This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json) Hash identifier: QU24UihY78OywBBCfJvD1Yzm34DXPx2A7ZYlEvVzazY= Subject key identifier: 9C:D3:FE:7A:F3:B4:41:42:D5:74:8E:3E:47:F9:13:F8:0A:E8:77:F7 Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863 Certificate serial: 019B5975B2CA60718E61FF5B5AAB7F7B81C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft Manifest number: 0B5F Signing time: Fri 26 Dec 2025 07:00:44 +0000 Manifest this update: Fri 26 Dec 2025 07:00:44 +0000 Manifest next update: Sat 27 Dec 2025 07:00:44 +0000 Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: i+Bs47ZVIR36++mqBXbc8cez0lPZhj+TfwK8kZIy+W0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b2:ca:60:71:8e:61:ff:5b:5a:ab:7f:7b:81:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983ea291971990dc486f93812783fadd87ade863 Validity Not Before: Dec 26 07:00:44 2025 GMT Not After : Dec 27 07:00:44 2025 GMT Subject: CN=9cd3fe7af3b44142d5748e3e47f913f80ae877f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:78:ec:86:96:4a:8a:f1:d4:22:19:aa:05:04: 6c:cd:99:07:94:17:71:9e:fc:35:96:9a:14:96:f4: af:d4:3a:de:5d:7d:de:d0:8b:4e:d1:56:ae:ca:38: e2:41:41:5a:4c:97:0f:bf:4a:10:32:78:ea:81:45: b8:14:9d:e3:75:7a:0a:26:ee:33:35:aa:b2:8a:fc: 63:7c:62:53:a8:a2:5d:ab:59:6e:44:f3:92:47:13: 04:c7:f4:db:c5:69:59:5f:2c:d3:a1:c9:96:02:ea: e0:4c:5b:85:ad:0b:fd:dc:d4:80:03:db:32:e1:4c: 02:d9:93:de:a3:f9:3d:ac:d8:93:ab:19:9e:c8:45: 0d:ab:a6:f0:f5:fb:01:13:e0:4c:cf:62:f3:ee:7f: b1:9f:bf:d1:bc:52:5f:6f:c9:aa:4c:3e:25:d2:5b: 75:86:5e:2a:8f:f7:10:c3:5f:08:58:9f:77:03:a7: a4:75:f1:aa:ad:44:c3:01:da:f8:f4:c2:38:4c:c8: 3c:48:8f:64:1c:71:dc:cf:e6:14:bb:49:44:e9:e4: cc:3d:2a:c7:bd:2a:9f:65:b1:73:af:e1:1c:72:92: 30:a4:f3:55:a9:a4:cd:1f:37:db:96:42:f9:02:fe: 7e:08:06:2f:5a:13:b9:51:da:8c:5f:22:7f:5e:d9: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:FE:7A:F3:B4:41:42:D5:74:8E:3E:47:F9:13:F8:0A:E8:77:F7 X509v3 Authority Key Identifier: keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:78:18:80:a6:78:74:b8:00:4e:30:1a:8f:c4:0f:d3:cf:bc: 59:97:81:22:01:e5:49:b4:ad:1a:b0:fc:a8:d5:4e:b4:00:46: b1:41:ee:74:6c:77:c5:99:d8:5e:f1:05:52:cf:12:c5:5c:1f: 90:4c:20:7f:35:23:00:e3:eb:92:95:a0:a0:cc:1d:53:e5:2e: e8:ee:74:45:3b:b2:86:d4:5f:77:68:b4:ca:bb:ba:83:3d:f2: 3d:d8:06:fe:46:b6:2b:ee:1a:ed:e6:a2:0e:48:36:26:c5:4b: ae:02:f3:5e:1d:69:ae:1a:09:f2:9c:36:be:0d:34:1c:0b:00: ba:d1:54:03:8c:6c:c3:d6:d7:c1:8a:2a:87:f5:c9:6b:d1:45: 64:cc:8c:47:cd:ca:71:f1:e7:49:44:ed:52:e3:d2:db:f0:39: 30:bc:07:3e:11:bb:2d:5f:77:5e:37:5c:b6:c5:06:b7:c9:cb: 32:e6:05:f3:22:a9:af:7c:34:53:a7:50:43:9b:a4:ba:87:0b: 5f:df:55:99:b5:0f:a7:5e:e1:03:fe:d8:86:ce:c5:8c:3f:b5: e8:1b:fb:e0:c4:87:5e:58:b8:83:38:44:c8:d9:f3:86:d8:06: f1:08:6a:35:df:ef:2e:a0:57:26:54:cb:9c:35:9e:8f:04:3d: c4:43:c5:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbLKYHGOYf9bWqt/e4HIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2VhMjkxOTcxOTkwZGM0ODZmOTM4MTI3ODNmYWRkODdh ZGU4NjMwHhcNMjUxMjI2MDcwMDQ0WhcNMjUxMjI3MDcwMDQ0WjAzMTEwLwYDVQQD Eyg5Y2QzZmU3YWYzYjQ0MTQyZDU3NDhlM2U0N2Y5MTNmODBhZTg3N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHjshpZKivHUIhmqBQRszZkHlBdx nvw1lpoUlvSv1DreXX3e0ItO0VauyjjiQUFaTJcPv0oQMnjqgUW4FJ3jdXoKJu4z NaqyivxjfGJTqKJdq1luRPOSRxMEx/TbxWlZXyzTocmWAurgTFuFrQv93NSAA9sy 4UwC2ZPeo/k9rNiTqxmeyEUNq6bw9fsBE+BMz2Lz7n+xn7/RvFJfb8mqTD4l0lt1 hl4qj/cQw18IWJ93A6ekdfGqrUTDAdr49MI4TMg8SI9kHHHcz+YUu0lE6eTMPSrH vSqfZbFzr+EccpIwpPNVqaTNHzfblkL5Av5+CAYvWhO5UdqMXyJ/XtkCEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzT/nrztEFC1XSOPkf5E/gK6Hf3MB8GA1UdIwQY MBaAFJg+opGXGZDcSG+TgSeD+t2HrehjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQt YzZlOWUwZmQ3MDgwLzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQtYzZlOWUwZmQ3MDgw LzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuHgYgKZ4 dLgATjAaj8QP08+8WZeBIgHlSbStGrD8qNVOtABGsUHudGx3xZnYXvEFUs8SxVwf kEwgfzUjAOPrkpWgoMwdU+Uu6O50RTuyhtRfd2i0yru6gz3yPdgG/ka2K+4a7eai Dkg2JsVLrgLzXh1prhoJ8pw2vg00HAsAutFUA4xsw9bXwYoqh/XJa9FFZMyMR83K cfHnSUTtUuPS2/A5MLwHPhG7LV93XjdctsUGt8nLMuYF8yKpr3w0U6dQQ5ukuocL X99VmbUPp17hA/7Yhs7FjD+16Bv74MSHXli4gzhEyNnzhtgG8QhqNd/vLqBXJlTL nDWejwQ9xEPF2w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:40 2025 by rpki-client