This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json) Hash identifier: MCMysoM3JUneRqkekAQvpCfJiu06AWcVOuH4iipWiG8= Subject key identifier: DF:25:ED:F1:FF:73:FB:8D:9D:7F:44:6E:82:CD:51:11:93:C6:4B:02 Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75 Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175 Certificate serial: 019B3C7E49B675D266C02392BCF04D33A21D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft Manifest number: 0B7F Signing time: Sat 20 Dec 2025 16:01:07 +0000 Manifest this update: Sat 20 Dec 2025 16:01:07 +0000 Manifest next update: Sun 21 Dec 2025 16:01:07 +0000 Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: eiPQzo3vX1XmPYLcyOGKhVmmoqKAw1vPWH41De0ALoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:49:b6:75:d2:66:c0:23:92:bc:f0:4d:33:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175 Validity Not Before: Dec 20 16:01:07 2025 GMT Not After : Dec 21 16:01:07 2025 GMT Subject: CN=df25edf1ff73fb8d9d7f446e82cd511193c64b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f2:38:62:7b:af:f3:d2:f9:fd:5d:1a:3e:cb: 82:c6:77:0e:2a:f5:bd:c3:86:30:20:d6:03:6d:36: c7:28:db:1c:13:46:7e:3c:e8:25:50:47:ff:ce:e7: b7:b4:67:d5:3b:60:5d:c8:07:ec:16:49:7e:3b:30: 67:5b:f9:b7:f2:11:52:48:a5:82:2d:be:53:8a:44: 3f:5a:fa:81:94:df:2d:a4:c0:6f:10:53:f0:c2:c6: 62:4b:76:e3:11:dc:a7:b9:f2:01:a9:93:5f:89:3a: 69:21:99:0b:3a:a0:c3:be:5a:7f:97:85:fd:4a:9f: b6:79:27:15:9f:25:ec:f2:83:95:59:d1:bc:f7:98: 7e:b9:8f:ae:b7:41:68:7e:37:ed:06:6a:9b:17:19: 7e:33:b7:7a:0b:56:1a:fc:23:18:7c:e8:18:ef:ba: a0:52:ae:a5:8c:72:9e:8c:57:b2:70:d8:e4:9f:9d: 69:7c:3c:52:bc:f3:2d:96:06:28:fb:a6:3f:7b:83: 7a:59:21:dd:cf:af:4d:52:31:fa:ee:cb:ab:71:b2: 01:d6:45:c4:17:48:4b:16:b4:e6:e1:7b:3a:6f:9a: 45:9a:57:f4:20:60:24:0d:25:8c:d4:c5:2a:d7:4d: 5a:bc:50:49:35:93:52:d9:fd:24:25:af:1b:48:fe: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:ED:F1:FF:73:FB:8D:9D:7F:44:6E:82:CD:51:11:93:C6:4B:02 X509v3 Authority Key Identifier: keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6d:93:7f:f5:40:aa:01:71:97:aa:b9:59:44:70:b4:78:58: 19:8c:69:8e:40:03:25:4e:27:14:a1:4f:7b:d1:2d:11:6a:ff: 53:4d:9a:6d:6c:17:5a:f4:b8:74:63:cf:4a:fa:e6:a0:fe:ba: ee:89:d0:22:ed:28:16:6b:37:82:b7:41:c5:c7:e8:0e:36:f3: 2a:6d:e6:ea:73:29:39:bb:36:74:19:f0:81:29:da:a4:48:c2: 77:a8:9c:89:08:22:94:78:99:c2:fc:7d:a3:d1:dc:7f:18:eb: 08:6a:eb:9f:2d:35:0b:28:76:d0:5e:36:2d:17:60:38:5d:c4: 45:f9:dc:66:b4:31:ea:d6:da:9b:57:1c:be:8d:f9:a4:38:71: 48:37:7c:a7:43:77:40:0f:ca:25:2d:c4:e5:b4:65:fc:ed:ed: 2b:81:65:a7:ff:8f:22:a6:06:cc:aa:d6:9f:f8:35:26:0b:41: 3a:37:9b:cb:1d:c3:e8:5c:c5:7e:1f:70:14:42:4e:a8:34:34: 9f:ae:cc:7b:7c:91:2f:84:e9:fc:76:9c:03:16:c7:e5:b1:6e: 8d:ef:79:84:d1:e6:8f:45:c9:cd:47:52:f8:bc:ba:75:ca:ff: 16:86:f5:be:23:71:88:d0:01:3a:f5:d5:b8:8e:09:1f:95:84: 58:d0:9d:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fkm2ddJmwCOSvPBNM6IdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNWYzNWE2ZThmYjUzOWIxOTU0Y2I0M2E2Y2U3NWU5N2Zh YWUxNzUwHhcNMjUxMjIwMTYwMTA3WhcNMjUxMjIxMTYwMTA3WjAzMTEwLwYDVQQD EyhkZjI1ZWRmMWZmNzNmYjhkOWQ3ZjQ0NmU4MmNkNTExMTkzYzY0YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PI4Ynuv89L5/V0aPsuCxncOKvW9 w4YwINYDbTbHKNscE0Z+POglUEf/zue3tGfVO2BdyAfsFkl+OzBnW/m38hFSSKWC Lb5TikQ/WvqBlN8tpMBvEFPwwsZiS3bjEdynufIBqZNfiTppIZkLOqDDvlp/l4X9 Sp+2eScVnyXs8oOVWdG895h+uY+ut0FofjftBmqbFxl+M7d6C1Ya/CMYfOgY77qg Uq6ljHKejFeycNjkn51pfDxSvPMtlgYo+6Y/e4N6WSHdz69NUjH67surcbIB1kXE F0hLFrTm4Xs6b5pFmlf0IGAkDSWM1MUq101avFBJNZNS2f0kJa8bSP6MdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8l7fH/c/uNnX9EboLNURGTxksCMB8GA1UdIwQY MBaAFK5fNabo+1ObGVTLQ6bOdel/quF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzct MjA5MWNjYThiYzQ4LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9mZWI3ZTAtMmI3ZS00MjZjLWIwMzctMjA5MWNjYThiYzQ4 LzEvcmw4MXB1ajdVNXNaVk10RHBzNTE2WC1xNFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG2Tf/VA qgFxl6q5WURwtHhYGYxpjkADJU4nFKFPe9EtEWr/U02abWwXWvS4dGPPSvrmoP66 7onQIu0oFms3grdBxcfoDjbzKm3m6nMpObs2dBnwgSnapEjCd6iciQgilHiZwvx9 o9HcfxjrCGrrny01Cyh20F42LRdgOF3ERfncZrQx6tbam1ccvo35pDhxSDd8p0N3 QA/KJS3E5bRl/O3tK4Flp/+PIqYGzKrWn/g1JgtBOjebyx3D6FzFfh9wFEJOqDQ0 n67Me3yRL4Tp/HacAxbH5bFuje95hNHmj0XJzUdS+Ly6dcr/Fob1viNxiNABOvXV uI4JH5WEWNCd1g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:54:15 2025 by rpki-client