This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json) Hash identifier: ma25JMtCd7opPCAc6IAiGTOk+t1ttnDSBzZq5Sc0G4c= Subject key identifier: 34:7D:81:B5:8C:D8:06:BF:71:BE:3A:52:5C:B7:1D:E4:3F:26:EE:91 Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94 Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194 Certificate serial: 019AF38993FB497F0D250710C57925C7E82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: xkeaGar4IswTR0mZWda1VJ5KiHLX74dM0ec5lh3JAoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:93:fb:49:7f:0d:25:07:10:c5:79:25:c7:e8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194 Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=347d81b58cd806bf71be3a525cb71de43f26ee91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:2c:24:a1:50:6a:c2:e5:a1:24:09:21:00: 89:9e:dc:69:f5:35:c0:a4:7e:9c:d6:7d:dd:49:a0: 37:ac:21:ad:89:a0:d7:42:f7:57:6e:08:50:41:31: ea:f7:70:98:8e:92:f9:a5:1e:c6:b7:8b:24:f2:e9: f5:b8:04:39:1e:05:a9:f9:4e:31:1c:a9:c3:65:11: 97:55:5e:05:87:28:00:5f:bc:13:5f:68:42:f1:df: ce:af:69:24:64:6d:76:b6:2f:33:c1:c4:b4:91:7e: d9:69:6a:e1:aa:d8:20:14:97:d5:4e:4b:a4:8a:88: 8b:80:fa:5c:67:0f:63:5d:a3:7e:b5:71:09:eb:23: bc:dd:66:82:b4:50:9c:5c:73:28:cb:3b:1f:d8:bd: b6:ab:d2:d0:7f:f5:b6:f0:33:6c:95:57:52:29:ed: a7:22:01:56:fa:b8:49:86:e6:e1:1a:35:ed:f5:59: 4a:0e:e9:7c:c7:14:bc:be:30:9b:73:9c:58:cc:9e: 56:16:88:73:62:bd:97:97:d7:f4:ac:3c:ea:68:26: ed:bc:26:0b:2c:1b:dc:15:c9:c5:bc:7d:6c:50:6b: 38:00:68:ac:84:aa:33:50:e1:5c:b0:28:d6:07:55: 12:0a:db:85:c7:5c:eb:03:d6:82:ca:aa:56:b8:04: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7D:81:B5:8C:D8:06:BF:71:BE:3A:52:5C:B7:1D:E4:3F:26:EE:91 X509v3 Authority Key Identifier: keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ef:b0:e1:52:d7:ba:91:2b:59:5b:2e:24:0c:56:fb:91:c7: fb:f0:98:5a:31:62:bb:5f:dc:6b:2c:18:4c:41:98:23:14:85: 5a:7c:ae:2c:e5:93:bc:2c:06:4c:6e:c4:ef:f5:14:ca:44:ed: 63:a6:61:f6:5f:cf:26:a1:67:bc:32:7c:ec:6c:b3:ba:b9:4e: 97:53:8f:f3:b4:a0:d0:78:f6:ca:a6:31:81:57:0d:40:f0:4b: b4:ce:e2:fe:35:bf:94:1b:27:1e:49:ae:2b:b7:9c:e9:fb:82: ef:65:b7:79:12:5f:f8:a9:5e:fd:f1:29:32:4e:a9:09:ce:48: 53:59:49:60:a0:ae:b3:2e:68:d5:a8:e7:f4:39:32:9f:07:b9: a6:26:aa:a2:21:0e:c3:c3:30:66:ea:9c:46:11:dd:53:31:3a: 59:4f:77:fd:34:f9:9c:8f:7d:c7:0d:c6:68:d3:90:e5:20:dd: 39:05:35:55:6c:33:4d:23:0c:2f:8f:4e:47:c4:ce:8f:d0:8b: 81:e8:1b:09:1b:ba:39:5c:b8:a0:2f:74:8a:5a:4e:bf:47:3f: 31:07:66:91:21:ae:c5:78:4b:c7:04:a6:dd:72:d3:f5:ef:80: 6d:64:bc:73:8b:29:6d:d4:c9:09:aa:b8:9c:3d:ae:be:3e:8a: a6:9d:e2:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZP7SX8NJQcQxXklx+gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWJiYThiZDNmYWU3YWU4MjQ5YzljNDYxNjhiYTkwMDIz ZGIxOTQwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD EygzNDdkODFiNThjZDgwNmJmNzFiZTNhNTI1Y2I3MWRlNDNmMjZlZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDwsJKFQasLloSQJIQCJntxp9TXA pH6c1n3dSaA3rCGtiaDXQvdXbghQQTHq93CYjpL5pR7Gt4sk8un1uAQ5HgWp+U4x HKnDZRGXVV4FhygAX7wTX2hC8d/Or2kkZG12ti8zwcS0kX7ZaWrhqtggFJfVTkuk ioiLgPpcZw9jXaN+tXEJ6yO83WaCtFCcXHMoyzsf2L22q9LQf/W28DNslVdSKe2n IgFW+rhJhubhGjXt9VlKDul8xxS8vjCbc5xYzJ5WFohzYr2Xl9f0rDzqaCbtvCYL LBvcFcnFvH1sUGs4AGishKozUOFcsCjWB1USCtuFx1zrA9aCyqpWuATx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDR9gbWM2Aa/cb46Uly3HeQ/Ju6RMB8GA1UdIwQY MBaAFLUbuovT+ueugknJxGFoupACPbGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDct NzgyMzEwZTY2NjJkLzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hNWE3NDAtMmJjZS00MzM4LTk5ZDctNzgyMzEwZTY2NjJk LzEvdFJ1Nmk5UDY1NjZDU2NuRVlXaTZrQUk5c1pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO+w4VLX upErWVsuJAxW+5HH+/CYWjFiu1/caywYTEGYIxSFWnyuLOWTvCwGTG7E7/UUykTt Y6Zh9l/PJqFnvDJ87GyzurlOl1OP87Sg0Hj2yqYxgVcNQPBLtM7i/jW/lBsnHkmu K7ec6fuC72W3eRJf+Kle/fEpMk6pCc5IU1lJYKCusy5o1ajn9Dkynwe5piaqoiEO w8MwZuqcRhHdUzE6WU93/TT5nI99xw3GaNOQ5SDdOQU1VWwzTSMML49OR8TOj9CL gegbCRu6OVy4oC90ilpOv0c/MQdmkSGuxXhLxwSm3XLT9e+AbWS8c4spbdTJCaq4 nD2uvj6Kpp3iGg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:23 2025 by rpki-client