This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft File: rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json) Hash identifier: S2Jw49SldoJPPnBNOWPOsni2RqrmFhlIeCWnzFTc4o0= Subject key identifier: 69:68:28:13:6F:EC:6A:3D:BA:2C:24:D3:1D:E9:C4:A9:19:2F:08:F9 Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55 Certificate issuer: /CN=aef97a95e2170275e8c82ee878b6d08deb821e55 Certificate serial: 019B6EB4BDBC62FE5BC97F9FDDAF3C3EBE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft Manifest number: 10C8 Signing time: Tue 30 Dec 2025 10:01:37 +0000 Manifest this update: Tue 30 Dec 2025 10:01:37 +0000 Manifest next update: Wed 31 Dec 2025 10:01:37 +0000 Files and hashes: 1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: g2TyR0Iq+1XPATk3tp4XnLIuaNuXeMUyj5Xcaa/IWmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b4:bd:bc:62:fe:5b:c9:7f:9f:dd:af:3c:3e:be:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55 Validity Not Before: Dec 30 10:01:37 2025 GMT Not After : Dec 31 10:01:37 2025 GMT Subject: CN=696828136fec6a3dba2c24d31de9c4a9192f08f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:99:f4:10:bc:30:db:91:fd:13:3b:3f:cc: 04:c8:9b:48:d1:21:f7:30:27:3e:4a:16:09:48:d6: e9:0a:d2:18:e2:8f:f2:52:ad:91:34:42:e5:c2:77: 1f:9c:f8:cd:3c:0f:85:4e:b2:b1:23:74:b4:47:7a: 1e:c4:4a:cc:4b:03:15:0f:23:0b:c6:b2:aa:82:a7: d0:a3:36:15:54:db:44:7e:7a:43:da:e6:d9:b3:fa: fe:32:a4:a2:61:bf:2d:5c:c5:e3:b2:e6:ee:f2:5b: c7:4d:42:d0:34:4f:fa:0f:1d:00:60:7c:72:e0:f4: b7:c2:9d:ca:58:05:16:90:8d:a8:b6:2d:09:21:3c: a5:f7:25:57:f7:9b:3d:a2:b1:14:19:a8:9e:04:77: 41:5e:4a:35:f9:28:2b:44:0a:6e:bb:ef:b3:1f:b5: fd:3f:17:c2:7c:ca:9b:64:bc:04:9f:ae:53:70:2c: a2:6c:5f:ab:5d:f7:a0:52:cc:40:db:22:d9:e0:03: 85:6b:e8:69:a0:4b:f5:d7:8d:ef:e0:84:e2:74:e2: 4a:48:9a:9d:31:11:74:92:25:d4:08:25:b2:b2:ae: a3:12:8d:ce:09:4b:06:4b:fe:2f:c5:62:c8:7e:f8: 44:ca:53:67:c1:d8:aa:d7:0e:17:ea:d4:cf:09:0f: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:68:28:13:6F:EC:6A:3D:BA:2C:24:D3:1D:E9:C4:A9:19:2F:08:F9 X509v3 Authority Key Identifier: keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e5:79:77:55:81:47:e9:6a:10:db:e3:db:69:21:2a:d1:65: fc:6e:b6:44:d7:aa:72:94:4d:ad:87:6f:1e:d4:a9:93:a0:96: 9c:67:c2:da:8f:4b:4a:0e:56:73:58:2d:e8:ae:f9:67:0a:06: 34:e2:4e:3c:4d:92:dc:e7:22:38:44:81:55:bf:41:6a:b9:71: ca:3b:98:aa:5b:d5:92:ad:6f:45:5c:1a:d4:55:cf:43:99:fc: 23:53:1b:68:e7:c3:88:42:ea:bf:04:2e:0b:e4:c7:b5:ae:49: 65:3e:fa:ee:18:8f:ad:fa:21:60:06:97:e6:6a:ac:7d:e0:6f: 21:68:b3:72:29:33:9a:ac:8a:c8:13:12:b0:5f:69:57:74:49: 96:0d:c4:3c:45:7c:39:44:e8:46:56:8f:f0:f5:ec:c3:93:99: 5f:c2:40:d1:91:6e:eb:fd:c4:ea:f0:31:c5:0b:8e:31:58:64: 8a:70:66:1b:41:b3:d1:49:69:d0:68:95:57:cd:c7:f5:c8:67: a1:48:11:78:5b:3f:2f:fe:6b:35:f7:d4:99:d2:d7:6c:57:e6: 9c:7f:d8:75:69:ac:d8:57:fc:2c:92:f9:f8:3f:fe:91:38:6a: 1b:82:2b:f0:c9:ad:c7:58:3f:9f:b1:1f:eb:d5:71:c2:88:3a: 45:28:f1:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtutL28Yv5byX+f3a88Pr5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZjk3YTk1ZTIxNzAyNzVlOGM4MmVlODc4YjZkMDhkZWI4 MjFlNTUwHhcNMjUxMjMwMTAwMTM3WhcNMjUxMjMxMTAwMTM3WjAzMTEwLwYDVQQD Eyg2OTY4MjgxMzZmZWM2YTNkYmEyYzI0ZDMxZGU5YzRhOTE5MmYwOGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB+Z9BC8MNuR/RM7P8wEyJtI0SH3 MCc+ShYJSNbpCtIY4o/yUq2RNELlwncfnPjNPA+FTrKxI3S0R3oexErMSwMVDyML xrKqgqfQozYVVNtEfnpD2ubZs/r+MqSiYb8tXMXjsubu8lvHTULQNE/6Dx0AYHxy 4PS3wp3KWAUWkI2oti0JITyl9yVX95s9orEUGaieBHdBXko1+SgrRApuu++zH7X9 PxfCfMqbZLwEn65TcCyibF+rXfegUsxA2yLZ4AOFa+hpoEv1143v4ITidOJKSJqd MRF0kiXUCCWysq6jEo3OCUsGS/4vxWLIfvhEylNnwdiq1w4X6tTPCQ8SfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGloKBNv7Go9uiwk0x3pxKkZLwj5MB8GA1UdIwQY MBaAFK75epXiFwJ16Mgu6Hi20I3rgh5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMt MjE0YTlmOTc5YWZjLzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xNjIzMjktNjIyMS00MjA0LTlkOGMtMjE0YTlmOTc5YWZj LzEvcnZsNmxlSVhBblhveUM3b2VMYlFqZXVDSGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOV5d1WB R+lqENvj22khKtFl/G62RNeqcpRNrYdvHtSpk6CWnGfC2o9LSg5Wc1gt6K75ZwoG NOJOPE2S3OciOESBVb9BarlxyjuYqlvVkq1vRVwa1FXPQ5n8I1MbaOfDiELqvwQu C+THta5JZT767hiPrfohYAaX5mqsfeBvIWizcikzmqyKyBMSsF9pV3RJlg3EPEV8 OUToRlaP8PXsw5OZX8JA0ZFu6/3E6vAxxQuOMVhkinBmG0Gz0Ulp0GiVV83H9chn oUgReFs/L/5rNffUmdLXbFfmnH/YdWms2Ff8LJL5+D/+kThqG4Ir8Mmtx1g/n7Ef 69Vxwog6RSjxZw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:28 2025 by rpki-client