This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft File: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json) Hash identifier: k2pjPfMS17ngvBXePW0Fz4F6S6rpgERgX3O5Zx7ixPc= Subject key identifier: 68:94:14:B3:AA:57:0A:AA:8F:DF:03:01:D8:AD:00:61:99:9C:70:88 Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 Certificate issuer: /CN=ac7862c299d6088718760a96168272fccbfda970 Certificate serial: 019B5A1B0F45E021BA9D6DD8393022EC4B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft Manifest number: 05D7 Signing time: Fri 26 Dec 2025 10:01:21 +0000 Manifest this update: Fri 26 Dec 2025 10:01:21 +0000 Manifest next update: Sat 27 Dec 2025 10:01:21 +0000 Files and hashes: 1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: vxlR9kiiXX+jq4dwhW5Bs2PFgcM6N58JH/l5GHsXCwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:0f:45:e0:21:ba:9d:6d:d8:39:30:22:ec:4b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7862c299d6088718760a96168272fccbfda970 Validity Not Before: Dec 26 10:01:21 2025 GMT Not After : Dec 27 10:01:21 2025 GMT Subject: CN=689414b3aa570aaa8fdf0301d8ad0061999c7088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f0:d1:fd:ea:e8:67:6e:fb:d9:9b:6b:51:ec: 2c:e9:91:c7:b2:ed:2e:d3:2d:fa:bf:7a:fd:40:f2: 24:78:fb:00:79:cd:25:7a:14:e6:8b:b7:50:86:77: 1f:ba:10:37:1c:3e:aa:c5:f8:29:57:9a:25:32:72: af:08:e4:fa:f7:cf:c5:96:7b:9f:ef:bb:67:ba:46: 1d:36:6f:26:58:39:82:52:01:cb:2d:c0:f7:f5:77: ee:9f:d9:9c:3f:39:6a:4e:77:75:b7:00:e0:84:2d: 18:98:91:a1:3c:1e:d6:04:96:3d:cf:88:f9:df:98: 3c:8d:3b:96:86:d8:18:16:e9:c9:0c:0e:8b:72:9e: 64:4a:5f:4d:f4:f1:ff:ac:af:e5:0a:75:d4:42:9c: 6a:94:c4:f1:e7:4c:8e:db:9a:06:eb:29:10:d3:13: 5f:bd:79:a8:12:17:33:e6:8c:6b:5a:dd:f3:02:0d: 83:12:e7:0d:c7:1d:4c:d0:00:46:b1:ab:20:5b:30: a2:af:37:59:34:5f:1e:50:73:0f:37:34:2e:b8:b6: 5a:57:a8:00:66:b2:54:a4:6c:16:b9:73:cf:f8:d2: 82:97:f1:ee:83:46:a6:3c:05:ca:6a:58:a7:cf:49: 31:3c:b5:a7:6b:d4:e4:5f:7a:b2:0a:53:14:d0:92: 06:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:94:14:B3:AA:57:0A:AA:8F:DF:03:01:D8:AD:00:61:99:9C:70:88 X509v3 Authority Key Identifier: keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:95:98:20:91:dc:f4:9b:64:8e:ee:31:01:33:c4:dd:66:9c: 06:6e:31:f3:fd:b9:a5:dc:99:e9:bb:56:11:c3:01:17:89:09: d7:64:5e:a6:8e:f7:1e:c3:87:e5:c8:1d:78:dc:56:27:78:18: e9:4e:13:ed:4c:78:34:f4:9b:e3:b6:26:b5:da:49:dc:c9:68: 2e:0c:16:36:f1:9f:c1:a3:bc:be:3c:e1:4f:5b:56:5d:bb:4d: 36:f2:7d:f6:56:c0:ab:71:0a:c7:60:7c:b8:4a:6c:bc:77:04: 56:42:56:c9:a1:57:d4:b7:86:88:b0:28:7c:cf:06:2f:4f:4a: 2f:8b:43:d4:81:ad:77:d4:12:81:b2:f9:0c:4f:c0:68:1d:ba: d8:2f:57:32:db:63:d2:03:d0:0a:a2:d1:1a:a5:92:f2:dc:16: 3e:ec:fb:35:03:19:41:1b:c7:59:f0:01:46:d2:ea:e1:69:be: 51:f6:23:1a:38:c2:e7:6d:c6:1c:1c:5a:8a:95:bb:24:7d:e0: 6e:b6:9e:72:3b:95:98:ee:b9:1c:81:7a:a1:94:0b:3c:e3:7d: 20:b4:11:ee:89:e3:3c:39:73:1f:5c:07:06:b3:9d:42:85:9d: 61:61:5a:d2:d7:31:36:1e:1a:59:f7:21:89:99:8a:f7:f6:fd: ef:68:e5:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGw9F4CG6nW3YOTAi7EtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzg2MmMyOTlkNjA4ODcxODc2MGE5NjE2ODI3MmZjY2Jm ZGE5NzAwHhcNMjUxMjI2MTAwMTIxWhcNMjUxMjI3MTAwMTIxWjAzMTEwLwYDVQQD Eyg2ODk0MTRiM2FhNTcwYWFhOGZkZjAzMDFkOGFkMDA2MTk5OWM3MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fDR/eroZ2772ZtrUews6ZHHsu0u 0y36v3r9QPIkePsAec0lehTmi7dQhncfuhA3HD6qxfgpV5olMnKvCOT698/Flnuf 77tnukYdNm8mWDmCUgHLLcD39Xfun9mcPzlqTnd1twDghC0YmJGhPB7WBJY9z4j5 35g8jTuWhtgYFunJDA6Lcp5kSl9N9PH/rK/lCnXUQpxqlMTx50yO25oG6ykQ0xNf vXmoEhcz5oxrWt3zAg2DEucNxx1M0ABGsasgWzCirzdZNF8eUHMPNzQuuLZaV6gA ZrJUpGwWuXPP+NKCl/Hug0amPAXKalinz0kxPLWna9TkX3qyClMU0JIGiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiUFLOqVwqqj98DAditAGGZnHCIMB8GA1UdIwQY MBaAFKx4YsKZ1giHGHYKlhaCcvzL/alwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAt ZmEyZmFkZWIwMjgxLzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAtZmEyZmFkZWIwMjgx LzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZWYIJHc 9Jtkju4xATPE3WacBm4x8/25pdyZ6btWEcMBF4kJ12Repo73HsOH5cgdeNxWJ3gY 6U4T7Ux4NPSb47YmtdpJ3MloLgwWNvGfwaO8vjzhT1tWXbtNNvJ99lbAq3EKx2B8 uEpsvHcEVkJWyaFX1LeGiLAofM8GL09KL4tD1IGtd9QSgbL5DE/AaB262C9XMttj 0gPQCqLRGqWS8twWPuz7NQMZQRvHWfABRtLq4Wm+UfYjGjjC523GHBxaipW7JH3g braecjuVmO65HIF6oZQLPON9ILQR7onjPDlzH1wHBrOdQoWdYWFa0tcxNh4aWfch iZmK9/b972jleQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client