This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json) Hash identifier: g+qzpQJNOROCmua2KKIxzEM+zuAWoP4yhJqPzuT6QSY= Subject key identifier: 62:CF:83:0B:A9:FB:4F:02:B1:87:65:6A:C0:6E:CB:8F:CF:3B:21:A1 Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b Certificate serial: 019B2B1E2FC100C24E449A3A60CDBB760E1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft Manifest number: 0D79 Signing time: Wed 17 Dec 2025 07:02:37 +0000 Manifest this update: Wed 17 Dec 2025 07:02:37 +0000 Manifest next update: Thu 18 Dec 2025 07:02:37 +0000 Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: lJ4hS6Pgow02F8TY+U+z6j/lWJX+jE8+51cdIIDlbk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:2f:c1:00:c2:4e:44:9a:3a:60:cd:bb:76:0e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b Validity Not Before: Dec 17 07:02:37 2025 GMT Not After : Dec 18 07:02:37 2025 GMT Subject: CN=62cf830ba9fb4f02b187656ac06ecb8fcf3b21a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:eb:1b:76:94:a5:92:7c:db:2b:fa:f4:55: d6:87:1b:6c:c1:db:5c:15:d5:4e:77:e1:b7:20:ff: 71:53:64:1e:b5:96:17:9a:16:64:84:69:1d:cc:39: 87:c6:95:23:25:a2:94:84:c7:0e:a0:e5:e5:ed:17: ba:bf:07:bd:fb:b0:1a:69:92:8e:59:40:a2:c6:4e: 32:ea:58:9b:30:5a:0b:5d:7a:17:21:e1:15:80:66: cf:f4:f4:ff:80:81:58:75:61:00:d3:f0:db:f7:a1: fa:0e:32:89:ae:4d:ed:5e:e2:9b:7a:9f:be:10:1e: 0c:39:fa:d0:02:c0:ce:a9:56:0f:a1:08:46:b6:ab: e2:cd:e8:a9:ba:3c:d0:42:d5:41:d7:58:23:79:85: ff:74:ae:9d:fd:17:53:21:5e:dd:de:54:44:68:14: e9:e7:5f:8b:c6:18:8b:6a:24:4c:cc:51:47:ec:e3: 8d:5a:fa:95:aa:cb:90:ad:3a:e9:84:57:60:df:d9: 0b:bf:64:54:a2:d9:f5:a3:8c:49:87:bd:c7:d7:3e: 45:65:05:e6:b5:89:f8:03:8d:a8:10:59:c6:22:51: 71:b0:4a:8f:9c:a7:34:59:91:b4:24:5b:3b:c2:be: 2e:1f:d4:90:9d:5a:af:3a:a1:88:81:08:77:ba:8a: d8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CF:83:0B:A9:FB:4F:02:B1:87:65:6A:C0:6E:CB:8F:CF:3B:21:A1 X509v3 Authority Key Identifier: keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:ac:e1:16:a6:b4:f9:99:da:fd:bc:27:a7:ae:65:28:b9: 42:e8:69:15:23:61:28:21:70:c4:2a:69:e2:c9:22:e3:86:28: 91:e1:fa:b7:4d:6c:98:bd:3f:c1:2d:99:4d:ac:9d:f1:3e:42: 07:c0:c0:65:39:25:e1:46:07:12:5c:29:cb:00:dc:d5:49:f6: a0:7e:6b:3a:0c:bc:0f:2c:ea:0d:8b:ec:45:ad:a4:4a:14:c7: 3d:ba:fe:27:b9:b5:3c:cd:c5:6f:47:02:cd:fd:29:67:21:49: 92:a0:3d:4f:aa:76:e3:db:c3:27:d8:34:11:d2:cf:57:f6:6a: 39:d5:59:49:2f:86:3b:b8:89:ab:6b:11:cc:55:a7:8b:5b:2d: 7d:0a:93:3e:4c:d5:38:ec:51:50:8c:41:3a:c1:ca:3b:04:d8: 56:24:06:d2:2a:1f:ad:6a:40:b7:ce:4e:c1:71:72:3c:3e:b7: b1:1c:de:c5:44:29:69:f0:bf:89:47:93:54:6c:25:b1:a3:8e: 67:bd:a4:02:d4:af:7d:af:a6:1b:2a:4d:5d:6a:85:b9:b5:a5: 59:b5:14:2a:f2:31:92:74:cb:d4:94:9d:98:18:87:5b:6e:75: b8:03:2a:8d:0b:47:0b:84:a1:0c:f6:29:8f:31:ea:33:fc:0d: 18:8f:38:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHi/BAMJORJo6YM27dg4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNTBiNDM5ZDQ4OGUxYjFhNjllMzU4NjA5ODYyMTk1NmMw ZWRjN2IwHhcNMjUxMjE3MDcwMjM3WhcNMjUxMjE4MDcwMjM3WjAzMTEwLwYDVQQD Eyg2MmNmODMwYmE5ZmI0ZjAyYjE4NzY1NmFjMDZlY2I4ZmNmM2IyMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLXrG3aUpZJ82yv69FXWhxtswdtc FdVOd+G3IP9xU2QetZYXmhZkhGkdzDmHxpUjJaKUhMcOoOXl7Re6vwe9+7AaaZKO WUCixk4y6libMFoLXXoXIeEVgGbP9PT/gIFYdWEA0/Db96H6DjKJrk3tXuKbep++ EB4MOfrQAsDOqVYPoQhGtqvizeipujzQQtVB11gjeYX/dK6d/RdTIV7d3lREaBTp 51+LxhiLaiRMzFFH7OONWvqVqsuQrTrphFdg39kLv2RUotn1o4xJh73H1z5FZQXm tYn4A42oEFnGIlFxsEqPnKc0WZG0JFs7wr4uH9SQnVqvOqGIgQh3uorY6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLPgwup+08CsYdlasBuy4/POyGhMB8GA1UdIwQY MBaAFOtQtDnUiOGxpp41hgmGIZVsDtx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMt M2E3OTgwMzE0ZWEyLzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMtM2E3OTgwMzE0ZWEy LzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC+s4Ram tPmZ2v28J6euZSi5QuhpFSNhKCFwxCpp4ski44YokeH6t01smL0/wS2ZTayd8T5C B8DAZTkl4UYHElwpywDc1Un2oH5rOgy8DyzqDYvsRa2kShTHPbr+J7m1PM3Fb0cC zf0pZyFJkqA9T6p249vDJ9g0EdLPV/ZqOdVZSS+GO7iJq2sRzFWni1stfQqTPkzV OOxRUIxBOsHKOwTYViQG0iofrWpAt85OwXFyPD63sRzexUQpafC/iUeTVGwlsaOO Z72kAtSvfa+mGypNXWqFubWlWbUUKvIxknTL1JSdmBiHW251uAMqjQtHC4ShDPYp jzHqM/wNGI841Q== -----END CERTIFICATE-----Generated at Wed Dec 17 13:29:03 2025 by rpki-client