This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft File: lN7qVibZ6DJkDx7N9_i7clckCEc.mft (raw, json) Hash identifier: +i9m/W6qjWxAm4B6Ss6AYGwlE5ZkqqsxkZjUACbhhLg= Subject key identifier: 54:06:D0:86:BB:D9:13:43:8E:12:19:0C:E8:3F:16:70:86:64:FD:8E Authority key identifier: 94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 Certificate issuer: /CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Certificate serial: 019AF23FDCDFE513A25E3320A59A2E3C4017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft Manifest number: 0C56 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: lN7qVibZ6DJkDx7N9_i7clckCEc.crl (hash: LqZ4blZAcfdUxuoVZ4XCAOd7BAJ7jf0occkejLhUCJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dc:df:e5:13:a2:5e:33:20:a5:9a:2e:3c:40:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94deea5626d9e832640f1ecdf7f8bb7257240847 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=5406d086bbd913438e12190ce83f16708664fd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:d5:95:20:87:e6:f8:20:73:8d:e0:e0:47: e5:c0:aa:e1:12:89:6f:52:1f:42:8f:6a:99:8f:66: cf:3b:1d:72:c0:f3:05:7b:e2:7e:e3:c9:74:1e:2e: ad:62:0e:b2:71:99:09:f1:75:21:2e:cb:bb:d0:63: c2:a2:0d:76:f9:57:a0:a6:42:2a:bb:44:22:63:59: 4e:e0:dd:99:4b:08:2b:85:f5:5a:5d:52:fe:5b:68: 0f:72:09:57:ac:bc:c6:96:a5:23:45:ba:d0:ff:ac: 12:b5:5b:67:34:82:d4:86:a6:00:44:33:ba:4c:86: 72:7c:dd:29:97:99:f8:f8:cc:ee:33:a2:20:d7:58: e9:35:2b:91:91:ed:15:1a:ed:da:86:4e:88:68:13: ad:67:db:43:97:62:82:fa:6f:6d:38:6e:8d:6b:95: e6:c0:bf:0a:ef:37:22:9e:68:c1:1a:2a:5b:22:5a: 6a:27:07:af:29:f0:2e:17:86:c3:7b:35:7c:87:d9: 05:e9:4f:fd:1a:6d:d5:2b:2f:44:96:b3:52:02:05: 01:83:f1:60:f4:a8:de:1a:6d:4a:62:a0:8c:2a:1e: bb:f5:b9:d7:9b:e0:63:32:78:70:75:0a:64:69:26: 13:f8:73:64:c5:2a:99:2e:3b:04:22:6a:ba:da:65: b1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:06:D0:86:BB:D9:13:43:8E:12:19:0C:E8:3F:16:70:86:64:FD:8E X509v3 Authority Key Identifier: keyid:94:DE:EA:56:26:D9:E8:32:64:0F:1E:CD:F7:F8:BB:72:57:24:08:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lN7qVibZ6DJkDx7N9_i7clckCEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3447dd-8dc4-405d-9c0b-6ffc5d9e0fed/1/lN7qVibZ6DJkDx7N9_i7clckCEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d6:32:b8:83:4b:f1:c8:fa:ad:0f:12:2d:ee:ee:41:d2:70: f4:26:e7:d2:6f:f2:b9:56:c8:69:30:65:77:46:1b:47:d8:02: a5:9b:34:dd:52:2a:c5:16:a1:b1:54:af:88:d9:3b:d3:09:5f: 88:bc:fb:04:16:1f:3a:4c:fe:78:e3:8c:73:9f:c4:ec:45:a2: ff:e6:d7:54:44:bb:47:da:9b:54:63:f9:1d:b8:75:c0:ac:0c: 90:8a:f0:3b:b9:75:80:03:96:46:4c:24:f5:a6:ba:19:88:7c: 2b:e8:e8:ab:ac:39:9b:69:06:e3:f0:7e:68:03:47:5e:5b:6f: 17:8c:81:19:cc:1b:d9:c0:a8:e7:66:4a:59:c8:86:15:f9:bc: 72:93:ae:2c:b8:68:a2:bc:44:b1:92:0b:86:56:44:92:17:21: f2:f0:7b:8a:bd:8b:ab:98:21:6e:3c:9a:24:a4:a9:cd:46:14: 4e:b7:a6:28:32:e3:4d:de:a1:60:a2:5c:ba:f5:f8:25:35:df: 48:88:89:b1:e6:bf:7b:d3:dd:eb:98:3b:32:4d:7a:69:c3:3a: bc:23:d4:61:e8:5a:9e:a8:9d:7d:3c:31:5b:b0:d2:df:44:27: a8:98:f8:87:42:d8:5a:f2:be:4e:0d:ae:40:a0:eb:50:ad:2e: 69:ef:92:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9zf5ROiXjMgpZouPEAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZGVlYTU2MjZkOWU4MzI2NDBmMWVjZGY3ZjhiYjcyNTcy NDA4NDcwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD Eyg1NDA2ZDA4NmJiZDkxMzQzOGUxMjE5MGNlODNmMTY3MDg2NjRmZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuXVlSCH5vggc43g4EflwKrhEolv Uh9Cj2qZj2bPOx1ywPMFe+J+48l0Hi6tYg6ycZkJ8XUhLsu70GPCog12+VegpkIq u0QiY1lO4N2ZSwgrhfVaXVL+W2gPcglXrLzGlqUjRbrQ/6wStVtnNILUhqYARDO6 TIZyfN0pl5n4+MzuM6Ig11jpNSuRke0VGu3ahk6IaBOtZ9tDl2KC+m9tOG6Na5Xm wL8K7zcinmjBGipbIlpqJwevKfAuF4bDezV8h9kF6U/9Gm3VKy9ElrNSAgUBg/Fg 9KjeGm1KYqCMKh679bnXm+BjMnhwdQpkaSYT+HNkxSqZLjsEImq62mWx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQG0Ia72RNDjhIZDOg/FnCGZP2OMB8GA1UdIwQY MBaAFJTe6lYm2egyZA8ezff4u3JXJAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGIt NmZmYzVkOWUwZmVkLzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8zNDQ3ZGQtOGRjNC00MDVkLTljMGItNmZmYzVkOWUwZmVk LzEvbE43cVZpYlo2REprRHg3TjlfaTdjbGNrQ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9YyuINL 8cj6rQ8SLe7uQdJw9Cbn0m/yuVbIaTBld0YbR9gCpZs03VIqxRahsVSviNk70wlf iLz7BBYfOkz+eOOMc5/E7EWi/+bXVES7R9qbVGP5Hbh1wKwMkIrwO7l1gAOWRkwk 9aa6GYh8K+joq6w5m2kG4/B+aANHXltvF4yBGcwb2cCo52ZKWciGFfm8cpOuLLho orxEsZILhlZEkhch8vB7ir2Lq5ghbjyaJKSpzUYUTremKDLjTd6hYKJcuvX4JTXf SIiJsea/e9Pd65g7Mk16acM6vCPUYehanqidfTwxW7DS30QnqJj4h0LYWvK+Tg2u QKDrUK0uae+S/A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:50 2025 by rpki-client