This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json) Hash identifier: CyBGygpluBayHzQrh3qqQclCOwiTQu9fhxh0n2WQENM= Subject key identifier: 93:83:D3:4E:E0:55:A8:C2:D2:4F:D2:7F:35:78:B6:C6:30:6C:40:1B Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Certificate serial: 019B33E8AAB037B9295846840A72BDC0576A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft Manifest number: 1714 Signing time: Fri 19 Dec 2025 00:00:44 +0000 Manifest this update: Fri 19 Dec 2025 00:00:44 +0000 Manifest next update: Sat 20 Dec 2025 00:00:44 +0000 Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: QQe48w8ecXGxzjfJJ5+V1XNOG35OW8OBDn3KqylxVcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:aa:b0:37:b9:29:58:46:84:0a:72:bd:c0:57:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Validity Not Before: Dec 19 00:00:44 2025 GMT Not After : Dec 20 00:00:44 2025 GMT Subject: CN=9383d34ee055a8c2d24fd27f3578b6c6306c401b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:60:9a:07:06:99:7a:e3:d5:19:e6:7d:94: 31:6a:c7:f1:c1:66:aa:4b:c0:d2:38:3c:2c:bf:68: 80:3d:13:7d:a9:d5:48:69:91:bb:ca:67:44:2f:31: 65:83:b8:59:1b:28:c2:6e:ef:90:fd:5d:43:e8:39: 28:48:df:24:c1:b5:6d:74:d3:66:32:f1:b7:a3:10: 2a:f5:74:cb:c2:2f:0e:fa:74:62:3c:53:a1:da:b1: c8:45:8c:65:fe:2e:84:7b:59:2d:db:64:ea:d8:ce: 19:7e:bb:c2:b9:de:d1:8f:08:68:6b:ef:72:d5:f4: f0:e9:a7:1a:a7:c4:a0:21:fc:ec:70:1f:85:0b:9c: 9b:6d:a2:87:1d:2f:aa:cb:d8:0f:c6:5a:23:62:f0: 03:42:44:18:ea:69:61:90:f7:ea:79:24:5a:41:a7: 1e:3b:1b:67:9b:c8:d3:f0:05:c3:3c:1a:ca:a4:e5: 53:69:be:4d:fd:dd:2a:8c:e0:56:90:d8:fc:9e:26: 81:96:65:2f:93:80:97:0f:90:23:f6:9f:28:d9:90: 18:71:d9:61:b9:70:b4:41:a2:9f:0e:0c:d2:91:66: 09:7f:f9:ca:93:85:3a:a7:b3:7b:0c:66:6a:0b:31: b5:0f:18:f3:e3:be:d5:97:a3:32:a5:f4:38:10:06: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:83:D3:4E:E0:55:A8:C2:D2:4F:D2:7F:35:78:B6:C6:30:6C:40:1B X509v3 Authority Key Identifier: keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bc:da:57:04:66:2d:ae:41:92:3e:b9:8f:ef:84:12:69:27: 80:18:e2:31:a1:88:06:b2:1f:5c:67:61:81:71:2d:78:70:12: 56:61:7e:2a:b1:01:34:52:09:f3:ae:23:fb:0e:cf:86:57:24: 1d:3b:09:74:dc:f1:18:d2:d5:12:52:35:13:4b:59:f4:ec:f5: 2f:28:64:21:30:6b:9f:5b:ff:d0:5e:0e:b3:af:56:c7:e2:05: 89:12:50:f9:ff:94:e4:14:33:20:38:1f:73:41:b5:a2:18:92: a6:06:cb:9e:27:38:82:a8:03:c8:98:61:a1:a4:f6:33:6f:6e: 19:8a:cd:78:d1:3c:f9:6e:22:b0:cf:c2:87:d3:da:a9:50:e3: df:d4:7b:7d:43:54:92:13:91:f3:7d:55:a2:30:7a:34:1d:c3: e3:58:de:9b:df:a4:31:cc:79:56:e6:e2:5c:ea:0f:f4:7d:84: 73:e4:98:39:f7:c9:13:f3:e3:46:d3:69:1b:fe:03:a3:b0:cc: 0b:fe:63:3c:1b:8a:8d:19:53:21:c3:a7:fe:3d:40:53:7e:fe: 5e:48:3e:36:94:96:0a:a6:f4:56:3b:4e:cb:cd:52:ee:6a:3a: 78:df:8f:cd:2a:8d:5b:29:d8:d6:4d:f4:0a:6d:b2:f5:0a:de: 55:40:c1:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6KqwN7kpWEaECnK9wFdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw YzNkY2MwHhcNMjUxMjE5MDAwMDQ0WhcNMjUxMjIwMDAwMDQ0WjAzMTEwLwYDVQQD Eyg5MzgzZDM0ZWUwNTVhOGMyZDI0ZmQyN2YzNTc4YjZjNjMwNmM0MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXBgmgcGmXrj1RnmfZQxasfxwWaq S8DSODwsv2iAPRN9qdVIaZG7ymdELzFlg7hZGyjCbu+Q/V1D6DkoSN8kwbVtdNNm MvG3oxAq9XTLwi8O+nRiPFOh2rHIRYxl/i6Ee1kt22Tq2M4ZfrvCud7Rjwhoa+9y 1fTw6acap8SgIfzscB+FC5ybbaKHHS+qy9gPxlojYvADQkQY6mlhkPfqeSRaQace Oxtnm8jT8AXDPBrKpOVTab5N/d0qjOBWkNj8niaBlmUvk4CXD5Aj9p8o2ZAYcdlh uXC0QaKfDgzSkWYJf/nKk4U6p7N7DGZqCzG1Dxjz477Vl6MypfQ4EAbt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOD007gVajC0k/SfzV4tsYwbEAbMB8GA1UdIwQY MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLzaVwRm La5Bkj65j++EEmkngBjiMaGIBrIfXGdhgXEteHASVmF+KrEBNFIJ864j+w7Phlck HTsJdNzxGNLVElI1E0tZ9Oz1LyhkITBrn1v/0F4Os69Wx+IFiRJQ+f+U5BQzIDgf c0G1ohiSpgbLnic4gqgDyJhhoaT2M29uGYrNeNE8+W4isM/Ch9PaqVDj39R7fUNU khOR831VojB6NB3D41jem9+kMcx5VubiXOoP9H2Ec+SYOffJE/PjRtNpG/4Do7DM C/5jPBuKjRlTIcOn/j1AU37+Xkg+NpSWCqb0VjtOy81S7mo6eN+PzSqNWynY1k30 Cm2y9QreVUDBuQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:03 2025 by rpki-client