This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft File: rryO4V1QIdy_qgXKGDil4KyLfaA.mft (raw, json) Hash identifier: wmsJ52+S4AbKde+aQb4+YmMDKGqnxjeWrC+ad1DPs24= Subject key identifier: 10:EA:B3:8D:16:3B:69:00:BE:1B:7D:69:F0:3E:DD:C4:29:31:63:43 Authority key identifier: AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0 Certificate issuer: /CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0 Certificate serial: 019B59AC8F8E68A603B2BC17043F86BF1121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft Manifest number: 6A Signing time: Fri 26 Dec 2025 08:00:39 +0000 Manifest this update: Fri 26 Dec 2025 08:00:39 +0000 Manifest next update: Sat 27 Dec 2025 08:00:39 +0000 Files and hashes: 1: rryO4V1QIdy_qgXKGDil4KyLfaA.crl (hash: QQWewOafffPG9djYaioczsj85Q1GQ05xw3XI4HYYufs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8f:8e:68:a6:03:b2:bc:17:04:3f:86:bf:11:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebc8ee15d5021dcbfaa05ca1838a5e0ac8b7da0 Validity Not Before: Dec 26 08:00:39 2025 GMT Not After : Dec 27 08:00:39 2025 GMT Subject: CN=10eab38d163b6900be1b7d69f03eddc429316343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:bd:73:33:63:ac:42:95:72:ea:b4:2b:f3: 72:45:28:ab:65:0c:b9:cf:8d:f7:bc:24:0b:05:c8: 56:78:a1:d5:a4:89:13:45:a3:56:49:8e:41:0e:d3: ab:69:3b:aa:22:d3:af:ca:2e:d4:ef:b3:67:38:60: 15:9d:d8:3d:23:0a:0d:03:fa:bb:76:3f:79:7f:d3: 7a:8f:b9:77:de:b9:09:d2:e0:e6:10:49:3b:53:af: f6:ab:12:b4:37:b5:45:7e:2a:35:0f:85:77:a8:54: 9f:67:7b:58:c2:6e:69:83:88:83:4d:fd:87:07:c4: aa:a0:c3:05:d6:44:d6:ad:22:77:45:97:8d:86:83: 01:ad:16:7f:1d:e9:63:75:4a:b2:48:f8:ca:22:04: 42:5f:6a:e0:2f:4e:b0:5e:eb:c7:01:ea:13:ea:be: 85:11:1a:de:1f:b9:48:d6:4a:6f:64:3a:9c:bb:3b: cd:df:f6:82:43:56:16:28:09:a0:31:b2:e6:f4:4a: 80:be:16:d0:10:c1:59:4a:8b:de:ca:94:32:81:e6: 7f:31:ed:97:2d:2d:92:c6:4c:6f:c5:3b:90:00:0a: 08:f1:95:84:58:da:7f:23:5f:36:fd:cd:62:2a:78: ab:e4:cf:5d:65:75:a8:96:43:38:5e:53:96:db:d7: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:B3:8D:16:3B:69:00:BE:1B:7D:69:F0:3E:DD:C4:29:31:63:43 X509v3 Authority Key Identifier: keyid:AE:BC:8E:E1:5D:50:21:DC:BF:AA:05:CA:18:38:A5:E0:AC:8B:7D:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rryO4V1QIdy_qgXKGDil4KyLfaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ac6110-1909-4f00-a0ee-67cd4c85a4c5/1/rryO4V1QIdy_qgXKGDil4KyLfaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0d:87:82:48:8f:70:d6:48:e6:44:09:4c:f6:bc:47:fe:a0: 