This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json) Hash identifier: DeVQJgTkN7ZUPd4HQHOJSQOgtYBN5/EqjRAmQhadIkI= Subject key identifier: 95:09:79:CC:FF:98:51:7D:AB:42:34:03:26:B3:7C:AE:14:B0:27:19 Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863 Certificate serial: 019B443788F7E86EF1D1483AA1336ADCFC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft Manifest number: 0B54 Signing time: Mon 22 Dec 2025 04:00:48 +0000 Manifest this update: Mon 22 Dec 2025 04:00:48 +0000 Manifest next update: Tue 23 Dec 2025 04:00:48 +0000 Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: RfUu3Zqy0Qs3a9Y4RdjGTZhnIZebxu4gORkJp0eQ7hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:88:f7:e8:6e:f1:d1:48:3a:a1:33:6a:dc:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983ea291971990dc486f93812783fadd87ade863 Validity Not Before: Dec 22 04:00:48 2025 GMT Not After : Dec 23 04:00:48 2025 GMT Subject: CN=950979ccff98517dab42340326b37cae14b02719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:38:65:a3:d8:14:be:10:da:d1:b2:c8:37: 39:75:e3:99:0f:fe:11:60:5c:8f:97:a1:a4:6b:fd: f3:c9:6d:41:7c:85:d4:82:a9:06:65:df:d2:c4:8e: 61:cb:43:36:42:77:2a:87:c0:d9:5b:61:3d:de:0b: 6c:7c:76:1a:4a:95:8b:2f:1c:c7:ae:8f:32:ec:d2: 2c:0a:07:ad:ac:18:00:1c:34:58:bf:69:46:62:d6: eb:9f:4a:42:68:db:78:05:8f:f3:69:61:c9:9e:1a: 4c:84:3f:8e:75:e6:85:54:02:90:13:fa:7f:6a:23: b4:c7:f0:10:70:67:3c:6d:b9:f1:e4:ab:a5:b2:86: b3:c3:95:d6:e6:75:29:b0:dc:2d:59:6f:b1:ad:0c: 23:a5:7a:25:19:32:fc:11:76:bf:bb:d4:18:13:e5: 72:81:c3:53:1f:87:08:54:da:6d:88:2d:07:1b:7b: ae:db:38:2b:20:b1:e9:03:21:7d:f0:96:64:83:35: 00:f5:65:0f:b3:ee:10:49:c8:27:e1:44:59:cc:2d: bc:3a:ac:bb:a3:ec:d3:72:9f:f9:1e:79:c3:0b:a2: 45:b0:a1:d4:33:1c:95:f5:1f:09:40:7c:08:12:d0: 3b:22:3d:b2:ba:cf:ae:00:0a:b8:e0:67:15:11:30: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:09:79:CC:FF:98:51:7D:AB:42:34:03:26:B3:7C:AE:14:B0:27:19 X509v3 Authority Key Identifier: keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:35:c1:60:df:4c:c8:25:a9:b0:f3:c8:21:06:8d:41:dd:8f: fa:6e:5b:d7:e8:7d:f0:fd:25:cf:32:7b:f8:c9:92:d2:79:2d: 24:f0:1a:62:fe:c7:98:83:b1:2d:13:14:10:f6:9f:61:d8:4e: 9f:dc:c1:04:fe:48:38:3a:2c:41:bc:6a:97:ed:5e:3b:fb:3a: 8f:d7:6b:95:3b:da:4c:ef:8f:2a:95:5b:2a:53:d4:b8:ec:87: 8b:05:2a:b2:4b:5b:84:eb:e6:f8:d1:98:e6:5e:1e:f8:db:17: eb:05:7b:94:8f:0c:78:25:bf:97:a8:16:57:f9:01:14:fe:e9: 99:e5:2a:18:d2:8a:38:42:5c:22:6a:b1:22:35:80:09:58:42: 7c:78:36:6e:54:52:81:3d:e8:c1:74:e6:1c:01:3f:07:c2:1c: 91:31:85:66:6f:78:93:05:4d:e9:3d:f3:f0:8a:cf:dc:79:99: fe:0c:7c:ef:ac:03:7b:60:46:28:5c:6a:10:ee:f1:a6:ff:3c: dc:3d:f9:2f:17:b2:6b:1d:aa:90:dc:35:67:e7:02:b3:a8:f8: 62:9b:fc:e4:a0:11:7a:df:33:f8:c3:bc:d2:2a:f3:80:ea:24: 8d:82:51:9c:60:8e:66:b6:48:09:28:70:56:e3:ad:8a:25:eb: b5:e0:60:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN4j36G7x0Ug6oTNq3PxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4M2VhMjkxOTcxOTkwZGM0ODZmOTM4MTI3ODNmYWRkODdh ZGU4NjMwHhcNMjUxMjIyMDQwMDQ4WhcNMjUxMjIzMDQwMDQ4WjAzMTEwLwYDVQQD Eyg5NTA5NzljY2ZmOTg1MTdkYWI0MjM0MDMyNmIzN2NhZTE0YjAyNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8g4ZaPYFL4Q2tGyyDc5deOZD/4R YFyPl6Gka/3zyW1BfIXUgqkGZd/SxI5hy0M2Qncqh8DZW2E93gtsfHYaSpWLLxzH ro8y7NIsCgetrBgAHDRYv2lGYtbrn0pCaNt4BY/zaWHJnhpMhD+OdeaFVAKQE/p/ aiO0x/AQcGc8bbnx5Kulsoazw5XW5nUpsNwtWW+xrQwjpXolGTL8EXa/u9QYE+Vy gcNTH4cIVNptiC0HG3uu2zgrILHpAyF98JZkgzUA9WUPs+4QScgn4URZzC28Oqy7 o+zTcp/5HnnDC6JFsKHUMxyV9R8JQHwIEtA7Ij2yus+uAAq44GcVETBaWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUJecz/mFF9q0I0AyazfK4UsCcZMB8GA1UdIwQY MBaAFJg+opGXGZDcSG+TgSeD+t2HrehjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQt YzZlOWUwZmQ3MDgwLzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MmU5OWMtNzRhNy00MTU1LWIyYjQtYzZlOWUwZmQ3MDgw LzEvbUQ2aWtaY1prTnhJYjVPQko0UDYzWWV0NkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTXBYN9M yCWpsPPIIQaNQd2P+m5b1+h98P0lzzJ7+MmS0nktJPAaYv7HmIOxLRMUEPafYdhO n9zBBP5IODosQbxql+1eO/s6j9drlTvaTO+PKpVbKlPUuOyHiwUqsktbhOvm+NGY 5l4e+NsX6wV7lI8MeCW/l6gWV/kBFP7pmeUqGNKKOEJcImqxIjWACVhCfHg2blRS gT3owXTmHAE/B8IckTGFZm94kwVN6T3z8IrP3HmZ/gx876wDe2BGKFxqEO7xpv88 3D35Lxeyax2qkNw1Z+cCs6j4Ypv85KARet8z+MO80irzgOokjYJRnGCOZrZICShw VuOtiiXrteBgAg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:56:52 2025 by rpki-client