This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json) Hash identifier: RWFbmKRSofFP592KP49x0pUZDNbK81B4tIrEiXePEck= Subject key identifier: AA:83:B8:2B:48:DE:3A:E7:F2:51:2E:C0:41:97:39:08:AD:15:DD:2B Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Certificate serial: 019AF088AA8385CE62D2B462CA10FED4707F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft Manifest number: 012E Signing time: Fri 05 Dec 2025 22:01:19 +0000 Manifest this update: Fri 05 Dec 2025 22:01:19 +0000 Manifest next update: Sat 06 Dec 2025 22:01:19 +0000 Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: /WQuos/nfS7UEkoKfToKSOTFPjSee6WsgSrpdpfAeeM=) 2: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (hash: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:aa:83:85:ce:62:d2:b4:62:ca:10:fe:d4:70:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Validity Not Before: Dec 5 22:01:19 2025 GMT Not After : Dec 6 22:01:19 2025 GMT Subject: CN=aa83b82b48de3ae7f2512ec041973908ad15dd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:c2:d9:8d:c1:d8:c8:ac:38:a7:c9:3c:9b: c8:17:24:df:62:64:f1:a9:a9:25:fb:e8:9e:8e:d4: 7c:4a:3e:1a:1b:e7:24:7a:5b:e8:fb:ab:e3:b8:c4: 7b:fb:4b:e8:4b:5a:f5:22:4e:a7:77:70:b7:f0:83: b9:42:bf:ba:0e:80:a1:fb:26:b8:0c:5e:79:90:35: ff:6e:98:c1:d5:a1:2d:b4:2b:5c:5f:ef:aa:55:54: fc:26:2e:3d:f7:20:aa:df:b5:16:7f:83:d2:ed:8b: 5d:bc:44:f8:44:61:ee:97:19:26:f7:16:a1:e2:08: c9:fa:86:5c:07:2a:f1:e8:a8:b0:fa:8f:1d:91:ea: 7c:4e:5b:88:a7:32:9c:52:fc:8c:81:a1:89:d3:c7: 67:75:d4:e9:89:69:e6:6a:e1:38:65:d9:0d:ce:82: 75:ec:75:fb:52:a6:7a:5c:7e:1f:b4:84:c5:cb:96: 8d:dc:69:71:87:c8:57:56:d6:c5:9a:a0:bc:33:1c: ab:21:28:dd:f8:f2:5d:42:7d:97:0c:b3:57:e2:f6: f8:cd:db:f9:17:37:f2:3e:a3:80:51:7a:49:f3:d9: 0b:d5:22:b6:f6:60:0d:8e:0f:a8:8b:18:6e:ca:f5: 71:5e:c2:b8:7d:13:75:2b:8d:7e:87:76:8a:08:fd: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:83:B8:2B:48:DE:3A:E7:F2:51:2E:C0:41:97:39:08:AD:15:DD:2B X509v3 Authority Key Identifier: keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a2:4a:80:d0:54:46:88:4e:fa:7e:f9:72:15:f9:47:f6:72: 60:8a:60:ab:8e:1b:12:56:11:d7:5b:f7:e6:fd:1c:f2:61:f8: b8:10:e2:96:c0:8b:98:1e:aa:6c:be:16:90:a0:91:4a:b7:4b: d5:ac:c2:73:43:c7:07:c1:8e:f4:49:e3:83:31:5c:77:c1:a8: 18:92:96:43:bf:86:5b:86:77:ab:7d:18:4d:4f:dc:a3:bc:f3: f7:d6:fb:60:68:85:1d:bb:a6:e9:52:76:54:45:f4:2f:9c:32: a6:5f:36:d7:d5:34:63:cb:54:86:f8:5b:0c:4e:61:d2:02:67: ba:af:28:f8:ce:0f:bc:c2:8e:ce:05:8d:27:ed:e4:c0:d5:5f: ea:00:0d:31:67:f6:b6:4a:c2:e4:52:6f:fd:45:90:61:2a:4a: 8d:54:db:ba:ff:64:4b:91:fe:7a:92:47:4b:56:ec:57:cd:d9: a1:37:89:a3:9a:51:dc:c6:44:df:33:a3:46:d8:2d:b3:60:83: d0:9b:54:3d:73:03:7f:b2:ff:44:26:63:bd:9a:fb:eb:f6:f2: c9:19:1b:66:a5:9d:6f:ae:2f:28:17:77:7a:42:e2:1e:9b:7b: 68:94:1d:e2:b4:ef:23:f1:28:77:30:e7:2f:aa:d6:15:be:e0: 7b:c9:94:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKqDhc5i0rRiyhD+1HB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm ZjY2NDMwHhcNMjUxMjA1MjIwMTE5WhcNMjUxMjA2MjIwMTE5WjAzMTEwLwYDVQQD EyhhYTgzYjgyYjQ4ZGUzYWU3ZjI1MTJlYzA0MTk3MzkwOGFkMTVkZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfnC2Y3B2MisOKfJPJvIFyTfYmTx qakl++iejtR8Sj4aG+ckelvo+6vjuMR7+0voS1r1Ik6nd3C38IO5Qr+6DoCh+ya4 DF55kDX/bpjB1aEttCtcX++qVVT8Ji499yCq37UWf4PS7YtdvET4RGHulxkm9xah 4gjJ+oZcByrx6Kiw+o8dkep8TluIpzKcUvyMgaGJ08dnddTpiWnmauE4ZdkNzoJ1 7HX7UqZ6XH4ftITFy5aN3Glxh8hXVtbFmqC8MxyrISjd+PJdQn2XDLNX4vb4zdv5 FzfyPqOAUXpJ89kL1SK29mANjg+oixhuyvVxXsK4fRN1K41+h3aKCP1DtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqDuCtI3jrn8lEuwEGXOQitFd0rMB8GA1UdIwQY MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct ZTMzN2JmZTAyNzliLzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6JKgNBU RohO+n75chX5R/ZyYIpgq44bElYR11v35v0c8mH4uBDilsCLmB6qbL4WkKCRSrdL 1azCc0PHB8GO9EnjgzFcd8GoGJKWQ7+GW4Z3q30YTU/co7zz99b7YGiFHbum6VJ2 VEX0L5wypl8219U0Y8tUhvhbDE5h0gJnuq8o+M4PvMKOzgWNJ+3kwNVf6gANMWf2 tkrC5FJv/UWQYSpKjVTbuv9kS5H+epJHS1bsV83ZoTeJo5pR3MZE3zOjRtgts2CD 0JtUPXMDf7L/RCZjvZr76/byyRkbZqWdb64vKBd3ekLiHpt7aJQd4rTvI/EodzDn L6rWFb7ge8mU/w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:49 2025 by rpki-client