This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft File: at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json) Hash identifier: 2HGJTONMRdwFpCkLo5EPawizp8vM3OxaFEah40wUORM= Subject key identifier: BA:1D:EF:EF:E5:D7:85:FD:B1:78:80:FB:0A:D9:66:4E:5A:99:6B:B5 Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F Certificate issuer: /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f Certificate serial: 019B495DE3DDD64ED6173B28E91A6A9BE3F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft Manifest number: 04DD Signing time: Tue 23 Dec 2025 04:00:48 +0000 Manifest this update: Tue 23 Dec 2025 04:00:48 +0000 Manifest next update: Wed 24 Dec 2025 04:00:48 +0000 Files and hashes: 1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: npzdJr//cNjVHDHNBiACsoS02/fmk2UyEMJ4gElycU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:e3:dd:d6:4e:d6:17:3b:28:e9:1a:6a:9b:e3:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f Validity Not Before: Dec 23 04:00:48 2025 GMT Not After : Dec 24 04:00:48 2025 GMT Subject: CN=ba1defefe5d785fdb17880fb0ad9664e5a996bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:2f:03:5e:0e:58:cc:1b:d1:02:41:db:2b: ad:fb:4a:95:2f:c8:f1:bf:5d:ea:dd:d2:64:2d:ad: ba:90:44:8c:7d:82:cc:af:36:26:7f:18:e4:0b:9c: 17:b7:db:72:0e:98:49:b4:82:0a:b9:0e:3d:91:01: d3:cb:b0:d2:26:6e:53:12:aa:4d:f4:68:5d:78:0a: f5:e1:d1:93:17:c0:8d:57:cb:ce:88:14:cd:ce:eb: 1b:b7:58:9d:da:8e:a8:8c:1e:b0:f9:bc:38:c0:3f: 1d:89:73:d4:11:d7:10:d6:83:7d:df:fa:87:38:57: 7a:6e:0c:dc:95:25:ec:72:28:ca:96:0d:db:a9:df: 9b:60:97:a0:cf:9c:c9:a1:cc:03:68:c4:a1:8c:f8: 15:97:a8:44:1c:1e:96:b4:4b:3d:ea:29:cf:a0:34: 91:e0:8d:60:dd:db:b9:06:9b:48:32:72:92:0c:00: f4:1e:fe:62:dc:a5:65:f7:d5:ae:37:c9:99:8b:42: 3e:d0:a2:a5:71:c3:99:ec:f8:63:86:e6:9d:6b:7c: 87:41:8a:82:03:5e:d7:86:12:07:ad:f2:1f:aa:49: 45:d3:1a:05:4d:ab:70:0c:0f:81:bd:8b:4d:45:5c: 39:e7:7f:0c:45:c1:9d:11:63:d8:c0:1f:80:81:5f: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:EF:EF:E5:D7:85:FD:B1:78:80:FB:0A:D9:66:4E:5A:99:6B:B5 X509v3 Authority Key Identifier: keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ed:d5:7f:90:ae:b8:d3:c5:61:67:14:81:7b:eb:39:f5:7d: 34:5f:e0:ea:dc:0b:a1:2c:a6:18:aa:b1:be:ae:d3:30:e8:62: 97:38:14:71:53:5f:7a:82:7d:a6:f2:2f:87:56:da:62:37:27: 5e:35:9f:fa:55:e8:2c:b4:93:54:ac:9a:89:ee:e7:bc:b6:bf: bf:aa:69:12:ff:e7:e9:f7:6d:81:af:76:de:3f:4f:24:84:e7: 09:f3:8f:8a:2e:bb:f2:45:f5:60:d8:b4:bc:16:33:d8:ed:eb: c0:be:b8:34:56:21:6f:49:11:81:51:ea:47:c3:ba:0e:56:5a: 59:f2:4b:55:d3:00:f4:38:cc:bd:b7:df:18:ba:c9:a5:e2:8a: 27:16:fd:80:64:10:d1:d1:cd:a6:c6:92:31:a5:06:8d:fe:75: 37:8a:7a:cf:bd:48:2d:79:d1:1c:71:cb:36:5b:df:2c:98:12: f9:ef:f6:c8:a5:42:7b:8e:3d:4b:b6:1a:b4:2e:ee:39:87:13: 12:06:01:a0:d0:0a:bb:41:9e:be:ac:6e:15:c3:64:6f:31:13: 85:b4:51:26:34:ed:60:2f:ed:3d:30:61:e0:c5:9f:83:29:0c: 75:aa:65:16:84:a8:ac:1d:cc:d8:9c:86:65:96:82:36:97:3d: fe:73:e7:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXePd1k7WFzso6Rpqm+P2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZGU2ZWFkZjI0NWNiN2E2NWNiNGMwNWQzZDU0YmNkMjYw YTA3NWYwHhcNMjUxMjIzMDQwMDQ4WhcNMjUxMjI0MDQwMDQ4WjAzMTEwLwYDVQQD EyhiYTFkZWZlZmU1ZDc4NWZkYjE3ODgwZmIwYWQ5NjY0ZTVhOTk2YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkMvA14OWMwb0QJB2yut+0qVL8jx v13q3dJkLa26kESMfYLMrzYmfxjkC5wXt9tyDphJtIIKuQ49kQHTy7DSJm5TEqpN 9GhdeAr14dGTF8CNV8vOiBTNzusbt1id2o6ojB6w+bw4wD8diXPUEdcQ1oN93/qH OFd6bgzclSXscijKlg3bqd+bYJegz5zJocwDaMShjPgVl6hEHB6WtEs96inPoDSR 4I1g3du5BptIMnKSDAD0Hv5i3KVl99WuN8mZi0I+0KKlccOZ7Phjhuada3yHQYqC A17XhhIHrfIfqklF0xoFTatwDA+BvYtNRVw5538MRcGdEWPYwB+AgV/z7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLod7+/l14X9sXiA+wrZZk5amWu1MB8GA1UdIwQY MBaAFGrebq3yRct6ZctMBdPVS80mCgdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXQ1dXJmSkZ5M3BseTB3RjA5Vkx6U1lLQjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUxODMtZDhkOC00NDI1LWIwZWQt YzIwOTcwMzFlZDRiLzEvYXQ1dXJmSkZ5M3BseTB3RjA5Vkx6U1lLQjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jYjUxODMtZDhkOC00NDI1LWIwZWQtYzIwOTcwMzFlZDRi LzEvYXQ1dXJmSkZ5M3BseTB3RjA5Vkx6U1lLQjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqe3Vf5Cu uNPFYWcUgXvrOfV9NF/g6twLoSymGKqxvq7TMOhilzgUcVNfeoJ9pvIvh1baYjcn XjWf+lXoLLSTVKyaie7nvLa/v6ppEv/n6fdtga923j9PJITnCfOPii678kX1YNi0 vBYz2O3rwL64NFYhb0kRgVHqR8O6DlZaWfJLVdMA9DjMvbffGLrJpeKKJxb9gGQQ 0dHNpsaSMaUGjf51N4p6z71ILXnRHHHLNlvfLJgS+e/2yKVCe449S7YatC7uOYcT EgYBoNAKu0GevqxuFcNkbzEThbRRJjTtYC/tPTBh4MWfgykMdaplFoSorB3M2JyG ZZaCNpc9/nPngg== -----END CERTIFICATE-----Generated at Tue Dec 23 06:06:56 2025 by rpki-client