This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft File: RjED8MVPLKupUVZ61E0zwvv58gY.mft (raw, json) Hash identifier: HlnFBoDh9Wqsj6ZhnKHz1AyEVMbVQuvCllADP1tiwQc= Subject key identifier: C0:80:D4:03:B5:E6:7A:64:CE:38:0C:53:8A:4A:21:99:6F:26:71:EC Authority key identifier: 46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06 Certificate issuer: /CN=463103f0c54f2caba951567ad44d33c2fbf9f206 Certificate serial: 019AF61CA7760E4721E95BFEE3E09613E159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft Manifest number: 0932 Signing time: Sun 07 Dec 2025 00:01:04 +0000 Manifest this update: Sun 07 Dec 2025 00:01:04 +0000 Manifest next update: Mon 08 Dec 2025 00:01:04 +0000 Files and hashes: 1: RjED8MVPLKupUVZ61E0zwvv58gY.crl (hash: DfewppM1eXlJQP7y610SI9sXRiFwSub6o+0OjkZj5l4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:a7:76:0e:47:21:e9:5b:fe:e3:e0:96:13:e1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=463103f0c54f2caba951567ad44d33c2fbf9f206 Validity Not Before: Dec 7 00:01:04 2025 GMT Not After : Dec 8 00:01:04 2025 GMT Subject: CN=c080d403b5e67a64ce380c538a4a21996f2671ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:08:b4:86:7a:e7:86:67:f3:4e:b8:76:09: 95:28:43:ca:0f:de:a9:cc:df:ef:de:cd:b2:9d:0c: 3b:19:ea:f3:e0:bb:43:e9:42:22:92:5d:a9:b5:f3: f3:c6:09:ed:e8:61:9c:d1:e2:90:2a:47:8a:36:c7: d5:e8:dd:be:76:5e:b2:9a:10:3b:6a:bf:77:f6:06: f0:58:c1:18:19:a6:ce:4f:d4:85:d7:23:a4:55:b0: a7:6a:e7:cf:5f:31:84:2f:d4:9a:2d:78:61:fd:80: 34:c8:a8:06:54:c0:9f:d4:25:6c:69:7b:6b:f4:21: 66:c9:9a:31:ae:a1:30:be:01:32:6d:57:52:a2:30: 2c:01:1b:77:92:08:83:d6:7c:a1:9f:cd:29:f4:59: d2:32:5d:b0:b2:4a:23:74:50:b4:7b:2c:5b:15:48: 9b:64:62:67:84:98:7d:73:6c:10:b8:29:86:57:62: 96:d7:54:31:b3:32:0b:06:69:e2:ac:67:b0:fc:a6: 97:63:10:51:b6:75:70:a9:55:f8:01:e0:f6:16:8a: 6d:5d:f7:1c:15:d4:b9:61:22:db:9a:e8:29:52:24: 29:5a:c9:5c:90:9d:77:d6:b3:37:48:88:a6:af:a7: 98:91:75:81:81:b4:60:8b:72:06:53:63:93:42:ca: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:D4:03:B5:E6:7A:64:CE:38:0C:53:8A:4A:21:99:6F:26:71:EC X509v3 Authority Key Identifier: keyid:46:31:03:F0:C5:4F:2C:AB:A9:51:56:7A:D4:4D:33:C2:FB:F9:F2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjED8MVPLKupUVZ61E0zwvv58gY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f80a2a-568d-4a38-90c4-6ef02d2147cb/1/RjED8MVPLKupUVZ61E0zwvv58gY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:c4:6a:3b:cb:61:ae:5a:a9:37:40:d7:58:ba:87:3d:e8:29: 