This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft File: AlY31IiO4AWN6a06cMQtxGmWmpk.mft (raw, json) Hash identifier: ON9OVmiAUrSOLxfZIf5EnuhHcIcqdHV1l8jPV/p57Kk= Subject key identifier: 5E:F4:B1:B2:6B:72:D6:C6:85:7F:B2:A6:2E:F5:17:86:C7:1C:65:F6 Authority key identifier: 02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99 Certificate issuer: /CN=025637d4888ee0058de9ad3a70c42dc469969a99 Certificate serial: 019AF19B7F2CEE694E7B2A3DE6D954329122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft Manifest number: 0BD7 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: AlY31IiO4AWN6a06cMQtxGmWmpk.crl (hash: FmDoNZzPHL96LE07aVF7tsjFXzZM4bTpMKKNdPadly8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7f:2c:ee:69:4e:7b:2a:3d:e6:d9:54:32:91:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025637d4888ee0058de9ad3a70c42dc469969a99 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=5ef4b1b26b72d6c6857fb2a62ef51786c71c65f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:8e:99:9e:94:26:bd:2a:01:3d:b4:de:11: f8:f7:82:22:5b:8c:a9:3f:d6:70:80:10:f2:fd:db: 82:31:3e:8e:46:78:5e:6a:43:20:48:a4:a6:d9:f0: 13:3e:10:0c:22:84:64:43:52:c4:f5:5c:6b:a7:72: 70:3c:e4:88:d3:ff:7b:51:a1:5b:86:01:f7:ba:53: af:d9:b9:29:8f:e2:8d:64:a4:aa:ec:a7:18:db:a5: 15:c1:96:30:5a:72:fd:c1:dc:85:46:c8:69:e4:73: f7:fc:18:d0:22:e7:71:6c:8a:77:1e:ce:03:36:7a: c1:4d:6e:6f:df:1e:bb:4e:9d:6d:cd:f3:5e:67:aa: 25:20:51:e6:17:4c:1a:c1:b8:60:e3:b3:5f:d4:83: 55:24:45:55:0d:64:46:0b:f6:4d:50:2f:ba:a6:21: 8a:73:42:2b:58:cc:4b:95:67:d5:12:83:d7:a5:17: ff:ac:1a:f3:85:19:a3:8a:b3:92:2a:75:eb:88:0c: b2:42:aa:20:24:7c:34:97:69:84:31:2b:e1:15:07: 82:80:f0:58:d4:64:72:6b:53:c2:52:7f:06:81:22: 65:72:7b:11:40:8c:bd:fa:0d:09:c6:8c:b9:b6:07: ae:44:1f:67:66:d2:46:30:8a:38:97:0d:42:0d:d5: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F4:B1:B2:6B:72:D6:C6:85:7F:B2:A6:2E:F5:17:86:C7:1C:65:F6 X509v3 Authority Key Identifier: keyid:02:56:37:D4:88:8E:E0:05:8D:E9:AD:3A:70:C4:2D:C4:69:96:9A:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlY31IiO4AWN6a06cMQtxGmWmpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b2990d-4c52-42fa-b6b7-e0a4a4f9cabc/1/AlY31IiO4AWN6a06cMQtxGmWmpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2c:18:a7:08:30:0c:be:b1:4a:45:09:72:f8:7f:bb:9b:d1: db:4a:2b:ec:14:ef:74:f7:d8:23:8e:31:41:78:4c:5f:99:1d: a1:e7:e5:57:e1:da:d8:81:e6:ba:c3:a3:c7:52:4a:28:aa:bb: e3:4a:22:16:29:0d:10:cc:10:c6:9a:40:a0:18:66:01:c7:53: 20:e4:54:81:41:08:3b:97:80:51:11:f9:e3:97:cb:00:aa:59: 13:b2:4f:19:b4:53:3c:62:1c:04:4d:24:01:80:c1:c0:68:e2: 97:58:f0:07:a5:6f:44:7c:43:ab:3f:6c:23:2c:65:c0:b1:10: 7d:78:87:f4:63:bc:e2:2d:82:86:71:db:cd:1d:58:f1:bf:79: 32:e3:25:6b:79:60:55:61:ff:b2:ba:bc:c2:e0:32:a0:4c:66: a9:b3:1a:86:fa:66:84:a1:0f:83:4a:8f:2a:d4:28:30:a8:c0: 48:55:62:19:ca:bb:0b:5e:61:c2:ba:3d:da:de:c4:ec:1e:dc: b6:da:a8:f7:ff:9f:c8:36:12:d7:5d:c2:8e:6a:8f:ff:26:de: cf:89:b0:5a:55:1d:f6:01:c9:35:56:eb:48:d6:94:a9:7c:34: 1d:7a:6c:96:12:0c:a0:05:fa:37:aa:b7:60:c6:f5:f1:e2:41: ec:25:db:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm38s7mlOeyo95tlUMpEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNTYzN2Q0ODg4ZWUwMDU4ZGU5YWQzYTcwYzQyZGM0Njk5 NjlhOTkwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD Eyg1ZWY0YjFiMjZiNzJkNmM2ODU3ZmIyYTYyZWY1MTc4NmM3MWM2NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYaOmZ6UJr0qAT203hH494IiW4yp P9ZwgBDy/duCMT6ORnheakMgSKSm2fATPhAMIoRkQ1LE9Vxrp3JwPOSI0/97UaFb hgH3ulOv2bkpj+KNZKSq7KcY26UVwZYwWnL9wdyFRshp5HP3/BjQIudxbIp3Hs4D NnrBTW5v3x67Tp1tzfNeZ6olIFHmF0wawbhg47Nf1INVJEVVDWRGC/ZNUC+6piGK c0IrWMxLlWfVEoPXpRf/rBrzhRmjirOSKnXriAyyQqogJHw0l2mEMSvhFQeCgPBY 1GRya1PCUn8GgSJlcnsRQIy9+g0Jxoy5tgeuRB9nZtJGMIo4lw1CDdWq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF70sbJrctbGhX+ypi71F4bHHGX2MB8GA1UdIwQY MBaAFAJWN9SIjuAFjemtOnDELcRplpqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWxZMzFJaU80QVdONmEwNmNNUXR4R21XbXBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMjk5MGQtNGM1Mi00MmZhLWI2Yjct ZTBhNGE0ZjljYWJjLzEvQWxZMzFJaU80QVdONmEwNmNNUXR4R21XbXBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iMjk5MGQtNGM1Mi00MmZhLWI2YjctZTBhNGE0ZjljYWJj LzEvQWxZMzFJaU80QVdONmEwNmNNUXR4R21XbXBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVywYpwgw DL6xSkUJcvh/u5vR20or7BTvdPfYI44xQXhMX5kdoeflV+Ha2IHmusOjx1JKKKq7 40oiFikNEMwQxppAoBhmAcdTIORUgUEIO5eAURH545fLAKpZE7JPGbRTPGIcBE0k AYDBwGjil1jwB6VvRHxDqz9sIyxlwLEQfXiH9GO84i2ChnHbzR1Y8b95MuMla3lg VWH/srq8wuAyoExmqbMahvpmhKEPg0qPKtQoMKjASFViGcq7C15hwro92t7E7B7c ttqo9/+fyDYS113CjmqP/ybez4mwWlUd9gHJNVbrSNaUqXw0HXpslhIMoAX6N6q3 YMb18eJB7CXbcw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:57 2025 by rpki-client