This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft File: aU0ylbrOkvvFQHllxly2WWm60Cg.mft (raw, json) Hash identifier: 2Vubph/dUOCKGnv20prmKxUuPQ+p/0yUZvw7WzO9T3w= Subject key identifier: 70:63:08:41:93:16:6C:24:A4:20:F7:6A:C7:C4:C9:DA:78:EE:83:34 Authority key identifier: 69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28 Certificate issuer: /CN=694d3295bace92fbc5407965c65cb65969bad028 Certificate serial: 019B42802BD0325713AD494FAC360A17CFD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft Manifest number: 0289 Signing time: Sun 21 Dec 2025 20:00:54 +0000 Manifest this update: Sun 21 Dec 2025 20:00:54 +0000 Manifest next update: Mon 22 Dec 2025 20:00:54 +0000 Files and hashes: 1: aU0ylbrOkvvFQHllxly2WWm60Cg.crl (hash: fSL2Zp1C9Fe9cWYRNowNF9HD5ljQ/6Uq512bpM97auM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:2b:d0:32:57:13:ad:49:4f:ac:36:0a:17:cf:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694d3295bace92fbc5407965c65cb65969bad028 Validity Not Before: Dec 21 20:00:54 2025 GMT Not After : Dec 22 20:00:54 2025 GMT Subject: CN=7063084193166c24a420f76ac7c4c9da78ee8334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:84:f6:c9:fe:f1:fb:23:e8:b8:f6:dc:5d: 74:bd:d6:51:5e:9c:30:3f:e4:04:1f:c7:72:1d:d8: cd:98:46:99:6a:6b:35:21:da:bb:94:fa:c5:f0:fc: 99:ad:bc:f8:e3:b5:71:3c:1b:d9:44:07:2c:0e:dc: f0:e1:af:e0:c0:bf:53:db:5b:02:46:d1:93:96:9b: 9f:d4:23:77:76:16:48:d2:6e:9b:a1:ba:b2:e7:ff: 34:52:6a:33:2f:31:77:73:08:c2:d1:f8:75:8b:ee: bd:08:c9:f3:4f:8e:ec:d1:20:77:b1:62:6f:f5:07: d4:76:60:5d:42:54:d3:4d:8e:23:c5:a8:7a:80:c6: 3c:b3:84:e3:5b:72:00:5e:74:95:cf:8c:ed:15:b6: de:f6:ef:8a:6d:a0:90:33:ba:f1:45:6c:6f:b0:a5: 28:f1:3d:b9:61:e3:e1:ff:78:4e:91:99:e6:a7:3b: 09:29:81:8d:76:72:32:4b:af:c4:b8:82:1a:21:c4: 5f:e7:f8:0e:d6:5c:2a:39:2a:e2:4e:6e:78:2d:27: 6f:0a:6e:a9:95:3f:00:4c:40:f5:72:09:93:e6:b3: a6:3d:f1:bd:6f:b2:81:a6:bd:20:8c:27:72:16:1a: 6d:58:fa:9d:94:b8:de:71:f2:97:0d:da:88:3d:ad: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:63:08:41:93:16:6C:24:A4:20:F7:6A:C7:C4:C9:DA:78:EE:83:34 X509v3 Authority Key Identifier: keyid:69:4D:32:95:BA:CE:92:FB:C5:40:79:65:C6:5C:B6:59:69:BA:D0:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU0ylbrOkvvFQHllxly2WWm60Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0ad468-daea-4b04-a408-27e96b9047a8/1/aU0ylbrOkvvFQHllxly2WWm60Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9d:e4:fd:5e:6c:1d:1e:06:28:c9:eb:7a:51:01:6b:88:49: 