28:aa:56:ab:9f:6c:b7:43:99:cd:5c:e2:e1:44:2a:b8:9e:e9: de:c0:d2:68:f1:35:24:a3:88:7d:5e:16:70:33:51:59:25:9e: db:52:4b:d2:33:99:28:12:1a:01:01:fc:ad:1e:39:2f:8c:01: 08:e6:eb:7a:ab:d0:12:c3:d1:7f:bd:dd:19:49:27:00:01:88: e0:b4:79:32:62:58:13:1d:d1:64:15:84:1c:38:38:68:e1:af: 43:f8:6b:2b:81:1a:4c:18:e5:29:2c:7f:8e:0e:52:d0:23:ce: da:c4:c6:01:36:e0:63:0d:85:7d:8e:71:f3:e0:c6:7e:30:89: 8c:b4:d4:37:9f:81:ec:27:ea:19:4b:0c:e5:19:87:a5:4d:cc: 2b:3f:0f:19:c6:39:23:db:f3:07:41:65:71:91:90:98:b5:5b: 2f:c0:87:40:52:03:98:dd:d1:11:ce:84:09:8e:e9:29:a5:2d: e9:44:39:01:e2:6f:10:a3:9e:33:2d:57:73:5c:46:a5:0e:3f: 8f:37:82:a2:c0:ad:65:36:52:ca:fb:40:95:4d:fe:f8:44:38: a9:21:51:77:17:34:b0:99:cb:48:ba:9e:26:cd:a2:dc:cf:a5: cf:ff:4c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrI+OaKYDsrwXBD+GvxEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmM4ZWUxNWQ1MDIxZGNiZmFhMDVjYTE4MzhhNWUwYWM4 YjdkYTAwHhcNMjUxMjI2MDgwMDM5WhcNMjUxMjI3MDgwMDM5WjAzMTEwLwYDVQQD EygxMGVhYjM4ZDE2M2I2OTAwYmUxYjdkNjlmMDNlZGRjNDI5MzE2MzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfq9czNjrEKVcuq0K/NyRSirZQy5 z433vCQLBchWeKHVpIkTRaNWSY5BDtOraTuqItOvyi7U77NnOGAVndg9IwoNA/q7 dj95f9N6j7l33rkJ0uDmEEk7U6/2qxK0N7VFfio1D4V3qFSfZ3tYwm5pg4iDTf2H B8SqoMMF1kTWrSJ3RZeNhoMBrRZ/HeljdUqySPjKIgRCX2rgL06wXuvHAeoT6r6F ERreH7lI1kpvZDqcuzvN3/aCQ1YWKAmgMbLm9EqAvhbQEMFZSoveypQygeZ/Me2X LS2SxkxvxTuQAAoI8ZWEWNp/I182/c1iKnir5M9dZXWolkM4XlOW29eSgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDqs40WO2kAvht9afA+3cQpMWNDMB8GA1UdIwQY MBaAFK68juFdUCHcv6oFyhg4peCsi32gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJ5TzRWMVFJZHlfcWdYS0dEaWw0S3lMZmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hYzYxMTAtMTkwOS00ZjAwLWEwZWUt NjdjZDRjODVhNGM1LzEvcnJ5TzRWMVFJZHlfcWdYS0dEaWw0S3lMZmFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hYzYxMTAtMTkwOS00ZjAwLWEwZWUtNjdjZDRjODVhNGM1 LzEvcnJ5TzRWMVFJZHlfcWdYS0dEaWw0S3lMZmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADg2HgkiP cNZI5kQJTPa8R/6gKKpWq59st0OZzVzi4UQquJ7p3sDSaPE1JKOIfV4WcDNRWSWe 21JL0jOZKBIaAQH8rR45L4wBCObreqvQEsPRf73dGUknAAGI4LR5MmJYEx3RZBWE HDg4aOGvQ/hrK4EaTBjlKSx/jg5S0CPO2sTGATbgYw2FfY5x8+DGfjCJjLTUN5+B 7CfqGUsM5RmHpU3MKz8PGcY5I9vzB0FlcZGQmLVbL8CHQFIDmN3REc6ECY7pKaUt 6UQ5AeJvEKOeMy1Xc1xGpQ4/jzeCosCtZTZSyvtAlU3++EQ4qSFRdxc0sJnLSLqe Js2i3M+lz/9MWw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client