This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json) Hash identifier: wsIJzdyjr9vrEUv3K3OqKJgQ1Xw7kzZWJIyQlsOjSoQ= Subject key identifier: 00:4B:53:34:A8:0F:2C:50:0C:84:31:5E:18:6A:66:BF:F6:73:C9:0B Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75 Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175 Certificate serial: 019AF12D5224CB0A1F0EF6C167C44D327ED3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft Manifest number: 0B58 Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: 8MKKfKWQtdkW6amLpflQHyIhFGYYtLc2iaLWnqXXTc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:52:24:cb:0a:1f:0e:f6:c1:67:c4:4d:32:7e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=004b5334a80f2c500c84315e186a66bff673c90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:65:2e:cf:fb:00:87:53:7d:dc:dc:be:85: 1e:4a:de:a7:7c:88:8a:18:6b:ca:e2:82:d2:44:2b: 40:53:bb:c0:a2:9e:90:b2:f4:d7:0a:90:a3:e3:42: 0f:07:26:db:90:d4:76:9c:97:77:9a:91:91:6a:9b: 47:68:19:40:72:84:aa:2c:f1:17:f3:3a:6b:72:74: 96:b1:9d:3e:8c:f1:22:1d:ac:4d:d2:4f:ef:b6:71: 31:eb:27:80:dd:1c:75:1b:4a:78:c3:19:df:36:55: 6a:19:70:46:f9:19:37:48:58:8c:4b:c9:75:0b:18: 94:80:78:8e:ed:52:2b:ad:a0:a1:92:8d:24:e4:32: c3:86:33:ea:68:01:88:fd:e5:1f:aa:a8:6b:c9:4f: d9:a1:87:c2:00:95:78:d1:27:f4:6b:16:36:7c:a3: 7d:ee:b1:55:fa:a8:af:02:97:9c:58:ec:bb:d7:cf: 45:8d:0f:75:b9:fe:b8:3c:2e:7b:79:70:4b:dd:a0: 16:17:73:85:a2:fe:1c:97:c5:20:3a:13:74:99:1a: 10:e4:05:cf:a1:fb:88:0f:de:58:ec:bb:25:56:88: 15:38:73:c8:5e:23:55:3f:9a:73:d8:a8:5c:7a:80: 69:f4:85:97:37:08:bf:2a:86:5d:54:a1:88:bd:df: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:53:34:A8:0F:2C:50:0C:84:31:5E:18:6A:66:BF:F6:73:C9:0B X509v3 Authority Key Identifier: keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:18:93:f9:b5:94:58:12:b3:df:af:c4:53:fb:62:c5:04: 86:66:0b:b1:09:5f:be:49:f6:4e:99:1e:c4:0d:64:ee:46:43: 11:0e:93:7d:e2:a8:e6:4d:c3:0d:c1:83:6b:7b:aa:8f:65:51: c8:c1:8e:6a:a7:7e:39:aa:e9:6d:9f:eb:86:38:29:0f:10:4c: 04:e9:69:5e:3b:4b:7b:f8:62:f6:b9:6c:a5:8b:4c:26:49:ec: fb:a5:3d:d7:7f:85:43:64:65:f4:f5:17:64:32:dc:d2:97:5a: 01:c1:2b:3a:91:33:f8:12:93:6b:e9:51:c8:9f:e1:9f:bc:ce: 4b:f1:5d:0f:24:cc:37:a9:3b:7b:7b:e3:33:c2:b2:1f:c1:49: f7:b1:72:bf:69:9e:a4:75:3c:84:cb:43:61:6e:7a:48:c7:80: 2c:5d:d5:c6:e6:78:fe:35:79:4f:68:e7:c7:1d:09:94:9e:b5: 7e:92:fe:2d:4c:a3:2f:2e:9c:e5:f2:1a:d9:44:ce:ad:75:e9: 29:de:66:62:4a:10:d0:a9:7f:ba:ed:6c:43:bb:8a:ac:79:43: eb:5f:c7:4e:cc:2f:ea:dd:ac:ad:df:b2:24:1d:00:93:99:cd: 9f:3a:72:6b:5c:f3:4c:86:8f:0b:5d:d2:1b:bf:36:15:8c:6e: bd:ca:2d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVIkywofDvbBZ8RNMn7TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNWYzNWE2ZThmYjUzOWIxOTU0Y2I0M2E2Y2U3NWU5N2Zh YWUxNzUwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EygwMDRiNTMzNGE4MGYyYzUwMGM4NDMxNWUxODZhNjZiZmY2NzNjOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3JlLs/7AIdTfdzcvoUeSt6nfIiK GGvK4oLSRCtAU7vAop6QsvTXCpCj40IPBybbkNR2nJd3mpGRaptHaBlAcoSqLPEX 8zprcnSWsZ0+jPEiHaxN0k/vtnEx6yeA3Rx1G0p4wxnfNlVqGXBG+Rk3SFiMS8l1 CxiUgHiO7VIrraChko0k5DLDhjPqaAGI/eUfqqhryU/ZoYfCAJV40Sf0axY2fKN9 7rFV+qivApecWOy7189FjQ91uf64PC57eXBL3aAWF3OFov4cl8UgOhN0mRoQ5AXP ofuID95Y7LslVogVOHPIXiNVP5pz2KhceoBp9IWXNwi/KoZdVKGIvd83EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABLUzSoDyxQDIQxXhhqZr/2c8kLMB8GA1UdIwQY MBaAFK5fNabo+1ObGVTLQ6bOdel/quF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzct MjA5MWNjYThiYzQ4LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzctMjA5MWNjYThiYzQ4 LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOicYk/m1 lFgSs9+vxFP7YsUEhmYLsQlfvkn2TpkexA1k7kZDEQ6TfeKo5k3DDcGDa3uqj2VR yMGOaqd+OarpbZ/rhjgpDxBMBOlpXjtLe/hi9rlspYtMJkns+6U913+FQ2Rl9PUX ZDLc0pdaAcErOpEz+BKTa+lRyJ/hn7zOS/FdDyTMN6k7e3vjM8KyH8FJ97Fyv2me pHU8hMtDYW56SMeALF3VxuZ4/jV5T2jnxx0JlJ61fpL+LUyjLy6c5fIa2UTOrXXp Kd5mYkoQ0Kl/uu1sQ7uKrHlD61/HTswv6t2srd+yJB0Ak5nNnzpya1zzTIaPC13S G782FYxuvcotXw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:14 2025 by rpki-client