This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json) Hash identifier: Q+/H9X4u+VonMHTLQj8Cs+jkDyakFqfokNq8udwJCYA= Subject key identifier: CE:DC:F2:BA:35:6F:3A:11:67:4F:4C:D0:19:E8:73:CD:FB:16:56:C0 Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10 Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910 Certificate serial: 019AF31BEF1CF349F346E23565C41292B25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft Manifest number: 0C57 Signing time: Sat 06 Dec 2025 10:01:25 +0000 Manifest this update: Sat 06 Dec 2025 10:01:25 +0000 Manifest next update: Sun 07 Dec 2025 10:01:25 +0000 Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: JCeTRa8LqiiQ9NPgQaCCVf6omsEt2QB4xsxDtVZeTdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ef:1c:f3:49:f3:46:e2:35:65:c4:12:92:b2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910 Validity Not Before: Dec 6 10:01:25 2025 GMT Not After : Dec 7 10:01:25 2025 GMT Subject: CN=cedcf2ba356f3a11674f4cd019e873cdfb1656c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:e9:fb:6f:83:ad:9e:60:71:bb:ea:77:de: f6:7e:a9:e7:4a:08:1f:f8:16:a7:85:4d:e6:48:b8: 4b:c4:cc:ea:e5:02:94:6e:ed:c3:f9:40:be:3f:d1: 9c:49:ff:b3:34:44:ab:77:06:f5:57:57:e5:f4:b0: 17:56:18:c7:0a:7d:29:0b:97:de:8e:bc:9a:99:dd: b4:e8:94:0f:21:c9:ce:98:4a:d8:f6:d9:49:a2:6d: f0:25:f7:c8:50:7e:13:70:ff:42:18:38:25:dd:3f: e3:bf:60:26:2d:e5:0e:16:cf:75:74:b8:c6:6e:18: 94:39:02:5e:b5:a7:b8:f2:77:48:9a:4b:e0:56:38: 11:bd:c2:21:ca:d0:37:73:25:bc:e0:4f:27:88:1a: 95:f4:64:02:fb:38:c8:2e:60:b5:67:c6:6c:71:5e: 51:97:7a:04:a2:0c:06:d4:28:7f:8a:ab:ff:21:74: 41:69:6e:23:b6:d7:7b:e2:ea:24:e7:9a:74:5d:b7: cf:a4:b8:cb:26:e4:29:2a:bd:12:67:b5:a1:0b:fa: 5c:cc:ad:a5:f8:6a:0c:46:43:10:5b:c5:80:e3:e3: 75:25:04:c5:25:65:c2:40:6f:91:7e:8c:81:a1:03: d5:ca:c7:b0:64:ef:4a:b6:5c:aa:8a:b0:a4:0e:90: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:F2:BA:35:6F:3A:11:67:4F:4C:D0:19:E8:73:CD:FB:16:56:C0 X509v3 Authority Key Identifier: keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bc:16:03:38:8a:12:60:28:f8:1f:04:3b:fd:1f:73:5c:72: ed:21:58:57:6a:23:ce:7c:e8:f5:28:b8:8b:fb:4a:7f:d8:c9: c6:7a:2b:3b:de:28:4c:49:94:c4:ad:9c:4e:19:ae:db:ac:4a: e7:fc:34:3c:10:97:03:b2:9d:a9:51:b0:b4:5e:37:05:46:bb: 01:4c:60:ef:0f:8b:68:7e:14:52:fe:de:da:97:50:71:6c:27: d6:33:9e:66:d1:31:58:32:59:1a:33:a0:10:55:14:2a:c4:02: 60:61:81:9f:bd:f9:ae:1f:c9:d6:ca:82:f3:e0:a7:b1:b5:8b: 20:da:4d:04:2e:b8:bb:60:47:62:f8:d1:6a:e2:22:fe:04:c6: e2:80:1a:76:89:8d:31:11:27:51:5e:5c:06:74:b5:07:83:fc: 3c:bb:b3:fd:08:f3:60:69:22:02:a5:31:de:83:3e:87:53:65: 13:ec:5b:f0:ec:43:17:15:a4:49:8d:76:e2:02:7d:97:41:f1: 5c:fb:f7:09:bb:90:93:77:35:23:87:c8:ce:6f:ff:2a:be:ab: 4b:83:da:ad:13:b4:27:6d:54:ea:d8:fa:a5:9e:9f:a8:66:f5: 90:0d:a8:91:15:ef:b2:85:75:9b:08:69:ba:d3:ab:72:82:23: 83:3c:f4:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+8c80nzRuI1ZcQSkrJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjFjZGJmOTdkNmNhMjA3ZTVkYzg4NWFiY2ZmNjcxY2Mx NWM5MTAwHhcNMjUxMjA2MTAwMTI1WhcNMjUxMjA3MTAwMTI1WjAzMTEwLwYDVQQD EyhjZWRjZjJiYTM1NmYzYTExNjc0ZjRjZDAxOWU4NzNjZGZiMTY1NmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1srp+2+DrZ5gcbvqd972fqnnSggf +BanhU3mSLhLxMzq5QKUbu3D+UC+P9GcSf+zNESrdwb1V1fl9LAXVhjHCn0pC5fe jryamd206JQPIcnOmErY9tlJom3wJffIUH4TcP9CGDgl3T/jv2AmLeUOFs91dLjG bhiUOQJetae48ndImkvgVjgRvcIhytA3cyW84E8niBqV9GQC+zjILmC1Z8ZscV5R l3oEogwG1Ch/iqv/IXRBaW4jttd74uok55p0XbfPpLjLJuQpKr0SZ7WhC/pczK2l +GoMRkMQW8WA4+N1JQTFJWXCQG+RfoyBoQPVysewZO9KtlyqirCkDpAYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7c8ro1bzoRZ09M0Bnoc837FlbAMB8GA1UdIwQY MBaAFK/xzb+X1sogfl3IhavP9nHMFckQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEt YWY4Yzc1YTkzY2QxLzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEtYWY4Yzc1YTkzY2Qx LzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7wWAziK EmAo+B8EO/0fc1xy7SFYV2ojznzo9Si4i/tKf9jJxnorO94oTEmUxK2cThmu26xK 5/w0PBCXA7KdqVGwtF43BUa7AUxg7w+LaH4UUv7e2pdQcWwn1jOeZtExWDJZGjOg EFUUKsQCYGGBn735rh/J1sqC8+CnsbWLINpNBC64u2BHYvjRauIi/gTG4oAadomN MREnUV5cBnS1B4P8PLuz/QjzYGkiAqUx3oM+h1NlE+xb8OxDFxWkSY124gJ9l0Hx XPv3CbuQk3c1I4fIzm//Kr6rS4ParRO0J21U6tj6pZ6fqGb1kA2okRXvsoV1mwhp utOrcoIjgzz0KA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:30 2025 by rpki-client