This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json) Hash identifier: ilLdcg7F4mpuBYXrZvSSFfWt7NxXj4ALGEHiep3j9/8= Subject key identifier: 2D:E0:AE:97:8E:D3:5F:67:FB:2E:0E:7F:C6:FF:15:0B:A0:02:EA:03 Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af Certificate serial: 019AF49BAE707BED29F802966F7DCFD1A711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: ApzBBHCZ1SOZjyfhWDsSilMvaOjC/Vj4rRtGJ8L3geQ=) 2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ae:70:7b:ed:29:f8:02:96:6f:7d:cf:d1:a7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=2de0ae978ed35f67fb2e0e7fc6ff150ba002ea03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:6b:18:1a:a1:24:66:10:b6:b5:2c:03:88: ce:ff:dc:a3:1f:ad:9d:2d:70:9d:65:72:6b:6c:c1: 95:1c:b8:00:96:93:7e:4c:a7:04:c1:93:f6:75:d7: 61:b3:a1:ec:3b:ea:80:d7:5f:fd:e0:80:10:3d:15: 4d:22:b1:8d:39:7f:03:e0:d3:59:e5:45:08:00:33: 17:9b:1b:56:40:22:ff:3b:cf:8d:76:84:a8:dc:fb: 2c:1b:ef:f2:86:b5:a8:32:cc:1b:25:61:33:0f:52: c2:ab:80:24:74:59:9b:0d:8f:83:2a:a8:01:d9:6c: 63:25:f9:cf:bb:45:4e:c5:02:60:03:54:cf:74:94: fe:73:50:9d:44:27:a8:3e:a8:36:8a:ae:33:9f:b5: 2d:57:63:54:5d:f4:d9:27:a2:4d:c1:bc:6d:22:ae: 70:c8:e1:64:da:47:bf:bc:18:5c:d2:8a:17:32:32: 42:96:77:b3:7c:7f:6f:1e:c9:08:0a:fe:3e:38:cd: c9:83:e4:de:2c:92:96:cb:8b:b3:d9:78:76:c1:df: e7:e5:2a:d0:c7:02:d4:3a:28:50:83:4f:65:1f:67: d8:e6:8a:0e:8c:23:aa:a1:9c:08:b5:02:ae:3c:6a: 8b:87:d4:50:c6:78:6c:48:84:98:bc:11:70:1a:d2: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E0:AE:97:8E:D3:5F:67:FB:2E:0E:7F:C6:FF:15:0B:A0:02:EA:03 X509v3 Authority Key Identifier: keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:9f:95:4d:7a:a0:e0:02:12:24:ab:86:a4:ea:77:b4:55: dc:ec:b2:1e:f6:90:da:a4:f0:1c:b8:1c:67:c3:af:c8:aa:da: 44:ad:5d:f8:92:53:28:6c:25:87:35:1a:28:9f:24:a0:c6:0d: 31:a4:f7:00:4f:ed:e6:ef:dd:3a:7a:89:8c:2d:36:1c:c1:ae: 5e:74:af:ac:ba:df:8e:90:8e:d2:f2:85:ec:7f:af:e6:08:f2: 7c:c3:cd:33:f6:3a:80:74:c8:e9:c7:e9:fa:c1:09:00:b9:0c: e2:f0:2c:c8:7d:80:0f:8c:77:11:b6:cd:24:47:4f:be:2a:1c: 4c:53:22:47:dc:5c:65:bb:a0:5e:b9:11:b8:29:f0:ea:55:8b: 90:62:3e:7c:1e:55:60:69:e3:57:b1:9b:11:a0:dd:c8:46:a9: a9:17:8f:55:6e:45:61:5e:8c:c8:b4:2d:ab:01:ee:3c:37:35: 60:b1:1a:ea:c6:83:87:47:20:54:c9:68:c0:64:ea:7c:9b:96: 2f:af:67:90:8d:45:78:c0:5c:0e:7e:7c:71:bf:99:91:99:9d: 4b:c5:e0:20:5f:23:86:5f:10:ac:cd:cc:83:f1:66:9a:0a:2e: 49:6c:6b:75:2b:9f:09:a6:e2:96:cd:c1:c4:84:d9:bd:7a:0e: ea:aa:f8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m65we+0p+AKWb33P0acRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk ZTUzYWYwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD EygyZGUwYWU5NzhlZDM1ZjY3ZmIyZTBlN2ZjNmZmMTUwYmEwMDJlYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bVrGBqhJGYQtrUsA4jO/9yjH62d LXCdZXJrbMGVHLgAlpN+TKcEwZP2dddhs6HsO+qA11/94IAQPRVNIrGNOX8D4NNZ 5UUIADMXmxtWQCL/O8+NdoSo3PssG+/yhrWoMswbJWEzD1LCq4AkdFmbDY+DKqgB 2WxjJfnPu0VOxQJgA1TPdJT+c1CdRCeoPqg2iq4zn7UtV2NUXfTZJ6JNwbxtIq5w yOFk2ke/vBhc0ooXMjJClnezfH9vHskICv4+OM3Jg+TeLJKWy4uz2Xh2wd/n5SrQ xwLUOihQg09lH2fY5ooOjCOqoZwItQKuPGqLh9RQxnhsSISYvBFwGtIpeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3grpeO019n+y4Of8b/FQugAuoDMB8GA1UdIwQY MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5 LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotWflU16 oOACEiSrhqTqd7RV3OyyHvaQ2qTwHLgcZ8OvyKraRK1d+JJTKGwlhzUaKJ8koMYN MaT3AE/t5u/dOnqJjC02HMGuXnSvrLrfjpCO0vKF7H+v5gjyfMPNM/Y6gHTI6cfp +sEJALkM4vAsyH2AD4x3EbbNJEdPviocTFMiR9xcZbugXrkRuCnw6lWLkGI+fB5V YGnjV7GbEaDdyEapqRePVW5FYV6MyLQtqwHuPDc1YLEa6saDh0cgVMlowGTqfJuW L69nkI1FeMBcDn58cb+ZkZmdS8XgIF8jhl8QrM3Mg/FmmgouSWxrdSufCabils3B xITZvXoO6qr4mQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:09 2025 by rpki-client