This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json) Hash identifier: dCmQRL3DoRvHX6TybzHGImvjx5UMjv4PfetQCd+mzQk= Subject key identifier: C8:CF:1B:0B:D9:42:BD:CE:4E:34:5E:C8:FA:3C:C9:B4:04:B3:66:B4 Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d Certificate serial: 019B47701D03ACB86F962C701928BE4B3103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft Manifest number: 14CB Signing time: Mon 22 Dec 2025 19:01:28 +0000 Manifest this update: Mon 22 Dec 2025 19:01:28 +0000 Manifest next update: Tue 23 Dec 2025 19:01:28 +0000 Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: 2/7eTAbTLhcGs+0WAST3qybKkD7+DxiEkx/96p0J+so=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:70:1d:03:ac:b8:6f:96:2c:70:19:28:be:4b:31:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d Validity Not Before: Dec 22 19:01:28 2025 GMT Not After : Dec 23 19:01:28 2025 GMT Subject: CN=c8cf1b0bd942bdce4e345ec8fa3cc9b404b366b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b6:0c:f5:fc:3e:94:47:fc:2f:61:41:0f:3c: 74:fd:69:95:3c:1e:4c:1b:87:80:91:3c:0f:02:b0: f8:6d:82:eb:37:72:c4:1f:cc:74:24:b3:c7:d5:b6: 94:75:ab:cb:72:ee:8f:bf:ee:35:af:56:d9:53:e8: e6:3d:02:02:a8:04:59:9a:33:42:ce:03:e4:e4:be: b6:c0:43:e3:7e:e0:8c:b6:8f:13:a7:41:14:3f:79: cb:06:5a:ef:4a:98:c2:b8:38:33:e7:67:6e:34:0a: 3b:05:2f:6e:89:46:ab:a4:f5:b5:2f:5c:22:92:f2: 84:e4:13:97:81:67:6a:b5:4e:dd:c6:8a:d6:d6:f6: cd:99:51:2a:19:7a:db:9f:68:76:33:0d:cc:0d:61: b0:c9:43:2e:f0:79:1c:7f:6d:6c:be:81:82:d4:a0: 85:8d:57:cb:19:09:9a:d6:e8:9a:0d:28:d2:2f:90: ca:06:d8:b4:92:77:ca:e9:fb:49:93:eb:4c:24:af: f5:ca:41:a1:39:5a:ab:ff:38:7f:c6:c6:bf:d2:a0: d5:d0:db:fa:c0:12:08:19:a0:d1:6b:8c:ae:09:f7: 29:5a:b7:31:8a:e7:df:97:1d:df:45:88:9a:8a:08: 11:fb:40:e7:b9:e8:3b:5d:9f:33:d4:17:f9:49:82: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CF:1B:0B:D9:42:BD:CE:4E:34:5E:C8:FA:3C:C9:B4:04:B3:66:B4 X509v3 Authority Key Identifier: keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:de:a3:b8:b4:f7:05:91:7e:59:eb:35:18:78:f6:fd:35: 4d:0c:b9:b4:cd:2d:70:ab:38:7a:2b:e0:07:be:0a:18:99:4a: f2:d9:14:e7:9c:30:83:56:3c:f7:13:ee:56:4c:95:00:59:d3: f6:96:f6:70:33:8e:9a:2d:d1:89:58:35:7c:bf:76:50:36:83: c5:17:9d:e6:e6:33:7f:01:32:16:df:fe:97:3c:55:83:17:0a: c2:ae:16:f9:f2:4b:7e:fc:ed:a0:8e:e0:34:a8:c2:9b:40:fe: 85:f7:98:ef:16:d5:f0:0d:0e:ba:06:51:07:b0:e3:47:c3:f5: bd:b7:d3:02:81:fc:02:8f:ee:02:a1:ee:64:ff:f0:44:e9:c5: 42:c0:43:3a:d5:bc:10:27:58:79:1f:ea:3e:49:33:f1:09:dd: ab:64:db:be:79:0b:34:d0:60:62:85:8f:48:d8:1e:04:03:ec: 28:02:51:9d:3c:f8:ac:53:77:50:ab:66:0b:da:70:f4:22:eb: a9:77:91:f0:be:ed:b6:b6:da:7f:5b:af:3b:3e:a1:ac:03:07: e5:65:a9:27:c7:7b:6a:c3:c2:de:86:9c:fb:ec:be:a0:ea:2d: c1:ac:f3:b3:bf:b6:06:7e:63:dc:aa:25:18:99:38:90:1b:09: 36:52:85:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHcB0DrLhvlixwGSi+SzEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjQ1NWIxYTg1OWJjNGQ2NjE4MTc1MDU1ZjBlYzg5NjA3 ZjA1MmQwHhcNMjUxMjIyMTkwMTI4WhcNMjUxMjIzMTkwMTI4WjAzMTEwLwYDVQQD EyhjOGNmMWIwYmQ5NDJiZGNlNGUzNDVlYzhmYTNjYzliNDA0YjM2NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7YM9fw+lEf8L2FBDzx0/WmVPB5M G4eAkTwPArD4bYLrN3LEH8x0JLPH1baUdavLcu6Pv+41r1bZU+jmPQICqARZmjNC zgPk5L62wEPjfuCMto8Tp0EUP3nLBlrvSpjCuDgz52duNAo7BS9uiUarpPW1L1wi kvKE5BOXgWdqtU7dxorW1vbNmVEqGXrbn2h2Mw3MDWGwyUMu8Hkcf21svoGC1KCF jVfLGQma1uiaDSjSL5DKBti0knfK6ftJk+tMJK/1ykGhOVqr/zh/xsa/0qDV0Nv6 wBIIGaDRa4yuCfcpWrcxiufflx3fRYiaiggR+0Dnueg7XZ8z1Bf5SYIMlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjPGwvZQr3OTjReyPo8ybQEs2a0MB8GA1UdIwQY MBaAFKwkVbGoWbxNZhgXUFXw7IlgfwUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjct YzcxODM2MWQ0Mzc0LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjctYzcxODM2MWQ0Mzc0 LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqPeo7i0 9wWRflnrNRh49v01TQy5tM0tcKs4eivgB74KGJlK8tkU55wwg1Y89xPuVkyVAFnT 9pb2cDOOmi3RiVg1fL92UDaDxRed5uYzfwEyFt/+lzxVgxcKwq4W+fJLfvztoI7g NKjCm0D+hfeY7xbV8A0OugZRB7DjR8P1vbfTAoH8Ao/uAqHuZP/wROnFQsBDOtW8 ECdYeR/qPkkz8Qndq2TbvnkLNNBgYoWPSNgeBAPsKAJRnTz4rFN3UKtmC9pw9CLr qXeR8L7ttrbaf1uvOz6hrAMH5WWpJ8d7asPC3oac++y+oOotwazzs7+2Bn5j3Kol GJk4kBsJNlKFlw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:15:54 2025 by rpki-client