This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json) Hash identifier: /8UOw4GlvY9R1Ei7PxlE3oU7iC5N7Vs7RmcNwkoJysk= Subject key identifier: BF:4F:9B:3F:7A:C8:21:DF:4D:0C:B5:6E:A1:D7:E1:B0:2E:0A:44:96 Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d Certificate serial: 019B3FB64FFFB4FDF9138A8A9B09DF2AE699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft Manifest number: 0F8E Signing time: Sun 21 Dec 2025 07:01:11 +0000 Manifest this update: Sun 21 Dec 2025 07:01:11 +0000 Manifest next update: Mon 22 Dec 2025 07:01:11 +0000 Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: ZgiQtnpZXXgWs0AN+bFF4p98BbIh3jonqFYv8da4cd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:4f:ff:b4:fd:f9:13:8a:8a:9b:09:df:2a:e6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d Validity Not Before: Dec 21 07:01:11 2025 GMT Not After : Dec 22 07:01:11 2025 GMT Subject: CN=bf4f9b3f7ac821df4d0cb56ea1d7e1b02e0a4496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:6e:76:80:86:42:17:e5:4a:12:8b:bb:fb: de:c8:47:e4:48:f7:25:fd:e5:86:bb:ee:ae:42:31: 81:4a:ef:01:fe:74:c6:81:09:84:ea:bf:2b:f9:f5: 85:dd:c0:ac:9c:d6:ae:93:51:9c:95:67:10:b6:c4: fd:39:d9:5a:a2:bb:c7:d8:43:66:76:57:cb:24:4c: 60:bf:0c:24:86:40:c4:02:3c:85:a3:c9:88:c0:f1: 3e:a1:8d:ea:a0:68:4f:07:06:38:c6:5e:bf:e3:6a: 99:d7:b3:2f:ce:71:7d:8e:47:c9:92:3c:16:7b:3f: 13:07:cf:b3:1f:47:43:03:b3:70:e6:13:9d:ee:79: 57:2e:1d:81:65:c1:d4:82:b0:cd:2a:cd:6b:e4:44: 05:19:9e:fc:6c:c2:2c:15:32:c2:f9:26:58:24:12: 9c:23:a5:62:5d:a9:27:41:f8:1d:d5:d5:e4:2f:06: f6:d0:ac:9d:58:34:32:8e:61:20:03:3c:46:d0:26: 9e:cd:a5:91:ca:6b:87:53:ce:4d:a0:18:dc:db:43: 45:13:6a:84:eb:ae:35:d9:3d:37:9b:a1:ad:61:1e: 45:12:ff:c7:20:ce:81:92:63:4c:d3:71:ec:9b:ec: 70:75:37:1b:25:b8:32:1d:34:ff:95:8b:09:f9:5a: f4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4F:9B:3F:7A:C8:21:DF:4D:0C:B5:6E:A1:D7:E1:B0:2E:0A:44:96 X509v3 Authority Key Identifier: keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1b:b8:7c:39:fe:bc:c3:d4:a7:2d:2a:41:8f:c1:e9:5e:f2: 64:33:64:16:9b:0b:55:ef:de:5c:85:ec:f4:9a:7c:22:3d:7a: cd:22:d5:2f:01:2a:3d:4d:95:8f:f5:e2:76:c9:35:33:e1:6e: b8:7f:6f:9b:51:14:48:bb:55:c9:47:1e:91:82:f5:f7:5a:5f: d7:3a:2a:3e:95:3f:e2:44:f2:9e:c1:4b:49:86:9a:ae:86:c8: 74:17:2b:5b:9e:3a:fa:76:77:67:2b:a9:27:28:97:64:5b:3d: 6e:32:81:b5:fe:27:e6:d8:ad:5b:61:96:42:44:7e:01:02:c3: 41:24:bb:b1:96:e9:2d:8f:4a:91:c4:0b:3d:9e:6e:3a:ea:cf: 8a:6c:a7:4e:46:5b:10:44:fb:d9:e2:3f:c7:de:42:76:20:80: ad:88:38:d1:32:4d:d8:53:e0:fa:8c:ac:95:04:5c:52:78:fb: 13:cb:eb:4d:ef:69:73:99:49:57:d9:fc:04:7e:6f:d1:f0:73: 6c:f0:a2:be:d6:00:98:00:da:22:c2:43:ab:df:37:bf:da:91: 23:1f:25:e1:eb:d4:fc:a6:0f:6f:cd:d0:33:6f:27:4c:1b:79: 49:2f:88:4d:8a:0c:b2:de:7b:5d:b3:c2:13:1e:93:84:1f:8b: a9:d7:17:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tk//tP35E4qKmwnfKuaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzc5YTY3MTNlNzllNTk4ZDlmZWFhNjZkY2ExNjkxODhl MDIxOGQwHhcNMjUxMjIxMDcwMTExWhcNMjUxMjIyMDcwMTExWjAzMTEwLwYDVQQD EyhiZjRmOWIzZjdhYzgyMWRmNGQwY2I1NmVhMWQ3ZTFiMDJlMGE0NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxhudoCGQhflShKLu/veyEfkSPcl /eWGu+6uQjGBSu8B/nTGgQmE6r8r+fWF3cCsnNauk1GclWcQtsT9OdlaorvH2ENm dlfLJExgvwwkhkDEAjyFo8mIwPE+oY3qoGhPBwY4xl6/42qZ17MvznF9jkfJkjwW ez8TB8+zH0dDA7Nw5hOd7nlXLh2BZcHUgrDNKs1r5EQFGZ78bMIsFTLC+SZYJBKc I6ViXaknQfgd1dXkLwb20KydWDQyjmEgAzxG0CaezaWRymuHU85NoBjc20NFE2qE 66412T03m6GtYR5FEv/HIM6BkmNM03Hsm+xwdTcbJbgyHTT/lYsJ+Vr0pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9Pmz96yCHfTQy1bqHX4bAuCkSWMB8GA1UdIwQY MBaAFHA3mmcT555ZjZ/qpm3KFpGI4CGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGIt Mjk0NGFlYWQ5Y2RhLzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGItMjk0NGFlYWQ5Y2Rh LzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBu4fDn+ vMPUpy0qQY/B6V7yZDNkFpsLVe/eXIXs9Jp8Ij16zSLVLwEqPU2Vj/Xidsk1M+Fu uH9vm1EUSLtVyUcekYL191pf1zoqPpU/4kTynsFLSYaarobIdBcrW546+nZ3Zyup JyiXZFs9bjKBtf4n5titW2GWQkR+AQLDQSS7sZbpLY9KkcQLPZ5uOurPimynTkZb EET72eI/x95CdiCArYg40TJN2FPg+oyslQRcUnj7E8vrTe9pc5lJV9n8BH5v0fBz bPCivtYAmADaIsJDq983v9qRIx8l4evU/KYPb83QM28nTBt5SS+ITYoMst57XbPC Ex6ThB+LqdcXXw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:37:45 2025 by rpki-client