This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft File: at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json) Hash identifier: M6WcSRWUGysBXOhnfXVIgSsJwj775XtuxKIiXibkJxA= Subject key identifier: C4:F9:EF:AA:C1:2C:77:1A:48:29:55:A3:3F:F2:54:BE:48:80:C1:5E Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F Certificate issuer: /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f Certificate serial: 019AF276724D0A7B9D2900417B21E471F20F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft Manifest number: 04B0 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: V37Po5STaHk7oYVcXv2gkTSaUx3Wx2BdyYp5LhmrgPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:72:4d:0a:7b:9d:29:00:41:7b:21:e4:71:f2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=c4f9efaac12c771a482955a33ff254be4880c15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:55:43:28:bf:26:52:8f:a7:d9:6e:b6:b5:c6: 24:7d:5f:5f:1c:ba:b7:f3:fc:d2:ef:52:fa:fb:5a: 6c:0e:0d:cd:02:7a:40:a1:22:41:72:5f:48:fc:3c: e8:c9:54:7a:4f:8d:5e:7c:99:2c:40:8c:18:84:e0: c4:11:3e:47:bf:2f:7e:7b:2b:b2:d4:4d:44:a9:fe: 70:78:cc:35:1d:45:b7:02:d5:9d:6b:15:98:57:4f: e3:3a:99:93:c1:fe:d4:0f:47:40:37:0c:ff:b9:68: 94:ca:27:31:aa:20:51:dd:33:93:73:a7:28:17:50: 92:d2:aa:ad:db:9f:c4:50:38:00:8d:79:78:ba:0b: 58:08:85:3a:68:62:c8:75:f8:e6:af:1f:f0:6c:c2: 94:7b:18:3c:39:a6:df:46:df:53:a0:72:4d:58:05: 78:53:f7:49:27:78:dd:13:2c:8a:5b:38:b9:91:5b: d1:9b:18:fe:5f:7d:a7:dd:dc:80:bb:e7:07:a5:f9: 71:59:29:e8:21:16:0f:43:68:6d:bb:88:b7:3f:dd: b4:76:75:a7:73:f6:d6:bf:67:f8:bd:13:76:1d:46: 45:0b:77:d6:13:ef:01:87:82:5e:77:e5:8c:94:ab: 4c:f9:49:16:78:5f:00:d0:ad:ed:90:5f:48:d9:9d: 8d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:EF:AA:C1:2C:77:1A:48:29:55:A3:3F:F2:54:BE:48:80:C1:5E X509v3 Authority Key Identifier: keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:45:84:ca:b8:56:0d:0a:d7:80:cd:32:0f:fb:1d:42:36:b0: 3a:07:02:6c:aa:ea:a0:4d:eb:e8:74:40:ad:71:ba:24:7d:40: 77:5c:4e:9b:25:61:f6:f7:29:ad:d6:32:3b:ea:c6:4f:16:77: 96:cf:9b:ca:73:d8:bc:7a:92:1f:4f:16:79:66:79:31:53:4f: b2:52:8b:4e:67:cd:0c:4b:69:ef:0f:f4:5b:ff:4f:73:d3:5d: 16:8d:09:67:fd:b1:1e:7f:df:3b:5f:a4:89:8f:07:30:cb:4a: e4:63:b2:49:ae:21:ae:46:88:ac:4f:96:64:97:fc:a4:96:6a: 54:a3:ac:b1:55:4d:ca:60:7a:dd:89:16:05:05:13:9c:2b:8a: 6f:87:96:3e:5d:e7:7a:06:db:7e:d3:d7:df:44:01:4d:6e:f8: 7a:a4:38:31:57:d8:72:56:b9:cf:66:3c:9a:56:96:db:ba:cf: 06:ca:ac:58:a9:15:48:31:10:af:c3:1b:df:3b:a0:b5:1e:e0: 7f:8e:34:86:af:6a:94:7c:0f:8a:48:5c:99:a2:78:da:a2:35: 03:09:b3:f1:e2:bf:eb:55:1f:81:8a:19:fc:33:62:50:ca:68: 7b:22:d5:cb:a1:8a:a6:3f:22:53:d8:6d:c1:3c:28:c6:7e:14: cf:b2:93:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnJNCnudKQBBeyHkcfIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZGU2ZWFkZjI0NWNiN2E2NWNiNGMwNWQzZDU0YmNkMjYw YTA3NWYwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EyhjNGY5ZWZhYWMxMmM3NzFhNDgyOTU1YTMzZmYyNTRiZTQ4ODBjMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VVDKL8mUo+n2W62tcYkfV9fHLq3 8/zS71L6+1psDg3NAnpAoSJBcl9I/DzoyVR6T41efJksQIwYhODEET5Hvy9+eyuy 1E1Eqf5weMw1HUW3AtWdaxWYV0/jOpmTwf7UD0dANwz/uWiUyicxqiBR3TOTc6co F1CS0qqt25/EUDgAjXl4ugtYCIU6aGLIdfjmrx/wbMKUexg8OabfRt9ToHJNWAV4 U/dJJ3jdEyyKWzi5kVvRmxj+X32n3dyAu+cHpflxWSnoIRYPQ2htu4i3P920dnWn c/bWv2f4vRN2HUZFC3fWE+8Bh4Jed+WMlKtM+UkWeF8A0K3tkF9I2Z2NKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT576rBLHcaSClVoz/yVL5IgMFeMB8GA1UdIwQY MBaAFGrebq3yRct6ZctMBdPVS80mCgdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXQ1dXJmSkZ5M3BseTB3RjA5Vkx6U1lLQjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUxODMtZDhkOC00NDI1LWIwZWQt YzIwOTcwMzFlZDRiLzEvYXQ1dXJmSkZ5M3BseTB3RjA5Vkx6U1lLQjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jYjUxODMtZDhkOC00NDI1LWIwZWQtYzIwOTcwMzFlZDRi LzEvYXQ1dXJmSkZ5M3BseTB3RjA5Vkx6U1lLQjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEWEyrhW DQrXgM0yD/sdQjawOgcCbKrqoE3r6HRArXG6JH1Ad1xOmyVh9vcprdYyO+rGTxZ3 ls+bynPYvHqSH08WeWZ5MVNPslKLTmfNDEtp7w/0W/9Pc9NdFo0JZ/2xHn/fO1+k iY8HMMtK5GOySa4hrkaIrE+WZJf8pJZqVKOssVVNymB63YkWBQUTnCuKb4eWPl3n egbbftPX30QBTW74eqQ4MVfYcla5z2Y8mlaW27rPBsqsWKkVSDEQr8Mb3zugtR7g f440hq9qlHwPikhcmaJ42qI1Awmz8eK/61UfgYoZ/DNiUMpoeyLVy6GKpj8iU9ht wTwoxn4Uz7KTpw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:48 2025 by rpki-client