1a:ba:12:51:b0:09:a8:8c:cd:c1:61:31:aa:b1:ef:90:4a:81: ba:58:af:ef:52:d6:6e:fb:e1:55:ee:da:3d:0a:e4:ed:52:24: a1:17:a8:0f:6e:da:1a:56:ab:8f:d1:72:45:90:77:6f:c3:a8: a8:17:2a:c8:e8:0b:a5:51:ad:43:75:0e:fd:b8:3d:51:56:74: 10:c1:a6:58:eb:21:c9:26:64:fc:67:87:d0:b5:a1:db:15:b6: 3e:a1:04:68:56:cd:a2:f2:ec:3a:c2:23:d9:26:51:2e:ed:e7: 84:20:03:c1:7c:89:6d:d6:8c:bf:3f:39:44:9b:17:92:70:25: ea:37:dd:b8:bd:47:67:7e:60:79:9b:60:9b:7d:85:54:25:9f: 68:99:35:50:ea:c2:6e:53:c2:9d:be:b0:29:c3:6c:f6:2d:44: f2:6a:da:d6:ec:44:c1:d7:23:b0:61:06:78:8d:a9:fe:9e:b7: a9:ba:18:81:0a:a7:df:d4:b3:2b:36:a9:ed:ef:f0:53:3e:c3: be:0a:fd:b0:26:78:21:e9:a8:02:77:d1:a8:91:10:9a:29:38: 33:54:6d:49:d4:f1:28:77:59:de:27:57:fd:de:e0:33:60:02: 31:2b:66:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HKd2Dkch6Vv+4+CWE+FZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzEwM2YwYzU0ZjJjYWJhOTUxNTY3YWQ0NGQzM2MyZmJm OWYyMDYwHhcNMjUxMjA3MDAwMTA0WhcNMjUxMjA4MDAwMTA0WjAzMTEwLwYDVQQD EyhjMDgwZDQwM2I1ZTY3YTY0Y2UzODBjNTM4YTRhMjE5OTZmMjY3MWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt4ItIZ654Zn8064dgmVKEPKD96p zN/v3s2ynQw7Gerz4LtD6UIikl2ptfPzxgnt6GGc0eKQKkeKNsfV6N2+dl6ymhA7 ar939gbwWMEYGabOT9SF1yOkVbCnaufPXzGEL9SaLXhh/YA0yKgGVMCf1CVsaXtr 9CFmyZoxrqEwvgEybVdSojAsARt3kgiD1nyhn80p9FnSMl2wskojdFC0eyxbFUib ZGJnhJh9c2wQuCmGV2KW11QxszILBmnirGew/KaXYxBRtnVwqVX4AeD2FoptXfcc FdS5YSLbmugpUiQpWslckJ131rM3SIimr6eYkXWBgbRgi3IGU2OTQsq/7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCA1AO15npkzjgMU4pKIZlvJnHsMB8GA1UdIwQY MBaAFEYxA/DFTyyrqVFWetRNM8L7+fIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmpFRDhNVlBMS3VwVVZaNjFFMHp3dnY1OGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mODBhMmEtNTY4ZC00YTM4LTkwYzQt NmVmMDJkMjE0N2NiLzEvUmpFRDhNVlBMS3VwVVZaNjFFMHp3dnY1OGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mODBhMmEtNTY4ZC00YTM4LTkwYzQtNmVmMDJkMjE0N2Ni LzEvUmpFRDhNVlBMS3VwVVZaNjFFMHp3dnY1OGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMRqO8th rlqpN0DXWLqHPegpGroSUbAJqIzNwWExqrHvkEqBuliv71LWbvvhVe7aPQrk7VIk oReoD27aGlarj9FyRZB3b8OoqBcqyOgLpVGtQ3UO/bg9UVZ0EMGmWOshySZk/GeH 0LWh2xW2PqEEaFbNovLsOsIj2SZRLu3nhCADwXyJbdaMvz85RJsXknAl6jfduL1H Z35geZtgm32FVCWfaJk1UOrCblPCnb6wKcNs9i1E8mra1uxEwdcjsGEGeI2p/p63 qboYgQqn39SzKzap7e/wUz7Dvgr9sCZ4IemoAnfRqJEQmik4M1RtSdTxKHdZ3idX /d7gM2ACMStmfA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:52 2025 by rpki-client