This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft File: v74mhOFXoAYDw7KrDcUlKF6_64k.mft (raw, json) Hash identifier: KrLta68Ukl3/QO1Pw/mSUTqPng7Jv7n0Z6Dk3ucbs+Q= Subject key identifier: AB:39:FA:EF:C3:54:C6:E1:BA:09:5B:59:6D:D1:E5:86:F6:1D:6B:09 Authority key identifier: BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89 Certificate issuer: /CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89 Certificate serial: 019AF31C129E3A0BCA619C591DAB625FFA30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft Manifest number: 043B Signing time: Sat 06 Dec 2025 10:01:34 +0000 Manifest this update: Sat 06 Dec 2025 10:01:34 +0000 Manifest next update: Sun 07 Dec 2025 10:01:34 +0000 Files and hashes: 1: v74mhOFXoAYDw7KrDcUlKF6_64k.crl (hash: c54+2/Vsz3Hb62qw9RjmnZ5oFRpAxwqrRq9ZSoM7RLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:12:9e:3a:0b:ca:61:9c:59:1d:ab:62:5f:fa:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfbe2684e157a00603c3b2ab0dc525285ebfeb89 Validity Not Before: Dec 6 10:01:34 2025 GMT Not After : Dec 7 10:01:34 2025 GMT Subject: CN=ab39faefc354c6e1ba095b596dd1e586f61d6b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:b1:dc:15:56:e7:77:ba:d0:2a:84:51:f6: 5c:f7:fa:42:fc:62:e3:63:ef:f1:d3:bf:46:e4:ae: 71:36:b0:da:65:aa:02:e7:fd:b9:4d:94:e3:82:2c: 48:56:34:10:19:24:03:ac:20:35:12:b5:9b:20:4d: 70:8c:1a:5a:9d:5f:88:d5:91:4b:b8:03:22:b4:81: d6:a0:4a:f1:8a:0b:fb:d9:c8:65:16:60:cd:2f:b9: af:f3:92:76:72:a0:82:ba:24:0a:27:7f:dd:ee:26: 1c:2f:cd:8f:c3:24:d5:60:94:d5:df:5e:72:34:43: 67:29:9b:09:46:31:ff:23:0a:78:5c:2e:c6:ba:11: 5a:4d:ef:bf:1a:5e:f9:f7:4b:17:28:b6:41:5c:b6: 78:1a:44:72:63:13:df:74:b8:72:31:be:da:1e:3c: f1:84:b3:82:d7:b9:f7:5a:fd:70:ca:92:3f:75:4a: 76:dc:3b:3f:6b:42:8f:c2:51:67:a9:38:6b:92:ff: fa:a5:ba:16:f5:71:b9:bc:5d:15:91:43:ef:52:cd: ce:9f:a7:eb:e0:0a:32:25:0e:fd:de:c2:68:ab:21: 7c:21:ee:85:81:85:4a:cf:17:58:72:85:08:19:02: 28:ef:c9:aa:c6:55:d6:9d:a7:6f:62:b7:bf:94:5d: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:39:FA:EF:C3:54:C6:E1:BA:09:5B:59:6D:D1:E5:86:F6:1D:6B:09 X509v3 Authority Key Identifier: keyid:BF:BE:26:84:E1:57:A0:06:03:C3:B2:AB:0D:C5:25:28:5E:BF:EB:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v74mhOFXoAYDw7KrDcUlKF6_64k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4d3604-1b94-4200-aea4-d8d42b8b3ba2/1/v74mhOFXoAYDw7KrDcUlKF6_64k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e1:2e:73:bd:6b:29:b0:ca:5a:a3:4d:d0:65:27:a2:f1:7c: 