This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft File: rUskfyJRG39TOwAtmfvsK1WbbC8.mft (raw, json) Hash identifier: fIs2alIKx+RI7cG/VNkan048qk0MIIfwO36dzOUTC0Y= Subject key identifier: D2:46:09:B6:81:CE:CF:FA:8B:08:09:47:3B:A0:EB:8A:25:A9:4D:06 Authority key identifier: AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F Certificate issuer: /CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f Certificate serial: 019B3456E2803740977ECB0D2623AA17BA2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft Manifest number: 060D Signing time: Fri 19 Dec 2025 02:01:07 +0000 Manifest this update: Fri 19 Dec 2025 02:01:07 +0000 Manifest next update: Sat 20 Dec 2025 02:01:07 +0000 Files and hashes: 1: rUskfyJRG39TOwAtmfvsK1WbbC8.crl (hash: H53yk4jWA9HtLmNWWDnjwGSCV3ofKocnAS3L1V3/TLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e2:80:37:40:97:7e:cb:0d:26:23:aa:17:ba:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4b247f22511b7f533b002d99fbec2b559b6c2f Validity Not Before: Dec 19 02:01:07 2025 GMT Not After : Dec 20 02:01:07 2025 GMT Subject: CN=d24609b681cecffa8b0809473ba0eb8a25a94d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:39:54:0f:99:c6:59:3d:61:6a:bd:c3:6a: 19:29:b2:bd:46:53:70:62:99:f1:21:b8:5e:a9:27: 2f:8e:60:10:55:4e:3d:de:4f:c1:2c:e7:47:ea:0b: 4e:bf:f2:de:f7:da:46:44:07:63:16:46:b3:03:8b: 05:1a:51:30:a1:d5:a3:8a:64:18:d1:63:1d:97:f4: 1d:c4:84:6f:0f:b9:c8:5a:8c:43:a5:a2:50:7e:10: 0c:4c:f4:63:ef:5f:07:c6:d0:57:7b:99:57:f8:a4: 1a:a3:05:68:cb:8f:c9:b7:45:1e:a3:07:ab:61:66: b0:8c:58:36:14:cb:00:b9:c1:19:99:e6:5f:78:2e: e7:f1:9e:17:2a:3e:01:fd:da:94:4a:b5:20:fd:e5: 79:e7:ea:9d:9e:b6:e9:ba:f9:f4:7c:6e:b5:e3:5c: 75:ff:8a:36:ab:64:f2:27:8e:ab:1a:23:8c:f1:b3: 95:01:70:37:4a:15:81:a3:78:1b:dd:ce:27:d7:e3: 18:1e:2f:73:19:17:ae:0b:e9:5e:d2:75:c0:bd:cf: f2:f8:f7:d9:c9:50:c0:e8:ce:44:d8:61:73:db:2e: 33:16:ee:c9:2e:ae:1f:64:9e:8a:44:b5:f1:24:2a: ba:f3:01:88:62:91:9e:c7:b4:a8:22:b8:a8:22:e1: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:46:09:B6:81:CE:CF:FA:8B:08:09:47:3B:A0:EB:8A:25:A9:4D:06 X509v3 Authority Key Identifier: keyid:AD:4B:24:7F:22:51:1B:7F:53:3B:00:2D:99:FB:EC:2B:55:9B:6C:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUskfyJRG39TOwAtmfvsK1WbbC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/292899-ddb6-41d4-9698-d518d163105b/1/rUskfyJRG39TOwAtmfvsK1WbbC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a5:05:3b:7c:c3:de:f1:27:ef:d3:71:ec:1a:7b:c4:23:e6: