This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json) Hash identifier: DVgB/CHcKj8R8eDmpkNOp4LEuzWz/GWtu01efM4XCQk= Subject key identifier: 40:50:95:7B:C1:61:5C:49:AB:DC:42:B7:41:FC:A4:FF:EC:5B:67:02 Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec Certificate serial: 019B6768650520FED279209752BD89BB8D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft Manifest number: 023F Signing time: Mon 29 Dec 2025 00:00:53 +0000 Manifest this update: Mon 29 Dec 2025 00:00:53 +0000 Manifest next update: Tue 30 Dec 2025 00:00:53 +0000 Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: 2QY3ZBszbt4ofvt4ehji0J39r96Iv2yXKZP3FD8MkMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:65:05:20:fe:d2:79:20:97:52:bd:89:bb:8d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec Validity Not Before: Dec 29 00:00:53 2025 GMT Not After : Dec 30 00:00:53 2025 GMT Subject: CN=4050957bc1615c49abdc42b741fca4ffec5b6702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:9a:51:ef:d5:76:b6:48:50:d8:4c:03:23: 6e:bf:5a:9f:bc:7e:d0:2f:44:20:5c:5e:b6:95:e0: 43:03:33:9a:0a:cc:69:e4:83:26:33:1b:80:32:65: e6:5b:57:6d:18:58:85:e4:af:d3:cb:91:df:08:ab: f0:8b:e3:d9:92:2a:32:f8:e5:33:45:8d:88:f9:b9: e1:10:b1:b7:c7:e3:30:8b:51:1d:6d:51:30:aa:80: 79:46:6d:11:45:e6:e3:13:f0:2b:db:66:eb:80:ba: c2:5e:c8:c1:ef:91:e2:dc:a7:23:38:37:3c:c0:1d: ae:ca:98:00:4a:7a:0c:bb:22:16:19:6d:47:f8:e1: b5:63:ac:ec:1c:f1:ca:d2:9e:86:a8:b6:9e:80:ae: 31:ba:60:87:0a:a4:29:f0:66:16:ca:f6:77:91:a6: 6b:5a:59:62:09:cd:a7:67:88:12:76:52:d5:30:69: b7:06:eb:1a:d5:a7:32:42:4a:27:27:6a:58:28:2e: 80:e2:5c:4b:e0:93:0a:4a:c1:a4:d2:20:69:40:0b: f7:f0:d1:81:30:4f:c0:c7:69:ef:45:9c:f6:70:37: 66:fb:73:37:ef:3e:c7:f9:74:f6:7f:95:fd:df:01: d5:a6:17:b4:6c:fc:68:f2:a4:65:3d:31:32:66:d5: 8a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:50:95:7B:C1:61:5C:49:AB:DC:42:B7:41:FC:A4:FF:EC:5B:67:02 X509v3 Authority Key Identifier: keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:aa:28:a2:dc:f7:e8:f7:a5:07:fe:1e:c3:ec:ec:90:19:39: 8b:04:7b:b8:58:f8:d2:42:41:99:03:10:35:d9:38:a8:7e:0e: cd:07:f4:59:f2:23:e9:43:c9:da:7c:b1:4b:fa:fa:e1:24:7c: 12:a0:de:e7:a9:81:67:33:96:f9:28:e8:ef:26:a5:9c:ca:ae: 6c:47:9f:dd:29:bb:31:93:39:33:16:6e:21:40:6e:f8:5d:dc: a0:bd:c4:8d:c8:92:75:ca:ae:93:1d:ad:a8:c7:61:93:67:c7: 4f:3c:68:ee:c9:53:8f:47:47:f6:c0:99:34:6e:f1:7d:0e:c4: 20:2e:76:39:9e:9c:25:a9:19:27:75:37:e2:76:49:45:ec:63: 59:ae:80:71:cb:24:a5:56:bd:32:29:a3:04:14:f7:2d:fb:59: d6:d8:28:00:3d:8d:d9:20:cf:35:33:0b:82:2a:c7:59:36:42: 39:f2:fa:71:fb:34:15:d1:32:78:28:97:c1:43:d5:b1:35:1e: c8:2d:7f:99:49:ce:cf:c5:66:41:f6:4a:fd:cb:e7:0e:67:42: 8b:e9:ba:c1:d7:00:07:52:8c:21:51:6d:53:8c:82:0f:8f:58: 00:a6:90:49:3d:dd:a6:c2:63:ab:aa:0b:44:ae:fe:d2:9c:6a: b2:e9:6c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaGUFIP7SeSCXUr2Ju40yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZWYzOWI0MjEwMDVmMzAyYjY5MTBmOTYzOTNmNGI2NTQ3 YThmZWMwHhcNMjUxMjI5MDAwMDUzWhcNMjUxMjMwMDAwMDUzWjAzMTEwLwYDVQQD Eyg0MDUwOTU3YmMxNjE1YzQ5YWJkYzQyYjc0MWZjYTRmZmVjNWI2NzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+CaUe/VdrZIUNhMAyNuv1qfvH7Q L0QgXF62leBDAzOaCsxp5IMmMxuAMmXmW1dtGFiF5K/Ty5HfCKvwi+PZkioy+OUz RY2I+bnhELG3x+Mwi1EdbVEwqoB5Rm0RRebjE/Ar22brgLrCXsjB75Hi3KcjODc8 wB2uypgASnoMuyIWGW1H+OG1Y6zsHPHK0p6GqLaegK4xumCHCqQp8GYWyvZ3kaZr WlliCc2nZ4gSdlLVMGm3Busa1acyQkonJ2pYKC6A4lxL4JMKSsGk0iBpQAv38NGB ME/Ax2nvRZz2cDdm+3M37z7H+XT2f5X93wHVphe0bPxo8qRlPTEyZtWKiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBQlXvBYVxJq9xCt0H8pP/sW2cCMB8GA1UdIwQY MBaAFK7vObQhAF8wK2kQ+WOT9LZUeo/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnU4NXRDRUFYekFyYVJENVk1UDB0bFI2ai13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kMjAzNmEtMjdhNy00Y2RiLWI0ZmUt OTMxMTI3NWYzOGVhLzEvcnU4NXRDRUFYekFyYVJENVk1UDB0bFI2ai13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kMjAzNmEtMjdhNy00Y2RiLWI0ZmUtOTMxMTI3NWYzOGVh LzEvcnU4NXRDRUFYekFyYVJENVk1UDB0bFI2ai13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaoootz3 6PelB/4ew+zskBk5iwR7uFj40kJBmQMQNdk4qH4OzQf0WfIj6UPJ2nyxS/r64SR8 EqDe56mBZzOW+Sjo7yalnMqubEef3Sm7MZM5MxZuIUBu+F3coL3EjciSdcqukx2t qMdhk2fHTzxo7slTj0dH9sCZNG7xfQ7EIC52OZ6cJakZJ3U34nZJRexjWa6Accsk pVa9MimjBBT3LftZ1tgoAD2N2SDPNTMLgirHWTZCOfL6cfs0FdEyeCiXwUPVsTUe yC1/mUnOz8VmQfZK/cvnDmdCi+m6wdcAB1KMIVFtU4yCD49YAKaQST3dpsJjq6oL RK7+0pxqsuls/A== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:27 2025 by rpki-client