This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json) Hash identifier: VdYFuLPfqgRXgP7WUmVOs6xvCOsmmZpmdQMSgmRw0Yk= Subject key identifier: F0:A6:01:7D:63:04:94:02:F9:47:AE:ED:57:3B:B7:2F:E7:7E:8D:33 Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Certificate serial: 019B40C85F188EAD58675EB425F61C9E47DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft Manifest number: 05AF Signing time: Sun 21 Dec 2025 12:00:31 +0000 Manifest this update: Sun 21 Dec 2025 12:00:31 +0000 Manifest next update: Mon 22 Dec 2025 12:00:31 +0000 Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: kUkYKJKep07/pwPqdxhMasVRVSF+hd+qjSUu99o8+cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:5f:18:8e:ad:58:67:5e:b4:25:f6:1c:9e:47:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Validity Not Before: Dec 21 12:00:31 2025 GMT Not After : Dec 22 12:00:31 2025 GMT Subject: CN=f0a6017d63049402f947aeed573bb72fe77e8d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:09:55:b6:b7:37:1c:df:d1:4a:39:e1:4b: a4:a4:00:1a:f7:ed:53:0a:92:31:49:09:05:f1:a1: 7a:68:f1:22:a8:c3:77:a1:4a:df:d1:fe:91:a0:7e: eb:21:e0:18:6b:06:92:9c:96:48:cb:f4:60:85:43: 3a:14:db:69:ed:9b:a4:36:ef:74:bc:16:bd:55:a6: de:e7:da:11:09:65:42:bf:7d:60:59:c9:a2:89:c4: d8:8a:5c:91:49:e9:99:67:e4:87:25:c4:72:2a:74: 9c:97:7f:d7:f9:2a:9b:72:5c:6b:7a:98:56:4b:c8: 94:7c:3f:2e:ff:7b:77:19:3c:a2:b5:95:b3:c3:4e: 7f:08:82:a1:da:dc:b9:97:af:7e:80:3d:54:4a:f4: ff:e6:ea:25:98:d6:3c:03:ec:e8:87:61:96:65:f7: 92:67:ec:fb:48:65:cd:15:02:73:fb:6a:d2:9a:2d: 9c:e9:3e:c8:34:58:a2:f0:77:b2:e9:f1:ec:83:18: 89:8a:43:3b:6e:12:29:ec:5e:18:21:03:8b:82:28: 7f:d6:d5:19:af:c1:1c:68:0d:99:36:62:3b:00:8e: 92:cd:00:48:00:37:28:9d:37:46:3b:13:cc:e3:a9: 8b:08:90:ee:bd:b5:e6:db:fd:29:3c:8d:34:1b:e5: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A6:01:7D:63:04:94:02:F9:47:AE:ED:57:3B:B7:2F:E7:7E:8D:33 X509v3 Authority Key Identifier: keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0e:ea:37:35:f0:46:59:c2:46:a6:5e:1b:8a:0e:9d:d9:00: f7:66:e3:69:c7:7e:56:45:6f:32:7f:7b:49:8d:23:d8:68:7b: fa:2d:16:03:6a:c2:fc:1e:c5:e5:64:ef:6b:05:ed:83:d5:d5: 1c:d2:14:2b:f3:a1:1a:24:db:e9:5b:93:5c:3f:14:b9:7a:70: 0d:7f:e1:4a:87:92:93:58:cc:0e:10:08:84:9d:64:31:c8:04: 91:88:a8:43:a6:66:29:74:73:40:cd:d0:e5:19:e1:d9:b7:33: 4b:da:73:67:e9:c3:96:7d:9b:f5:c9:b7:18:f3:8a:74:7d:ad: 59:4e:14:07:22:f4:ce:af:0b:23:82:e4:a7:1c:71:af:39:9d: 33:e5:ca:7a:2d:fd:fe:c0:0a:a3:07:fa:55:81:80:06:c6:b3: aa:6c:b4:08:60:c7:45:30:6c:df:ae:94:2d:e8:42:59:84:04: f9:7f:ca:31:48:0e:e4:cb:48:5e:c4:74:b7:48:34:c2:32:1b: 2e:8f:6e:92:74:1e:0f:13:77:79:dd:e7:fa:34:b6:d4:f9:bb: 1e:82:b5:97:de:cf:59:86:14:ce:74:02:ab:11:27:15:38:90: 02:45:7e:f4:0c:f2:19:19:21:9c:45:e3:80:c4:4f:e2:f4:1f: ef:5b:eb:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyF8Yjq1YZ160JfYcnkffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3 ZGY3YWYwHhcNMjUxMjIxMTIwMDMxWhcNMjUxMjIyMTIwMDMxWjAzMTEwLwYDVQQD EyhmMGE2MDE3ZDYzMDQ5NDAyZjk0N2FlZWQ1NzNiYjcyZmU3N2U4ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzUJVba3Nxzf0Uo54UukpAAa9+1T CpIxSQkF8aF6aPEiqMN3oUrf0f6RoH7rIeAYawaSnJZIy/RghUM6FNtp7ZukNu90 vBa9Vabe59oRCWVCv31gWcmiicTYilyRSemZZ+SHJcRyKnScl3/X+SqbclxrephW S8iUfD8u/3t3GTyitZWzw05/CIKh2ty5l69+gD1USvT/5uolmNY8A+zoh2GWZfeS Z+z7SGXNFQJz+2rSmi2c6T7INFii8Hey6fHsgxiJikM7bhIp7F4YIQOLgih/1tUZ r8EcaA2ZNmI7AI6SzQBIADconTdGOxPM46mLCJDuvbXm2/0pPI00G+WwMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCmAX1jBJQC+Ueu7Vc7ty/nfo0zMB8GA1UdIwQY MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw7qNzXw RlnCRqZeG4oOndkA92bjacd+VkVvMn97SY0j2Gh7+i0WA2rC/B7F5WTvawXtg9XV HNIUK/OhGiTb6VuTXD8UuXpwDX/hSoeSk1jMDhAIhJ1kMcgEkYioQ6ZmKXRzQM3Q 5Rnh2bczS9pzZ+nDln2b9cm3GPOKdH2tWU4UByL0zq8LI4LkpxxxrzmdM+XKei39 /sAKowf6VYGABsazqmy0CGDHRTBs366ULehCWYQE+X/KMUgO5MtIXsR0t0g0wjIb Lo9uknQeDxN3ed3n+jS21Pm7HoK1l97PWYYUznQCqxEnFTiQAkV+9AzyGRkhnEXj gMRP4vQf71vr9g== -----END CERTIFICATE-----Generated at Sun Dec 21 15:40:35 2025 by rpki-client