This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json) Hash identifier: h7NNoUafRME9ZctnVgBA/LnM5429isPblUcct6TvAfo= Subject key identifier: 7B:7A:47:80:20:D2:AD:3A:2E:04:D3:68:B4:A6:A6:4E:91:18:41:4F Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Certificate serial: 019AF051C8C357CD2BAE3B1FF957C7F5B372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft Manifest number: 16F1 Signing time: Fri 05 Dec 2025 21:01:22 +0000 Manifest this update: Fri 05 Dec 2025 21:01:22 +0000 Manifest next update: Sat 06 Dec 2025 21:01:22 +0000 Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: wP33IOX1AqcX2DEUtohtcQU/eaxntFpca5VEzWC65pE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:c8:c3:57:cd:2b:ae:3b:1f:f9:57:c7:f5:b3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Validity Not Before: Dec 5 21:01:22 2025 GMT Not After : Dec 6 21:01:22 2025 GMT Subject: CN=7b7a478020d2ad3a2e04d368b4a6a64e9118414f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:22:f6:a4:dd:3c:5d:22:5a:25:01:67:a5:f7: cd:df:00:d7:13:a9:d3:b3:0c:d5:92:33:86:a8:c4: 74:e3:e6:97:65:fe:51:5f:69:22:7d:28:4a:2e:8b: 48:92:b6:20:f9:fc:70:2d:e8:a2:c9:fb:73:86:0e: 77:a6:34:9c:84:04:64:e1:61:da:15:30:2f:fd:1d: ea:3e:82:9d:3c:9a:31:01:13:a6:20:ce:7f:11:f0: 81:41:3b:d6:5f:52:fa:fb:e8:6a:f4:a7:b8:0b:59: 31:7c:35:f1:83:f8:f2:a6:32:ce:78:ee:d1:6f:7c: ee:4a:4b:21:3e:f1:68:ab:59:27:34:71:52:0c:2b: 06:78:51:c4:c3:9a:8a:52:8c:14:61:cd:3c:0c:46: 6f:6d:05:37:6a:39:a0:79:a8:25:3d:e4:13:5e:5e: e0:07:6e:a7:b9:31:86:e6:0f:79:f5:ae:ae:c0:3e: 9b:e7:aa:6a:8c:7a:f0:7b:e6:7b:cf:99:76:12:99: 45:35:59:37:51:dd:f3:1b:24:9f:08:19:56:cd:19: 9f:a9:98:ee:2c:d4:fd:9c:e3:76:4b:d3:64:71:44: 32:9f:f4:ac:fe:ee:55:45:9c:06:b9:4a:4d:99:94: 9c:36:bc:27:90:26:b0:76:61:f2:92:c7:b6:fb:4b: 7e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7A:47:80:20:D2:AD:3A:2E:04:D3:68:B4:A6:A6:4E:91:18:41:4F X509v3 Authority Key Identifier: keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:c1:47:eb:2a:ea:7d:98:4e:6b:b1:da:a7:5e:e6:42:4f: 1d:32:3c:a6:0f:de:8e:94:3b:41:df:a2:42:24:89:3f:44:45: bf:24:67:26:88:fc:99:52:b5:fa:f2:0f:c0:68:cd:5e:ee:b9: 77:84:32:a5:35:0b:cc:73:f7:32:0b:f2:14:11:17:e2:1c:a4: 32:bb:92:10:1f:5b:20:af:79:42:39:11:bc:f5:43:88:cd:9f: d1:81:69:06:bf:a5:66:47:f9:48:fe:6d:75:9e:39:04:fa:6e: f8:c4:74:59:ca:5d:92:df:03:db:df:83:c7:4b:05:a9:93:b5: b2:29:dc:88:33:27:b1:05:67:4b:69:19:0c:c9:30:69:f1:1f: 16:13:c2:73:bd:ad:da:e0:39:c9:f8:e8:5b:f2:97:a3:81:1d: 25:58:5c:f2:ad:91:6d:f7:50:70:09:c0:49:5b:c6:4e:be:79: 39:29:d0:24:88:51:9b:ff:37:8a:93:87:b5:5b:92:d7:e5:53: f6:17:a9:44:c2:3e:c8:b9:7e:5c:99:8a:44:3c:2b:a6:65:ee: 12:6d:3c:1f:e9:58:1b:eb:72:9e:e8:dd:95:67:57:6a:14:da: 7d:54:9a:f1:b3:a7:d4:bc:1b:f6:f2:6f:92:38:5b:c3:3f:3a: 49:d7:f3:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUcjDV80rrjsf+VfH9bNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw YzNkY2MwHhcNMjUxMjA1MjEwMTIyWhcNMjUxMjA2MjEwMTIyWjAzMTEwLwYDVQQD Eyg3YjdhNDc4MDIwZDJhZDNhMmUwNGQzNjhiNGE2YTY0ZTkxMTg0MTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSL2pN08XSJaJQFnpffN3wDXE6nT swzVkjOGqMR04+aXZf5RX2kifShKLotIkrYg+fxwLeiiyftzhg53pjSchARk4WHa FTAv/R3qPoKdPJoxAROmIM5/EfCBQTvWX1L6++hq9Ke4C1kxfDXxg/jypjLOeO7R b3zuSkshPvFoq1knNHFSDCsGeFHEw5qKUowUYc08DEZvbQU3ajmgeaglPeQTXl7g B26nuTGG5g959a6uwD6b56pqjHrwe+Z7z5l2EplFNVk3Ud3zGySfCBlWzRmfqZju LNT9nON2S9NkcUQyn/Ss/u5VRZwGuUpNmZScNrwnkCawdmHykse2+0t+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt6R4Ag0q06LgTTaLSmpk6RGEFPMB8GA1UdIwQY MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknPBR+sq 6n2YTmux2qde5kJPHTI8pg/ejpQ7Qd+iQiSJP0RFvyRnJoj8mVK1+vIPwGjNXu65 d4QypTULzHP3MgvyFBEX4hykMruSEB9bIK95QjkRvPVDiM2f0YFpBr+lZkf5SP5t dZ45BPpu+MR0Wcpdkt8D29+Dx0sFqZO1sinciDMnsQVnS2kZDMkwafEfFhPCc72t 2uA5yfjoW/KXo4EdJVhc8q2RbfdQcAnASVvGTr55OSnQJIhRm/83ipOHtVuS1+VT 9hepRMI+yLl+XJmKRDwrpmXuEm08H+lYG+tynujdlWdXahTafVSa8bOn1Lwb9vJv kjhbwz86Sdfz/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:39 2025 by rpki-client