8 Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65 Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865 Certificate serial: 019B3B34FB8404260AB213A6E45F14596218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft Manifest number: 0683 Signing time: Sat 20 Dec 2025 10:01:26 +0000 Manifest this update: Sat 20 Dec 2025 10:01:26 +0000 Manifest next update: Sun 21 Dec 2025 10:01:26 +0000 Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: g8FlgFdV+jOB2CdYZcjyEO55TBJR200P7j82qMnH79w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:fb:84:04:26:0a:b2:13:a6:e4:5f:14:59:62:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865 Validity Not Before: Dec 20 10:01:26 2025 GMT Not After : Dec 21 10:01:26 2025 GMT Subject: CN=8f4150d613f004dbe4ad9ef7c13a1372cc39bee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:ba:8e:6b:de:b3:58:84:07:3e:cd:cb:8a: 0a:64:45:fc:3f:d7:a0:56:b6:49:a7:48:35:af:2f: bd:3d:2b:16:17:f3:45:bf:27:1b:89:47:8f:98:d4: 47:e0:e3:54:2c:6b:c2:7d:ec:32:e8:07:5c:9c:57: bb:04:02:d1:6e:e0:d1:eb:38:12:b7:38:ca:4a:56: 24:ef:6d:70:dd:e1:e1:58:4f:c1:47:2c:8c:a9:62: f5:b8:f7:fb:73:bd:b0:bb:23:f0:69:e2:8e:2d:c4: 66:52:3a:a2:c3:34:05:e2:ed:26:f4:06:84:99:d4: 54:54:44:53:76:9e:55:c1:69:03:2c:64:f0:3f:8d: c4:96:e3:83:1d:fa:e8:ea:cc:5b:0c:0e:77:35:98: c0:04:71:d6:cd:c4:e8:1a:ce:6f:b2:cb:d0:47:cc: 4d:72:d0:b5:b5:12:4e:df:f7:84:b0:5f:df:f0:86: d0:62:de:2e:bd:09:f8:ac:59:ba:ac:df:bd:2b:2e: ae:86:6d:77:8d:b4:b7:9e:2b:f0:4a:b0:53:f3:be: 04:74:10:63:cb:87:ac:a5:b9:bf:b8:e7:c8:63:6a: 4b:4d:93:23:1e:14:d1:90:66:a9:98:41:a5:c9:5a: e3:9c:21:11:bb:ac:cd:1d:e2:fc:a7:78:92:c5:86: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:50:D6:13:F0:04:DB:E4:AD:9E:F7:C1:3A:13:72:CC:39:BE:E8 X509v3 Authority Key Identifier: keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:85:fa:3c:5a:a0:bb:11:74:ad:9d:15:e9:65:f0:dd:72:cb: 12:10:b4:a6:fd:5f:a1:f4:64:66:1c:ce:35:a1:bf:56:fe:c5: 67:05:2d:1e:02:32:e8:91:7a:01:12:2a:d1:65:80:66:10:16: fc:a7:c8:a4:15:34:3e:ea:37:64:82:fe:25:3d:7a:60:f4:66: ed:64:49:ee:d5:52:94:c9:00:63:28:e2:6c:0e:d0:2e:c1:bd: 36:e8:ad:1a:d3:57:77:2f:7d:d3:32:9c:d6:48:81:31:80:12: b2:b3:79:68:3e:07:a6:3f:0e:25:0d:5e:10:10:38:2c:3a:f4: 91:96:66:0b:97:05:65:56:df:a2:93:0c:d4:80:52:fc:f3:f8: 4e:c0:e2:22:dc:33:2c:ce:b7:d3:df:9e:dd:94:37:f9:d9:59: 4e:80:ab:b6:e9:e5:7e:12:6e:86:e8:70:cd:35:4a:02:e6:67: 41:dc:c8:47:e9:2e:ab:9f:f5:48:e8:ab:a6:7f:ff:14:61:f2: 10:16:69:a1:00:ab:45:6b:ad:0d:c0:80:95:df:c4:c2:65:9d: c5:17:8e:cd:97:28:e2:15:fb:73:ec:d6:d6:5e:2f:36:ff:e3: 77:be:cd:ee:be:e2:e2:d4:83:aa:81:53:0b:f6:9f:26:3c:b8: 9b:cb:73:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NPuEBCYKshOm5F8UWWIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzE4MDJhZGY4MmI5YzZjNWYwODZhMGJjZjYwYmFmZDMy N2M4NjUwHhcNMjUxMjIwMTAwMTI2WhcNMjUxMjIxMTAwMTI2WjAzMTEwLwYDVQQD Eyg4ZjQxNTBkNjEzZjAwNGRiZTRhZDllZjdjMTNhMTM3MmNjMzliZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP+6jmves1iEBz7Ny4oKZEX8P9eg VrZJp0g1ry+9PSsWF/NFvycbiUePmNRH4ONULGvCfewy6AdcnFe7BALRbuDR6zgS tzjKSlYk721w3eHhWE/BRyyMqWL1uPf7c72wuyPwaeKOLcRmUjqiwzQF4u0m9AaE mdRUVERTdp5VwWkDLGTwP43EluODHfro6sxbDA53NZjABHHWzcToGs5vssvQR8xN ctC1tRJO3/eEsF/f8IbQYt4uvQn4rFm6rN+9Ky6uhm13jbS3nivwSrBT874EdBBj y4espbm/uOfIY2pLTZMjHhTRkGapmEGlyVrjnCERu6zNHeL8p3iSxYZ/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9BUNYT8ATb5K2e98E6E3LMOb7oMB8GA1UdIwQY MBaAFLQxgCrfgrnGxfCGoLz2C6/TJ8hlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEt YzkxMTU2OGM4YzY0LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEtYzkxMTU2OGM4YzY0 LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYX6PFqg uxF0rZ0V6WXw3XLLEhC0pv1fofRkZhzONaG/Vv7FZwUtHgIy6JF6ARIq0WWAZhAW /KfIpBU0Puo3ZIL+JT16YPRm7WRJ7tVSlMkAYyjibA7QLsG9NuitGtNXdy990zKc 1kiBMYASsrN5aD4Hpj8OJQ1eEBA4LDr0kZZmC5cFZVbfopMM1IBS/PP4TsDiItwz LM6309+e3ZQ3+dlZToCrtunlfhJuhuhwzTVKAuZnQdzIR+kuq5/1SOirpn//FGHy EBZpoQCrRWutDcCAld/EwmWdxReOzZco4hX7c+zW1l4vNv/jd77N7r7i4tSDqoFT C/afJjy4m8tzZw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:27:49 2025 by rpki-client