This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft File: M1lkDZyLY0Pghqr4vosw6MMdK40.mft (raw, json) Hash identifier: niMgVZI3xwgJxxVtdANP9ii20yxMw7ywGuDet7ShCP8= Subject key identifier: BA:52:4A:37:B4:A1:CE:AE:B5:D0:6E:EE:80:81:B0:41:E2:52:9C:A9 Authority key identifier: 33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D Certificate issuer: /CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d Certificate serial: 019AF50B35BD54888E51318FE9CA65380C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft Manifest number: 04EA Signing time: Sat 06 Dec 2025 19:02:23 +0000 Manifest this update: Sat 06 Dec 2025 19:02:23 +0000 Manifest next update: Sun 07 Dec 2025 19:02:23 +0000 Files and hashes: 1: M1lkDZyLY0Pghqr4vosw6MMdK40.crl (hash: Vvz4pBj8KUGghQw8urVGQOt/hcNtfXLzMjKEJSRsjfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:35:bd:54:88:8e:51:31:8f:e9:ca:65:38:0c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d Validity Not Before: Dec 6 19:02:23 2025 GMT Not After : Dec 7 19:02:23 2025 GMT Subject: CN=ba524a37b4a1ceaeb5d06eee8081b041e2529ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:ff:9f:dc:02:73:ca:1a:c8:b0:d6:5a:e0: fb:d3:ee:94:3c:86:03:6f:94:e8:a7:a9:f2:12:a9: e2:19:f6:37:81:1c:a7:67:fc:49:c9:30:22:3a:61: 9d:ae:f8:8f:e8:ef:f7:b5:db:e1:b1:31:3c:10:3e: fe:48:52:c5:ee:42:15:c6:95:1e:ea:f0:29:ab:03: 1c:04:69:dc:53:31:41:90:f7:72:95:e9:56:6a:e6: bc:99:bd:e2:2a:5c:1a:4b:2e:20:00:d2:55:f5:ca: dd:71:cc:d8:d3:95:6d:5f:ff:6e:2a:1b:e3:0f:d9: 1d:cf:00:0f:9f:f4:d8:28:57:a2:11:2e:a0:b0:83: 76:9d:27:63:4f:ef:48:ed:a4:af:6b:42:30:90:cd: ad:c7:0f:29:28:0f:2b:b6:fe:0c:04:e6:a1:c2:d3: 0d:33:48:1e:f5:81:02:7a:df:0b:6f:fd:3c:fc:76: f9:69:93:89:c1:5d:26:a9:ac:04:94:aa:50:20:9c: ab:09:76:44:db:97:41:c1:1d:e4:0f:f8:b7:da:97: 53:2f:e4:4a:7b:c8:25:a3:60:f9:0b:c6:8a:79:1a: 06:1a:38:55:61:44:c9:a4:01:54:28:28:ba:01:e2: ec:5d:57:af:b9:36:64:5a:cf:da:e9:46:f5:70:e8: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:52:4A:37:B4:A1:CE:AE:B5:D0:6E:EE:80:81:B0:41:E2:52:9C:A9 X509v3 Authority Key Identifier: keyid:33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:03:c2:8f:55:8d:9a:cc:77:02:e9:b9:58:1b:94:00:b3:b3: fa:c0:e8:d0:a0:fb:f0:a6:8c:70:18:15:af:a1:a3:8d:d5:3a: 33:fe:f9:5a:90:be:18:cf:a1:17:85:ae:da:ee:d5:0b:94:88: e9:60:41:a8:a6:6f:12:8e:c2:1b:02:12:23:94:22:52:ab:60: ad:2c:9b:ec:a2:b1:00:40:49:1d:b0:71:dc:9f:47:ae:f6:ae: 87:3c:4c:89:b0:18:6a:56:e6:ce:c8:e9:e4:9b:f3:f0:56:f0: f8:f8:d8:d0:42:57:45:81:54:85:25:13:67:5d:0b:81:51:b7: 00:0b:4e:88:d3:55:c9:67:9b:af:7e:97:79:e7:09:58:8e:3b: d0:9b:2a:12:55:24:fd:25:0c:4a:e0:44:4b:2b:f4:83:2d:48: 17:58:91:c5:bd:e4:87:38:52:46:f7:cc:e2:e0:0f:65:10:22: 44:5d:6c:76:3b:b5:16:43:ef:3b:d9:f4:d0:f3:3a:1f:fc:11: a6:31:44:e4:97:86:a0:5e:49:b7:8b:b5:d6:72:f3:38:64:1f: 8d:d2:c3:0e:de:24:1e:10:11:f3:2d:59:54:98:2c:99:81:07: 7d:63:6f:39:be:aa:b2:e6:eb:4a:9a:28:20:7e:ad:f9:e0:c6: 02:b5:77:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzW9VIiOUTGP6cplOAycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNTk2NDBkOWM4YjYzNDNlMDg2YWFmOGJlOGIzMGU4YzMx ZDJiOGQwHhcNMjUxMjA2MTkwMjIzWhcNMjUxMjA3MTkwMjIzWjAzMTEwLwYDVQQD EyhiYTUyNGEzN2I0YTFjZWFlYjVkMDZlZWU4MDgxYjA0MWUyNTI5Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj//n9wCc8oayLDWWuD70+6UPIYD b5Top6nyEqniGfY3gRynZ/xJyTAiOmGdrviP6O/3tdvhsTE8ED7+SFLF7kIVxpUe 6vApqwMcBGncUzFBkPdylelWaua8mb3iKlwaSy4gANJV9crdcczY05VtX/9uKhvj D9kdzwAPn/TYKFeiES6gsIN2nSdjT+9I7aSva0IwkM2txw8pKA8rtv4MBOahwtMN M0ge9YECet8Lb/08/Hb5aZOJwV0mqawElKpQIJyrCXZE25dBwR3kD/i32pdTL+RK e8glo2D5C8aKeRoGGjhVYUTJpAFUKCi6AeLsXVevuTZkWs/a6Ub1cOiLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpSSje0oc6utdBu7oCBsEHiUpypMB8GA1UdIwQY MBaAFDNZZA2ci2ND4Iaq+L6LMOjDHSuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMzMwYzktM2EwMC00ZTg1LThhNzQt YmRkYzMxNDNiMzEzLzEvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9kMzMwYzktM2EwMC00ZTg1LThhNzQtYmRkYzMxNDNiMzEz LzEvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQPCj1WN msx3Aum5WBuUALOz+sDo0KD78KaMcBgVr6GjjdU6M/75WpC+GM+hF4Wu2u7VC5SI 6WBBqKZvEo7CGwISI5QiUqtgrSyb7KKxAEBJHbBx3J9HrvauhzxMibAYalbmzsjp 5Jvz8Fbw+PjY0EJXRYFUhSUTZ10LgVG3AAtOiNNVyWebr36XeecJWI470JsqElUk /SUMSuBESyv0gy1IF1iRxb3khzhSRvfM4uAPZRAiRF1sdju1FkPvO9n00PM6H/wR pjFE5JeGoF5Jt4u11nLzOGQfjdLDDt4kHhAR8y1ZVJgsmYEHfWNvOb6qsubrSpoo IH6t+eDGArV3cg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:19:25 2025 by rpki-client