ff:16:0f:7c:0d:23:a3:85:15:b5:14:6c:f1:3a:59:a7:31:57: 7d:69:ce:1a:3e:69:c9:73:f3:e0:73:e4:1f:c5:73:d3:16:fa: 5d:a8:d5:2c:b1:c6:cf:43:dc:e6:4e:f7:a4:06:cb:d0:e5:58: 7a:68:b4:db:cb:9d:a1:c8:20:be:f6:f9:db:d1:5b:3a:d2:4d: 85:53:25:bf:ba:38:52:d8:d1:19:00:81:7e:0c:d0:50:86:60: 4d:4b:f3:dc:3f:2a:0c:02:23:9c:af:b7:9a:c5:43:3e:c3:b0: 5e:a4:3b:8a:53:e3:46:7c:07:8b:ca:08:2d:47:0d:9b:19:db: 9a:9b:c8:45:42:15:b2:e8:84:46:a0:5a:45:e6:da:2d:d9:c7: 4c:96:a7:89:a6:14:2e:ca:25:71:da:6c:d3:30:c3:d1:bf:b3: b3:c1:4a:35:56:92:fc:4d:ba:0d:a9:8e:5f:84:f4:52:af:8b: 76:3b:7c:91:40:c0:46:20:96:df:37:5d:a8:e6:2d:d9:bf:21: ff:95:df:cb:31:fc:da:cf:8f:2d:5f:fd:ec:4d:88:b1:9a:1e: c7:a4:7f:d7:3a:2c:ef:6e:5c:45:63:08:4d:1c:08:1a:5c:dd: cf:e5:ab:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VuKAN0CXfssNJiOqF7oqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGIyNDdmMjI1MTFiN2Y1MzNiMDAyZDk5ZmJlYzJiNTU5 YjZjMmYwHhcNMjUxMjE5MDIwMTA3WhcNMjUxMjIwMDIwMTA3WjAzMTEwLwYDVQQD EyhkMjQ2MDliNjgxY2VjZmZhOGIwODA5NDczYmEwZWI4YTI1YTk0ZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAc5VA+Zxlk9YWq9w2oZKbK9RlNw YpnxIbheqScvjmAQVU493k/BLOdH6gtOv/Le99pGRAdjFkazA4sFGlEwodWjimQY 0WMdl/QdxIRvD7nIWoxDpaJQfhAMTPRj718HxtBXe5lX+KQaowVoy4/Jt0Ueower YWawjFg2FMsAucEZmeZfeC7n8Z4XKj4B/dqUSrUg/eV55+qdnrbpuvn0fG6141x1 /4o2q2TyJ46rGiOM8bOVAXA3ShWBo3gb3c4n1+MYHi9zGReuC+le0nXAvc/y+PfZ yVDA6M5E2GFz2y4zFu7JLq4fZJ6KRLXxJCq68wGIYpGex7SoIrioIuGO0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJGCbaBzs/6iwgJRzug64olqU0GMB8GA1UdIwQY MBaAFK1LJH8iURt/UzsALZn77CtVm2wvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yOTI4OTktZGRiNi00MWQ0LTk2OTgt ZDUxOGQxNjMxMDViLzEvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8yOTI4OTktZGRiNi00MWQ0LTk2OTgtZDUxOGQxNjMxMDVi LzEvclVza2Z5SlJHMzlUT3dBdG1mdnNLMVdiYkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKUFO3zD 3vEn79Nx7Bp7xCPm/xYPfA0jo4UVtRRs8TpZpzFXfWnOGj5pyXPz4HPkH8Vz0xb6 XajVLLHGz0Pc5k73pAbL0OVYemi028udocggvvb529FbOtJNhVMlv7o4UtjRGQCB fgzQUIZgTUvz3D8qDAIjnK+3msVDPsOwXqQ7ilPjRnwHi8oILUcNmxnbmpvIRUIV suiERqBaRebaLdnHTJaniaYULsolcdps0zDD0b+zs8FKNVaS/E26DamOX4T0Uq+L djt8kUDARiCW3zddqOYt2b8h/5XfyzH82s+PLV/97E2IsZoex6R/1zos725cRWMI TRwIGlzdz+WrNg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:14:29 2025 by rpki-client