15:61:e8:b5:2f:c7:2d:3d:92:e2:ff:b1:63:41:c4:c3:6a:22: 7f:2d:4b:54:61:0e:5d:6b:3c:f9:9b:5a:a4:30:b5:0c:2d:c2: 2b:45:6b:4d:34:82:33:c9:c5:31:d9:82:c6:39:fd:75:b3:13: 8a:46:d8:bb:34:ba:70:14:5e:1c:a9:54:26:f6:90:ec:a9:84: f2:f9:a2:83:24:5d:eb:16:d1:17:cd:76:53:cf:6a:a4:ca:4b: 67:27:10:c4:46:42:ae:1f:3f:59:d8:40:19:40:8f:c3:e1:0d: 2d:33:26:27:85:94:db:2b:34:c1:4f:31:9d:e4:4d:d2:5a:7e: 85:26:a6:66:0c:43:29:7a:14:78:cc:96:ba:6c:d6:2a:70:08: b0:4d:04:7d:9c:eb:06:88:21:fb:c2:52:61:3f:67:be:af:f9: c7:0e:13:f5:8c:f3:4a:b4:85:cc:c6:f2:19:99:37:d7:c8:ef: 42:28:ac:79:40:57:f6:64:4c:17:53:ef:08:b2:4d:bb:fd:67: c1:c3:9b:39:59:f8:80:38:56:7f:e9:c8:35:aa:65:c5:b0:e8: 6c:10:3c:d5:66:f4:9e:1d:96:45:22:51:30:eb:50:42:bc:7c: b3:b6:fb:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgCvQMlcTrUlPrDYKF8/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGQzMjk1YmFjZTkyZmJjNTQwNzk2NWM2NWNiNjU5Njli YWQwMjgwHhcNMjUxMjIxMjAwMDU0WhcNMjUxMjIyMjAwMDU0WjAzMTEwLwYDVQQD Eyg3MDYzMDg0MTkzMTY2YzI0YTQyMGY3NmFjN2M0YzlkYTc4ZWU4MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJKE9sn+8fsj6Lj23F10vdZRXpww P+QEH8dyHdjNmEaZams1Idq7lPrF8PyZrbz447VxPBvZRAcsDtzw4a/gwL9T21sC RtGTlpuf1CN3dhZI0m6bobqy5/80UmozLzF3cwjC0fh1i+69CMnzT47s0SB3sWJv 9QfUdmBdQlTTTY4jxah6gMY8s4TjW3IAXnSVz4ztFbbe9u+KbaCQM7rxRWxvsKUo 8T25YePh/3hOkZnmpzsJKYGNdnIyS6/EuIIaIcRf5/gO1lwqOSriTm54LSdvCm6p lT8ATED1cgmT5rOmPfG9b7KBpr0gjCdyFhptWPqdlLjecfKXDdqIPa0YawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBjCEGTFmwkpCD3asfEydp47oM0MB8GA1UdIwQY MBaAFGlNMpW6zpL7xUB5ZcZctllputAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVUweWxick9rdnZGUUhsbHhseTJXV202MENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wYWQ0NjgtZGFlYS00YjA0LWE0MDgt MjdlOTZiOTA0N2E4LzEvYVUweWxick9rdnZGUUhsbHhseTJXV202MENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8wYWQ0NjgtZGFlYS00YjA0LWE0MDgtMjdlOTZiOTA0N2E4 LzEvYVUweWxick9rdnZGUUhsbHhseTJXV202MENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ3k/V5s HR4GKMnrelEBa4hJFWHotS/HLT2S4v+xY0HEw2oify1LVGEOXWs8+ZtapDC1DC3C K0VrTTSCM8nFMdmCxjn9dbMTikbYuzS6cBReHKlUJvaQ7KmE8vmigyRd6xbRF812 U89qpMpLZycQxEZCrh8/WdhAGUCPw+ENLTMmJ4WU2ys0wU8xneRN0lp+hSamZgxD KXoUeMyWumzWKnAIsE0EfZzrBogh+8JSYT9nvq/5xw4T9YzzSrSFzMbyGZk318jv QiiseUBX9mRMF1PvCLJNu/1nwcObOVn4gDhWf+nINaplxbDobBA81Wb0nh2WRSJR MOtQQrx8s7b74Q== -----END CERTIFICATE-----Generated at Mon Dec 22 00:02:19 2025 by rpki-client