This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json) Hash identifier: z4grn+C2PdNK/2wAQTDodhmVXKnW5oUpC+4L/wZAEeg= Subject key identifier: E9:46:A5:75:20:4A:6D:54:90:C9:22:46:72:7F:C8:14:E1:75:85:A3 Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2 Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2 Certificate serial: 019B59E453A39E0FAC5EAD0102258237281B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft Manifest number: 080B Signing time: Fri 26 Dec 2025 09:01:34 +0000 Manifest this update: Fri 26 Dec 2025 09:01:34 +0000 Manifest next update: Sat 27 Dec 2025 09:01:34 +0000 Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: WqiQvqEdOb3iosCwbxgfDIT5gq30vVJbtWzlGpMcVR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:53:a3:9e:0f:ac:5e:ad:01:02:25:82:37:28:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2 Validity Not Before: Dec 26 09:01:34 2025 GMT Not After : Dec 27 09:01:34 2025 GMT Subject: CN=e946a575204a6d5490c92246727fc814e17585a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ec:65:09:76:b3:6f:b1:17:19:a7:83:51:8a: 3d:03:5f:29:da:c9:10:b8:34:d0:15:17:0b:d7:e9: 8f:cc:34:3a:5e:37:ef:68:f5:8e:e5:31:29:42:ae: 4b:12:69:ae:13:f8:2a:c5:30:fc:1c:e6:16:9d:4a: ec:23:c5:0a:e7:5c:6a:4a:51:33:55:ce:cf:dc:e9: b4:7d:a9:43:76:d4:7f:43:24:85:c9:74:c3:81:ac: 06:16:f7:ac:6f:a3:1e:1c:6c:1c:bc:12:cc:4b:14: 71:40:41:8e:dd:52:05:a2:da:57:b1:f7:2f:2b:b5: 58:12:15:b9:10:a9:09:28:76:c8:18:4f:bc:51:b9: 92:87:48:cf:40:36:4a:46:3f:b8:9e:d8:32:33:70: 74:b2:50:e1:61:37:f5:c9:d2:dc:21:aa:24:9a:40: a9:89:d7:c7:1d:18:df:81:58:2f:1b:ff:2c:a9:92: 97:5e:6e:ac:27:16:23:aa:fe:1d:2a:c8:82:ca:fd: f4:f0:22:dd:7a:b4:b4:02:e3:b2:6e:4e:ec:7f:6f: 4d:a6:c8:be:71:44:65:89:2d:8c:8e:b6:9b:e6:a8: c1:f1:65:78:67:cc:94:ef:a6:74:c1:0e:d8:33:a7: 95:d8:9d:0b:16:03:a4:fc:0a:4b:4e:30:46:10:57: 5b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:46:A5:75:20:4A:6D:54:90:C9:22:46:72:7F:C8:14:E1:75:85:A3 X509v3 Authority Key Identifier: keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bf:3f:1a:b6:d6:2f:8e:62:55:52:e0:36:06:58:d7:76:be: ec:e7:77:63:59:40:98:c6:0e:9d:cc:bf:ce:db:15:ae:8d:a2: ee:7a:d4:3b:41:b2:f6:e8:1a:42:6f:91:b8:d1:82:85:71:a9: a0:1c:7c:37:e4:c4:68:5a:20:60:02:f7:20:1f:17:a0:e7:83: 69:e5:0c:60:c7:e0:be:40:b7:5d:3e:51:a6:b9:eb:93:ab:ec: 7f:fb:5b:ba:9a:16:10:bf:95:38:bb:88:81:d0:85:93:d6:87: 98:84:a2:64:a7:80:f7:ad:28:bd:d5:1b:71:e5:3d:7a:08:e3: 4c:40:78:a0:35:39:7e:68:cd:04:ed:78:db:96:24:de:63:c3: 66:87:fe:d6:90:f7:b5:70:47:eb:04:ef:b7:ed:54:e8:b7:f5: 43:15:4a:ec:e8:29:73:88:a5:8f:7e:b5:98:d7:3e:95:4b:b9: 76:8d:c7:4c:fc:dd:98:74:40:b0:81:81:81:1c:f2:b5:fd:eb: 34:17:f8:ab:a8:aa:a8:36:f1:c1:ab:f9:eb:d4:76:aa:b8:df: 51:12:6a:d2:ae:36:d8:62:28:45:a6:4f:29:a0:ed:1d:b1:04: be:6e:76:9e:6d:d3:3d:7f:bb:97:03:6d:19:09:7e:25:d7:f9: 87:72:04:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FOjng+sXq0BAiWCNygbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTJiNzI4OGM1NTllMWVkNGEzOTA1N2UwYWUwYzJiZWM0 MmRhYTIwHhcNMjUxMjI2MDkwMTM0WhcNMjUxMjI3MDkwMTM0WjAzMTEwLwYDVQQD EyhlOTQ2YTU3NTIwNGE2ZDU0OTBjOTIyNDY3MjdmYzgxNGUxNzU4NWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+xlCXazb7EXGaeDUYo9A18p2skQ uDTQFRcL1+mPzDQ6XjfvaPWO5TEpQq5LEmmuE/gqxTD8HOYWnUrsI8UK51xqSlEz Vc7P3Om0falDdtR/QySFyXTDgawGFvesb6MeHGwcvBLMSxRxQEGO3VIFotpXsfcv K7VYEhW5EKkJKHbIGE+8UbmSh0jPQDZKRj+4ntgyM3B0slDhYTf1ydLcIaokmkCp idfHHRjfgVgvG/8sqZKXXm6sJxYjqv4dKsiCyv308CLderS0AuOybk7sf29Npsi+ cURliS2Mjrab5qjB8WV4Z8yU76Z0wQ7YM6eV2J0LFgOk/ApLTjBGEFdbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlGpXUgSm1UkMkiRnJ/yBThdYWjMB8GA1UdIwQY MBaAFHEStyiMVZ4e1KOQV+CuDCvsQtqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmIt MTU2ZjNjZmJjMTYxLzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmItMTU2ZjNjZmJjMTYx LzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPL8/GrbW L45iVVLgNgZY13a+7Od3Y1lAmMYOncy/ztsVro2i7nrUO0Gy9ugaQm+RuNGChXGp oBx8N+TEaFogYAL3IB8XoOeDaeUMYMfgvkC3XT5Rprnrk6vsf/tbupoWEL+VOLuI gdCFk9aHmISiZKeA960ovdUbceU9egjjTEB4oDU5fmjNBO1425Yk3mPDZof+1pD3 tXBH6wTvt+1U6Lf1QxVK7Ogpc4ilj361mNc+lUu5do3HTPzdmHRAsIGBgRzytf3r NBf4q6iqqDbxwav569R2qrjfURJq0q422GIoRaZPKaDtHbEEvm52nm3TPX+7lwNt GQl+Jdf5h3IEAA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:22 2025 by rpki-client