This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json) Hash identifier: bGoASn71IyCiK116z++fmdx2tJIYhWlu2X35j2Gnoq4= Subject key identifier: 50:37:CC:A6:FB:9B:45:88:F0:17:8A:65:79:92:A6:E3:96:42:73:6F Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10 Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910 Certificate serial: 019B2EFB05150FA0F60AEABAC129D97DAE68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft Manifest number: 0C76 Signing time: Thu 18 Dec 2025 01:02:41 +0000 Manifest this update: Thu 18 Dec 2025 01:02:41 +0000 Manifest next update: Fri 19 Dec 2025 01:02:41 +0000 Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: KnA2pTnLC/Z4tr084ZqJhiNUJXffmte4BMiSClzA7qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fb:05:15:0f:a0:f6:0a:ea:ba:c1:29:d9:7d:ae:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910 Validity Not Before: Dec 18 01:02:41 2025 GMT Not After : Dec 19 01:02:41 2025 GMT Subject: CN=5037cca6fb9b4588f0178a657992a6e39642736f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:21:46:15:92:75:d8:42:13:53:8e:68:71: 25:66:00:88:9b:7e:8b:da:07:8b:f0:0d:c6:c5:a0: ee:5a:59:64:0d:96:cf:0a:9b:ad:cb:64:d8:49:0f: ec:24:d7:9e:7a:d4:a6:5b:7c:f2:f3:00:0b:64:25: 00:6a:e8:a3:48:b8:ee:6b:73:c0:4f:1f:9a:d5:2e: 35:75:c7:55:75:e7:ef:43:cf:79:4d:06:0b:b0:a8: 2a:98:b6:de:d7:80:75:31:93:50:d6:f8:47:f9:ae: 2c:43:e4:d5:47:40:76:64:e9:dc:b1:47:5c:26:5a: 20:c2:f3:c5:5b:9d:7a:39:d7:c7:a5:24:8f:cd:bc: bc:7f:4f:84:cf:10:7e:12:a3:ad:65:07:bd:e5:84: c4:f0:50:f3:fb:c0:ff:bd:7c:ed:f6:c5:ca:7f:30: 3e:0e:08:2a:a8:e2:3d:a5:d0:a2:ca:ea:fa:51:cb: 5f:83:85:86:66:3a:3d:65:7d:b1:37:7e:ba:61:6f: a1:0b:28:47:df:70:db:12:37:42:1b:ee:7f:18:5b: 12:6f:43:ee:ae:e2:8a:a2:31:b3:9f:ff:a3:fb:47: ea:c3:f9:a2:52:ed:be:f3:ac:6d:b6:ef:30:26:e8: 44:fb:13:72:e4:20:68:79:df:3f:14:46:23:2c:07: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:37:CC:A6:FB:9B:45:88:F0:17:8A:65:79:92:A6:E3:96:42:73:6F X509v3 Authority Key Identifier: keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:18:c1:da:f2:9f:77:74:2a:6c:29:93:2b:34:c7:b4:3b: 41:0e:f5:a9:47:93:3f:b5:d5:45:99:01:73:67:4c:b3:79:cd: 44:19:a1:5b:0b:be:f8:9f:4d:5a:b0:22:3a:54:e3:b2:dd:13: 55:f3:7e:99:81:cf:46:c4:68:bb:a5:80:9b:c1:d2:fe:70:89: ba:a9:32:42:1b:06:80:2f:0f:bb:c7:36:fd:24:d2:8b:81:33: a4:ff:18:5a:1c:c9:83:cf:16:de:e7:8a:5e:1e:c4:87:c3:d2: 15:d4:53:b3:56:b5:4a:ac:3f:e6:af:a7:cd:1b:92:ed:80:63: 80:ab:a2:0c:43:b7:59:a1:9e:56:d9:4a:ea:bc:c3:d6:f5:3d: c3:7e:65:50:30:6e:4f:6a:05:12:b8:fe:92:32:a8:11:0b:37: a1:73:7c:31:a9:c3:35:41:fb:27:0f:4e:ea:33:b7:c8:6c:e3: ac:6f:08:69:bc:31:93:21:ae:5f:03:7b:3e:dd:e0:16:f6:91: ab:94:97:eb:ba:c5:78:89:2a:c4:3e:3f:d0:5c:ed:6c:6e:05: c6:cd:c5:44:dc:d4:0d:8e:94:e6:bf:5c:5a:b5:6e:3e:40:26: 07:a4:43:91:6e:ab:bd:fa:aa:d7:53:08:4b:eb:5c:f4:ab:d0: f5:11:b9:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+wUVD6D2Cuq6wSnZfa5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjFjZGJmOTdkNmNhMjA3ZTVkYzg4NWFiY2ZmNjcxY2Mx NWM5MTAwHhcNMjUxMjE4MDEwMjQxWhcNMjUxMjE5MDEwMjQxWjAzMTEwLwYDVQQD Eyg1MDM3Y2NhNmZiOWI0NTg4ZjAxNzhhNjU3OTkyYTZlMzk2NDI3MzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9AhRhWSddhCE1OOaHElZgCIm36L 2geL8A3GxaDuWllkDZbPCputy2TYSQ/sJNeeetSmW3zy8wALZCUAauijSLjua3PA Tx+a1S41dcdVdefvQ895TQYLsKgqmLbe14B1MZNQ1vhH+a4sQ+TVR0B2ZOncsUdc JlogwvPFW516OdfHpSSPzby8f0+EzxB+EqOtZQe95YTE8FDz+8D/vXzt9sXKfzA+ DggqqOI9pdCiyur6Uctfg4WGZjo9ZX2xN366YW+hCyhH33DbEjdCG+5/GFsSb0Pu ruKKojGzn/+j+0fqw/miUu2+86xttu8wJuhE+xNy5CBoed8/FEYjLAfuCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA3zKb7m0WI8BeKZXmSpuOWQnNvMB8GA1UdIwQY MBaAFK/xzb+X1sogfl3IhavP9nHMFckQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEt YWY4Yzc1YTkzY2QxLzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEtYWY4Yzc1YTkzY2Qx LzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZcYwdry n3d0Kmwpkys0x7Q7QQ71qUeTP7XVRZkBc2dMs3nNRBmhWwu++J9NWrAiOlTjst0T VfN+mYHPRsRou6WAm8HS/nCJuqkyQhsGgC8Pu8c2/STSi4EzpP8YWhzJg88W3ueK Xh7Eh8PSFdRTs1a1Sqw/5q+nzRuS7YBjgKuiDEO3WaGeVtlK6rzD1vU9w35lUDBu T2oFErj+kjKoEQs3oXN8ManDNUH7Jw9O6jO3yGzjrG8IabwxkyGuXwN7Pt3gFvaR q5SX67rFeIkqxD4/0FztbG4Fxs3FRNzUDY6U5r9cWrVuPkAmB6RDkW6rvfqq11MI S+tc9KvQ9RG5EQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:19 2025 by rpki-client