This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft File: C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json) Hash identifier: slVAYUnPjgHjbFMcOl01P3MBJgTvFXwqq3g4yd2lEag= Subject key identifier: 79:BE:82:F0:FC:93:28:E6:B2:DF:19:E9:AC:34:6B:0D:C6:A9:3B:7C Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC Certificate issuer: /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc Certificate serial: 019AF163FB326BB4B91C3D0773B587EDBDD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft Manifest number: 85 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: 4e40/kx9dWRETL25JJg37W1xE91wcPOQ1WbSoTXNhGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fb:32:6b:b4:b9:1c:3d:07:73:b5:87:ed:bd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=79be82f0fc9328e6b2df19e9ac346b0dc6a93b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:59:bb:67:c7:7f:70:89:c1:89:1d:e8:d5: 29:e7:9a:5b:98:35:ea:5a:6f:eb:f6:7e:14:46:c9: bc:77:88:0e:7f:71:ea:e6:f9:07:64:fd:18:69:8a: 3f:25:b5:1e:26:15:07:cf:ad:a5:21:16:d8:87:a8: 72:47:1f:91:5e:a3:62:6a:cf:be:0c:94:ea:d2:0d: fd:dd:68:0c:a8:63:58:c1:b2:6a:bb:25:37:22:1d: de:28:4e:9c:96:a7:5f:4a:51:08:2e:bc:37:68:b5: 83:99:92:54:63:1a:d1:3b:da:f0:02:45:ba:72:e4: b1:db:c9:6b:25:48:18:07:de:c8:bf:49:68:92:ca: 84:c3:f8:0f:60:79:ea:68:da:8c:09:37:a0:fe:4a: 7b:f2:9a:5d:7d:87:93:13:0d:7f:a8:47:15:7c:44: e0:a6:8a:c7:e6:a3:9c:c1:68:bb:d0:9c:44:10:dc: 46:59:06:dd:4f:ed:44:49:c5:89:75:bb:f6:73:1c: a6:1c:a9:a2:95:94:61:9d:83:d3:9c:b6:ca:23:29: 97:d7:3d:46:86:3c:d4:a1:41:ba:ff:13:26:35:20: 0f:f8:82:ac:e1:d1:1f:b4:36:10:a1:38:bc:76:4d: 83:75:95:26:69:05:41:2c:23:fc:a4:33:b1:8e:25: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:82:F0:FC:93:28:E6:B2:DF:19:E9:AC:34:6B:0D:C6:A9:3B:7C X509v3 Authority Key Identifier: keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:55:c9:5a:d4:6b:6b:31:2d:4a:9e:93:84:9d:5f:ef:29:e5: cb:19:0e:74:d1:6a:9b:64:14:6e:1f:e5:c3:4e:a9:b5:23:42: 93:8a:d5:b6:2f:ac:ff:16:14:ec:83:27:66:79:c4:ea:79:ca: a6:13:14:7b:d8:ea:62:a6:94:d6:46:46:26:25:0b:cd:0e:7d: bc:e3:77:75:b6:d0:0f:ee:f0:3f:41:a9:3d:55:fa:76:d6:53: 79:f4:3a:82:2e:d4:de:85:a7:b1:f5:9b:a0:03:bf:65:42:5c: fc:09:78:66:0a:71:dd:d1:d3:ea:11:bb:b0:90:da:1b:16:d4: f9:40:26:fc:db:c7:21:a8:7e:c5:97:15:b1:83:b8:07:e1:c0: e4:55:75:b6:59:b2:80:6b:04:18:a0:74:ad:d9:6f:94:12:77: 20:02:ae:25:db:04:46:ca:6f:3d:f3:94:ec:f7:f0:f0:a6:f8: 86:b2:9e:0e:e7:da:e8:f2:16:d5:57:7d:50:3a:23:30:3c:7a: 13:19:69:8f:01:20:f0:83:f4:d1:b4:b4:32:ac:fb:43:c1:64: 9d:83:e7:44:8d:4c:c1:bc:bb:09:44:bc:42:c4:b8:bb:ba:91: 7f:b3:50:5b:b2:c0:d3:0c:86:cd:84:46:ad:65:62:10:4c:ab: 59:63:7f:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/sya7S5HD0Hc7WH7b3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTBmY2IwYWQyMzZhZGE4OWU2NWJkNjJhNTFkMTg0YTY4 N2JiZmMwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD Eyg3OWJlODJmMGZjOTMyOGU2YjJkZjE5ZTlhYzM0NmIwZGM2YTkzYjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLhZu2fHf3CJwYkd6NUp55pbmDXq Wm/r9n4URsm8d4gOf3Hq5vkHZP0YaYo/JbUeJhUHz62lIRbYh6hyRx+RXqNias++ DJTq0g393WgMqGNYwbJquyU3Ih3eKE6clqdfSlEILrw3aLWDmZJUYxrRO9rwAkW6 cuSx28lrJUgYB97Iv0loksqEw/gPYHnqaNqMCTeg/kp78ppdfYeTEw1/qEcVfETg porH5qOcwWi70JxEENxGWQbdT+1EScWJdbv2cxymHKmilZRhnYPTnLbKIymX1z1G hjzUoUG6/xMmNSAP+IKs4dEftDYQoTi8dk2DdZUmaQVBLCP8pDOxjiUu2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm+gvD8kyjmst8Z6aw0aw3GqTt8MB8GA1UdIwQY MBaAFAtQ/LCtI2raieZb1ipR0YSmh7v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFEOHNLMGphdHFKNWx2V0tsSFJoS2FIdV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mNjRlMmQtNThmMi00ZmQ3LThiZDEt MjYyZGI5MmJhNjM4LzEvQzFEOHNLMGphdHFKNWx2V0tsSFJoS2FIdV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mNjRlMmQtNThmMi00ZmQ3LThiZDEtMjYyZGI5MmJhNjM4 LzEvQzFEOHNLMGphdHFKNWx2V0tsSFJoS2FIdV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolXJWtRr azEtSp6ThJ1f7ynlyxkOdNFqm2QUbh/lw06ptSNCk4rVti+s/xYU7IMnZnnE6nnK phMUe9jqYqaU1kZGJiULzQ59vON3dbbQD+7wP0GpPVX6dtZTefQ6gi7U3oWnsfWb oAO/ZUJc/Al4Zgpx3dHT6hG7sJDaGxbU+UAm/NvHIah+xZcVsYO4B+HA5FV1tlmy gGsEGKB0rdlvlBJ3IAKuJdsERspvPfOU7Pfw8Kb4hrKeDufa6PIW1Vd9UDojMDx6 ExlpjwEg8IP00bS0Mqz7Q8FknYPnRI1Mwby7CUS8QsS4u7qRf7NQW7LA0wyGzYRG rWViEEyrWWN/sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:51 2025 by rpki-client