This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json) Hash identifier: kDtYweaGGA18fUgjYBsHr5E+PkuulHHijGW+qNJkzPo= Subject key identifier: F7:12:1A:07:E7:55:30:8D:59:A1:92:6B:1B:66:7F:4B:F0:EF:C0:F0 Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03 Certificate serial: 019B3AC6FFBAADEC08DAFACE6C6C497D0AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft Manifest number: 14E6 Signing time: Sat 20 Dec 2025 08:01:18 +0000 Manifest this update: Sat 20 Dec 2025 08:01:18 +0000 Manifest next update: Sun 21 Dec 2025 08:01:18 +0000 Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: QqPXnuR2EEiOxEIvqNZwKTPLse7APCYtjrN5OdGa1TE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ff:ba:ad:ec:08:da:fa:ce:6c:6c:49:7d:0a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03 Validity Not Before: Dec 20 08:01:18 2025 GMT Not After : Dec 21 08:01:18 2025 GMT Subject: CN=f7121a07e755308d59a1926b1b667f4bf0efc0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c7:37:03:83:35:8b:d1:7c:95:0f:d3:59:b0: 4a:79:69:3c:ee:ed:b3:18:3a:28:b8:93:37:e7:a6: a0:5c:17:da:d1:3b:de:e5:4d:06:aa:3d:9a:15:55: 63:4f:2f:3b:d2:aa:e1:8c:56:c4:3b:3f:1c:1a:b1: c6:10:84:b1:52:7e:a2:ce:1c:b7:03:1b:65:c8:05: d7:6b:b7:d7:72:8f:de:7e:ee:a0:c0:2b:8a:b6:53: 67:b4:63:5a:ba:0b:fb:99:63:dd:bc:51:23:fa:7c: 9a:02:28:6f:14:9d:a2:d6:d2:dc:7b:34:3e:c0:ef: 98:9b:71:99:12:b7:bf:b6:33:8e:74:f5:f1:40:d8: c7:6a:9f:0f:6d:87:d4:d6:84:17:41:de:07:fc:c1: 4a:62:bb:7d:8c:7c:ca:bb:56:13:86:7f:a6:51:1a: 51:d1:da:dd:31:1b:df:51:d7:29:9e:64:3a:9e:a7: 30:5f:16:a0:4e:19:32:10:2c:13:74:85:fb:35:ee: 67:23:9d:68:cc:a3:ce:dc:c9:da:11:d5:a5:eb:2e: e4:ba:e0:23:cb:11:7a:f4:12:d4:a9:c2:6d:bd:88: 47:8e:fa:26:83:ab:e0:62:ca:be:e2:41:2c:17:cc: 14:a2:6b:b0:e5:d8:9f:2d:f0:e7:02:59:9a:b8:37: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:12:1A:07:E7:55:30:8D:59:A1:92:6B:1B:66:7F:4B:F0:EF:C0:F0 X509v3 Authority Key Identifier: keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bd:0e:fc:e1:0d:55:ac:88:48:5f:3a:ae:d9:aa:eb:a4:55: a7:46:59:fe:2f:43:51:61:3e:77:9a:92:3d:82:20:6d:b1:1e: 1e:8a:b1:04:94:d8:27:d9:81:3c:9c:d2:23:7a:ca:f8:8e:f1: 0b:c9:0a:de:1c:7b:f4:72:32:9b:e4:ed:b8:5c:4b:08:97:76: f3:91:c8:41:79:b5:8e:06:8a:48:fd:01:01:f1:a7:37:ad:c0: 0f:dc:4e:1f:fd:53:7a:7a:9a:23:87:08:08:88:02:84:58:b9: 64:46:0c:67:52:3a:af:b4:d8:66:b2:21:9d:d5:a3:c6:b8:dc: 7f:fe:7e:b7:04:1e:52:fd:2e:9b:05:da:98:f1:38:d5:f2:02: 19:ab:cd:9a:56:85:3a:ce:bc:cc:05:fd:e5:d0:ee:e5:95:d7: 82:80:77:eb:96:27:3a:76:96:06:27:fd:95:71:c9:ad:79:2e: 3c:62:20:d7:7a:8b:af:18:96:d9:86:bf:4c:a1:1b:1c:54:c1: 8d:a1:67:dc:16:6d:92:2e:28:23:32:f8:0f:81:c4:9d:ff:3a: 54:6a:d9:fe:51:91:d3:22:a7:c4:93:bd:6b:9b:f1:6d:f0:25: 90:13:f7:b3:d7:2b:e8:bc:a7:37:97:bb:97:1c:2d:c3:df:2c: 1a:85:85:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xv+6rewI2vrObGxJfQrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3 MDllMDMwHhcNMjUxMjIwMDgwMTE4WhcNMjUxMjIxMDgwMTE4WjAzMTEwLwYDVQQD EyhmNzEyMWEwN2U3NTUzMDhkNTlhMTkyNmIxYjY2N2Y0YmYwZWZjMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cc3A4M1i9F8lQ/TWbBKeWk87u2z GDoouJM356agXBfa0Tve5U0Gqj2aFVVjTy870qrhjFbEOz8cGrHGEISxUn6izhy3 AxtlyAXXa7fXco/efu6gwCuKtlNntGNaugv7mWPdvFEj+nyaAihvFJ2i1tLcezQ+ wO+Ym3GZEre/tjOOdPXxQNjHap8PbYfU1oQXQd4H/MFKYrt9jHzKu1YThn+mURpR 0drdMRvfUdcpnmQ6nqcwXxagThkyECwTdIX7Ne5nI51ozKPO3MnaEdWl6y7kuuAj yxF69BLUqcJtvYhHjvomg6vgYsq+4kEsF8wUomuw5difLfDnAlmauDdQMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcSGgfnVTCNWaGSaxtmf0vw78DwMB8GA1UdIwQY MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL0O/OEN VayISF86rtmq66RVp0ZZ/i9DUWE+d5qSPYIgbbEeHoqxBJTYJ9mBPJzSI3rK+I7x C8kK3hx79HIym+TtuFxLCJd285HIQXm1jgaKSP0BAfGnN63AD9xOH/1TenqaI4cI CIgChFi5ZEYMZ1I6r7TYZrIhndWjxrjcf/5+twQeUv0umwXamPE41fICGavNmlaF Os68zAX95dDu5ZXXgoB365YnOnaWBif9lXHJrXkuPGIg13qLrxiW2Ya/TKEbHFTB jaFn3BZtki4oIzL4D4HEnf86VGrZ/lGR0yKnxJO9a5vxbfAlkBP3s9cr6LynN5e7 lxwtw98sGoWFOw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:14:00 2025 by rpki-client