This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft File: rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json) Hash identifier: 7vdFORPgYBEYI5ig6XMxArHfxBHLnhZWNvzYKzgMr/Y= Subject key identifier: 00:9E:E5:49:88:CB:D4:4E:B9:B7:EB:5B:88:4E:AB:CB:36:D5:DE:DC Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55 Certificate issuer: /CN=aef97a95e2170275e8c82ee878b6d08deb821e55 Certificate serial: 019AF12E1076AC73BF39F044744F72126608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft Manifest number: 1087 Signing time: Sat 06 Dec 2025 01:01:59 +0000 Manifest this update: Sat 06 Dec 2025 01:01:59 +0000 Manifest next update: Sun 07 Dec 2025 01:01:59 +0000 Files and hashes: 1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: +8OOoqaG7f8EUAygLXjVARVbrRd8PcKiGDr2iPkzUns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:10:76:ac:73:bf:39:f0:44:74:4f:72:12:66:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55 Validity Not Before: Dec 6 01:01:59 2025 GMT Not After : Dec 7 01:01:59 2025 GMT Subject: CN=009ee54988cbd44eb9b7eb5b884eabcb36d5dedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:5a:2f:da:bf:d4:eb:cb:12:f6:eb:73:c4: 23:c0:83:cf:d6:7c:bd:b1:a3:9f:64:e8:6d:95:42: 6c:48:e9:8d:d2:32:38:6e:e1:a3:cc:db:7a:73:d6: 65:d8:33:c0:0c:b9:d5:75:07:5d:26:2a:54:3e:15: b4:9a:f9:94:37:a6:af:71:bc:25:5a:09:22:e8:27: 1d:3c:3e:a4:47:5b:2e:dd:6f:04:0e:99:88:33:8f: 89:db:70:d5:b5:d3:0a:bc:cb:6b:20:4f:60:db:f3: eb:f9:81:cd:ac:2a:3f:fe:ce:c2:d3:f6:dc:3b:76: 99:09:be:65:58:69:31:06:dc:4a:c6:4b:27:ab:b2: 11:e9:8f:0d:4e:a8:78:09:5b:56:0a:0f:2c:a9:7f: 1f:c2:ca:4e:ad:97:8e:3f:7b:a8:2c:e2:1d:2b:05: 23:d5:04:69:cb:97:74:65:69:3e:ac:db:4a:3e:cf: 35:dd:e2:58:ec:36:9c:30:19:2b:60:d7:7d:38:41: 6b:91:f2:71:0d:ce:5a:65:cd:d6:8c:38:d0:4c:cf: 7e:e7:50:38:8e:43:67:20:c9:ca:03:79:f3:b3:0f: 1e:50:b8:23:b8:69:d1:b2:6b:04:52:f3:1c:ed:e2: 3f:a6:e5:3e:ab:b7:22:39:c9:1d:38:e2:a4:dd:3e: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:E5:49:88:CB:D4:4E:B9:B7:EB:5B:88:4E:AB:CB:36:D5:DE:DC X509v3 Authority Key Identifier: keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e5:78:fc:ac:6c:11:e1:26:4c:a3:2a:26:da:81:ce:b9:da: 3d:fe:e4:39:9d:6f:62:a0:43:f4:fc:5a:43:28:53:a1:6d:14: a0:0d:bc:f4:35:f3:21:5a:f1:fa:8d:f6:72:97:ba:ef:21:e3: e1:66:64:00:b8:7c:5e:41:7e:42:91:7d:73:9e:61:98:fe:7a: 89:6a:33:93:43:1c:60:3b:e5:44:1c:20:95:56:b0:1e:f0:40: ac:4d:9a:04:05:42:c8:ff:eb:2b:96:65:f4:c0:70:67:b2:6c: 9d:ec:6a:d8:8b:91:36:09:28:ff:d7:e0:a2:a0:01:8b:9d:36: 64:61:b7:8e:22:3d:93:5a:c5:43:58:74:d1:14:cd:f2:cd:3b: 6b:58:90:46:ab:0f:cf:ee:d7:f8:2b:2a:2e:50:91:f6:bb:9b: 7a:ec:16:b4:56:00:3e:af:e6:10:39:bb:1d:8c:7b:cf:f0:d7: cc:53:28:5c:dd:20:71:fb:9a:91:42:db:8e:4d:a9:d7:a9:01: ed:fe:e4:00:e6:7e:6b:52:df:68:7f:ef:7f:3f:3e:c1:31:9f: 0d:09:fb:8e:20:a6:30:c4:98:b8:26:62:d2:02:47:3d:b0:b8: b3:b8:b7:7f:6b:79:cb:53:47:96:28:db:8b:89:df:23:22:1e: 35:7b:d0:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhB2rHO/OfBEdE9yEmYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjk3YTk1ZTIxNzAyNzVlOGM4MmVlODc4YjZkMDhkZWI4 MjFlNTUwHhcNMjUxMjA2MDEwMTU5WhcNMjUxMjA3MDEwMTU5WjAzMTEwLwYDVQQD EygwMDllZTU0OTg4Y2JkNDRlYjliN2ViNWI4ODRlYWJjYjM2ZDVkZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv41aL9q/1OvLEvbrc8QjwIPP1ny9 saOfZOhtlUJsSOmN0jI4buGjzNt6c9Zl2DPADLnVdQddJipUPhW0mvmUN6avcbwl Wgki6CcdPD6kR1su3W8EDpmIM4+J23DVtdMKvMtrIE9g2/Pr+YHNrCo//s7C0/bc O3aZCb5lWGkxBtxKxksnq7IR6Y8NTqh4CVtWCg8sqX8fwspOrZeOP3uoLOIdKwUj 1QRpy5d0ZWk+rNtKPs813eJY7DacMBkrYNd9OEFrkfJxDc5aZc3WjDjQTM9+51A4 jkNnIMnKA3nzsw8eULgjuGnRsmsEUvMc7eI/puU+q7ciOckdOOKk3T5E9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACe5UmIy9ROubfrW4hOq8s21d7cMB8GA1UdIwQY MBaAFK75epXiFwJ16Mgu6Hi20I3rgh5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMt MjE0YTlmOTc5YWZjLzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMtMjE0YTlmOTc5YWZj LzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeV4/Kxs EeEmTKMqJtqBzrnaPf7kOZ1vYqBD9PxaQyhToW0UoA289DXzIVrx+o32cpe67yHj 4WZkALh8XkF+QpF9c55hmP56iWozk0McYDvlRBwglVawHvBArE2aBAVCyP/rK5Zl 9MBwZ7Jsnexq2IuRNgko/9fgoqABi502ZGG3jiI9k1rFQ1h00RTN8s07a1iQRqsP z+7X+CsqLlCR9rubeuwWtFYAPq/mEDm7HYx7z/DXzFMoXN0gcfuakULbjk2p16kB 7f7kAOZ+a1LfaH/vfz8+wTGfDQn7jiCmMMSYuCZi0gJHPbC4s7i3f2t5y1NHlijb i4nfIyIeNXvQqA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:45 2025 by rpki-client