31:14:b3:71:ee:76:59:83:d8:31:a5:b7:74:d5:df:65:75:4d: 58:16:91:a0:7d:bf:30:8e:c9:93:3e:56:d1:b4:4d:a2:98:74: 77:81:7f:12:d8:a6:0d:f9:90:61:36:88:20:42:88:da:79:0a: 45:0f:07:e0:9a:4b:4d:88:6c:5f:05:11:c5:28:0b:43:ab:3d: 1c:2e:75:41:51:16:d5:38:35:96:5b:e7:af:f3:bc:fd:9e:a7: 93:ba:ce:b5:21:3e:b9:60:40:22:3d:d2:19:f3:cf:37:50:b3: b0:2c:9b:b1:7b:66:87:85:de:06:1e:f6:1b:ea:78:d1:6b:01: 15:8c:7f:41:f3:a9:75:13:4e:fa:f0:1d:4e:52:17:48:da:d6: 96:42:c8:3c:d6:cb:b3:fb:e2:2e:9e:bf:1a:f3:42:e6:89:0d: af:74:47:ce:44:27:cb:8c:0e:3a:03:77:95:df:e8:54:f6:ca: ff:a6:1c:2b:a8:a7:06:e4:b5:ba:1e:2a:3e:40:1c:b4:45:68: 61:e2:f7:c4:83:30:7f:f5:ca:10:b3:d8:bd:48:41:43:06:43: e6:37:af:df:3e:b8:7f:25:06:34:f7:b0:da:06:7a:97:73:e1: 14:14:c2:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBKeOgvKYZxZHatiX/owMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYmUyNjg0ZTE1N2EwMDYwM2MzYjJhYjBkYzUyNTI4NWVi ZmViODkwHhcNMjUxMjA2MTAwMTM0WhcNMjUxMjA3MTAwMTM0WjAzMTEwLwYDVQQD EyhhYjM5ZmFlZmMzNTRjNmUxYmEwOTViNTk2ZGQxZTU4NmY2MWQ2YjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Uix3BVW53e60CqEUfZc9/pC/GLj Y+/x079G5K5xNrDaZaoC5/25TZTjgixIVjQQGSQDrCA1ErWbIE1wjBpanV+I1ZFL uAMitIHWoErxigv72chlFmDNL7mv85J2cqCCuiQKJ3/d7iYcL82PwyTVYJTV315y NENnKZsJRjH/Iwp4XC7GuhFaTe+/Gl7590sXKLZBXLZ4GkRyYxPfdLhyMb7aHjzx hLOC17n3Wv1wypI/dUp23Ds/a0KPwlFnqThrkv/6pboW9XG5vF0VkUPvUs3On6fr 4AoyJQ793sJoqyF8Ie6FgYVKzxdYcoUIGQIo78mqxlXWnadvYre/lF1AwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs5+u/DVMbhuglbWW3R5Yb2HWsJMB8GA1UdIwQY MBaAFL++JoThV6AGA8Oyqw3FJShev+uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQt ZDhkNDJiOGIzYmEyLzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80ZDM2MDQtMWI5NC00MjAwLWFlYTQtZDhkNDJiOGIzYmEy LzEvdjc0bWhPRlhvQVlEdzdLckRjVWxLRjZfNjRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeEuc71r KbDKWqNN0GUnovF8MRSzce52WYPYMaW3dNXfZXVNWBaRoH2/MI7Jkz5W0bRNoph0 d4F/EtimDfmQYTaIIEKI2nkKRQ8H4JpLTYhsXwURxSgLQ6s9HC51QVEW1Tg1llvn r/O8/Z6nk7rOtSE+uWBAIj3SGfPPN1CzsCybsXtmh4XeBh72G+p40WsBFYx/QfOp dRNO+vAdTlIXSNrWlkLIPNbLs/viLp6/GvNC5okNr3RHzkQny4wOOgN3ld/oVPbK /6YcK6inBuS1uh4qPkActEVoYeL3xIMwf/XKELPYvUhBQwZD5jev3z64fyUGNPew 2gZ6l3PhFBTCPg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:58 2025 by rpki-client