This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json) Hash identifier: nPvTz0t2YFdZWYxR09ViKlNIHs1JRjfK0THj0L715eI= Subject key identifier: 36:8F:F8:CB:0D:72:5F:EF:0F:12:A9:8F:CB:0E:4D:3E:2D:C9:2C:C8 Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95 Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95 Certificate serial: 019B66FB9AD4012886F2380AEEAD0975863A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 22:02:03 +0000 Manifest this update: Sun 28 Dec 2025 22:02:03 +0000 Manifest next update: Mon 29 Dec 2025 22:02:03 +0000 Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: 0gDmEHio26XNL9QYGhzjulzu9ItAksMfvji35b3YLfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:9a:d4:01:28:86:f2:38:0a:ee:ad:09:75:86:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95 Validity Not Before: Dec 28 22:02:03 2025 GMT Not After : Dec 29 22:02:03 2025 GMT Subject: CN=368ff8cb0d725fef0f12a98fcb0e4d3e2dc92cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:a1:3b:64:7b:e4:ef:bc:9a:8c:b7:db:3f: 15:70:c8:b6:ff:ef:18:d6:fd:d9:d3:c0:ff:fe:21: 12:3b:11:12:e7:9a:dd:eb:df:1c:0e:57:2f:19:cb: b4:82:70:3b:3c:62:31:b8:ee:8b:23:88:3d:50:49: 3e:d6:3d:0c:b8:9d:95:a8:b5:19:42:00:23:51:78: b1:0b:89:2c:bf:b6:be:ff:75:97:96:a2:63:4d:de: 7b:5a:c6:14:9f:82:4b:6c:a8:54:a8:2a:3f:84:fc: 5b:3c:15:67:4d:0b:fe:ab:f4:d6:61:e1:15:2b:3b: b3:d0:83:64:01:97:3f:53:76:90:1a:71:a0:cd:a2: 38:cb:5a:9e:7e:8b:20:a5:23:dc:a6:ea:9d:8d:a3: be:bd:4c:fb:4b:1d:9e:62:b0:63:d0:58:29:82:59: be:e6:78:75:be:06:87:b2:43:1d:0d:dd:0a:39:f1: 2a:d2:45:0f:57:07:f7:b0:61:ec:5b:84:85:66:7c: 19:f2:be:33:95:c0:b2:ac:da:28:28:91:92:1f:95: 9a:ba:af:ed:3d:97:07:1f:9b:18:7f:3a:84:45:2f: 03:66:ce:96:0f:64:53:cb:3a:a2:f5:b9:e8:5d:21: 34:b2:ce:89:36:b7:e5:29:25:3f:77:9d:f4:ad:e0: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:F8:CB:0D:72:5F:EF:0F:12:A9:8F:CB:0E:4D:3E:2D:C9:2C:C8 X509v3 Authority Key Identifier: keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:09:10:b0:49:f9:da:89:eb:36:c4:9d:a7:f1:77:a2:4d:d7: b9:41:42:af:f1:15:ab:d4:57:5c:7c:e0:15:01:71:11:ba:1b: 7b:b2:fb:1f:f6:5d:06:c5:b0:f1:45:2b:d6:92:ad:bf:2c:ef: 04:c6:26:a1:81:70:48:88:e8:a9:8c:a1:e2:f6:3b:d2:c6:47: 30:a8:08:c6:4d:58:74:63:3d:ca:27:64:26:9f:80:5d:8a:3a: 6a:47:31:8f:3d:04:2a:d7:ab:5f:8c:97:78:0a:0f:d7:57:f0: 21:3e:cc:eb:49:f7:06:10:e5:db:2b:03:71:a1:4d:e4:08:ee: e6:d7:e8:42:c5:5c:42:3d:bc:00:fa:ef:1e:37:7a:dc:6c:91: bc:3f:fc:b9:a3:25:cc:85:ab:ac:42:7b:54:54:fc:c2:ee:d6: 82:96:37:db:56:a9:31:ac:56:4d:ce:bc:5e:8d:16:55:9d:f5: 05:68:07:e5:fd:cc:dd:fd:6a:a8:95:df:76:e4:e8:ff:8d:b0: a0:43:2c:27:42:72:32:42:b9:79:5d:40:28:eb:e2:2f:f1:19: 65:fd:3e:d4:c7:2c:a1:6a:bd:ad:9c:4b:ba:da:29:cd:dc:f8: a5:fe:73:4b:ce:79:b7:d5:43:82:3b:8c:1b:17:d9:eb:f9:d4: e9:fe:69:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+5rUASiG8jgK7q0JdYY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZGYwYTc1YzllZjY4MWI4ZDIzMzY3ZGJlOGVkYWQwNTNm M2JkOTUwHhcNMjUxMjI4MjIwMjAzWhcNMjUxMjI5MjIwMjAzWjAzMTEwLwYDVQQD EygzNjhmZjhjYjBkNzI1ZmVmMGYxMmE5OGZjYjBlNGQzZTJkYzkyY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JGhO2R75O+8moy32z8VcMi2/+8Y 1v3Z08D//iESOxES55rd698cDlcvGcu0gnA7PGIxuO6LI4g9UEk+1j0MuJ2VqLUZ QgAjUXixC4ksv7a+/3WXlqJjTd57WsYUn4JLbKhUqCo/hPxbPBVnTQv+q/TWYeEV Kzuz0INkAZc/U3aQGnGgzaI4y1qefosgpSPcpuqdjaO+vUz7Sx2eYrBj0Fgpglm+ 5nh1vgaHskMdDd0KOfEq0kUPVwf3sGHsW4SFZnwZ8r4zlcCyrNooKJGSH5Wauq/t PZcHH5sYfzqERS8DZs6WD2RTyzqi9bnoXSE0ss6JNrflKSU/d530reAWBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaP+MsNcl/vDxKpj8sOTT4tySzIMB8GA1UdIwQY MBaAFPPfCnXJ72gbjSM2fb6O2tBT872VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODk4S2RjbnZhQnVOSXpaOXZvN2EwRlB6dlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80Y2I3MmItM2Y4Mi00NmQyLWJmMjUt YWI4YWJjYzY5MDE2LzEvODk4S2RjbnZhQnVOSXpaOXZvN2EwRlB6dlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80Y2I3MmItM2Y4Mi00NmQyLWJmMjUtYWI4YWJjYzY5MDE2 LzEvODk4S2RjbnZhQnVOSXpaOXZvN2EwRlB6dlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwkQsEn5 2onrNsSdp/F3ok3XuUFCr/EVq9RXXHzgFQFxEbobe7L7H/ZdBsWw8UUr1pKtvyzv BMYmoYFwSIjoqYyh4vY70sZHMKgIxk1YdGM9yidkJp+AXYo6akcxjz0EKterX4yX eAoP11fwIT7M60n3BhDl2ysDcaFN5Aju5tfoQsVcQj28APrvHjd63GyRvD/8uaMl zIWrrEJ7VFT8wu7WgpY321apMaxWTc68Xo0WVZ31BWgH5f3M3f1qqJXfduTo/42w oEMsJ0JyMkK5eV1AKOviL/EZZf0+1McsoWq9rZxLutopzdz4pf5zS855t9VDgjuM GxfZ6/nU6f5plA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:35 2025 by rpki-client