This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json) Hash identifier: QE0tAoIfx1wMvnidojlgbCevvz5bTSE7QDY0qZkJd2Q= Subject key identifier: ED:A0:C1:F8:BD:3A:80:BD:66:A5:DE:6A:43:AC:FF:CF:A2:DA:ED:6A Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60 Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160 Certificate serial: 019B3C103D92D5316454718C8F6163EB5A77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft Manifest number: 023C Signing time: Sat 20 Dec 2025 14:00:55 +0000 Manifest this update: Sat 20 Dec 2025 14:00:55 +0000 Manifest next update: Sun 21 Dec 2025 14:00:55 +0000 Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: V/EW615+iult633Id0+3yrz1bUastQCMUFd/O52/T6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:3d:92:d5:31:64:54:71:8c:8f:61:63:eb:5a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160 Validity Not Before: Dec 20 14:00:55 2025 GMT Not After : Dec 21 14:00:55 2025 GMT Subject: CN=eda0c1f8bd3a80bd66a5de6a43acffcfa2daed6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:3f:90:51:19:ae:3e:02:dc:34:99:fd:86: 8a:2e:12:96:c1:c1:ef:f3:55:27:01:eb:69:22:71: a5:fe:ce:b6:d9:05:a2:14:bd:9d:7d:04:ff:1a:81: a0:81:64:15:76:c3:50:07:44:f8:44:ad:0e:4d:8b: e5:c8:7d:24:11:08:38:5e:b3:e5:d7:56:d7:3b:54: 88:8b:45:5c:37:16:3b:2d:37:25:78:c4:7e:6f:b6: 92:df:3c:0b:f0:f0:d2:51:81:46:42:bd:7f:ee:5e: 26:3f:3a:00:e0:70:09:a9:71:c2:ac:98:ed:c6:b2: a8:84:60:1f:dd:eb:25:6a:67:96:76:3f:90:04:dd: 50:45:25:89:57:d4:55:05:c5:c8:c2:17:a6:37:86: 45:69:ad:b5:3e:e4:85:38:43:ea:49:7e:57:17:f8: b5:e7:f0:54:31:ba:44:9e:46:ed:c9:12:ad:34:13: e1:f6:50:0d:53:89:86:eb:f0:92:34:d5:0b:9b:ac: c6:ff:a2:5c:be:28:da:a3:a6:7a:35:48:2a:09:fd: a9:ed:37:cc:f2:20:81:09:86:54:85:39:e3:a1:95: d4:7e:35:4d:6a:4b:b3:de:00:0c:08:8d:35:59:ee: a5:72:5b:fd:6d:f5:b3:26:e0:76:d6:72:4c:15:61: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A0:C1:F8:BD:3A:80:BD:66:A5:DE:6A:43:AC:FF:CF:A2:DA:ED:6A X509v3 Authority Key Identifier: keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:45:f5:f3:0d:91:be:5f:d9:33:9d:e4:99:a3:7c:c0:b1:38: b3:f7:2e:54:43:53:91:fd:29:a8:ee:64:88:04:5c:52:ac:e0: 4a:9b:68:95:91:21:e7:67:b5:63:6e:d3:4b:e7:63:b1:0a:56: d8:fc:f0:56:69:89:7e:d7:98:4b:ec:3e:4e:92:5a:c3:e4:d5: e7:88:32:0e:f3:d4:5b:fb:88:05:82:94:e4:f5:55:d8:c5:e6: 0a:e3:05:9b:b3:16:e8:d9:11:f2:64:06:b2:12:2c:0a:67:0e: 73:29:8f:31:fa:f4:06:27:ba:d7:27:48:fa:d7:83:9a:fc:e4: 03:97:07:ca:f6:4f:67:18:83:c5:a0:2a:ed:70:47:6a:68:38: e7:77:1f:09:5d:d8:9a:81:50:9f:d2:a1:44:8c:10:4c:7a:30: 97:81:af:16:de:ef:44:c3:c3:dc:30:91:29:5a:6a:53:be:68: c1:d0:0b:ad:e4:96:0a:ab:72:0f:85:85:1f:2d:b4:9f:4c:fb: 4c:80:d0:1a:9e:23:97:5e:d6:3c:ea:6a:15:c0:3e:7c:09:a8: cf:4b:55:af:d8:21:52:2b:43:da:29:78:2f:d7:98:ad:be:ef: 56:6b:ec:ac:60:bd:3c:0f:08:cf:69:9c:bc:e3:6a:80:d6:55: 0b:68:89:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ED2S1TFkVHGMj2Fj61p3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZmY1ZWQxZDc1MzViY2ZhMDNlMWYyODhhYzJjNzc1NmEx YjExNjAwHhcNMjUxMjIwMTQwMDU1WhcNMjUxMjIxMTQwMDU1WjAzMTEwLwYDVQQD EyhlZGEwYzFmOGJkM2E4MGJkNjZhNWRlNmE0M2FjZmZjZmEyZGFlZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyE/kFEZrj4C3DSZ/YaKLhKWwcHv 81UnAetpInGl/s622QWiFL2dfQT/GoGggWQVdsNQB0T4RK0OTYvlyH0kEQg4XrPl 11bXO1SIi0VcNxY7LTcleMR+b7aS3zwL8PDSUYFGQr1/7l4mPzoA4HAJqXHCrJjt xrKohGAf3eslameWdj+QBN1QRSWJV9RVBcXIwhemN4ZFaa21PuSFOEPqSX5XF/i1 5/BUMbpEnkbtyRKtNBPh9lANU4mG6/CSNNULm6zG/6Jcvijao6Z6NUgqCf2p7TfM 8iCBCYZUhTnjoZXUfjVNakuz3gAMCI01We6lclv9bfWzJuB21nJMFWH7SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2gwfi9OoC9ZqXeakOs/8+i2u1qMB8GA1UdIwQY MBaAFP7/XtHXU1vPoD4fKIrCx3VqGxFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZDczNzEtZGRlMy00YzE1LThiZTAt NThhMTFiYjg5M2NkLzEvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lZDczNzEtZGRlMy00YzE1LThiZTAtNThhMTFiYjg5M2Nk LzEvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUX18w2R vl/ZM53kmaN8wLE4s/cuVENTkf0pqO5kiARcUqzgSptolZEh52e1Y27TS+djsQpW 2PzwVmmJfteYS+w+TpJaw+TV54gyDvPUW/uIBYKU5PVV2MXmCuMFm7MW6NkR8mQG shIsCmcOcymPMfr0Bie61ydI+teDmvzkA5cHyvZPZxiDxaAq7XBHamg453cfCV3Y moFQn9KhRIwQTHowl4GvFt7vRMPD3DCRKVpqU75owdALreSWCqtyD4WFHy20n0z7 TIDQGp4jl17WPOpqFcA+fAmoz0tVr9ghUitD2il4L9eYrb7vVmvsrGC9PA8Iz2mc vONqgNZVC2iJTw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:10:31 2025 by rpki-client