This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft File: 078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json) Hash identifier: 4Vs5ZLBoGXuP5ArtxHyMYoGIcZKAdmpME3I/e9wbhA4= Subject key identifier: 01:30:9B:68:48:6F:AF:D9:1C:BC:E7:90:5D:8F:2A:CF:E6:62:3C:0C Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12 Certificate issuer: /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412 Certificate serial: 019B24AC7800E7FEB00BE073618F9169A2E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft Manifest number: 1204 Signing time: Tue 16 Dec 2025 01:00:41 +0000 Manifest this update: Tue 16 Dec 2025 01:00:41 +0000 Manifest next update: Wed 17 Dec 2025 01:00:41 +0000 Files and hashes: 1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: niZrYdRoNhF2POvJBG9WdGLf44RbXqjx3k/iNt3uSxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:78:00:e7:fe:b0:0b:e0:73:61:8f:91:69:a2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412 Validity Not Before: Dec 16 01:00:41 2025 GMT Not After : Dec 17 01:00:41 2025 GMT Subject: CN=01309b68486fafd91cbce7905d8f2acfe6623c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:52:7d:06:a2:a0:5e:ee:9e:84:d5:2e:36: 22:a4:63:44:ce:71:80:23:d3:95:2c:f6:71:3d:bf: 9f:62:13:ff:1e:7a:12:de:a9:eb:a2:f6:bf:44:dc: be:ef:f6:26:7a:ff:0e:a3:f5:b2:0c:2d:21:8f:38: f0:e8:bf:9d:b9:e8:e9:4f:0f:af:5f:b8:90:9b:c3: b5:b9:91:64:ed:f0:8e:c8:5b:98:df:a1:84:80:57: a6:36:24:56:99:6f:26:37:d7:ab:8b:64:5a:66:fc: 2c:44:5d:6e:92:41:5d:87:94:3c:cd:78:12:10:1a: 26:80:ba:b1:7e:68:9c:20:be:9a:f8:d6:62:2f:0c: ee:5b:7d:47:3b:fb:2a:f4:1e:c6:a5:90:e8:fd:23: 1d:6d:ae:02:2d:1d:cd:f4:66:c6:0c:d5:cf:e3:6b: 30:ff:d7:35:35:54:27:0b:c5:ad:93:fc:67:d6:b9: 0d:b2:16:57:1d:2b:85:0e:8e:d7:08:c2:9e:0a:cf: 01:59:43:fc:41:52:0f:e4:d1:c9:a1:12:2b:8a:68: 5a:d9:00:eb:8a:ed:ba:9a:53:b3:7f:e8:32:29:d8: 9c:77:35:23:56:6b:e4:d8:9c:b5:ac:6c:9f:bf:01: 1a:cc:8d:5f:26:01:83:c8:c1:a1:97:d3:5b:e6:13: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:30:9B:68:48:6F:AF:D9:1C:BC:E7:90:5D:8F:2A:CF:E6:62:3C:0C X509v3 Authority Key Identifier: keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:69:09:0a:50:5c:06:5a:e7:78:6a:b8:eb:e7:c0:4e:35:04: 4f:05:16:04:a4:38:85:75:1d:a1:98:00:38:f7:26:d9:6e:f4: dc:63:7c:3e:7b:e2:c8:8b:78:cc:c4:e8:42:cc:75:b6:a2:b4: 99:a8:c0:2c:4f:48:5c:73:2c:df:4a:66:16:c3:f4:cc:ae:48: 10:ec:53:a5:54:05:22:50:89:c6:ae:fe:ea:4e:41:3b:fb:a0: 6c:ca:cc:1d:f1:1a:c6:ce:4c:10:42:99:1a:b1:c9:dc:9a:cb: c2:60:d0:32:5a:3e:1a:fd:ef:47:cf:59:76:f6:2f:b5:a6:95: 18:5e:86:f2:07:15:7b:a1:15:82:e5:75:9e:ab:86:b3:45:9f: d1:2f:38:32:2f:91:b5:b0:70:58:54:79:fb:31:20:7d:b7:5c: c0:25:e6:48:83:b5:09:dd:b6:be:e6:e7:79:49:fa:1e:d5:ea: 0c:b9:50:14:3a:43:96:ab:7f:42:94:3c:9f:34:26:5c:e1:8d: 70:c1:38:43:7d:7d:6b:2d:5d:2d:ea:06:ed:61:f2:07:3c:40: b2:fd:4a:58:21:0b:4b:fc:ee:6e:0f:df:18:bf:68:06:f4:62: 7c:0a:29:b4:73:e8:32:09:ae:ee:eb:d3:50:70:05:4c:4f:80: b0:a7:da:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrHgA5/6wC+BzYY+RaaLlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYmYyOGI5ZmIyOGJlZDkwNjZhYTQxMTNjYjhiZTA2NWVk Y2Y0MTIwHhcNMjUxMjE2MDEwMDQxWhcNMjUxMjE3MDEwMDQxWjAzMTEwLwYDVQQD EygwMTMwOWI2ODQ4NmZhZmQ5MWNiY2U3OTA1ZDhmMmFjZmU2NjIzYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxytSfQaioF7unoTVLjYipGNEznGA I9OVLPZxPb+fYhP/HnoS3qnrova/RNy+7/Ymev8Oo/WyDC0hjzjw6L+duejpTw+v X7iQm8O1uZFk7fCOyFuY36GEgFemNiRWmW8mN9eri2RaZvwsRF1ukkFdh5Q8zXgS EBomgLqxfmicIL6a+NZiLwzuW31HO/sq9B7GpZDo/SMdba4CLR3N9GbGDNXP42sw /9c1NVQnC8Wtk/xn1rkNshZXHSuFDo7XCMKeCs8BWUP8QVIP5NHJoRIrimha2QDr iu26mlOzf+gyKdicdzUjVmvk2Jy1rGyfvwEazI1fJgGDyMGhl9Nb5hMNlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEwm2hIb6/ZHLznkF2PKs/mYjwMMB8GA1UdIwQY MBaAFNO/KLn7KL7ZBmqkETy4vgZe3PQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAt MTgwNGQyMDJkNDZkLzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAtMTgwNGQyMDJkNDZk LzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmkJClBc BlrneGq46+fATjUETwUWBKQ4hXUdoZgAOPcm2W703GN8PnviyIt4zMToQsx1tqK0 majALE9IXHMs30pmFsP0zK5IEOxTpVQFIlCJxq7+6k5BO/ugbMrMHfEaxs5MEEKZ GrHJ3JrLwmDQMlo+Gv3vR89ZdvYvtaaVGF6G8gcVe6EVguV1nquGs0Wf0S84Mi+R tbBwWFR5+zEgfbdcwCXmSIO1Cd22vubneUn6HtXqDLlQFDpDlqt/QpQ8nzQmXOGN cME4Q319ay1dLeoG7WHyBzxAsv1KWCELS/zubg/fGL9oBvRifAoptHPoMgmu7uvT UHAFTE+AsKfabA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:21 2025 by rpki-client