This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json) Hash identifier: KgTYgvNzcRqBOo2HgqP4og+WDz4gsRk8MppN5jqWeVQ= Subject key identifier: CB:B8:AB:B4:E6:DB:21:5B:5D:E8:BA:57:9E:B0:C0:C9:8E:AC:FD:F9 Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34 Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434 Certificate serial: 019AF12E729E9F92CFA4ACFA35A99CDBFD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft Manifest number: 0812 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: j6tQAmTzxGRd4KCBYYUR6fhTCteuEAImgaSpRZc52tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:72:9e:9f:92:cf:a4:ac:fa:35:a9:9c:db:fd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434 Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=cbb8abb4e6db215b5de8ba579eb0c0c98eacfdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:70:b0:b0:56:93:b7:0c:71:bc:71:60:13: 4c:08:cc:66:23:52:b5:38:78:4b:d7:aa:9e:62:e6: 62:62:c4:dc:00:29:5d:db:a9:f2:b1:fa:47:19:24: 11:c9:51:26:4a:4a:57:3b:45:93:f6:2b:5e:40:cd: 01:86:fe:c9:35:44:27:fc:10:6e:f7:d9:fd:30:e9: dc:a4:de:2e:dc:e2:36:2a:43:68:33:54:b8:98:0d: cd:4a:0c:eb:7e:73:b3:45:f8:b0:09:51:bc:41:e5: 8f:7f:26:93:2b:2b:3b:3a:58:6c:d0:82:65:0d:cc: c9:e3:fb:01:08:aa:db:43:f5:cc:c9:cd:7f:dc:20: 1f:31:e1:0e:43:5d:bb:ed:9e:3e:67:c1:8e:68:9e: a7:92:21:79:a3:be:5d:ae:1b:0e:51:97:d8:a4:6d: db:10:e8:d9:0e:59:ab:86:8c:5b:cf:fd:49:ba:7a: 95:38:ba:3a:49:6e:a3:a9:32:ac:9b:a2:e2:22:a4: 5d:73:23:6c:bb:3f:64:b2:45:c2:27:d7:b2:f3:e9: 7f:18:af:1a:4b:de:0c:91:30:71:14:95:1d:00:bd: 30:d4:83:ba:99:e4:c2:a8:7a:a5:82:83:3c:11:e8: 16:9d:e4:85:bf:3f:f2:fc:58:90:c4:19:bc:7c:3b: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B8:AB:B4:E6:DB:21:5B:5D:E8:BA:57:9E:B0:C0:C9:8E:AC:FD:F9 X509v3 Authority Key Identifier: keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:06:0e:82:86:3f:d0:8d:51:d3:b3:62:99:0f:fc:c0:6a: df:f6:7b:e5:fe:a9:75:84:d9:11:d7:95:10:1d:df:cd:d5:16: 90:88:be:1c:d3:2c:13:20:79:2d:7e:96:c5:36:41:01:fc:c2: 89:d6:d1:f1:82:16:a1:bd:08:e9:46:7b:db:a8:48:f6:af:06: 45:c7:2e:ed:db:17:18:e4:1b:6d:d8:79:49:9b:0d:43:35:5c: 52:b9:f4:84:ed:36:a5:b1:39:48:b5:cb:e8:78:f7:68:38:38: 53:3b:0e:ba:f7:b9:b8:76:9f:85:bc:c7:83:f0:0c:92:bf:8d: 06:df:e8:7d:08:98:11:68:86:ae:f1:51:4a:f6:8a:8c:e0:6d: e9:43:5c:27:62:f0:63:1f:d4:18:45:c5:80:0b:99:c3:c9:f8: e7:47:52:bb:14:7e:35:12:b9:c2:7f:31:1a:a0:96:9b:cf:d9: 5b:b2:79:2b:7f:b3:50:65:47:00:58:28:9a:d3:2f:9d:bc:42: 04:77:9b:49:2b:49:08:f8:0b:b2:0b:20:4b:dd:6a:e9:a0:11: e9:b7:00:06:1e:00:c8:45:7d:2d:2a:9d:b2:c6:69:fb:1c:0a: a5:16:72:2b:3a:55:10:b8:23:69:42:d9:09:24:38:e5:1a:63: 53:57:63:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnKen5LPpKz6Namc2/01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy MzY0MzQwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhjYmI4YWJiNGU2ZGIyMTViNWRlOGJhNTc5ZWIwYzBjOThlYWNmZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCdwsLBWk7cMcbxxYBNMCMxmI1K1 OHhL16qeYuZiYsTcACld26nysfpHGSQRyVEmSkpXO0WT9iteQM0Bhv7JNUQn/BBu 99n9MOncpN4u3OI2KkNoM1S4mA3NSgzrfnOzRfiwCVG8QeWPfyaTKys7Olhs0IJl DczJ4/sBCKrbQ/XMyc1/3CAfMeEOQ1277Z4+Z8GOaJ6nkiF5o75drhsOUZfYpG3b EOjZDlmrhoxbz/1JunqVOLo6SW6jqTKsm6LiIqRdcyNsuz9kskXCJ9ey8+l/GK8a S94MkTBxFJUdAL0w1IO6meTCqHqlgoM8EegWneSFvz/y/FiQxBm8fDtdLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu4q7Tm2yFbXei6V56wwMmOrP35MB8GA1UdIwQY MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3 LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYwGDoKG P9CNUdOzYpkP/MBq3/Z75f6pdYTZEdeVEB3fzdUWkIi+HNMsEyB5LX6WxTZBAfzC idbR8YIWob0I6UZ726hI9q8GRccu7dsXGOQbbdh5SZsNQzVcUrn0hO02pbE5SLXL 6Hj3aDg4UzsOuve5uHafhbzHg/AMkr+NBt/ofQiYEWiGrvFRSvaKjOBt6UNcJ2Lw Yx/UGEXFgAuZw8n450dSuxR+NRK5wn8xGqCWm8/ZW7J5K3+zUGVHAFgomtMvnbxC BHebSStJCPgLsgsgS91q6aAR6bcABh4AyEV9LSqdssZp+xwKpRZyKzpVELgjaULZ CSQ45RpjU1djQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:58 2025 by rpki-client