This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json) Hash identifier: ItiCSbUiqZYzqosVNIn9zB8f2x8mQU5yDlV3UafUFsQ= Subject key identifier: 0D:0F:F7:BA:60:30:DE:E2:B6:24:7A:A3:2C:FD:36:06:EF:99:25:01 Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88 Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288 Certificate serial: 019AFB428DB4EB9CA6302DDB41B6A004A4CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft Manifest number: 0578 Signing time: Mon 08 Dec 2025 00:00:34 +0000 Manifest this update: Mon 08 Dec 2025 00:00:34 +0000 Manifest next update: Tue 09 Dec 2025 00:00:34 +0000 Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: w8nWnlhT4MMxcjqX4c0Gr5DLHfUJqSydumLjFnwWgzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:42:8d:b4:eb:9c:a6:30:2d:db:41:b6:a0:04:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288 Validity Not Before: Dec 8 00:00:34 2025 GMT Not After : Dec 9 00:00:34 2025 GMT Subject: CN=0d0ff7ba6030dee2b6247aa32cfd3606ef992501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:5a:ee:f2:8a:64:72:72:fe:01:02:f9:b0: 19:e1:7f:7a:74:ef:0a:42:b4:79:84:c2:c5:d2:bb: c8:7d:93:3d:33:08:b9:6c:57:a2:03:c3:5a:a6:68: 14:e3:14:a3:06:1b:c9:fa:50:d7:d6:e1:3f:54:83: 4f:03:67:f8:b6:64:96:cc:7d:3d:e6:69:30:4f:13: c3:c2:0c:3c:59:6c:cd:05:8a:f4:9f:90:a8:da:7f: cf:21:94:24:d8:b3:17:ec:80:d5:14:5c:00:4f:49: 87:72:80:31:ce:1a:aa:ba:6b:d2:0d:54:74:1b:11: 4b:4e:bc:08:87:ec:15:33:20:d0:e5:54:d7:d1:75: ef:c1:8b:12:c9:ea:f4:32:c7:20:03:3c:3e:7f:b2: f2:89:52:92:cd:58:a4:43:d1:96:44:58:40:00:56: 50:42:6a:e3:25:da:61:3d:55:cc:a9:59:12:ba:a5: f1:5a:f4:8e:be:e4:6e:79:bc:eb:0d:10:08:55:4e: c5:ea:f8:69:6a:04:37:d3:f6:7d:15:3e:80:99:d3: 7f:6d:bb:67:66:92:f9:df:06:02:64:bd:c1:d0:29: 60:88:e7:73:e4:d2:af:04:f5:9f:39:13:0a:57:ae: 6a:5c:d8:f0:11:5c:22:72:5e:87:51:56:46:92:d0: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:0F:F7:BA:60:30:DE:E2:B6:24:7A:A3:2C:FD:36:06:EF:99:25:01 X509v3 Authority Key Identifier: keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:3a:21:41:c5:a5:db:cc:b9:cc:08:86:d9:69:89:09:66:0e: 55:97:33:72:87:13:3b:35:ae:89:2b:3b:74:d7:51:7c:49:11: 71:7c:b8:ff:5f:bd:4a:f8:24:7c:71:c0:6f:05:ee:1c:6e:67: a3:31:59:1d:94:aa:3e:d3:b4:73:e3:5e:91:c8:16:ad:9f:80: b4:db:01:fb:f4:aa:a8:95:cd:a6:25:df:2c:43:49:85:94:45: bf:e5:85:8a:9b:ab:31:2f:74:be:af:b6:5b:2e:ef:47:5d:b0: 09:4e:f0:06:85:6d:e7:1b:f4:f5:4e:2e:e8:20:b3:82:74:fa: f0:22:06:d3:d4:82:de:9b:f6:b2:a4:7c:da:62:11:a4:3d:4d: 62:85:5b:40:ea:2f:19:13:6a:91:87:09:7e:2a:2b:05:a8:42: fe:8a:a2:31:48:4b:7c:78:fd:76:c6:0c:73:75:e4:1f:58:55: fa:d2:cd:fc:eb:6c:0a:95:fe:40:14:56:ff:9b:ac:81:0f:60: 8f:4e:25:6b:6b:b6:b3:b3:b6:47:17:3d:40:fd:00:71:ef:e9: dd:f5:ea:41:22:25:a5:5a:6f:9f:ab:3d:8e:be:de:c2:61:5e: d9:43:d4:c7:df:17:1a:89:71:f9:67:d4:8f:ab:0d:b1:2d:9d: 0a:97:2d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7Qo2065ymMC3bQbagBKTOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOGM4MTk2NDcyNjZmYmNiMTM5ZTY3MmE4ZmI5YTU3Y2Y1 OGIyODgwHhcNMjUxMjA4MDAwMDM0WhcNMjUxMjA5MDAwMDM0WjAzMTEwLwYDVQQD EygwZDBmZjdiYTYwMzBkZWUyYjYyNDdhYTMyY2ZkMzYwNmVmOTkyNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXla7vKKZHJy/gEC+bAZ4X96dO8K QrR5hMLF0rvIfZM9Mwi5bFeiA8NapmgU4xSjBhvJ+lDX1uE/VINPA2f4tmSWzH09 5mkwTxPDwgw8WWzNBYr0n5Co2n/PIZQk2LMX7IDVFFwAT0mHcoAxzhqqumvSDVR0 GxFLTrwIh+wVMyDQ5VTX0XXvwYsSyer0MscgAzw+f7LyiVKSzVikQ9GWRFhAAFZQ QmrjJdphPVXMqVkSuqXxWvSOvuRuebzrDRAIVU7F6vhpagQ30/Z9FT6AmdN/bbtn ZpL53wYCZL3B0ClgiOdz5NKvBPWfORMKV65qXNjwEVwicl6HUVZGktAY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0P97pgMN7itiR6oyz9NgbvmSUBMB8GA1UdIwQY MBaAFK+MgZZHJm+8sTnmcqj7mlfPWLKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmU3YWYtOTdiOC00Nzc3LWJiZGQt MzAxMTdjMjBiZjQyLzEvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82YmU3YWYtOTdiOC00Nzc3LWJiZGQtMzAxMTdjMjBiZjQy LzEvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjohQcWl 28y5zAiG2WmJCWYOVZczcocTOzWuiSs7dNdRfEkRcXy4/1+9SvgkfHHAbwXuHG5n ozFZHZSqPtO0c+NekcgWrZ+AtNsB+/SqqJXNpiXfLENJhZRFv+WFipurMS90vq+2 Wy7vR12wCU7wBoVt5xv09U4u6CCzgnT68CIG09SC3pv2sqR82mIRpD1NYoVbQOov GRNqkYcJfiorBahC/oqiMUhLfHj9dsYMc3XkH1hV+tLN/OtsCpX+QBRW/5usgQ9g j04la2u2s7O2Rxc9QP0Ace/p3fXqQSIlpVpvn6s9jr7ewmFe2UPUx98XGolx+WfU j6sNsS2dCpctgw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:35:59 2025 by rpki-client