This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft File: rryO4V1QIdy_qgXKGDil4KyLfaA.mft (raw, json) Hash identifier: 7SoaytTve2do5fHsLakBd+J+U/hPlOxucxcVopU6IRY= Subject key identifier: BA:34:76:2C:6E:93:22:69:6D:57:F3:62:22:81:F6:FF:3E:D5:22:FF Authority key identifier: AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0 Certificate issuer: /CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0 Certificate serial: 019AF163DD81910B9469344A61CB1302ED1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft Manifest number: 34 Signing time: Sat 06 Dec 2025 02:00:45 +0000 Manifest this update: Sat 06 Dec 2025 02:00:45 +0000 Manifest next update: Sun 07 Dec 2025 02:00:45 +0000 Files and hashes: 1: rryO4V1QIdy_qgXKGDil4KyLfaA.crl (hash: 8MazsYKNzHoIlVtP+8XZ5Pi+oUVwHel90jNAAKXEIBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:dd:81:91:0b:94:69:34:4a:61:cb:13:02:ed:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0 Validity Not Before: Dec 6 02:00:45 2025 GMT Not After : Dec 7 02:00:45 2025 GMT Subject: CN=ba34762c6e9322696d57f3622281f6ff3ed522ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:95:9a:d0:43:dd:bd:cd:ab:b6:02:c8:9e: 04:8e:2d:fa:1d:53:da:c1:1a:5d:4d:dd:d4:02:07: 6f:98:42:c0:17:da:f7:c5:9b:f9:9c:a8:fe:d5:69: f4:04:9d:99:a7:1c:c6:1b:4c:ca:ec:85:28:ea:33: 07:d3:37:18:08:90:00:de:eb:73:64:21:ef:e4:71: 3e:12:23:79:6a:8d:79:e3:d5:66:9b:47:6c:c5:d5: 60:0d:62:f1:42:69:b1:10:e0:e1:60:e8:2e:b1:f1: bc:13:65:e8:29:88:7f:64:60:90:fb:8f:26:d6:bd: c4:77:fa:6e:fa:48:3c:16:f1:52:4a:50:14:88:f1: 78:5e:b3:11:08:6c:b5:c3:43:22:13:0c:a9:a2:36: da:e5:f4:65:d8:2a:82:04:e5:bf:a8:97:72:f0:59: 0a:84:ac:22:5b:4f:67:e0:db:a9:8c:e6:11:45:55: 03:5d:b4:c4:dd:73:a8:89:8a:d5:11:bd:91:49:03: fc:26:cb:91:ba:fb:81:06:9a:b7:e6:26:ac:8f:72: d3:06:bb:c9:b5:65:a8:c8:bf:2f:9d:7e:d3:d3:84: b2:14:72:a3:c3:5a:4d:22:cf:b9:52:11:51:7a:a6: dc:82:f4:19:9f:ca:b4:ee:97:8c:0e:76:8d:0d:0c: 4e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:34:76:2C:6E:93:22:69:6D:57:F3:62:22:81:F6:FF:3E:D5:22:FF X509v3 Authority Key Identifier: keyid:AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e9:22:03:eb:9c:39:f2:f0:b4:02:4d:0e:87:76:a9:c8:a0: 38:7f:20:1f:14:a9:c4:42:4b:b8:90:53:85:e1:86:4d:66:a4: 57:91:71:bc:78:3b:63:f7:b3:36:48:b4:d5:7c:0b:b6:dd:c3: 7c:8f:8d:f4:bd:2b:cd:fc:db:21:2d:e5:31:61:d9:9f:7e:24: dd:3b:07:b6:28:f6:b4:b2:c9:b8:45:e6:90:33:6d:2c:4a:0b: 88:c0:29:9b:58:ef:f0:f2:00:29:75:0f:6c:f3:64:46:54:8c: 78:5c:4b:d9:16:2b:60:c9:fb:39:25:bf:27:cb:1e:f2:81:10: 2b:26:9b:d3:6e:8c:10:19:ff:84:5c:78:c2:7c:8e:20:58:27: bb:97:62:bc:dc:59:a9:e7:d5:11:fa:f9:d6:1d:b1:67:43:ba: 41:35:9c:b2:14:83:ae:68:e5:b3:7a:ad:83:ea:b0:f2:74:2e: 58:48:ea:62:c5:fc:9f:84:29:fd:2e:b1:00:af:87:d2:0e:a9: 30:b9:90:ff:dc:ba:85:7f:c6:da:20:ea:56:23:24:27:56:ac: 0c:ee:3b:c3:10:4d:d1:7e:27:6c:78:67:3e:8c:56:91:73:86: 32:b9:88:d4:fa:55:c0:71:c5:47:78:8a:ba:0e:75:83:84:d4: c2:69:6c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY92BkQuUaTRKYcsTAu0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmM4ZWUxNWQ1MDIxZGNiZmFhMDVjYTE4MzhhNWUwYWM4 YjdkYTAwHhcNMjUxMjA2MDIwMDQ1WhcNMjUxMjA3MDIwMDQ1WjAzMTEwLwYDVQQD EyhiYTM0NzYyYzZlOTMyMjY5NmQ1N2YzNjIyMjgxZjZmZjNlZDUyMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsyVmtBD3b3Nq7YCyJ4Eji36HVPa wRpdTd3UAgdvmELAF9r3xZv5nKj+1Wn0BJ2ZpxzGG0zK7IUo6jMH0zcYCJAA3utz ZCHv5HE+EiN5ao1549Vmm0dsxdVgDWLxQmmxEODhYOgusfG8E2XoKYh/ZGCQ+48m 1r3Ed/pu+kg8FvFSSlAUiPF4XrMRCGy1w0MiEwypojba5fRl2CqCBOW/qJdy8FkK hKwiW09n4NupjOYRRVUDXbTE3XOoiYrVEb2RSQP8JsuRuvuBBpq35iasj3LTBrvJ tWWoyL8vnX7T04SyFHKjw1pNIs+5UhFReqbcgvQZn8q07peMDnaNDQxO9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLo0dixukyJpbVfzYiKB9v8+1SL/MB8GA1UdIwQY MBaAFK68juFdUCHcv6oFyhg4peCsi32gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJ5TzRWMVFJZHlfcWdYS0dEaWw0S3lMZmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hYzYxMTAtMTkwOS00ZjAwLWEwZWUt NjdjZDRjODVhNGM1LzEvcnJ5TzRWMVFJZHlfcWdYS0dEaWw0S3lMZmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hYzYxMTAtMTkwOS00ZjAwLWEwZWUtNjdjZDRjODVhNGM1 LzEvcnJ5TzRWMVFJZHlfcWdYS0dEaWw0S3lMZmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPekiA+uc OfLwtAJNDod2qcigOH8gHxSpxEJLuJBTheGGTWakV5FxvHg7Y/ezNki01XwLtt3D fI+N9L0rzfzbIS3lMWHZn34k3TsHtij2tLLJuEXmkDNtLEoLiMApm1jv8PIAKXUP bPNkRlSMeFxL2RYrYMn7OSW/J8se8oEQKyab026MEBn/hFx4wnyOIFgnu5divNxZ qefVEfr51h2xZ0O6QTWcshSDrmjls3qtg+qw8nQuWEjqYsX8n4Qp/S6xAK+H0g6p MLmQ/9y6hX/G2iDqViMkJ1asDO47wxBN0X4nbHhnPoxWkXOGMrmI1PpVwHHFR3iK ug51g4TUwmlsNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:37 2025 by rpki-client