This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json) Hash identifier: EkHfUKNHUM62zc3LokOsDkxjwIIPq7qrDtancMZ3yVg= Subject key identifier: 92:69:1C:2C:44:C5:EC:EA:8F:B8:A3:D7:3D:5B:31:36:79:E3:28:0F Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94 Certificate issuer: /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94 Certificate serial: 019AF50B6C99DF0497C587BD6642ED6CC29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft Manifest number: 09FF Signing time: Sat 06 Dec 2025 19:02:37 +0000 Manifest this update: Sat 06 Dec 2025 19:02:37 +0000 Manifest next update: Sun 07 Dec 2025 19:02:37 +0000 Files and hashes: 1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: 3Ql8INFgJTfo+y3974W+yv6LrjRDv4rbXnZ9Z3Pxr3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:6c:99:df:04:97:c5:87:bd:66:42:ed:6c:c2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94 Validity Not Before: Dec 6 19:02:37 2025 GMT Not After : Dec 7 19:02:37 2025 GMT Subject: CN=92691c2c44c5ecea8fb8a3d73d5b313679e3280f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:e6:12:34:36:de:d4:28:f9:35:70:06:4d: 56:7d:54:fe:f3:38:bd:a2:98:f6:0b:0b:cd:ff:8b: f9:c7:12:e6:f2:ae:89:c1:05:09:4c:cf:82:44:f7: 97:b7:83:2a:88:e7:14:40:38:ad:01:bd:c8:03:6b: b6:99:3c:34:39:a1:83:28:a1:c6:a5:a6:de:c2:33: cc:68:6c:bc:d8:4c:93:29:bb:25:b2:28:7b:91:63: bb:8e:04:63:31:44:e2:01:99:c9:80:f6:8c:0b:9f: e2:e7:e6:eb:dc:01:e5:91:3c:0f:fe:16:9b:70:67: fb:2a:95:d4:d5:56:e1:f0:65:a2:5d:9b:bc:78:21: a9:e1:9d:ca:d8:14:d4:0b:d0:fb:1f:35:c8:7c:a3: f1:5e:49:f5:ae:5a:18:11:dd:cc:e4:86:b8:f5:69: 88:e2:84:f6:d9:9b:a6:44:e2:1a:eb:67:4c:bd:35: 7a:c7:e6:73:cd:e1:c8:43:c6:2d:17:56:17:23:5f: d4:80:53:60:be:42:61:bb:a9:dd:6e:8c:1a:b4:d8: ea:d1:e4:81:f9:e8:68:93:e2:87:ce:ec:d0:83:21: e2:a3:26:7a:c1:77:0f:b5:d5:46:e7:18:e9:97:59: cf:b2:dd:95:6d:8e:95:50:55:ca:a3:da:ef:f7:33: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:69:1C:2C:44:C5:EC:EA:8F:B8:A3:D7:3D:5B:31:36:79:E3:28:0F X509v3 Authority Key Identifier: keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:83:90:39:0e:4c:c3:4b:57:66:fa:17:c7:88:aa:c7:08:3a: 98:3f:cd:6a:e2:01:cf:a8:da:9a:b3:f7:ae:6a:78:ef:74:3a: e8:ec:6c:95:d8:68:36:02:ba:8a:85:c3:df:9a:01:8b:c5:0e: e7:b1:25:d4:94:8d:ef:74:92:23:5e:62:6b:0c:12:e6:63:b5: 1f:3d:1a:e7:09:61:40:13:97:8e:38:aa:c4:34:9f:c9:72:ab: a7:25:7d:ea:a4:14:fb:d6:bb:34:79:82:9b:f9:26:ef:25:13: 4f:78:bc:b6:2e:d4:a6:c9:6c:44:11:85:0a:29:9c:c2:1a:a8: cd:83:20:23:32:84:df:6a:2c:c9:9c:88:d3:cd:a9:24:fe:37: 5e:79:e2:92:1d:67:3a:54:2b:98:04:a7:9c:50:ea:53:00:85: da:7f:5d:d0:75:bc:5f:1a:a1:aa:66:6d:95:2d:2f:27:53:b3: 8f:0b:de:b9:ce:4b:a5:6b:24:61:46:9d:60:9d:b5:3c:10:9c: 92:93:1d:67:00:78:63:25:5c:fb:b5:e4:4b:f6:64:e6:f4:f0: f1:ee:8c:b6:e9:bc:6f:89:54:11:84:24:13:06:43:55:9a:06: 20:da:54:e4:65:dd:5d:8b:11:3f:c8:fa:e5:4f:00:9c:2b:e1: 13:36:8e:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2yZ3wSXxYe9ZkLtbMKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTU3OGEyZTYyMzczNmEwNmE1ZTE5ZDkxYmQwOTYyMGQw NmFkOTQwHhcNMjUxMjA2MTkwMjM3WhcNMjUxMjA3MTkwMjM3WjAzMTEwLwYDVQQD Eyg5MjY5MWMyYzQ0YzVlY2VhOGZiOGEzZDczZDViMzEzNjc5ZTMyODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXjmEjQ23tQo+TVwBk1WfVT+8zi9 opj2CwvN/4v5xxLm8q6JwQUJTM+CRPeXt4MqiOcUQDitAb3IA2u2mTw0OaGDKKHG pabewjPMaGy82EyTKbslsih7kWO7jgRjMUTiAZnJgPaMC5/i5+br3AHlkTwP/hab cGf7KpXU1Vbh8GWiXZu8eCGp4Z3K2BTUC9D7HzXIfKPxXkn1rloYEd3M5Ia49WmI 4oT22ZumROIa62dMvTV6x+ZzzeHIQ8YtF1YXI1/UgFNgvkJhu6ndbowatNjq0eSB +ehok+KHzuzQgyHioyZ6wXcPtdVG5xjpl1nPst2VbY6VUFXKo9rv9zOqhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJpHCxExezqj7ij1z1bMTZ54ygPMB8GA1UdIwQY MBaAFG0VeKLmI3NqBqXhnZG9CWINBq2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJWNG91WWpjMm9HcGVHZGtiMEpZZzBHclpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NGJmNTItNzgzOC00MjcwLWE5MWMt N2FkYmRhZGM2ZTg2LzEvYlJWNG91WWpjMm9HcGVHZGtiMEpZZzBHclpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC85NGJmNTItNzgzOC00MjcwLWE5MWMtN2FkYmRhZGM2ZTg2 LzEvYlJWNG91WWpjMm9HcGVHZGtiMEpZZzBHclpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4OQOQ5M w0tXZvoXx4iqxwg6mD/NauIBz6jamrP3rmp473Q66OxsldhoNgK6ioXD35oBi8UO 57El1JSN73SSI15iawwS5mO1Hz0a5wlhQBOXjjiqxDSfyXKrpyV96qQU+9a7NHmC m/km7yUTT3i8ti7UpslsRBGFCimcwhqozYMgIzKE32osyZyI082pJP43Xnnikh1n OlQrmASnnFDqUwCF2n9d0HW8XxqhqmZtlS0vJ1Ozjwveuc5LpWskYUadYJ21PBCc kpMdZwB4YyVc+7XkS/Zk5vTw8e6Mtum8b4lUEYQkEwZDVZoGINpU5GXdXYsRP8j6 5U8AnCvhEzaOhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:55 2025 by rpki-client