This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json) Hash identifier: eQvQ0mSKyXJ/4QFjbOL7inOJkdye8Uf4rWC8dCkPFMQ= Subject key identifier: CC:F1:DD:FE:85:A0:4D:8C:11:B3:9A:82:6A:90:F0:E6:24:CD:A6:F5 Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f Certificate serial: 019AF2ADF89F7472D4689BF5F5C0AE8D41BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft Manifest number: 05EB Signing time: Sat 06 Dec 2025 08:01:18 +0000 Manifest this update: Sat 06 Dec 2025 08:01:18 +0000 Manifest next update: Sun 07 Dec 2025 08:01:18 +0000 Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: rlUy6kml1w3es40YV6My7Zl6BN9k4u5raNi6jWFlxAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f8:9f:74:72:d4:68:9b:f5:f5:c0:ae:8d:41:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f Validity Not Before: Dec 6 08:01:18 2025 GMT Not After : Dec 7 08:01:18 2025 GMT Subject: CN=ccf1ddfe85a04d8c11b39a826a90f0e624cda6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:e3:e5:d6:b8:78:66:52:47:26:1e:75:bd: b8:bb:ab:4b:8b:3f:f5:f7:5d:54:2a:24:05:b1:76: 94:5a:e3:c9:b2:72:61:d3:7c:b7:05:cb:08:74:bd: f4:81:03:4b:11:93:01:47:0f:6a:da:a9:e5:33:72: 66:54:fc:73:08:03:c1:46:6a:a0:bc:a7:0d:5b:45: 27:43:77:62:97:65:9c:91:91:d7:b4:eb:cb:eb:4c: 53:70:58:88:0a:dd:74:14:3f:ea:39:11:58:70:97: 51:57:16:68:af:25:a4:92:38:73:20:2d:26:26:a5: 0e:70:fd:a9:d7:b4:c7:52:e7:cc:b9:c7:62:8e:85: c2:10:34:a2:85:c0:98:e8:c8:62:47:2a:c3:24:d6: 36:1c:71:fa:f1:1d:8a:8f:3e:3e:64:3c:06:e6:cd: 69:cd:3a:53:cd:36:ca:6c:a0:1e:b7:30:8f:75:f3: 7a:ef:e6:00:2d:6a:8b:01:c5:c7:33:ee:f1:ce:bf: ff:80:18:28:7d:fc:6a:cc:c8:28:f3:2b:62:cd:f9: ab:42:e9:e8:f5:7d:ab:00:76:0f:12:a1:38:23:33: b7:79:6b:4e:35:cd:0d:98:89:54:58:c7:86:d8:5d: 02:77:5b:b7:48:0c:5f:f9:5e:a3:b8:07:47:f7:6f: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F1:DD:FE:85:A0:4D:8C:11:B3:9A:82:6A:90:F0:E6:24:CD:A6:F5 X509v3 Authority Key Identifier: keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:54:9e:5e:b6:56:3c:ab:40:e3:93:d0:21:12:36:4c:0e:8f: ca:cb:34:0e:07:ed:bf:30:20:59:70:30:60:79:82:b8:6c:c9: 4e:3f:78:14:1e:f9:b2:6b:64:ea:a9:23:6a:dc:61:2e:bb:cb: 88:b9:8f:b7:a9:6c:1f:54:5f:33:5a:74:61:fa:e9:e8:67:13: 4b:73:c9:fd:94:1a:4b:93:67:0b:95:34:c7:ff:dd:86:87:d1: eb:59:9d:73:07:b3:5c:98:6f:4c:f1:e8:61:3d:5e:d7:82:32: bf:13:56:65:73:65:77:c4:b9:30:95:39:35:fa:60:9c:c8:e6: 56:ad:40:d3:fa:45:6f:5f:65:b2:a1:99:e5:9c:ed:e5:e4:e8: 5e:6a:cd:85:ca:63:5d:e7:75:d1:5f:7a:f8:98:2f:af:f2:8a: d3:52:ab:ad:ac:7d:1e:15:08:e5:db:d1:8f:e1:c2:6a:1b:62: 45:8c:29:cd:75:93:ef:22:87:08:6c:c7:98:17:2e:08:0b:4c: 15:56:3f:01:f8:b3:e9:ab:d0:9b:0e:e7:45:0c:4b:af:a3:f4: cc:c1:f9:0b:5d:4e:c1:4c:ae:72:a6:0e:68:58:29:a7:12:53: 1d:26:5b:1b:60:84:7d:9d:40:61:24:1a:ad:6e:3d:b4:86:49: 5e:89:10:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfifdHLUaJv19cCujUG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGIyNDdmMjI1MTFiN2Y1MzNiMDAyZDk5ZmJlYzJiNTU5 YjZjMmYwHhcNMjUxMjA2MDgwMTE4WhcNMjUxMjA3MDgwMTE4WjAzMTEwLwYDVQQD EyhjY2YxZGRmZTg1YTA0ZDhjMTFiMzlhODI2YTkwZjBlNjI0Y2RhNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03rj5da4eGZSRyYedb24u6tLiz/1 911UKiQFsXaUWuPJsnJh03y3BcsIdL30gQNLEZMBRw9q2qnlM3JmVPxzCAPBRmqg vKcNW0UnQ3dil2WckZHXtOvL60xTcFiICt10FD/qORFYcJdRVxZoryWkkjhzIC0m JqUOcP2p17THUufMucdijoXCEDSihcCY6MhiRyrDJNY2HHH68R2Kjz4+ZDwG5s1p zTpTzTbKbKAetzCPdfN67+YALWqLAcXHM+7xzr//gBgoffxqzMgo8ytizfmrQuno 9X2rAHYPEqE4IzO3eWtONc0NmIlUWMeG2F0Cd1u3SAxf+V6juAdH929fDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzx3f6FoE2MEbOagmqQ8OYkzab1MB8GA1UdIwQY MBaAFK1LJH8iURt/UzsALZn77CtVm2wvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yOTI4OTktZGRiNi00MWQ0LTk2OTgt ZDUxOGQxNjMxMDViLzEvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8yOTI4OTktZGRiNi00MWQ0LTk2OTgtZDUxOGQxNjMxMDVi LzEvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVSeXrZW PKtA45PQIRI2TA6Pyss0DgftvzAgWXAwYHmCuGzJTj94FB75smtk6qkjatxhLrvL iLmPt6lsH1RfM1p0Yfrp6GcTS3PJ/ZQaS5NnC5U0x//dhofR61mdcwezXJhvTPHo YT1e14IyvxNWZXNld8S5MJU5NfpgnMjmVq1A0/pFb19lsqGZ5Zzt5eToXmrNhcpj Xed10V96+Jgvr/KK01Krrax9HhUI5dvRj+HCahtiRYwpzXWT7yKHCGzHmBcuCAtM FVY/Afiz6avQmw7nRQxLr6P0zMH5C11OwUyucqYOaFgppxJTHSZbG2CEfZ1AYSQa rW49tIZJXokQ4A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:46 2025 by rpki-client