This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json) Hash identifier: N8BInz9kpdIWBSnpp+vRSrdV26AbAJp2dzj9CpC5cGg= Subject key identifier: 62:6E:0C:CA:D9:C1:2A:D0:82:A2:C3:08:0B:6F:B0:82:47:71:63:28 Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Certificate serial: 019B48824BD598671D1ED31403C410C0A908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft Manifest number: 05B3 Signing time: Tue 23 Dec 2025 00:00:57 +0000 Manifest this update: Tue 23 Dec 2025 00:00:57 +0000 Manifest next update: Wed 24 Dec 2025 00:00:57 +0000 Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: dERPcXaWCugCTQT77NUz90hzTYl7e5i8IY9UQTaLoe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:4b:d5:98:67:1d:1e:d3:14:03:c4:10:c0:a9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Validity Not Before: Dec 23 00:00:57 2025 GMT Not After : Dec 24 00:00:57 2025 GMT Subject: CN=626e0ccad9c12ad082a2c3080b6fb08247716328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:b7:60:3d:a5:41:d3:80:66:9c:0b:ad:26: d7:89:c9:b9:7a:ab:f2:d6:b3:28:0d:6c:a0:c5:d7: 85:af:ad:9b:37:d3:f3:62:48:e6:d7:ad:82:95:12: 55:4e:aa:f3:b2:9e:e1:99:2c:a9:17:57:98:35:c2: 16:61:6b:09:1b:17:02:ae:e3:38:7b:b4:57:81:f5: 1f:0e:c8:31:5e:d5:2a:ed:46:a6:00:22:63:8b:4e: 05:ec:c1:2c:8e:ca:98:a6:9a:c0:fa:e5:8d:90:05: 51:a3:3e:67:47:cf:c1:91:28:3c:d7:92:dd:48:4a: b1:da:ce:47:fd:c0:bb:e1:81:8f:88:4e:f3:0f:4f: 06:25:56:86:ff:80:c2:ec:8e:b4:86:1c:e3:69:e0: a5:64:b9:3d:90:cd:bd:64:25:98:8c:51:3f:f5:8e: 13:e6:f1:e4:50:35:c7:d2:51:f4:ae:0a:a7:c6:75: c1:5a:8d:6c:4c:a5:13:57:b1:74:57:fa:10:1b:55: c5:ef:ba:cb:c8:27:6d:71:e2:01:1b:4d:72:dd:e4: 9b:4b:4c:ab:e2:a5:8f:b8:88:a4:7e:0a:b5:c7:19: 0d:fe:c5:46:61:28:30:2e:7a:af:16:ff:ed:48:3c: 79:2c:9a:f5:48:f1:fa:7a:5e:0d:b5:f8:37:55:7c: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:0C:CA:D9:C1:2A:D0:82:A2:C3:08:0B:6F:B0:82:47:71:63:28 X509v3 Authority Key Identifier: keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:37:b8:18:99:1f:45:2e:88:eb:9b:e1:8e:bb:18:4a:8b:3c: a8:ad:8b:e3:e7:b2:87:b5:27:40:f9:fb:a6:d9:7b:f9:b1:b8: 71:b0:b0:84:c0:80:81:79:42:b5:f2:5d:f0:d4:f9:c9:15:39: b5:e3:11:76:27:8e:58:50:5a:2d:62:6e:66:6e:79:a8:ba:0d: 7c:0e:81:0a:8c:de:38:9a:69:ca:53:d0:d3:02:b0:0c:54:38: 33:b2:0c:25:8c:9e:74:c0:3a:ac:49:10:89:f6:0f:ab:71:2c: 44:88:dc:1b:30:ef:26:4a:04:7e:88:0c:e8:2e:56:12:af:8c: 9d:a4:58:42:3d:bf:95:4e:db:73:f8:89:87:fd:08:94:65:bf: 9e:bd:2e:a5:ed:71:dc:d0:d3:cb:25:16:0e:1f:f1:c2:1e:d5: 69:6b:50:68:b4:2c:c6:7d:df:86:85:57:64:69:0e:f5:9e:f4: 5e:47:fb:ee:f1:db:6c:57:04:38:d2:72:b8:d6:fd:71:72:56: 3b:35:d7:87:70:67:de:26:54:b6:e6:be:6b:04:de:f1:07:19: af:04:d7:8f:8f:9f:80:ca:5a:71:5b:d1:4b:f1:b6:42:70:a6: 43:2e:c6:28:79:59:32:2c:32:53:75:6f:07:d4:c6:3b:23:fa: 7a:9f:c8:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgkvVmGcdHtMUA8QQwKkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3 ZGY3YWYwHhcNMjUxMjIzMDAwMDU3WhcNMjUxMjI0MDAwMDU3WjAzMTEwLwYDVQQD Eyg2MjZlMGNjYWQ5YzEyYWQwODJhMmMzMDgwYjZmYjA4MjQ3NzE2MzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy+3YD2lQdOAZpwLrSbXicm5eqvy 1rMoDWygxdeFr62bN9PzYkjm162ClRJVTqrzsp7hmSypF1eYNcIWYWsJGxcCruM4 e7RXgfUfDsgxXtUq7UamACJji04F7MEsjsqYpprA+uWNkAVRoz5nR8/BkSg815Ld SEqx2s5H/cC74YGPiE7zD08GJVaG/4DC7I60hhzjaeClZLk9kM29ZCWYjFE/9Y4T 5vHkUDXH0lH0rgqnxnXBWo1sTKUTV7F0V/oQG1XF77rLyCdtceIBG01y3eSbS0yr 4qWPuIikfgq1xxkN/sVGYSgwLnqvFv/tSDx5LJr1SPH6el4Ntfg3VXzKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJuDMrZwSrQgqLDCAtvsIJHcWMoMB8GA1UdIwQY MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTe4GJkf RS6I65vhjrsYSos8qK2L4+eyh7UnQPn7ptl7+bG4cbCwhMCAgXlCtfJd8NT5yRU5 teMRdieOWFBaLWJuZm55qLoNfA6BCozeOJppylPQ0wKwDFQ4M7IMJYyedMA6rEkQ ifYPq3EsRIjcGzDvJkoEfogM6C5WEq+MnaRYQj2/lU7bc/iJh/0IlGW/nr0upe1x 3NDTyyUWDh/xwh7VaWtQaLQsxn3fhoVXZGkO9Z70Xkf77vHbbFcEONJyuNb9cXJW OzXXh3Bn3iZUtua+awTe8QcZrwTXj4+fgMpacVvRS/G2QnCmQy7GKHlZMiwyU3Vv B9TGOyP6ep/ICQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:43 2025 by rpki-client