This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json) Hash identifier: J1R/AirBIDrRYgagWnpS83q0piKuF55vui/BNcM2he4= Subject key identifier: 31:D3:D7:F0:DB:8D:8C:2B:4A:05:EC:0D:13:59:ED:E9:22:95:4D:40 Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46 Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46 Certificate serial: 019B2C66BB9EFB08241838A0335CE65F02C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft Manifest number: 0A6E Signing time: Wed 17 Dec 2025 13:01:28 +0000 Manifest this update: Wed 17 Dec 2025 13:01:28 +0000 Manifest next update: Thu 18 Dec 2025 13:01:28 +0000 Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: uHFbIJT/poWyLC+4cYGPBNGxBk4FvxGEj/FmKG3LV7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:bb:9e:fb:08:24:18:38:a0:33:5c:e6:5f:02:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46 Validity Not Before: Dec 17 13:01:28 2025 GMT Not After : Dec 18 13:01:28 2025 GMT Subject: CN=31d3d7f0db8d8c2b4a05ec0d1359ede922954d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:f2:e7:4f:aa:b6:55:b7:96:e9:47:3f:a3: da:25:00:e7:3f:a1:36:d6:9a:d4:d1:90:81:84:c8: 6f:4e:88:8f:3f:71:28:cf:45:cd:81:36:56:0d:29: 84:21:53:91:8f:88:c0:0f:c7:56:53:da:91:da:30: 84:db:f7:1d:71:db:e5:48:2a:29:59:5d:f8:86:f4: 4a:10:a0:ae:66:56:cb:ee:d1:47:2b:34:2e:ec:b8: ea:ab:54:fa:a8:e6:60:5d:8d:be:a3:c4:6e:54:3c: 2e:6b:ae:51:2a:0e:a7:db:7b:75:1b:66:ed:d0:cd: d7:e7:2e:c8:d3:ea:e7:08:15:8d:db:1c:a7:68:e1: d3:e7:fd:45:ee:21:66:29:26:68:62:67:e1:c4:bc: 4b:42:10:1f:53:06:2d:6a:87:a7:54:2c:27:31:f7: 5c:03:3d:a1:1a:de:62:61:b9:e2:63:35:8d:64:e0: 0b:84:db:04:ea:a0:01:45:ea:76:0a:ff:3d:08:56: 33:72:ee:e0:f4:97:40:51:ee:48:1a:1f:e4:6b:2f: 35:01:0f:09:71:8d:42:95:5c:51:38:f1:41:5b:bd: 24:ef:eb:d0:96:4d:d1:d1:57:39:d1:94:f1:99:27: d0:a2:97:94:a8:9a:96:77:54:8a:7d:9a:c7:75:34: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D3:D7:F0:DB:8D:8C:2B:4A:05:EC:0D:13:59:ED:E9:22:95:4D:40 X509v3 Authority Key Identifier: keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6c:b3:23:27:3d:91:ef:83:eb:0f:d8:7e:31:42:ec:1e:16: cc:ee:77:63:0e:71:53:31:31:8a:b8:94:f0:74:05:30:30:40: 2a:e1:24:0c:40:d3:7f:66:73:3a:8b:11:ab:09:d0:8a:26:73: a1:98:fd:c7:56:ed:b4:35:2c:cb:fb:a0:c1:1d:0e:95:8e:e7: 4d:22:8f:74:e7:e0:ff:28:f3:fe:3e:c7:8b:9a:35:1c:40:09: 38:0c:89:cc:b0:e2:26:11:bb:a9:c0:61:ef:62:77:e1:27:f6: f3:40:04:d0:4c:9a:19:bf:f6:97:8a:64:2c:b1:ea:fb:68:c9: bd:58:54:a6:a5:87:be:3b:7d:2f:28:d6:12:c1:1a:83:04:39: 0a:7a:15:3d:da:05:68:06:a3:52:b8:44:35:cf:89:2d:43:63: 4f:17:1d:b6:38:08:6d:00:09:b9:2c:22:0b:10:67:7b:f8:b2: 02:f0:5c:43:09:06:24:65:72:0a:d5:a1:a0:9f:1f:2c:58:5e: 1d:c6:01:66:b1:9a:b8:5e:bf:9f:70:46:2a:39:1c:ef:30:bd: 92:c3:c0:50:91:80:0d:15:47:ee:97:0d:84:c0:48:be:40:3f: 47:51:66:1c:a3:8e:82:50:7e:7c:29:26:64:76:2e:f1:90:b3: 50:e1:f9:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZrue+wgkGDigM1zmXwLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmIxZGM5OTZiOWUwYTNmYTY2MzJjZjgwN2E3YzIwNTA5 NDljNDYwHhcNMjUxMjE3MTMwMTI4WhcNMjUxMjE4MTMwMTI4WjAzMTEwLwYDVQQD EygzMWQzZDdmMGRiOGQ4YzJiNGEwNWVjMGQxMzU5ZWRlOTIyOTU0ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm3y50+qtlW3lulHP6PaJQDnP6E2 1prU0ZCBhMhvToiPP3Eoz0XNgTZWDSmEIVORj4jAD8dWU9qR2jCE2/cdcdvlSCop WV34hvRKEKCuZlbL7tFHKzQu7Ljqq1T6qOZgXY2+o8RuVDwua65RKg6n23t1G2bt 0M3X5y7I0+rnCBWN2xynaOHT5/1F7iFmKSZoYmfhxLxLQhAfUwYtaoenVCwnMfdc Az2hGt5iYbniYzWNZOALhNsE6qABRep2Cv89CFYzcu7g9JdAUe5IGh/kay81AQ8J cY1ClVxROPFBW70k7+vQlk3R0Vc50ZTxmSfQopeUqJqWd1SKfZrHdTSr+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHT1/DbjYwrSgXsDRNZ7ekilU1AMB8GA1UdIwQY MBaAFHK7HcmWueCj+mYyz4B6fCBQlJxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUt ZmE1OWRjMmE0NjNiLzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUtZmE1OWRjMmE0NjNi LzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2yzIyc9 ke+D6w/YfjFC7B4WzO53Yw5xUzExiriU8HQFMDBAKuEkDEDTf2ZzOosRqwnQiiZz oZj9x1bttDUsy/ugwR0OlY7nTSKPdOfg/yjz/j7Hi5o1HEAJOAyJzLDiJhG7qcBh 72J34Sf280AE0EyaGb/2l4pkLLHq+2jJvVhUpqWHvjt9LyjWEsEagwQ5CnoVPdoF aAajUrhENc+JLUNjTxcdtjgIbQAJuSwiCxBne/iyAvBcQwkGJGVyCtWhoJ8fLFhe HcYBZrGauF6/n3BGKjkc7zC9ksPAUJGADRVH7pcNhMBIvkA/R1FmHKOOglB+fCkm ZHYu8ZCzUOH5gw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:56:19 2025 by rpki-client