This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft File: rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json) Hash identifier: P9B+xYr+2KdZd8QcVm67LcPFSldd5snHrHAPHpjy/Go= Subject key identifier: 8B:D0:64:D3:07:78:A6:42:1A:F5:E2:15:82:9F:F0:9E:82:46:B9:84 Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21 Certificate issuer: /CN=ad56104c289d71fd83ba887bef8091914f366e21 Certificate serial: 019AF12DDB0576F091EFAA980074E0A6C243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft Manifest number: 0F6A Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: zFTQet5iG0TDW4NrGSv89CtvjEf43EjTC3mT3A+ldgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:db:05:76:f0:91:ef:aa:98:00:74:e0:a6:c2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21 Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=8bd064d30778a6421af5e215829ff09e8246b984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:42:14:6e:03:58:03:33:d2:86:71:72:84: dd:3b:f8:c3:19:95:8f:8b:17:7a:04:fd:d9:3e:18: 3d:a7:ac:8f:12:ba:fc:d0:ac:3f:8e:1f:13:8b:26: a6:e8:0b:86:09:7d:a3:85:90:6d:90:c7:ef:6e:b1: 46:00:51:a3:a6:8c:00:77:72:ae:a2:3b:c3:5e:0b: 79:ce:6a:f2:b7:c6:b8:d1:17:a5:00:dd:98:fa:82: 28:ea:e3:70:7a:b9:77:8f:1f:74:e3:20:ea:b9:7a: 8d:aa:3d:17:36:10:03:db:3c:a6:09:5b:92:08:26: 01:0c:6a:c0:03:55:78:ee:b4:5e:74:58:ed:a7:b3: 79:9d:4a:1a:3c:3e:50:3a:10:68:d0:27:8e:13:3f: c4:b7:d8:7f:1e:64:14:fc:c4:e7:89:8f:45:ff:16: 4d:be:1c:80:3b:ad:1d:38:29:ef:4f:4d:95:8a:b5: 72:57:b7:a7:41:fb:81:4b:96:20:29:1c:03:70:77: 70:2c:12:f9:c2:4c:49:e6:6e:fe:5e:39:92:16:43: 16:ea:9c:3f:c3:5f:a0:fd:d7:7d:d7:1c:c6:4f:6c: e7:9b:eb:c6:54:79:61:a7:67:93:52:90:64:8f:75: 46:ac:9d:6f:09:c7:ef:0e:a3:b5:04:2b:0e:2d:a0: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D0:64:D3:07:78:A6:42:1A:F5:E2:15:82:9F:F0:9E:82:46:B9:84 X509v3 Authority Key Identifier: keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a6:1b:cc:db:40:9b:ab:5a:12:28:44:da:a6:48:a7:a2:dd: 1a:88:e7:2a:e9:3a:7b:a7:75:5b:7f:cc:87:0f:08:b0:c5:aa: 81:c8:f0:c2:87:e0:83:17:3b:8e:35:cc:cc:2c:22:bc:fa:4e: 44:d0:7a:06:a6:d7:ad:12:23:fa:d4:08:5d:e0:a5:d7:43:de: 17:62:3d:29:ff:b0:39:e2:82:6b:e8:2c:c7:52:10:28:4a:e6: 82:40:65:e7:49:cf:e0:41:62:14:1a:66:ef:7c:be:31:62:2f: 3d:d9:3d:9b:4b:2a:2b:1b:67:50:be:a7:ab:31:a9:05:00:c7: e3:15:64:7b:0d:f1:a1:04:64:b0:12:5e:48:84:95:cb:4d:5c: 09:d6:23:53:ca:11:b9:46:f3:2d:1b:44:44:b6:b6:8e:b6:13: ce:f0:ac:61:7b:b5:77:e3:fe:eb:26:0a:04:e0:3a:9e:2f:ee: b6:c1:18:2e:b4:71:c7:7e:17:93:91:02:fe:9f:5f:80:53:e3: 36:4a:4a:2d:26:95:de:20:f2:51:de:62:6a:40:d7:46:ba:b0: 64:f6:63:78:f4:0f:02:b9:e3:1d:53:f9:5a:c7:31:15:11:0d: 49:cc:ef:a9:14:7e:9b:92:6f:2e:ec:b0:05:d0:e7:c7:46:65: 13:27:f7:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdsFdvCR76qYAHTgpsJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNTYxMDRjMjg5ZDcxZmQ4M2JhODg3YmVmODA5MTkxNGYz NjZlMjEwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD Eyg4YmQwNjRkMzA3NzhhNjQyMWFmNWUyMTU4MjlmZjA5ZTgyNDZiOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw1CFG4DWAMz0oZxcoTdO/jDGZWP ixd6BP3ZPhg9p6yPErr80Kw/jh8Tiyam6AuGCX2jhZBtkMfvbrFGAFGjpowAd3Ku ojvDXgt5zmryt8a40RelAN2Y+oIo6uNwerl3jx904yDquXqNqj0XNhAD2zymCVuS CCYBDGrAA1V47rRedFjtp7N5nUoaPD5QOhBo0CeOEz/Et9h/HmQU/MTniY9F/xZN vhyAO60dOCnvT02VirVyV7enQfuBS5YgKRwDcHdwLBL5wkxJ5m7+XjmSFkMW6pw/ w1+g/dd91xzGT2znm+vGVHlhp2eTUpBkj3VGrJ1vCcfvDqO1BCsOLaDSYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvQZNMHeKZCGvXiFYKf8J6CRrmEMB8GA1UdIwQY MBaAFK1WEEwonXH9g7qIe++AkZFPNm4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNDYyMmQtMzU3Yi00Zjg2LTg1ODkt Y2RhMDQ5YjE5MTQzLzEvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9lNDYyMmQtMzU3Yi00Zjg2LTg1ODktY2RhMDQ5YjE5MTQz LzEvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqYbzNtA m6taEihE2qZIp6LdGojnKuk6e6d1W3/Mhw8IsMWqgcjwwofggxc7jjXMzCwivPpO RNB6BqbXrRIj+tQIXeCl10PeF2I9Kf+wOeKCa+gsx1IQKErmgkBl50nP4EFiFBpm 73y+MWIvPdk9m0sqKxtnUL6nqzGpBQDH4xVkew3xoQRksBJeSISVy01cCdYjU8oR uUbzLRtERLa2jrYTzvCsYXu1d+P+6yYKBOA6ni/utsEYLrRxx34Xk5EC/p9fgFPj NkpKLSaV3iDyUd5iakDXRrqwZPZjePQPArnjHVP5WscxFRENSczvqRR+m5JvLuyw BdDnx0ZlEyf3VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:40 2025 by rpki-client