This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json) Hash identifier: Ya3yCDLIQmlBWubNHCpPLEWuFCUH56OQNIOSdyxE1ro= Subject key identifier: 71:F1:97:A3:22:3D:83:91:D4:98:9D:31:4C:2A:B5:89:3F:FC:9E:CE Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Certificate serial: 019B3343A8CB27D18C52F086752DB1F2FA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft Manifest number: 05A8 Signing time: Thu 18 Dec 2025 21:00:30 +0000 Manifest this update: Thu 18 Dec 2025 21:00:30 +0000 Manifest next update: Fri 19 Dec 2025 21:00:30 +0000 Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: UsDimOG2E4YBPj8bLmdNJ7G+9UIXoEaeQeOhHrr+gTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:a8:cb:27:d1:8c:52:f0:86:75:2d:b1:f2:fa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af Validity Not Before: Dec 18 21:00:30 2025 GMT Not After : Dec 19 21:00:30 2025 GMT Subject: CN=71f197a3223d8391d4989d314c2ab5893ffc9ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:85:4f:c2:7b:b3:16:b5:c7:53:5f:02:4b: e1:bb:8c:53:d9:aa:5d:07:90:c2:ee:87:74:5b:d6: d2:c2:82:c0:12:fd:6a:44:c3:39:62:3f:20:1c:30: 95:91:90:f7:9e:42:c7:54:57:35:2b:ec:22:47:99: ad:ec:39:8c:84:63:b5:d2:58:cf:fe:59:f5:e9:d1: 59:95:15:22:da:2e:0b:6b:91:e0:e8:03:ce:6b:d6: 92:be:99:42:7a:84:2b:94:07:a9:29:93:2a:b6:10: 90:a6:32:e2:b2:be:3f:af:d5:71:75:cb:5e:97:53: b6:39:f6:8e:ce:6c:8e:74:10:cd:78:7c:68:ef:a5: 02:36:14:77:9f:50:06:8f:8c:aa:5e:8e:45:ec:43: 34:85:e1:f5:52:03:0d:08:9c:61:77:ce:ba:5c:e0: aa:d9:7d:d6:4e:8d:15:4e:5c:0c:9f:a6:b6:88:4e: 43:fc:15:c0:83:5e:22:f7:fb:87:3d:2a:2a:00:5f: 1b:17:a0:cc:82:bc:36:a1:7a:e0:6e:76:88:90:90: 69:9a:cf:5a:49:34:f2:46:63:d4:3e:7a:01:31:b8: 01:9d:c2:e9:39:30:12:b9:f6:fe:76:3d:e0:9d:5b: c4:7d:09:9b:95:f1:10:d0:38:5e:42:66:f4:f8:0d: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F1:97:A3:22:3D:83:91:D4:98:9D:31:4C:2A:B5:89:3F:FC:9E:CE X509v3 Authority Key Identifier: keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:30:1a:69:9f:02:57:a9:ff:ac:9b:a1:a8:85:ae:92:ec:dc: 23:34:1b:02:b2:95:39:da:d3:51:ab:d8:fa:ff:2a:a9:19:47: a2:a7:75:d8:0a:4a:8f:27:fc:73:ec:9e:23:d3:9b:7c:0a:75: 38:4c:97:a0:dd:98:f6:5a:88:48:21:fb:3d:4c:31:65:49:63: 8c:11:ec:1f:c8:ac:6a:b5:a0:e8:fb:f0:11:4d:8a:78:4e:cc: da:0a:85:bb:ae:6e:61:27:ed:f1:2c:63:ee:55:18:d9:c9:e9: 86:0f:bb:fb:6e:ab:47:f9:fb:55:51:03:28:bc:b2:85:39:6a: b0:32:87:31:c6:fb:20:3c:0d:d4:88:3f:3c:81:49:4f:98:20: be:8b:ac:e6:0e:b4:65:00:69:71:cf:e6:9f:2d:ad:e7:c2:47: 84:41:90:91:60:da:bd:16:23:7a:fd:4b:e0:ab:67:33:f0:bb: 69:41:9d:2f:96:29:f8:13:d7:8f:71:3c:50:bf:10:a3:4b:e7: 49:03:70:07:3f:11:12:04:b4:e4:2e:12:5c:31:df:9a:39:d1: 3d:bd:2d:fb:85:33:b2:8b:ee:a4:50:1d:9a:45:0e:28:06:64: e0:01:bc:9f:21:5f:9c:b0:6e:19:a4:11:44:be:8d:0a:d5:b4: ae:6b:e0:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ6jLJ9GMUvCGdS2x8vpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3 ZGY3YWYwHhcNMjUxMjE4MjEwMDMwWhcNMjUxMjE5MjEwMDMwWjAzMTEwLwYDVQQD Eyg3MWYxOTdhMzIyM2Q4MzkxZDQ5ODlkMzE0YzJhYjU4OTNmZmM5ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKWFT8J7sxa1x1NfAkvhu4xT2apd B5DC7od0W9bSwoLAEv1qRMM5Yj8gHDCVkZD3nkLHVFc1K+wiR5mt7DmMhGO10ljP /ln16dFZlRUi2i4La5Hg6APOa9aSvplCeoQrlAepKZMqthCQpjLisr4/r9Vxdcte l1O2OfaOzmyOdBDNeHxo76UCNhR3n1AGj4yqXo5F7EM0heH1UgMNCJxhd866XOCq 2X3WTo0VTlwMn6a2iE5D/BXAg14i9/uHPSoqAF8bF6DMgrw2oXrgbnaIkJBpms9a STTyRmPUPnoBMbgBncLpOTASufb+dj3gnVvEfQmblfEQ0DheQmb0+A1cAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHxl6MiPYOR1JidMUwqtYk//J7OMB8GA1UdIwQY MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzAaaZ8C V6n/rJuhqIWukuzcIzQbArKVOdrTUavY+v8qqRlHoqd12ApKjyf8c+yeI9ObfAp1 OEyXoN2Y9lqISCH7PUwxZUljjBHsH8isarWg6PvwEU2KeE7M2gqFu65uYSft8Sxj 7lUY2cnphg+7+26rR/n7VVEDKLyyhTlqsDKHMcb7IDwN1Ig/PIFJT5ggvous5g60 ZQBpcc/mny2t58JHhEGQkWDavRYjev1L4KtnM/C7aUGdL5Yp+BPXj3E8UL8Qo0vn SQNwBz8REgS05C4SXDHfmjnRPb0t+4UzsovupFAdmkUOKAZk4AG8nyFfnLBuGaQR RL6NCtW0rmvg+w== -----END CERTIFICATE-----Generated at Fri Dec 19 03:10:38 2025 by rpki-client