This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft File: C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json) Hash identifier: uTBxuOvmHWQkPpmf9iJmZ6SjmxUKPuOgCTmxeDjl3Zk= Subject key identifier: EF:6B:5E:13:A8:B1:F6:FC:A6:9F:91:D5:D7:73:16:B1:94:39:44:1D Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC Certificate issuer: /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc Certificate serial: 019B59ACB1E03E2C446308A759579308A767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft Manifest number: BB Signing time: Fri 26 Dec 2025 08:00:48 +0000 Manifest this update: Fri 26 Dec 2025 08:00:48 +0000 Manifest next update: Sat 27 Dec 2025 08:00:48 +0000 Files and hashes: 1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: 7562EK4c43ThO5gKsN3SlV7CWNMH4r/TTSfwyTA6INY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:b1:e0:3e:2c:44:63:08:a7:59:57:93:08:a7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc Validity Not Before: Dec 26 08:00:48 2025 GMT Not After : Dec 27 08:00:48 2025 GMT Subject: CN=ef6b5e13a8b1f6fca69f91d5d77316b19439441d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d7:bd:c1:70:a0:46:6a:24:f7:9a:8f:3c:b5: 2a:a4:c1:b1:83:9f:5a:f4:26:27:0e:8e:8b:23:e8: e2:dd:f8:6a:7d:cc:fc:0b:39:2d:ce:4f:13:67:e6: 16:79:c4:c7:ae:93:51:9d:81:c0:65:6e:bf:3e:a8: e0:fe:51:97:c6:0c:6e:3c:8c:3a:48:23:a9:08:b2: 9f:b9:ea:0b:d7:59:49:91:77:84:f4:26:5b:21:c0: 7f:a4:67:10:d9:fd:44:fd:de:dd:c0:a9:3d:6e:3e: e5:37:f1:ad:dd:17:64:21:7c:08:74:41:fe:bf:fc: 7e:8a:30:6b:ab:62:63:c7:e3:ee:a2:51:68:0c:ee: 93:83:a4:42:9c:93:78:d1:1d:94:e4:ea:18:1e:55: 3b:b1:bf:87:54:68:9e:2b:54:c5:4a:7c:77:a7:9f: 78:a4:96:2c:86:51:46:c0:f8:4a:6b:7d:0e:53:4c: 58:a9:6d:d8:a0:35:1f:a9:fa:f7:66:58:e0:b7:27: 36:bb:98:18:a1:63:32:95:ed:1f:58:d8:d2:8e:c1: 18:20:d1:0f:b6:1b:e1:a5:84:83:21:9d:4e:cb:b0: 5f:75:d7:15:42:17:e7:a2:a6:b7:40:45:e3:2d:70: e4:d8:18:6e:c3:f3:a1:e0:53:49:02:e7:ed:a8:c9: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6B:5E:13:A8:B1:F6:FC:A6:9F:91:D5:D7:73:16:B1:94:39:44:1D X509v3 Authority Key Identifier: keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:40:29:6d:dd:a9:83:37:7e:70:0e:04:72:8b:aa:e7:e8:fc: a6:ae:cf:95:aa:ed:3e:63:94:08:98:61:98:6e:48:e8:12:cd: 1e:52:87:14:a4:20:02:d7:70:a1:8a:7c:8d:c7:29:67:62:c2: f8:28:66:66:06:88:df:49:87:b1:ab:28:0c:12:1d:0a:e5:87: 24:d3:b7:e0:dd:32:c3:1d:e6:da:87:4a:65:ab:2f:d3:a6:f5: 65:f6:9d:b9:d7:89:00:f6:d2:d0:6c:3d:ae:b0:fe:f5:2c:f7: 5b:eb:0f:2c:4c:d6:7e:51:31:3b:53:f5:23:01:ee:60:d6:db: be:5f:f4:52:3c:c7:54:35:f8:a0:16:73:6e:fa:de:cf:0e:ed: 37:07:f9:1e:62:a9:29:93:b4:15:d5:1a:ca:37:d2:69:7f:31: 31:bc:4d:07:60:ce:9b:c6:e6:d7:be:c6:07:06:ba:1f:59:07: 89:a3:c3:ca:32:42:62:e2:5f:8c:e5:3f:ed:c8:b9:28:f8:50: 9d:05:2b:01:f9:92:75:ce:33:d0:15:ee:9b:b5:fa:8a:82:be: 29:8a:0d:72:6e:fb:10:b1:4d:da:0f:dd:cb:da:02:2c:4d:51: fc:ca:f9:d5:4f:84:5d:c1:1b:41:d7:32:f7:e1:97:52:40:be: d9:ca:ce:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrLHgPixEYwinWVeTCKdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTBmY2IwYWQyMzZhZGE4OWU2NWJkNjJhNTFkMTg0YTY4 N2JiZmMwHhcNMjUxMjI2MDgwMDQ4WhcNMjUxMjI3MDgwMDQ4WjAzMTEwLwYDVQQD EyhlZjZiNWUxM2E4YjFmNmZjYTY5ZjkxZDVkNzczMTZiMTk0Mzk0NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNe9wXCgRmok95qPPLUqpMGxg59a 9CYnDo6LI+ji3fhqfcz8Czktzk8TZ+YWecTHrpNRnYHAZW6/Pqjg/lGXxgxuPIw6 SCOpCLKfueoL11lJkXeE9CZbIcB/pGcQ2f1E/d7dwKk9bj7lN/Gt3RdkIXwIdEH+ v/x+ijBrq2Jjx+PuolFoDO6Tg6RCnJN40R2U5OoYHlU7sb+HVGieK1TFSnx3p594 pJYshlFGwPhKa30OU0xYqW3YoDUfqfr3Zljgtyc2u5gYoWMyle0fWNjSjsEYINEP thvhpYSDIZ1Oy7BfddcVQhfnoqa3QEXjLXDk2Bhuw/Oh4FNJAuftqMmU5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9rXhOosfb8pp+R1ddzFrGUOUQdMB8GA1UdIwQY MBaAFAtQ/LCtI2raieZb1ipR0YSmh7v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFEOHNLMGphdHFKNWx2V0tsSFJoS2FIdV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mNjRlMmQtNThmMi00ZmQ3LThiZDEt MjYyZGI5MmJhNjM4LzEvQzFEOHNLMGphdHFKNWx2V0tsSFJoS2FIdV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mNjRlMmQtNThmMi00ZmQ3LThiZDEtMjYyZGI5MmJhNjM4 LzEvQzFEOHNLMGphdHFKNWx2V0tsSFJoS2FIdV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkApbd2p gzd+cA4Ecouq5+j8pq7PlartPmOUCJhhmG5I6BLNHlKHFKQgAtdwoYp8jccpZ2LC +ChmZgaI30mHsasoDBIdCuWHJNO34N0ywx3m2odKZasv06b1ZfadudeJAPbS0Gw9 rrD+9Sz3W+sPLEzWflExO1P1IwHuYNbbvl/0UjzHVDX4oBZzbvrezw7tNwf5HmKp KZO0FdUayjfSaX8xMbxNB2DOm8bm177GBwa6H1kHiaPDyjJCYuJfjOU/7ci5KPhQ nQUrAfmSdc4z0BXum7X6ioK+KYoNcm77ELFN2g/dy9oCLE1R/Mr51U+EXcEbQdcy 9+GXUkC+2crO0g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:38 2025 by rpki-client