This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json) Hash identifier: ZHzmSfYBYv/9YrAk1EzDH8b3qJZtex5iOmEQvfnw0dA= Subject key identifier: 60:CA:40:8D:F4:F8:91:E3:2E:03:52:3E:6A:70:50:21:50:28:04:51 Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Certificate serial: 019B3CEC33B5CE63EBA30E592B56E9D6CB47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft Manifest number: 05AD Signing time: Sat 20 Dec 2025 18:01:11 +0000 Manifest this update: Sat 20 Dec 2025 18:01:11 +0000 Manifest next update: Sun 21 Dec 2025 18:01:11 +0000 Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: d8kDMhkJ/6zCpSFVfgXjnhoX33nVbKz4Oe5pn0cZMvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:33:b5:ce:63:eb:a3:0e:59:2b:56:e9:d6:cb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Validity Not Before: Dec 20 18:01:11 2025 GMT Not After : Dec 21 18:01:11 2025 GMT Subject: CN=60ca408df4f891e32e03523e6a70502150280451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:bf:18:06:70:38:43:1e:06:9a:4a:fa:be: ec:0e:66:bb:f3:49:ac:3d:0f:38:9b:69:f1:3c:06: 59:e5:91:97:16:c2:6b:71:a3:6a:05:02:fe:61:ae: 17:a7:ab:43:b6:d4:79:1e:df:ef:4a:2f:d7:36:3d: ae:74:88:05:81:7c:ba:19:c8:da:45:1f:a6:18:8a: 1c:68:43:d1:d2:bb:b7:0d:66:4b:46:27:3c:e4:08: 00:81:2e:3d:99:5c:d1:85:9c:a7:62:b8:fb:ac:06: 5a:b2:74:0e:52:84:f6:e5:ec:8d:05:39:6c:8f:fb: f0:8f:31:74:54:f3:95:16:75:c4:5a:90:ba:2d:c7: 78:ee:43:14:3a:af:5d:c2:fd:86:b8:78:4b:79:90: b1:70:c7:08:c9:f2:b4:68:e7:62:78:e1:5c:5e:04: 1c:66:ee:43:66:c8:35:53:b6:de:f2:f0:4f:17:b4: 7e:dd:f6:32:af:a5:40:39:5c:4f:c0:aa:60:db:ce: 47:69:a6:51:57:2e:fe:11:02:f4:8b:a0:b4:41:bb: 82:2f:12:51:f8:2f:69:df:46:bf:62:38:85:22:8f: 6b:21:8f:a4:c2:13:77:4c:2a:3c:c5:f0:00:f5:b9: 7d:90:f9:a6:f9:b5:6e:98:fd:f1:73:54:30:b1:94: e3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CA:40:8D:F4:F8:91:E3:2E:03:52:3E:6A:70:50:21:50:28:04:51 X509v3 Authority Key Identifier: keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:aa:3a:1c:53:c6:2a:ee:32:8f:a0:a2:28:88:68:5a:3f:2d: 0c:15:b9:9c:f1:3d:d6:4e:2e:de:a0:9e:10:bf:5e:36:22:4e: dc:1d:b1:23:d9:da:b9:ec:af:6b:ad:f3:cc:79:ba:b5:fd:14: 6c:cd:d3:bb:e0:b8:fd:27:aa:0a:af:ef:ba:03:58:4d:58:5b: c5:6d:09:03:3f:b8:3d:1c:d7:a5:a3:b6:ba:32:eb:24:55:50: f4:59:8e:d4:59:5b:69:14:51:a7:f0:e7:2f:7c:c3:be:14:71: 68:29:e1:e6:55:e0:e0:11:01:4c:c3:51:40:ac:d3:6d:0c:57: aa:de:d1:b1:d7:02:0c:f3:2a:4d:80:1f:54:02:5a:a3:10:b1: aa:44:9c:86:22:1a:20:d5:35:28:dc:e9:ce:5d:5e:27:da:9c: 90:d1:f3:96:94:c4:38:97:97:fe:b2:1a:06:38:86:a3:50:67: a4:d1:25:3d:82:b8:86:19:db:2b:a4:ec:35:cc:89:74:36:98: fa:a8:80:b7:6a:fa:44:22:15:3b:8d:82:63:a8:ab:9c:40:c9: c4:08:9c:b5:1f:9a:12:e9:0a:58:fb:dd:e1:91:58:10:bf:e7: de:12:a6:9b:b0:65:f1:12:9a:94:b1:c3:bb:4b:32:29:22:6f: 17:8e:65:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87DO1zmProw5ZK1bp1stHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3 ZGY3YWYwHhcNMjUxMjIwMTgwMTExWhcNMjUxMjIxMTgwMTExWjAzMTEwLwYDVQQD Eyg2MGNhNDA4ZGY0Zjg5MWUzMmUwMzUyM2U2YTcwNTAyMTUwMjgwNDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQm/GAZwOEMeBppK+r7sDma780ms PQ84m2nxPAZZ5ZGXFsJrcaNqBQL+Ya4Xp6tDttR5Ht/vSi/XNj2udIgFgXy6Gcja RR+mGIocaEPR0ru3DWZLRic85AgAgS49mVzRhZynYrj7rAZasnQOUoT25eyNBTls j/vwjzF0VPOVFnXEWpC6Lcd47kMUOq9dwv2GuHhLeZCxcMcIyfK0aOdieOFcXgQc Zu5DZsg1U7be8vBPF7R+3fYyr6VAOVxPwKpg285HaaZRVy7+EQL0i6C0QbuCLxJR +C9p30a/YjiFIo9rIY+kwhN3TCo8xfAA9bl9kPmm+bVumP3xc1QwsZTj/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDKQI30+JHjLgNSPmpwUCFQKARRMB8GA1UdIwQY MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGao6HFPG Ku4yj6CiKIhoWj8tDBW5nPE91k4u3qCeEL9eNiJO3B2xI9naueyva63zzHm6tf0U bM3Tu+C4/SeqCq/vugNYTVhbxW0JAz+4PRzXpaO2ujLrJFVQ9FmO1FlbaRRRp/Dn L3zDvhRxaCnh5lXg4BEBTMNRQKzTbQxXqt7RsdcCDPMqTYAfVAJaoxCxqkSchiIa INU1KNzpzl1eJ9qckNHzlpTEOJeX/rIaBjiGo1BnpNElPYK4hhnbK6TsNcyJdDaY +qiAt2r6RCIVO42CY6irnEDJxAictR+aEukKWPvd4ZFYEL/n3hKmm7Bl8RKalLHD u0syKSJvF45lvw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:46:19 2025 by rpki-client