This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft File: rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json) Hash identifier: IutCjR9ynDhcXtrZvrKBPKbQQGB4W74LJ3UB+pkPS8A= Subject key identifier: 2C:DE:6B:47:9A:19:E9:13:73:AF:B9:D9:D7:A5:D2:C3:AD:2E:86:2E Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55 Certificate issuer: /CN=aef97a95e2170275e8c82ee878b6d08deb821e55 Certificate serial: 019B59760D2669CD7B5E20F3E136FBF1472E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft Manifest number: 10BD Signing time: Fri 26 Dec 2025 07:01:07 +0000 Manifest this update: Fri 26 Dec 2025 07:01:07 +0000 Manifest next update: Sat 27 Dec 2025 07:01:07 +0000 Files and hashes: 1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: MTxCLBdG8RxwndecZlW3n6+kUigI4VewzDDIf69W7Q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:0d:26:69:cd:7b:5e:20:f3:e1:36:fb:f1:47:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55 Validity Not Before: Dec 26 07:01:07 2025 GMT Not After : Dec 27 07:01:07 2025 GMT Subject: CN=2cde6b479a19e91373afb9d9d7a5d2c3ad2e862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:da:c7:60:1c:18:62:9b:fc:e5:3f:73:45: 0f:c2:e9:a7:18:88:08:c5:49:27:4b:e7:24:2b:b9: 8f:ca:25:96:cc:53:be:91:f0:a0:1c:29:4f:5d:8b: d1:18:4c:95:48:36:dd:55:0c:69:84:06:35:b4:1d: ca:c3:f9:15:a7:33:11:17:b5:c2:c6:68:e6:2a:77: 25:fc:28:8e:11:60:dc:07:d1:72:f4:f3:6d:97:9a: 4d:30:70:8f:4a:ef:22:fd:97:af:1b:e6:2f:38:a4: 28:c6:08:14:87:f6:2b:ab:b7:f1:d4:b6:91:a6:a2: 40:74:0d:e1:c6:c4:1c:62:38:2d:4e:64:fe:84:62: 3f:75:0f:93:79:99:65:03:52:35:3b:a0:48:21:a7: 33:08:46:35:81:b8:53:92:d0:e2:68:de:d9:68:80: e4:b2:a8:32:88:d6:d6:04:63:74:11:9b:f8:9d:71: fd:c6:2d:ae:06:be:da:d5:94:a0:be:ac:b7:61:9e: 1c:86:7e:ee:d9:f9:4e:f2:fc:e2:f1:3a:be:8a:09: 5b:84:87:66:38:2f:86:6d:d6:bc:ab:1c:52:24:8d: 15:99:74:7a:d7:31:cd:f1:bc:96:6f:91:b5:1b:a0: 31:8c:3c:b3:a9:86:2a:85:20:80:43:b0:e8:7c:58: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:6B:47:9A:19:E9:13:73:AF:B9:D9:D7:A5:D2:C3:AD:2E:86:2E X509v3 Authority Key Identifier: keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:61:03:6b:db:47:81:8a:fe:66:ea:6b:7d:32:c0:27:0f:c1: 24:2c:24:78:87:fa:e7:24:5f:93:aa:c4:b4:1f:d5:dc:16:da: 25:33:8b:d2:45:e8:90:e0:44:3c:29:27:f0:d5:b1:f9:d5:ee: 4f:77:55:ae:29:4c:ca:d9:72:d1:55:a4:6f:b5:f5:11:36:72: e9:cf:33:a5:54:c8:ff:fd:67:6d:83:f8:fd:36:c4:94:e7:1f: 77:33:98:78:5a:c8:e2:c4:b7:41:d6:91:d7:53:4b:02:47:e3: 9c:02:12:0c:19:00:31:f2:d2:a1:57:c8:2e:95:14:7d:dd:b4: 28:37:ca:7d:de:b7:5e:c7:d3:5c:18:32:f5:d2:88:c5:9a:7c: 36:04:4f:71:1e:92:79:d2:08:19:4c:84:95:fd:d2:04:c1:97: 15:8a:0a:24:1e:45:ed:55:31:6a:ce:b1:1d:a6:5a:1a:ff:1e: 0c:3f:17:1a:70:1d:36:59:91:db:8d:35:fe:ef:75:16:e1:f6: 19:01:5f:68:75:f4:54:04:e8:0c:f0:77:9e:e5:60:93:aa:93: 53:cb:a5:ec:b0:cf:81:56:57:0d:58:98:68:90:95:a4:a2:11: 38:be:c7:57:18:dd:ce:0b:39:3a:fb:09:9b:ca:60:ab:d6:37: db:82:48:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdg0mac17XiDz4Tb78UcuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjk3YTk1ZTIxNzAyNzVlOGM4MmVlODc4YjZkMDhkZWI4 MjFlNTUwHhcNMjUxMjI2MDcwMTA3WhcNMjUxMjI3MDcwMTA3WjAzMTEwLwYDVQQD EygyY2RlNmI0NzlhMTllOTEzNzNhZmI5ZDlkN2E1ZDJjM2FkMmU4NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI3ax2AcGGKb/OU/c0UPwumnGIgI xUknS+ckK7mPyiWWzFO+kfCgHClPXYvRGEyVSDbdVQxphAY1tB3Kw/kVpzMRF7XC xmjmKncl/CiOEWDcB9Fy9PNtl5pNMHCPSu8i/ZevG+YvOKQoxggUh/Yrq7fx1LaR pqJAdA3hxsQcYjgtTmT+hGI/dQ+TeZllA1I1O6BIIaczCEY1gbhTktDiaN7ZaIDk sqgyiNbWBGN0EZv4nXH9xi2uBr7a1ZSgvqy3YZ4chn7u2flO8vzi8Tq+iglbhIdm OC+Gbda8qxxSJI0VmXR61zHN8byWb5G1G6AxjDyzqYYqhSCAQ7DofFi9pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzea0eaGekTc6+52del0sOtLoYuMB8GA1UdIwQY MBaAFK75epXiFwJ16Mgu6Hi20I3rgh5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMt MjE0YTlmOTc5YWZjLzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMtMjE0YTlmOTc5YWZj LzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWEDa9tH gYr+ZuprfTLAJw/BJCwkeIf65yRfk6rEtB/V3BbaJTOL0kXokOBEPCkn8NWx+dXu T3dVrilMytly0VWkb7X1ETZy6c8zpVTI//1nbYP4/TbElOcfdzOYeFrI4sS3QdaR 11NLAkfjnAISDBkAMfLSoVfILpUUfd20KDfKfd63XsfTXBgy9dKIxZp8NgRPcR6S edIIGUyElf3SBMGXFYoKJB5F7VUxas6xHaZaGv8eDD8XGnAdNlmR2401/u91FuH2 GQFfaHX0VAToDPB3nuVgk6qTU8ul7LDPgVZXDViYaJCVpKIROL7HVxjdzgs5OvsJ m8pgq9Y324JIRw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:25 2025 by rpki-client