This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft File: rrlJQmajhxkETYKaSgqPF6QHBOg.mft (raw, json) Hash identifier: 2VrchhP64j7kJ0Qwqg+gOWkLFx+TseiwUcqFrsl2xIc= Subject key identifier: E6:3C:B4:F3:64:2D:87:2A:F3:FF:44:81:E8:96:E4:06:FE:5A:48:29 Authority key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8 Certificate issuer: /CN=aeb9494266a38719044d829a4a0a8f17a40704e8 Certificate serial: 019B34C5909997DF497B4B9F2F1DB62FE7A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 04:02:01 +0000 Manifest this update: Fri 19 Dec 2025 04:02:01 +0000 Manifest next update: Sat 20 Dec 2025 04:02:01 +0000 Files and hashes: 1: rrlJQmajhxkETYKaSgqPF6QHBOg.crl (hash: 7vMdgg4XIVdtniM4lKvsOETn6FHWaW0zom1LkQfyGLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:90:99:97:df:49:7b:4b:9f:2f:1d:b6:2f:e7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb9494266a38719044d829a4a0a8f17a40704e8 Validity Not Before: Dec 19 04:02:01 2025 GMT Not After : Dec 20 04:02:01 2025 GMT Subject: CN=e63cb4f3642d872af3ff4481e896e406fe5a4829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8f:08:1b:fa:8e:c8:a8:69:38:bf:98:15:f7: 7d:d9:74:d5:d8:9b:a9:7e:0a:93:17:84:9e:64:1c: 5b:f4:40:fd:64:dd:49:cf:2d:cb:fc:f8:49:78:52: 56:55:24:84:48:4b:96:88:4f:54:c4:f3:ef:f7:45: 73:5b:7a:83:3a:23:ca:2a:79:e7:2f:69:f3:15:1f: 53:66:1e:59:f3:c4:93:f3:e6:0a:43:c0:ef:40:8a: 2e:95:66:c1:d5:be:c9:4a:3a:f2:fc:d8:6c:cd:32: 8e:94:98:cb:0a:b5:c8:80:04:89:41:0b:a3:f9:da: af:fb:06:fb:7f:29:59:66:bf:b8:3d:af:02:d0:21: b8:e8:35:41:02:e2:68:9a:85:aa:29:fc:14:cb:5d: 8f:12:46:bb:35:2d:60:11:27:f3:1c:a3:b2:f8:4a: 61:92:fa:72:92:85:98:71:3b:eb:5a:5d:c9:1a:63: 28:d9:06:16:bc:11:ba:29:c3:56:07:eb:b0:c8:77: c0:c6:ca:dc:88:83:8b:87:d5:7a:9f:b3:cf:20:92: 3d:c2:52:ce:8a:72:00:18:4e:5e:4c:8e:27:eb:94: ff:09:51:82:8f:65:9e:64:13:a1:2f:54:88:5a:4b: 6c:37:b6:7c:e4:1c:d1:86:ea:9f:35:af:80:f5:c3: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3C:B4:F3:64:2D:87:2A:F3:FF:44:81:E8:96:E4:06:FE:5A:48:29 X509v3 Authority Key Identifier: keyid:AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ee:09:df:f2:42:44:20:c9:ae:eb:54:cc:12:7d:63:ab:9f: 37:bb:11:87:54:d0:d5:48:68:9f:6a:c7:e6:9d:33:f5:fe:00: 14:00:87:3c:db:e4:12:e8:db:e8:86:92:e5:9e:fc:40:60:f1: b4:56:dc:64:46:97:c2:01:5f:54:20:8e:b1:31:b4:8b:d4:89: 9b:e3:ce:d1:9e:44:d5:a9:c1:f8:72:02:76:6d:97:d7:69:4e: d7:a9:71:0c:f3:a1:ff:f3:96:3c:14:ab:9a:09:06:be:ba:86: 63:e1:f7:9d:67:e8:9e:05:90:e8:0b:3b:81:c1:81:a1:cb:57: 8a:0e:3d:a9:bd:27:02:6c:16:04:ea:c6:ee:b5:93:7d:cb:9c: 96:35:c1:bf:d6:35:34:c5:e7:cf:1c:3b:7d:ce:4a:63:8d:4a: 8e:db:f2:7a:4e:53:67:68:5a:5d:b9:e8:11:8b:87:6c:06:d8: b4:cf:d6:ae:b6:b4:66:68:4c:a1:fb:f4:4e:72:48:1a:7b:8f: 5a:86:b0:50:6d:42:be:7d:5e:09:4f:17:c0:88:d0:de:e5:1c: 58:5f:d7:5a:50:04:07:ed:0c:80:62:05:70:4c:6f:8a:a8:ea: 7e:02:77:3a:51:3b:f5:30:e1:92:94:53:58:7b:4e:d4:80:17: 0d:56:f9:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZCZl99Je0ufLx22L+ekMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjk0OTQyNjZhMzg3MTkwNDRkODI5YTRhMGE4ZjE3YTQw NzA0ZTgwHhcNMjUxMjE5MDQwMjAxWhcNMjUxMjIwMDQwMjAxWjAzMTEwLwYDVQQD EyhlNjNjYjRmMzY0MmQ4NzJhZjNmZjQ0ODFlODk2ZTQwNmZlNWE0ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY8IG/qOyKhpOL+YFfd92XTV2Jup fgqTF4SeZBxb9ED9ZN1Jzy3L/PhJeFJWVSSESEuWiE9UxPPv90VzW3qDOiPKKnnn L2nzFR9TZh5Z88ST8+YKQ8DvQIoulWbB1b7JSjry/NhszTKOlJjLCrXIgASJQQuj +dqv+wb7fylZZr+4Pa8C0CG46DVBAuJomoWqKfwUy12PEka7NS1gESfzHKOy+Eph kvpykoWYcTvrWl3JGmMo2QYWvBG6KcNWB+uwyHfAxsrciIOLh9V6n7PPIJI9wlLO inIAGE5eTI4n65T/CVGCj2WeZBOhL1SIWktsN7Z85BzRhuqfNa+A9cOlrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY8tPNkLYcq8/9EgeiW5Ab+WkgpMB8GA1UdIwQY MBaAFK65SUJmo4cZBE2CmkoKjxekBwToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUt MmE3YjU4YmRmOTQ1LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lN2FkYWItODA1NS00Nzg1LThkZjUtMmE3YjU4YmRmOTQ1 LzEvcnJsSlFtYWpoeGtFVFlLYVNncVBGNlFIQk9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATu4J3/JC RCDJrutUzBJ9Y6ufN7sRh1TQ1Uhon2rH5p0z9f4AFACHPNvkEujb6IaS5Z78QGDx tFbcZEaXwgFfVCCOsTG0i9SJm+PO0Z5E1anB+HICdm2X12lO16lxDPOh//OWPBSr mgkGvrqGY+H3nWfongWQ6As7gcGBoctXig49qb0nAmwWBOrG7rWTfcucljXBv9Y1 NMXnzxw7fc5KY41Kjtvyek5TZ2haXbnoEYuHbAbYtM/Wrra0ZmhMofv0TnJIGnuP WoawUG1Cvn1eCU8XwIjQ3uUcWF/XWlAEB+0MgGIFcExviqjqfgJ3OlE79TDhkpRT WHtO1IAXDVb5fQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:45 2025 by rpki-client