This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json) Hash identifier: Bu0hywiYMwnGUZe71HJXbwJRBEnid0JmeVmKBicHUOw= Subject key identifier: A4:71:37:16:A2:45:C4:83:FA:31:B0:F7:AB:B2:E6:2D:64:63:64:B9 Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb Certificate serial: 019AF12E43B819F98297EF5384DBA315949C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft Manifest number: 0ABD Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: IQRClyzShQOAiFJw993pUwvZnN234DBz/AvU8vJyhkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:43:b8:19:f9:82:97:ef:53:84:db:a3:15:94:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=a4713716a245c483fa31b0f7abb2e62d646364b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:ec:cb:35:d7:04:39:96:99:52:14:bb:af: 78:84:a2:90:24:5f:21:81:4f:34:3c:e1:7a:c2:83: 03:51:65:05:c6:52:fe:d6:64:92:d4:6a:b0:60:be: 48:ae:a6:81:20:c3:da:08:ae:c2:e7:dc:21:70:89: a2:26:50:3c:80:4d:47:d6:6a:cb:8f:dd:d8:6a:88: 3d:73:2e:c4:22:6b:73:93:01:28:5a:c9:34:5a:d7: e7:11:70:cb:99:39:b3:b2:6c:b4:9e:9a:35:51:70: ee:20:eb:7a:6f:36:de:ad:8b:8f:d4:cb:af:09:b2: 89:bb:43:a7:01:3a:2a:3a:01:99:3b:34:c8:fa:b7: 71:ae:d0:07:eb:ff:69:d0:72:c2:a5:5c:8e:4c:7e: 3a:7e:cd:23:06:5c:40:5e:e7:28:07:3f:72:0f:42: 87:72:a7:78:90:12:86:c7:cd:e3:d0:33:c6:20:16: 42:fe:5c:3d:b9:cf:e9:f2:40:ee:63:ce:e2:f6:f6: c1:de:b4:93:87:b1:25:d1:3f:ad:e8:83:c4:45:b2: d3:d7:83:bb:bb:3d:19:2c:67:24:26:09:e8:44:1c: a0:e9:77:f9:1e:4a:8d:31:b2:82:99:a0:3b:aa:e4: 1d:ff:e3:fe:c4:3d:74:fd:c2:da:fb:fc:07:54:69: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:71:37:16:A2:45:C4:83:FA:31:B0:F7:AB:B2:E6:2D:64:63:64:B9 X509v3 Authority Key Identifier: keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:7a:32:da:36:4b:56:29:5c:e0:89:82:ad:36:81:30:a7: 06:d2:b3:68:72:21:bb:20:09:04:5d:0c:0c:27:6f:f2:33:02: bf:73:a6:b0:58:ab:80:9b:69:fa:42:7c:28:6e:08:91:fd:b8: 57:2c:32:71:80:c7:68:98:18:1c:bc:b6:58:7a:c6:0f:11:0c: e7:af:9c:db:81:d1:b2:4d:16:83:d8:17:b4:61:74:70:b2:46: 44:24:4e:2b:2b:5e:b0:af:cb:81:01:84:46:ac:08:98:b8:80: 56:81:23:ac:39:c4:99:b8:49:17:e2:c0:e1:af:7b:6d:78:9d: 14:e4:de:b3:fe:7d:5a:26:2f:78:db:f6:b2:ee:3c:28:2d:d7: d2:90:d4:44:53:35:1d:bb:69:d1:b4:3b:5e:11:f5:83:d4:39: 47:cd:42:61:d8:19:5d:ed:99:1d:d7:fa:20:3b:dc:21:c3:30: af:1d:fb:e1:b3:12:57:a1:c5:81:a3:d5:67:86:a0:f6:c5:02: e8:be:05:14:e1:7f:30:59:e9:44:fe:3e:b4:dc:70:f0:73:94: bc:f2:2d:90:03:a7:de:54:46:5a:d4:57:41:98:3f:f1:5a:58: b5:93:f3:d1:e7:8a:60:85:e7:61:06:6f:f9:d2:61:a9:50:4d: 06:13:17:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkO4GfmCl+9ThNujFZScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx MjQ5ZmIwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD EyhhNDcxMzcxNmEyNDVjNDgzZmEzMWIwZjdhYmIyZTYyZDY0NjM2NGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx//syzXXBDmWmVIUu694hKKQJF8h gU80POF6woMDUWUFxlL+1mSS1GqwYL5IrqaBIMPaCK7C59whcImiJlA8gE1H1mrL j93Yaog9cy7EImtzkwEoWsk0WtfnEXDLmTmzsmy0npo1UXDuIOt6bzberYuP1Muv CbKJu0OnAToqOgGZOzTI+rdxrtAH6/9p0HLCpVyOTH46fs0jBlxAXucoBz9yD0KH cqd4kBKGx83j0DPGIBZC/lw9uc/p8kDuY87i9vbB3rSTh7El0T+t6IPERbLT14O7 uz0ZLGckJgnoRByg6Xf5HkqNMbKCmaA7quQd/+P+xD10/cLa+/wHVGmSYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRxNxaiRcSD+jGw96uy5i1kY2S5MB8GA1UdIwQY MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQql6Mto2 S1YpXOCJgq02gTCnBtKzaHIhuyAJBF0MDCdv8jMCv3OmsFirgJtp+kJ8KG4Ikf24 VywycYDHaJgYHLy2WHrGDxEM56+c24HRsk0Wg9gXtGF0cLJGRCROKytesK/LgQGE RqwImLiAVoEjrDnEmbhJF+LA4a97bXidFOTes/59WiYveNv2su48KC3X0pDURFM1 Hbtp0bQ7XhH1g9Q5R81CYdgZXe2ZHdf6IDvcIcMwrx374bMSV6HFgaPVZ4ag9sUC 6L4FFOF/MFnpRP4+tNxw8HOUvPItkAOn3lRGWtRXQZg/8VpYtZPz0eeKYIXnYQZv +dJhqVBNBhMXaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:51 2025 by rpki-client