This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json) Hash identifier: IGmTjGiG1PqcriMOcd1QCvJRXZbO7z8h70Va7iJq/50= Subject key identifier: 8E:9B:AA:12:0B:9A:51:39:D8:52:E2:7A:8B:B3:8F:65:DE:D3:4A:93 Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca Certificate serial: 019AF12DC1F5243600A491A5F984699608ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft Manifest number: 12DE Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: 4lOHj6aGfBNpZ34HLKRW0hGneA/nIsGSvmZ5uo1FLMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c1:f5:24:36:00:a4:91:a5:f9:84:69:96:08:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=8e9baa120b9a5139d852e27a8bb38f65ded34a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:a1:c8:b6:47:cb:c2:4c:3c:e8:3b:5f:0b: 6d:3c:24:f5:9f:d2:06:c1:26:a2:4d:3d:ce:07:11: 69:b6:7e:f7:e0:59:81:f2:d2:55:9d:2c:09:be:17: 6d:f3:df:f6:f9:e9:ca:b0:36:b4:4f:a4:3c:e4:9a: 53:a4:71:70:25:44:72:3c:1d:84:9c:6f:26:a0:20: a2:a3:95:53:2e:6f:cf:9e:7a:55:35:12:57:72:41: a9:ac:ce:07:6f:40:79:f2:8a:19:0b:5f:3c:76:ac: 45:27:aa:9d:91:bd:2a:4e:4a:a0:a8:73:b6:9e:da: 02:8e:d3:a1:79:f6:1d:88:cc:93:fb:c2:8a:e6:8b: a2:8c:d3:ab:b7:0b:62:e3:36:62:76:8e:4d:78:d9: 02:4d:e4:ac:d7:14:a2:1e:ef:d9:d0:c8:34:e2:ea: 60:57:3f:ec:8e:1c:6f:da:32:03:df:79:2c:0a:a9: d4:d9:1f:74:9c:cd:b9:c4:10:e7:28:49:41:b4:8b: 19:b9:7e:bc:e6:c0:25:0f:59:9b:88:06:80:a4:5b: b2:cb:b5:e2:07:35:a2:69:fc:ab:e7:66:72:60:03: a2:d5:db:10:29:18:f9:7b:4c:96:52:8b:4e:88:76: c9:ec:7b:22:c1:9e:0a:64:5c:ea:c8:60:d3:cd:67: 04:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:AA:12:0B:9A:51:39:D8:52:E2:7A:8B:B3:8F:65:DE:D3:4A:93 X509v3 Authority Key Identifier: keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5a:79:3f:dc:b4:e5:ba:be:2a:49:32:4a:5c:59:d3:c9:95: a1:cf:ef:7f:04:01:c1:2c:06:01:3d:a4:a5:84:bd:56:69:a8: 82:c8:fa:2a:e6:68:c8:ca:3e:2b:52:c4:5a:c0:89:48:e5:88: 74:18:37:83:c1:59:f7:2e:cc:37:d9:cb:e5:25:ab:38:04:1e: 69:ca:8f:a6:30:d5:03:90:67:7b:27:2d:e4:c3:32:1d:04:eb: 53:2b:dc:d2:66:a4:75:59:35:89:e2:30:2a:65:da:1f:cc:0f: 76:aa:bc:14:f4:96:ab:d8:d5:cb:eb:1c:41:47:a5:b5:08:35: 20:3e:4f:5e:dc:12:c6:e3:81:b9:d8:85:24:81:4f:a6:62:20: 0a:5d:b1:b1:f7:64:a8:d7:11:92:86:7f:e9:24:60:29:b9:68: 1f:62:55:e2:c4:1c:d3:20:c1:38:05:80:10:ab:dc:c6:e1:0e: 37:4f:64:2c:78:5c:69:f2:d7:29:ba:dc:1c:64:fb:b9:00:2f: 63:4e:fd:5a:34:52:3d:23:d2:b5:07:0d:f7:f7:21:32:66:2b: 9b:75:2d:65:8b:7f:a5:58:c6:36:87:b8:f2:25:02:24:7d:34: 38:9b:52:61:9f:8d:c2:d5:ac:63:64:ae:fd:02:bf:77:d8:89: 07:34:c0:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcH1JDYApJGl+YRplgjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDRiMzc1ZmQ0Y2FmZDVkZmJhYzQwNmRkMjVhNjFkMjJk ZDM2Y2EwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD Eyg4ZTliYWExMjBiOWE1MTM5ZDg1MmUyN2E4YmIzOGY2NWRlZDM0YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JWhyLZHy8JMPOg7XwttPCT1n9IG wSaiTT3OBxFptn734FmB8tJVnSwJvhdt89/2+enKsDa0T6Q85JpTpHFwJURyPB2E nG8moCCio5VTLm/PnnpVNRJXckGprM4Hb0B58ooZC188dqxFJ6qdkb0qTkqgqHO2 ntoCjtOhefYdiMyT+8KK5ouijNOrtwti4zZido5NeNkCTeSs1xSiHu/Z0Mg04upg Vz/sjhxv2jID33ksCqnU2R90nM25xBDnKElBtIsZuX685sAlD1mbiAaApFuyy7Xi BzWiafyr52ZyYAOi1dsQKRj5e0yWUotOiHbJ7HsiwZ4KZFzqyGDTzWcERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6bqhILmlE52FLieouzj2Xe00qTMB8GA1UdIwQY MBaAFInUs3X9TK/V37rEBt0lph0i3TbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRTemRmMU1yOVhmdXNRRzNTV21IU0xkTnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iY2FkOGQtOGU1NS00YTgxLWIzOTMt Mjc0MjUxMjUyMDc3LzEvaWRTemRmMU1yOVhmdXNRRzNTV21IU0xkTnNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iY2FkOGQtOGU1NS00YTgxLWIzOTMtMjc0MjUxMjUyMDc3 LzEvaWRTemRmMU1yOVhmdXNRRzNTV21IU0xkTnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClp5P9y0 5bq+KkkySlxZ08mVoc/vfwQBwSwGAT2kpYS9Vmmogsj6KuZoyMo+K1LEWsCJSOWI dBg3g8FZ9y7MN9nL5SWrOAQeacqPpjDVA5Bneyct5MMyHQTrUyvc0makdVk1ieIw KmXaH8wPdqq8FPSWq9jVy+scQUeltQg1ID5PXtwSxuOBudiFJIFPpmIgCl2xsfdk qNcRkoZ/6SRgKbloH2JV4sQc0yDBOAWAEKvcxuEON09kLHhcafLXKbrcHGT7uQAv Y079WjRSPSPStQcN9/chMmYrm3UtZYt/pVjGNoe48iUCJH00OJtSYZ+NwtWsY2Su /QK/d9iJBzTApw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:01 2025 by rpki-client