This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json) Hash identifier: +UhLFEN5AsoOx/Z9vUOziUef+Vc30wh16FU6CTfGN0g= Subject key identifier: 54:24:23:F2:74:34:FD:30:6B:12:78:07:8A:F7:A6:8F:46:DE:83:D6 Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d Certificate serial: 019AF12DB4EE4ED794A802ED17C5A0D81EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft Manifest number: 0835 Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: mjLVnlVDFNTIfquKuk+ynoH2ygtb2loeAzo5R4JSa7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b4:ee:4e:d7:94:a8:02:ed:17:c5:a0:d8:1e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=542423f27434fd306b1278078af7a68f46de83d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:21:e4:7d:b6:51:70:6c:16:94:c0:b1:70: 0b:15:e2:d0:48:82:c3:76:fa:c7:9e:92:bc:31:85: a4:81:ef:c5:77:b7:dc:d2:7b:60:7e:90:29:49:ae: cc:b6:d8:bf:b0:d6:72:49:2d:f2:07:1e:05:f1:b1: 42:55:e6:ef:36:fc:64:fb:c0:23:28:b8:32:ab:6d: 6b:99:fd:0f:3c:28:13:d0:01:9b:8f:cf:8e:44:21: f6:b5:7f:df:0c:14:61:2c:e6:f4:b9:1d:d2:87:a9: 20:45:a1:8d:e3:d6:50:50:c3:b0:46:69:db:df:75: 60:95:41:6b:53:f8:28:25:11:1b:bb:40:61:ec:b3: db:48:66:83:6b:b6:7c:1c:17:dc:be:11:24:8b:3d: 97:5c:d2:f9:e0:00:3e:f9:c2:6a:94:43:6f:80:c7: d7:40:f3:a4:33:d0:77:a6:ea:f9:17:a8:21:b5:d6: 01:c2:3c:00:5b:16:97:53:c6:02:d9:cf:4b:84:10: 06:43:ec:72:ba:15:0e:f6:fe:de:1d:4d:c5:17:ff: 2a:c6:05:93:f0:70:84:74:37:5c:ab:5d:7e:7a:b3: 43:7a:66:f7:7a:be:d9:4a:36:62:06:2d:4d:35:51: 94:2b:2a:f6:e7:88:83:97:a8:06:97:4d:4f:e5:1a: 4f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:24:23:F2:74:34:FD:30:6B:12:78:07:8A:F7:A6:8F:46:DE:83:D6 X509v3 Authority Key Identifier: keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:66:e0:41:65:7d:9a:aa:78:86:39:7b:2d:fb:b1:3e:15: 87:8b:b7:82:21:1f:95:72:7e:66:c7:4b:36:3f:d2:2d:66:94: b9:9c:b2:ca:d5:df:90:0e:a6:31:3c:e9:e8:17:e4:cf:8f:f6: e3:24:47:6b:08:99:ca:12:1c:92:27:88:8c:2e:03:be:75:c0: 14:93:ce:42:72:3b:ea:7c:71:43:f1:3a:2e:a2:76:d8:af:d7: 44:d2:8f:58:89:bc:44:95:24:af:b5:84:24:c1:e5:7c:b7:20: bd:67:a5:24:7a:ec:41:88:b7:5d:47:61:b0:c3:2b:c2:23:ef: 12:a0:29:2a:e5:88:81:7d:75:94:04:97:13:8b:d2:f5:d9:36: 6f:a5:e8:3e:53:94:b6:82:84:09:80:08:8d:5f:63:70:90:51: af:b8:e4:80:bc:f2:8c:78:03:8c:81:69:c1:b6:dc:53:10:12: 48:b4:4f:63:dc:33:96:49:fc:7b:07:8c:40:50:e3:d5:a7:d1: 96:59:6c:fc:02:71:df:03:3a:e8:76:85:53:8b:b3:12:58:bc: 41:16:3c:df:b3:d5:3f:5f:84:ab:fe:9b:2a:ac:bb:f6:6f:1f: 5b:6b:9a:b6:15:d5:c6:5f:da:89:f3:29:84:1a:d9:67:ab:32: 0c:a6:4f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbTuTteUqALtF8Wg2B62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3 MjAzOGQwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD Eyg1NDI0MjNmMjc0MzRmZDMwNmIxMjc4MDc4YWY3YTY4ZjQ2ZGU4M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtikh5H22UXBsFpTAsXALFeLQSILD dvrHnpK8MYWkge/Fd7fc0ntgfpApSa7Mtti/sNZySS3yBx4F8bFCVebvNvxk+8Aj KLgyq21rmf0PPCgT0AGbj8+ORCH2tX/fDBRhLOb0uR3Sh6kgRaGN49ZQUMOwRmnb 33VglUFrU/goJREbu0Bh7LPbSGaDa7Z8HBfcvhEkiz2XXNL54AA++cJqlENvgMfX QPOkM9B3pur5F6ghtdYBwjwAWxaXU8YC2c9LhBAGQ+xyuhUO9v7eHU3FF/8qxgWT 8HCEdDdcq11+erNDemb3er7ZSjZiBi1NNVGUKyr254iDl6gGl01P5RpP1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQkI/J0NP0waxJ4B4r3po9G3oPWMB8GA1UdIwQY MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM31m4EFl fZqqeIY5ey37sT4Vh4u3giEflXJ+ZsdLNj/SLWaUuZyyytXfkA6mMTzp6Bfkz4/2 4yRHawiZyhIckieIjC4DvnXAFJPOQnI76nxxQ/E6LqJ22K/XRNKPWIm8RJUkr7WE JMHlfLcgvWelJHrsQYi3XUdhsMMrwiPvEqApKuWIgX11lASXE4vS9dk2b6XoPlOU toKECYAIjV9jcJBRr7jkgLzyjHgDjIFpwbbcUxASSLRPY9wzlkn8eweMQFDj1afR llls/AJx3wM66HaFU4uzEli8QRY837PVP1+Eq/6bKqy79m8fW2uathXVxl/aifMp hBrZZ6syDKZPTg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:34 2025 by rpki-client