This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json) Hash identifier: f4fso3LxjJLLnXG6Ip4UfiGFqpGzf0w124ZTYisCHYc= Subject key identifier: BC:E6:DC:6A:8E:BC:31:5D:75:EB:59:61:A1:2D:08:22:7E:89:7B:A4 Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53 Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53 Certificate serial: 019AF19B1092356516DEE03C3198E5F59BA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft Manifest number: 104B Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: HAP1nSsUedBRyNbd2OsVeDXVHkd8VFqZ6rNdsN9oSaM=) 2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:10:92:35:65:16:de:e0:3c:31:98:e5:f5:9b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=bce6dc6a8ebc315d75eb5961a12d08227e897ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:eb:2c:f9:bc:11:61:23:bc:de:d7:f9:9e: 33:86:1f:94:0a:06:67:b0:b9:b4:14:6e:e8:02:e9: 61:6b:a1:a8:5a:60:d0:86:5e:bc:32:50:8c:4c:9e: 9e:81:65:4e:5d:1b:3d:bd:10:dc:3e:f6:27:c9:c0: dd:3b:2e:10:55:5b:b8:05:d5:b1:45:0f:19:be:7e: 38:e5:3b:91:fb:32:90:84:0d:b4:a9:ef:cf:d2:a4: 2f:ec:11:b6:76:23:75:5c:e8:ff:10:4b:28:e9:e0: 61:1e:a3:1d:8d:a6:29:02:c9:ad:ae:69:5d:63:fa: 4a:83:07:ad:b2:af:32:e4:3b:27:12:62:c5:cb:97: 5a:e6:5f:69:69:7c:ed:4b:71:c1:7a:38:fb:f5:96: 5c:30:3d:1f:c9:a7:ca:e5:69:2b:a7:66:98:e5:65: d6:82:5b:a6:2f:45:23:ff:97:16:61:66:e0:1c:c3: 5f:3b:53:d9:15:42:dc:55:e0:59:5c:38:ad:4f:22: b6:2b:2b:52:36:7e:9d:5b:95:59:ff:78:c8:44:d4: af:f5:fb:84:5d:ed:16:32:81:86:50:40:d5:2a:76: f7:83:a5:d1:91:30:19:a5:42:03:87:ca:9c:88:ab: cd:c5:df:f6:a5:21:d1:72:ed:07:94:e0:3c:92:03: 21:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E6:DC:6A:8E:BC:31:5D:75:EB:59:61:A1:2D:08:22:7E:89:7B:A4 X509v3 Authority Key Identifier: keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:24:60:6d:ab:67:39:14:5e:c7:2a:d1:fd:6e:e1:f7:2a:2f: 2b:7f:23:4c:9d:52:ed:c1:9d:6e:e4:45:b8:26:7b:68:d8:b9: d2:c4:0b:f3:06:45:29:fb:49:0c:9a:5f:df:60:9b:ce:98:a2: 17:39:60:af:04:71:6b:e1:b9:83:13:91:4a:30:4d:aa:7b:a9: 70:02:8a:f4:3d:12:06:2d:97:97:de:4e:e0:f5:2b:4c:1a:3a: 99:50:a7:b9:6f:92:46:42:87:0e:80:7f:b6:77:3a:c4:9f:c8: 5f:f6:91:79:1c:7b:b5:c4:e1:44:12:b4:15:4b:e4:d2:05:c9: d8:c2:ef:8e:dc:ee:bc:6a:3a:14:8e:b2:13:88:5b:5a:87:a3: 98:67:ec:a4:17:0e:04:1a:90:8a:c0:fd:cf:03:d0:3e:06:48: 7f:c7:46:7b:b3:e6:a3:10:7e:b0:7d:b5:1d:99:ff:55:94:6e: cc:90:04:18:7d:74:37:55:7f:a0:74:ff:62:ef:3b:31:12:49: 9a:0c:4b:58:8c:e3:f8:e2:6a:9d:8c:98:55:d8:76:6d:65:06: 16:37:08:8f:f2:c8:69:e8:19:0e:48:72:0b:ce:2b:5b:8a:df: aa:58:39:d5:04:62:a4:56:7f:c5:d9:1e:12:c8:23:87:0c:1a: d2:78:13:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxCSNWUW3uA8MZjl9ZujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx ODBmNTMwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EyhiY2U2ZGM2YThlYmMzMTVkNzVlYjU5NjFhMTJkMDgyMjdlODk3YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu3rLPm8EWEjvN7X+Z4zhh+UCgZn sLm0FG7oAulha6GoWmDQhl68MlCMTJ6egWVOXRs9vRDcPvYnycDdOy4QVVu4BdWx RQ8Zvn445TuR+zKQhA20qe/P0qQv7BG2diN1XOj/EEso6eBhHqMdjaYpAsmtrmld Y/pKgwetsq8y5DsnEmLFy5da5l9paXztS3HBejj79ZZcMD0fyafK5Wkrp2aY5WXW glumL0Uj/5cWYWbgHMNfO1PZFULcVeBZXDitTyK2KytSNn6dW5VZ/3jIRNSv9fuE Xe0WMoGGUEDVKnb3g6XRkTAZpUIDh8qciKvNxd/2pSHRcu0HlOA8kgMhNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzm3GqOvDFddetZYaEtCCJ+iXukMB8GA1UdIwQY MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1 LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESRgbatn ORRexyrR/W7h9yovK38jTJ1S7cGdbuRFuCZ7aNi50sQL8wZFKftJDJpf32Cbzpii FzlgrwRxa+G5gxORSjBNqnupcAKK9D0SBi2Xl95O4PUrTBo6mVCnuW+SRkKHDoB/ tnc6xJ/IX/aReRx7tcThRBK0FUvk0gXJ2MLvjtzuvGo6FI6yE4hbWoejmGfspBcO BBqQisD9zwPQPgZIf8dGe7PmoxB+sH21HZn/VZRuzJAEGH10N1V/oHT/Yu87MRJJ mgxLWIzj+OJqnYyYVdh2bWUGFjcIj/LIaegZDkhyC84rW4rfqlg51QRipFZ/xdke Esgjhwwa0ngTrw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:05 2025 by rpki-client