This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json) Hash identifier: HPzS3P+3NuU+P6eYtlJWN7NaEE7N9C3iJEUM+rf2qxM= Subject key identifier: CE:49:09:38:DD:2A:0B:B4:D0:68:92:9B:F4:88:B6:EB:A6:10:0B:71 Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c Certificate serial: 019B30E86E9E8C60F122AE1834C050663605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft Manifest number: 1149 Signing time: Thu 18 Dec 2025 10:01:37 +0000 Manifest this update: Thu 18 Dec 2025 10:01:37 +0000 Manifest next update: Fri 19 Dec 2025 10:01:37 +0000 Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: zW5iDsp7/8IkJpjFeD6Tvv6yxGEfVvGUtzQ2dCBkQi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:6e:9e:8c:60:f1:22:ae:18:34:c0:50:66:36:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c Validity Not Before: Dec 18 10:01:37 2025 GMT Not After : Dec 19 10:01:37 2025 GMT Subject: CN=ce490938dd2a0bb4d068929bf488b6eba6100b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:2a:a0:8b:dc:6f:5a:36:c7:df:a8:9e:eb: e3:ed:4d:e5:23:02:0b:9a:d1:c8:e6:94:dd:6c:ed: e3:60:21:2a:a5:e6:15:f3:74:4d:f9:28:46:13:2f: 0d:68:6a:6a:c7:96:bb:18:70:39:8e:33:54:92:4d: 67:1a:31:d0:95:cf:e9:70:d7:39:a9:f3:76:4e:93: b8:25:22:ba:40:a7:78:94:11:85:41:4d:11:8e:8a: 34:20:a5:63:97:01:ab:b5:ec:34:ba:d4:20:c7:82: ee:67:70:4d:2d:00:64:04:72:cd:1e:5d:27:62:11: 1d:a0:ec:c9:6c:c7:1b:8e:0e:c2:50:83:a9:e7:1c: 32:da:d9:e0:4c:04:ea:85:2b:c8:e7:6f:b5:44:0a: 2b:6c:19:ff:59:00:fd:06:b8:6d:f9:eb:e6:cb:31: 54:b9:f4:45:86:bc:72:53:ba:02:ac:53:f4:4a:d7: 72:72:86:51:0f:67:af:4d:b9:90:e4:70:21:15:48: 1d:33:f1:53:59:1a:80:15:05:35:f1:1c:4b:b0:74: af:c7:fb:47:55:a8:d0:13:95:f3:b0:63:f3:ea:5f: 9a:fd:ac:29:89:52:5b:e1:b5:6d:30:14:4a:e5:71: ae:c7:2a:0a:18:0e:28:51:f4:32:f1:69:1e:c7:1a: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:49:09:38:DD:2A:0B:B4:D0:68:92:9B:F4:88:B6:EB:A6:10:0B:71 X509v3 Authority Key Identifier: keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:5e:a9:e8:58:e2:e4:c1:da:95:48:43:c7:4e:36:97:c5:6c: d5:6c:6a:9f:a2:80:98:ad:31:f3:c9:f5:c1:2b:9b:9e:3d:c4: f9:50:d8:53:1f:94:fb:93:ef:02:a4:6a:e5:85:c0:f5:0f:4d: 57:dc:6c:ee:7b:19:6d:7f:83:a9:d4:db:0e:e9:5e:0f:41:b1: c0:f4:a0:a6:67:0e:6f:b9:fe:2d:c9:4d:b2:f1:fb:66:30:27: e6:4f:c3:d8:1b:d0:ad:95:b8:78:e3:46:27:11:0e:cc:89:64: 84:ec:ac:3e:10:7d:ba:9a:70:fe:77:62:31:ca:5d:6d:e6:05: 31:1b:04:e2:6a:e3:04:9b:0a:af:a7:05:99:4e:80:32:05:b1: b7:d0:25:03:b2:46:06:a9:49:e6:f4:54:0d:51:67:12:a1:c1: 89:8a:30:9a:f4:33:a5:9f:62:10:e8:eb:d7:80:68:c9:d3:3e: d2:b9:18:3b:5e:1f:03:13:e3:34:72:4b:01:f8:e2:20:6d:7e: 82:4e:67:d6:6c:6e:fb:20:e5:28:e3:9b:b8:00:2e:82:31:59: b8:cd:56:fc:80:05:f9:63:42:52:fb:a9:fc:95:cf:a5:7d:ab: 77:30:7e:a7:d1:67:14:3d:b0:a8:a6:26:23:44:79:2d:ac:7d: 9c:3e:5b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6G6ejGDxIq4YNMBQZjYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYWRlNmI2MmEzMjdhY2M0MDNmZWVjM2UxYWIxY2I2ZGUy ZDVlMGMwHhcNMjUxMjE4MTAwMTM3WhcNMjUxMjE5MTAwMTM3WjAzMTEwLwYDVQQD EyhjZTQ5MDkzOGRkMmEwYmI0ZDA2ODkyOWJmNDg4YjZlYmE2MTAwYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BMqoIvcb1o2x9+onuvj7U3lIwIL mtHI5pTdbO3jYCEqpeYV83RN+ShGEy8NaGpqx5a7GHA5jjNUkk1nGjHQlc/pcNc5 qfN2TpO4JSK6QKd4lBGFQU0Rjoo0IKVjlwGrtew0utQgx4LuZ3BNLQBkBHLNHl0n YhEdoOzJbMcbjg7CUIOp5xwy2tngTATqhSvI52+1RAorbBn/WQD9Brht+evmyzFU ufRFhrxyU7oCrFP0StdycoZRD2evTbmQ5HAhFUgdM/FTWRqAFQU18RxLsHSvx/tH VajQE5XzsGPz6l+a/awpiVJb4bVtMBRK5XGuxyoKGA4oUfQy8WkexxqaqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5JCTjdKgu00GiSm/SItuumEAtxMB8GA1UdIwQY MBaAFHOt5rYqMnrMQD/uw+GrHLbeLV4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMWFlZjQtOWRjYS00YmMxLWE5ZTct ODc2YjU1NjQzZDA3LzEvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hMWFlZjQtOWRjYS00YmMxLWE5ZTctODc2YjU1NjQzZDA3 LzEvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA16p6Fji 5MHalUhDx042l8Vs1Wxqn6KAmK0x88n1wSubnj3E+VDYUx+U+5PvAqRq5YXA9Q9N V9xs7nsZbX+DqdTbDuleD0GxwPSgpmcOb7n+LclNsvH7ZjAn5k/D2BvQrZW4eONG JxEOzIlkhOysPhB9uppw/ndiMcpdbeYFMRsE4mrjBJsKr6cFmU6AMgWxt9AlA7JG BqlJ5vRUDVFnEqHBiYowmvQzpZ9iEOjr14BoydM+0rkYO14fAxPjNHJLAfjiIG1+ gk5n1mxu+yDlKOObuAAugjFZuM1W/IAF+WNCUvup/JXPpX2rdzB+p9FnFD2wqKYm I0R5Lax9nD5bnA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:47:59 2025 by rpki-client