This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft File: adeHWeDsbxRWbRC4PIPyvxmbcQA.mft (raw, json) Hash identifier: hJb5kry8IyuHA4xqyFcy0A3rPjh73r4Ys97VR4/VHuI= Subject key identifier: F5:EE:30:E6:6A:33:F6:3C:DB:1F:CC:E7:4E:E5:D3:6E:EC:F7:73:BA Authority key identifier: 69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00 Certificate issuer: /CN=69d78759e0ec6f14566d10b83c83f2bf199b7100 Certificate serial: 019AF68A3A01F7F3CBB2A9CF573B069BF528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft Manifest number: 1763 Signing time: Sun 07 Dec 2025 02:00:44 +0000 Manifest this update: Sun 07 Dec 2025 02:00:44 +0000 Manifest next update: Mon 08 Dec 2025 02:00:44 +0000 Files and hashes: 1: adeHWeDsbxRWbRC4PIPyvxmbcQA.crl (hash: nC1scgfwu6LGH26R8GqWlJR2hx3ZzONXM9S5GYrE3sE=) 2: nVf4_JDF5Jd9blmd8M4doxhRW2o.roa (hash: fALm6gvriMfPKqnoL8NdKDlRyE7vGyHBMNh6mS8vfwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:3a:01:f7:f3:cb:b2:a9:cf:57:3b:06:9b:f5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d78759e0ec6f14566d10b83c83f2bf199b7100 Validity Not Before: Dec 7 02:00:44 2025 GMT Not After : Dec 8 02:00:44 2025 GMT Subject: CN=f5ee30e66a33f63cdb1fcce74ee5d36eecf773ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:5e:d7:0d:0a:2e:93:59:4a:40:77:dd:a3: 42:90:ff:13:81:58:d0:04:76:91:a3:1f:06:44:52: 95:1a:fe:82:3a:f2:71:2e:7a:2b:d2:24:f5:ec:0a: 02:6b:3d:16:81:28:7c:fb:f6:a7:14:e4:01:63:36: 05:ee:0d:f2:96:e7:97:ea:ef:16:9b:7e:c9:a5:7e: 37:da:0c:2c:c8:a9:6a:d9:8b:3f:ed:ce:3c:98:34: 44:c4:85:83:86:26:62:00:a7:cd:69:fa:88:d7:40: eb:76:7f:02:fd:c7:3b:dd:6c:ea:1f:86:e5:c4:4e: 44:10:8e:64:df:c8:c1:6a:5f:b0:56:2c:82:50:51: 7c:d2:25:f9:9c:af:ee:9e:4b:c8:b8:73:ac:75:ec: ef:f0:e4:ed:52:ed:c6:d0:58:73:ae:48:b4:73:29: e5:bd:ce:fc:77:e1:ef:25:a5:23:4a:f3:20:0c:55: 7a:2b:48:1a:64:4e:2c:69:cc:c8:62:ca:79:a6:e1: e3:24:5c:6c:3c:1b:d5:0a:be:a2:af:96:44:98:0b: 3a:63:c0:e1:a6:82:52:fa:95:6f:34:55:c3:32:c0: df:7e:54:ca:a6:f3:6e:4c:3c:02:7a:af:dc:0d:53: 06:b6:fa:e4:d7:b9:71:e2:cd:43:93:f1:be:54:08: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EE:30:E6:6A:33:F6:3C:DB:1F:CC:E7:4E:E5:D3:6E:EC:F7:73:BA X509v3 Authority Key Identifier: keyid:69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:13:66:4a:b3:b4:d8:b7:6d:df:ef:af:1e:37:e2:2b:ef:b4: 9a:8a:df:72:99:9a:0a:43:ea:8d:ab:82:50:ba:b1:48:34:51: fc:af:bc:47:61:05:8b:0f:4b:29:de:03:85:88:e1:3d:f8:c7: d9:85:1b:f4:4c:de:06:ef:67:39:89:25:d7:20:10:eb:4b:48: c0:86:46:0d:ad:d9:3e:59:4b:70:d6:0c:9d:fe:ff:2b:fe:7b: f5:de:a7:87:ff:66:e1:ef:67:ce:81:cc:e6:e9:c8:c0:d4:87: 61:38:e6:ed:a6:88:b3:e5:4f:6b:17:58:68:1a:0a:98:2f:8e: 8d:4d:d5:67:55:21:87:66:92:64:c0:8d:d5:90:09:62:c9:fa: 9c:75:6e:0a:ba:8a:f8:8f:9f:2d:51:bc:2d:14:be:36:3b:cf: e3:00:41:cd:59:5e:02:9c:8e:c9:f2:7b:50:c5:51:a2:31:b6: d4:42:fd:ee:a1:b6:6b:c1:b6:02:74:93:75:00:ca:56:f1:87: 49:7a:43:78:a8:c7:ae:1f:f0:a0:ff:9a:b9:5c:50:6c:cc:68: cb:f0:09:29:0d:9e:23:44:e2:13:bd:18:c0:fa:aa:38:88:f0: ee:25:00:b1:c6:35:a7:d9:4c:b9:90:9e:3b:35:cc:f9:cd:25: d1:d7:76:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2ijoB9/PLsqnPVzsGm/UoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDc4NzU5ZTBlYzZmMTQ1NjZkMTBiODNjODNmMmJmMTk5 YjcxMDAwHhcNMjUxMjA3MDIwMDQ0WhcNMjUxMjA4MDIwMDQ0WjAzMTEwLwYDVQQD EyhmNWVlMzBlNjZhMzNmNjNjZGIxZmNjZTc0ZWU1ZDM2ZWVjZjc3M2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujpe1w0KLpNZSkB33aNCkP8TgVjQ BHaRox8GRFKVGv6COvJxLnor0iT17AoCaz0WgSh8+/anFOQBYzYF7g3ylueX6u8W m37JpX432gwsyKlq2Ys/7c48mDRExIWDhiZiAKfNafqI10Drdn8C/cc73WzqH4bl xE5EEI5k38jBal+wViyCUFF80iX5nK/unkvIuHOsdezv8OTtUu3G0Fhzrki0cynl vc78d+HvJaUjSvMgDFV6K0gaZE4saczIYsp5puHjJFxsPBvVCr6ir5ZEmAs6Y8Dh poJS+pVvNFXDMsDfflTKpvNuTDwCeq/cDVMGtvrk17lx4s1Dk/G+VAgN+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXuMOZqM/Y82x/M507l027s93O6MB8GA1UdIwQY MBaAFGnXh1ng7G8UVm0QuDyD8r8Zm3EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzIt ZTE4YWFjNTA1NGE5LzEvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzItZTE4YWFjNTA1NGE5 LzEvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBNmSrO0 2Ldt3++vHjfiK++0morfcpmaCkPqjauCULqxSDRR/K+8R2EFiw9LKd4DhYjhPfjH 2YUb9EzeBu9nOYkl1yAQ60tIwIZGDa3ZPllLcNYMnf7/K/579d6nh/9m4e9nzoHM 5unIwNSHYTjm7aaIs+VPaxdYaBoKmC+OjU3VZ1Uhh2aSZMCN1ZAJYsn6nHVuCrqK +I+fLVG8LRS+NjvP4wBBzVleApyOyfJ7UMVRojG21EL97qG2a8G2AnSTdQDKVvGH SXpDeKjHrh/woP+auVxQbMxoy/AJKQ2eI0TiE70YwPqqOIjw7iUAscY1p9lMuZCe OzXM+c0l0dd29Q== -----END CERTIFICATE-----Generated at Sun Dec 7 10:42:48 2025 by rpki-client