This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json) Hash identifier: JI5llXD87EWdZl1rL5Mz1RkofLnSNFuunJIX9rJQN/g= Subject key identifier: 63:93:D1:FB:35:18:68:33:83:F8:E2:C0:D5:2D:00:C6:8C:09:0D:98 Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Certificate serial: 019AF12D4FB2ECED1736DE76268F957E7A48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft Manifest number: 13B1 Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: MJaxHK51o50fRHl/AjP24HghJdR9S58uwXPDtIfSksw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4f:b2:ec:ed:17:36:de:76:26:8f:95:7e:7a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=6393d1fb3518683383f8e2c0d52d00c68c090d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:0a:26:f3:3d:e1:a9:8c:75:94:e0:51:11: 7d:1a:c9:24:60:01:e5:6b:54:e7:fa:a8:0c:60:c6: 22:12:07:85:7b:d0:fe:bc:01:d9:3f:86:e9:82:2d: 8f:ae:13:16:a0:c8:c5:bd:6a:7b:b4:e2:23:2f:b3: ac:dd:87:af:b5:b8:51:e2:78:8d:4e:f1:e8:c5:ff: 10:1d:a7:68:ab:db:12:45:ff:33:e3:5e:ac:33:1d: db:4a:81:a0:d4:8a:8d:23:0b:16:f2:fc:b3:cb:96: 5b:e2:f5:2e:5a:b3:11:c1:38:b3:e2:bd:2f:32:53: ad:ad:31:13:a5:b7:8d:f7:4f:e3:18:59:a5:62:c9: c8:28:cd:69:b0:01:b9:d9:fc:61:71:36:3d:b1:8c: ba:a5:bc:aa:55:fb:18:80:ef:c5:aa:e0:17:2c:9e: 45:40:1c:91:01:09:47:1e:f2:a9:00:6a:e9:12:e2: 25:5e:ad:ba:5f:b1:0a:57:f6:fc:2b:23:0d:0f:e2: 40:aa:db:23:d2:7c:8f:9d:b8:79:71:6a:84:1b:82: 20:d2:7a:f7:25:4d:d4:fe:48:3d:38:e1:04:4e:f4: 9d:65:e0:40:70:8a:1e:e6:f1:a4:b5:c7:6d:38:8d: 78:ed:5c:f3:fa:93:15:1d:49:bb:42:25:45:b4:5c: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:93:D1:FB:35:18:68:33:83:F8:E2:C0:D5:2D:00:C6:8C:09:0D:98 X509v3 Authority Key Identifier: keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:84:dc:6b:e7:f7:31:11:83:0d:f8:cd:a3:74:d1:27:19:82: 8a:d1:a7:33:a1:03:8e:c3:25:2c:27:82:83:d5:ad:49:4c:70: 40:07:da:1c:29:5d:d4:25:cd:c0:15:7e:f7:a2:11:28:7f:14: 4e:23:8b:70:97:9c:84:c0:2b:62:ca:d7:ae:c8:b1:02:78:be: 9f:0b:84:f5:0c:5f:68:0c:58:3b:10:1f:5e:67:b9:fc:98:35: db:a6:66:40:77:af:b8:35:b4:54:3e:29:89:81:27:9c:09:bb: 66:3a:f0:a0:01:f7:90:54:aa:61:ee:7e:4e:7e:d3:b5:ab:12: 10:15:c4:3a:65:48:87:5c:e3:25:fb:ca:c1:cd:8d:86:99:12: fb:f6:a7:a3:0a:9e:63:12:2a:04:1e:55:f8:43:1b:53:ae:4b: 27:5e:2f:b7:7a:7b:bd:3c:88:0e:49:1a:1f:d4:1d:ac:ec:ad: 1d:c0:d0:64:4a:fb:3d:cc:e9:83:77:58:63:fc:17:f3:e1:5c: 03:af:63:68:12:4e:78:c0:58:ea:e2:d5:2d:ee:49:56:10:3f: 14:c1:d1:f6:5e:1c:06:a0:81:d6:93:f2:95:33:0b:47:c9:3c: 1c:a5:66:4a:ee:fe:6a:11:da:47:3d:52:cf:05:db:0a:7c:30: 21:19:02:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU+y7O0XNt52Jo+VfnpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWJmYWNiNWExMzRkMTM4MDVlZWY5NWZkOGZiZDEyZGU2 YTAxZjMwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD Eyg2MzkzZDFmYjM1MTg2ODMzODNmOGUyYzBkNTJkMDBjNjhjMDkwZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseAKJvM94amMdZTgURF9GskkYAHl a1Tn+qgMYMYiEgeFe9D+vAHZP4bpgi2PrhMWoMjFvWp7tOIjL7Os3YevtbhR4niN TvHoxf8QHadoq9sSRf8z416sMx3bSoGg1IqNIwsW8vyzy5Zb4vUuWrMRwTiz4r0v MlOtrTETpbeN90/jGFmlYsnIKM1psAG52fxhcTY9sYy6pbyqVfsYgO/FquAXLJ5F QByRAQlHHvKpAGrpEuIlXq26X7EKV/b8KyMND+JAqtsj0nyPnbh5cWqEG4Ig0nr3 JU3U/kg9OOEETvSdZeBAcIoe5vGktcdtOI147Vzz+pMVHUm7QiVFtFyiMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOT0fs1GGgzg/jiwNUtAMaMCQ2YMB8GA1UdIwQY MBaAFGlb+staE00TgF7vlf2PvRLeagHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEt OTk0Y2NkMTBmYTQ0LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEtOTk0Y2NkMTBmYTQ0 LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ITca+f3 MRGDDfjNo3TRJxmCitGnM6EDjsMlLCeCg9WtSUxwQAfaHCld1CXNwBV+96IRKH8U TiOLcJechMArYsrXrsixAni+nwuE9QxfaAxYOxAfXme5/Jg126ZmQHevuDW0VD4p iYEnnAm7ZjrwoAH3kFSqYe5+Tn7TtasSEBXEOmVIh1zjJfvKwc2NhpkS+/anowqe YxIqBB5V+EMbU65LJ14vt3p7vTyIDkkaH9QdrOytHcDQZEr7Pczpg3dYY/wX8+Fc A69jaBJOeMBY6uLVLe5JVhA/FMHR9l4cBqCB1pPylTMLR8k8HKVmSu7+ahHaRz1S zwXbCnwwIRkC2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:56 2025 by rpki-client