This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json) Hash identifier: upNSOwRah+xf+waU8rJnQLiyAcjDBDD27+nUxUtUSf8= Subject key identifier: E3:7F:BC:6A:D9:1A:83:96:E4:F9:71:B2:9C:E0:B3:A5:B1:64:AB:47 Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b Certificate serial: 019AF12CD863D9EAEEA63C7617D31E6D8E5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft Manifest number: 0D5B Signing time: Sat 06 Dec 2025 01:00:39 +0000 Manifest this update: Sat 06 Dec 2025 01:00:39 +0000 Manifest next update: Sun 07 Dec 2025 01:00:39 +0000 Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: KTannR7E4041gZsiX5oDxBMGNkRQ0xu4Ns1RjbrsAn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d8:63:d9:ea:ee:a6:3c:76:17:d3:1e:6d:8e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b Validity Not Before: Dec 6 01:00:39 2025 GMT Not After : Dec 7 01:00:39 2025 GMT Subject: CN=e37fbc6ad91a8396e4f971b29ce0b3a5b164ab47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:fe:77:30:f5:c2:e0:61:d2:ae:52:0d:fd: 98:ca:94:18:16:62:69:5d:95:2a:a4:49:09:36:64: a2:53:99:f3:39:c1:17:8e:40:31:d2:9c:8d:4e:7f: 47:70:fa:65:e9:9f:d1:d8:10:83:32:d0:35:f2:3f: 24:54:5a:1a:5b:01:41:98:b4:ef:99:5e:5e:6b:24: 97:db:45:52:e1:d9:dc:a4:80:5b:55:0c:dc:a3:14: 90:c0:8a:f1:c0:30:7a:1b:35:6c:43:d0:c3:79:7e: c3:c7:28:46:71:68:8b:8c:6f:46:39:d7:83:31:4f: e7:09:8e:85:11:b3:ec:24:f6:f0:30:f5:b8:34:80: 97:dd:35:84:fe:e3:5b:f7:6e:2f:e3:2b:ed:5f:8e: 78:d8:51:b4:0f:ba:e5:c6:bb:3c:04:18:8a:d1:5f: e7:05:7c:8f:dd:ee:06:9a:50:c1:37:7a:44:37:bf: 8f:07:70:5f:eb:e0:dc:ee:db:e6:6f:b7:25:50:7c: 2a:bc:5a:1f:ed:de:d2:c6:c6:ff:35:79:c8:17:18: 37:8f:50:e2:05:eb:89:1f:c4:7a:53:b8:3b:30:33: 26:91:9b:c8:ec:ca:6c:dc:e5:bd:8b:57:81:67:6d: 7e:b8:71:81:3f:49:e8:64:bf:34:1b:2f:73:81:56: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7F:BC:6A:D9:1A:83:96:E4:F9:71:B2:9C:E0:B3:A5:B1:64:AB:47 X509v3 Authority Key Identifier: keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5a:28:29:65:a4:5b:e0:ec:26:35:41:1b:1e:b8:3d:b3:d6: 0f:ea:90:f7:a1:35:45:c9:59:9b:3f:2a:73:3a:83:72:b9:20: 35:40:c4:10:b5:8b:44:4d:27:ea:13:fe:25:7c:db:7a:06:fe: 6e:81:ba:c7:19:43:e4:63:56:b0:57:37:90:44:5e:90:8d:4f: 02:79:3b:bc:5c:08:8c:72:55:bc:e9:ba:71:59:62:6e:7b:8a: 5b:b1:0c:3b:ba:ce:d3:ec:5a:bd:b1:8e:58:96:f6:16:b4:35: cf:9c:6e:55:ea:28:4a:08:7d:64:55:57:50:49:10:3e:9f:89: 18:a0:2f:e5:0b:cb:67:47:f0:9f:17:b0:23:cb:e8:5e:33:fb: 16:a0:60:1b:42:f8:11:b0:41:5d:05:77:8f:8d:f0:57:ac:ab: 19:7c:3b:e7:dd:e7:60:35:96:67:52:57:76:16:39:f5:18:a8: a0:c2:f1:67:94:ef:5b:b0:0e:9f:5e:ab:f3:9f:69:23:3d:2c: 54:d1:84:6c:5e:0b:40:a5:7c:1c:da:a3:6f:2b:98:8a:e3:e9: 6f:4c:0d:53:47:5c:1d:d9:43:de:23:97:c2:e5:86:7b:77:1c: 62:c6:03:d4:02:65:a7:8b:fd:c1:d4:a6:8a:8a:7a:ad:7f:2b: b2:d9:61:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNhj2erupjx2F9MebY5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTBiNDM5ZDQ4OGUxYjFhNjllMzU4NjA5ODYyMTk1NmMw ZWRjN2IwHhcNMjUxMjA2MDEwMDM5WhcNMjUxMjA3MDEwMDM5WjAzMTEwLwYDVQQD EyhlMzdmYmM2YWQ5MWE4Mzk2ZTRmOTcxYjI5Y2UwYjNhNWIxNjRhYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzj+dzD1wuBh0q5SDf2YypQYFmJp XZUqpEkJNmSiU5nzOcEXjkAx0pyNTn9HcPpl6Z/R2BCDMtA18j8kVFoaWwFBmLTv mV5eaySX20VS4dncpIBbVQzcoxSQwIrxwDB6GzVsQ9DDeX7DxyhGcWiLjG9GOdeD MU/nCY6FEbPsJPbwMPW4NICX3TWE/uNb924v4yvtX4542FG0D7rlxrs8BBiK0V/n BXyP3e4GmlDBN3pEN7+PB3Bf6+Dc7tvmb7clUHwqvFof7d7Sxsb/NXnIFxg3j1Di BeuJH8R6U7g7MDMmkZvI7Mps3OW9i1eBZ21+uHGBP0noZL80Gy9zgVY5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFON/vGrZGoOW5Plxspzgs6WxZKtHMB8GA1UdIwQY MBaAFOtQtDnUiOGxpp41hgmGIZVsDtx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMt M2E3OTgwMzE0ZWEyLzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMtM2E3OTgwMzE0ZWEy LzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlooKWWk W+DsJjVBGx64PbPWD+qQ96E1RclZmz8qczqDcrkgNUDEELWLRE0n6hP+JXzbegb+ boG6xxlD5GNWsFc3kERekI1PAnk7vFwIjHJVvOm6cVlibnuKW7EMO7rO0+xavbGO WJb2FrQ1z5xuVeooSgh9ZFVXUEkQPp+JGKAv5QvLZ0fwnxewI8voXjP7FqBgG0L4 EbBBXQV3j43wV6yrGXw7593nYDWWZ1JXdhY59RiooMLxZ5TvW7AOn16r859pIz0s VNGEbF4LQKV8HNqjbyuYiuPpb0wNU0dcHdlD3iOXwuWGe3ccYsYD1AJlp4v9wdSm iop6rX8rstlhsg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:39 2025 by rpki-client