This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft File: adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json) Hash identifier: SutonbjILYmNbJsXE+QSlNj+7jlu/ssOo+FWKLaHW7o= Subject key identifier: CD:26:27:19:10:CB:D7:A9:AD:05:A1:C8:92:17:4E:6D:A9:AB:88:D4 Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Certificate serial: 019AF31BD7A1F754962DBA5CBB20A481C349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft Manifest number: 0453 Signing time: Sat 06 Dec 2025 10:01:19 +0000 Manifest this update: Sat 06 Dec 2025 10:01:19 +0000 Manifest next update: Sun 07 Dec 2025 10:01:19 +0000 Files and hashes: 1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: W7XofDaWyl52ija4FLBu5hGed6Qzbm7/ZJeWKWsOeRI=) 2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d7:a1:f7:54:96:2d:ba:5c:bb:20:a4:81:c3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Validity Not Before: Dec 6 10:01:19 2025 GMT Not After : Dec 7 10:01:19 2025 GMT Subject: CN=cd26271910cbd7a9ad05a1c892174e6da9ab88d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:49:1a:ef:e8:42:8f:39:70:1d:fa:93:e8: ea:0f:4e:ce:a9:62:2a:56:48:8d:7c:00:76:6c:f2: d7:00:69:e4:d1:97:1c:b7:86:c2:af:f5:00:66:98: 7c:f7:67:44:b9:9a:a0:35:c4:34:a4:9f:00:21:d0: 39:2d:4c:a3:37:dc:ee:9d:43:59:f7:5f:c3:c9:0a: ea:be:25:d3:82:29:9b:4f:09:52:10:0c:92:c4:a4: 62:dd:76:e1:7c:e1:21:bc:ac:47:19:1f:b6:c7:c1: c4:b7:57:68:1d:38:a9:f7:61:2f:be:e7:14:a2:c4: 34:e0:68:b9:72:b0:8b:dc:d0:dc:f8:51:d9:6d:04: 92:51:ae:81:9b:a9:f3:0d:38:99:45:be:a2:c0:f4: 51:4f:df:a2:b2:d4:15:fe:d9:2e:d5:12:b5:39:4f: 04:a7:68:30:72:11:82:16:b5:df:f9:2c:70:69:81: ee:c9:75:09:f8:75:ed:90:ee:ff:af:db:83:63:08: af:bb:aa:c5:f0:83:e3:23:e0:b2:cd:ab:03:a9:ce: d3:b9:61:e2:1f:ee:6e:89:cc:43:37:51:c2:af:a3: ba:0e:f6:34:dc:1a:ad:47:60:48:d9:a6:88:41:95: 48:f4:3b:8d:42:d0:81:db:95:d7:43:c6:b0:47:80: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:27:19:10:CB:D7:A9:AD:05:A1:C8:92:17:4E:6D:A9:AB:88:D4 X509v3 Authority Key Identifier: keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a8:7d:66:9d:91:76:86:bf:9f:d7:48:ab:67:b2:98:40:90: 3d:5f:4d:4c:e4:a1:9e:e0:6f:6d:72:80:8c:18:c4:4d:51:06: e0:05:c7:3b:65:36:5e:47:37:32:dc:7b:4c:eb:96:79:79:71: a4:26:5e:2b:fa:a1:6e:7b:ae:43:12:50:27:0e:90:27:07:b9: ae:d8:dd:de:bb:59:bf:d9:ef:8e:aa:0d:ba:e5:0a:a8:0f:39: cb:ad:d7:ee:85:3d:45:cf:93:bd:97:a7:61:66:37:e7:a7:0e: a5:37:1b:6f:35:83:a0:7b:23:3f:c4:87:f5:2f:2e:fb:01:14: 25:3b:fb:dd:f1:03:be:84:e6:5b:70:19:13:da:00:32:b5:f1: e0:63:17:a9:e4:22:3e:ad:5b:08:be:dc:1d:4e:8c:8e:e0:c3: 38:d6:b1:44:c5:9e:d7:2d:3f:13:a3:0b:8c:03:62:ec:9f:0c: 2a:78:6d:bd:f9:96:25:1f:cf:45:73:a2:17:8f:9c:0d:62:b6: c9:9d:94:6b:ad:e5:84:e6:28:ae:14:ad:c0:0e:0d:a3:d2:37: d1:af:2d:e8:45:68:20:8b:f3:82:43:da:43:5c:05:58:8a:1e: 6f:42:ed:db:82:6b:45:0b:63:65:1d:75:d8:d4:04:12:40:da: a5:b2:cf:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9eh91SWLbpcuyCkgcNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk Yjc3ODcwHhcNMjUxMjA2MTAwMTE5WhcNMjUxMjA3MTAwMTE5WjAzMTEwLwYDVQQD EyhjZDI2MjcxOTEwY2JkN2E5YWQwNWExYzg5MjE3NGU2ZGE5YWI4OGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0NJGu/oQo85cB36k+jqD07OqWIq VkiNfAB2bPLXAGnk0Zcct4bCr/UAZph892dEuZqgNcQ0pJ8AIdA5LUyjN9zunUNZ 91/DyQrqviXTgimbTwlSEAySxKRi3XbhfOEhvKxHGR+2x8HEt1doHTip92EvvucU osQ04Gi5crCL3NDc+FHZbQSSUa6Bm6nzDTiZRb6iwPRRT9+istQV/tku1RK1OU8E p2gwchGCFrXf+SxwaYHuyXUJ+HXtkO7/r9uDYwivu6rF8IPjI+CyzasDqc7TuWHi H+5uicxDN1HCr6O6DvY03BqtR2BI2aaIQZVI9DuNQtCB25XXQ8awR4DMvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0mJxkQy9eprQWhyJIXTm2pq4jUMB8GA1UdIwQY MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt NTkyMDhiYWJlYjEzLzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6h9Zp2R doa/n9dIq2eymECQPV9NTOShnuBvbXKAjBjETVEG4AXHO2U2Xkc3Mtx7TOuWeXlx pCZeK/qhbnuuQxJQJw6QJwe5rtjd3rtZv9nvjqoNuuUKqA85y63X7oU9Rc+TvZen YWY356cOpTcbbzWDoHsjP8SH9S8u+wEUJTv73fEDvoTmW3AZE9oAMrXx4GMXqeQi Pq1bCL7cHU6MjuDDONaxRMWe1y0/E6MLjANi7J8MKnhtvfmWJR/PRXOiF4+cDWK2 yZ2Ua63lhOYorhStwA4No9I30a8t6EVoIIvzgkPaQ1wFWIoeb0Lt24JrRQtjZR11 2NQEEkDapbLPRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:16 2025 by rpki-client