This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json) Hash identifier: JXD8ojWWX7RCSwj/jImCHnpA61QL570u+d3/F4vqHrI= Subject key identifier: 5D:C4:DD:72:DD:7F:43:1C:6F:72:72:8E:47:79:E1:18:49:C6:79:D4 Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53 Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53 Certificate serial: 019B503CBB17AC95A0EB2988D29F9403F736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft Manifest number: 107C Signing time: Wed 24 Dec 2025 12:01:55 +0000 Manifest this update: Wed 24 Dec 2025 12:01:55 +0000 Manifest next update: Thu 25 Dec 2025 12:01:55 +0000 Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: t0w8kGcPRJGx6tuknsMtdAGuEarM2XL670HorhvNvCM=) 2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:bb:17:ac:95:a0:eb:29:88:d2:9f:94:03:f7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53 Validity Not Before: Dec 24 12:01:55 2025 GMT Not After : Dec 25 12:01:55 2025 GMT Subject: CN=5dc4dd72dd7f431c6f72728e4779e11849c679d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:8a:ac:8d:4d:da:7c:60:6d:b8:fa:cd:f6: 73:5f:22:b8:6e:8c:7a:cd:4d:f2:6b:6a:67:61:34: fc:c7:62:06:19:3b:e9:0b:87:e0:17:e6:75:ad:2a: ba:7d:f5:26:48:6e:ee:9c:ac:a0:ba:0d:2a:aa:70: c0:83:c5:ab:02:f4:30:5c:26:13:c0:9b:33:bb:9d: c9:df:ee:ed:8a:e3:43:fd:16:e5:c6:ee:a1:f9:b4: d1:ca:b8:53:91:66:9c:1e:5c:16:e7:9c:f8:9d:39: 37:91:69:74:41:21:d4:2e:27:3f:10:68:ff:4a:f0: bd:11:56:72:c3:1f:a5:96:ab:f2:cb:20:5e:85:2c: 86:fd:e6:c1:45:8f:fd:6d:cd:81:a5:05:88:5c:12: f1:b8:e5:0b:cb:40:90:ad:01:23:b3:1e:33:98:e1: b0:f9:6d:b7:4a:d1:96:42:9d:98:5b:5e:e5:55:7d: 78:9a:f1:dd:d2:ac:ba:45:b5:73:0b:92:8e:3b:48: 2c:0c:d2:20:61:82:01:fd:94:9c:c7:55:32:a7:c4: de:ac:c3:a5:9c:8b:9e:42:48:c6:14:d7:ec:61:28: 94:cf:f2:26:de:d2:d1:ae:87:dc:80:1c:f2:1c:4a: 44:e6:8a:1c:08:95:22:a1:a7:78:1f:fc:0d:3d:48: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C4:DD:72:DD:7F:43:1C:6F:72:72:8E:47:79:E1:18:49:C6:79:D4 X509v3 Authority Key Identifier: keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:62:38:1a:e0:1a:58:14:bf:ea:dd:9d:02:bd:05:93:90:ed: 2e:36:2e:d6:f1:c8:62:af:c1:97:f5:ba:8e:f7:92:3a:f4:f5: 20:13:50:bb:07:e5:44:60:a7:58:6a:2b:30:a0:a8:69:ea:4f: f0:7b:45:1a:5a:65:14:cc:29:b1:33:10:14:34:e8:14:18:99: 30:26:2e:57:f5:54:e5:df:46:62:81:88:84:93:21:c2:e5:4d: b8:64:be:21:95:53:11:18:36:e2:68:af:30:31:64:72:29:6c: ea:0e:cd:c6:f9:1d:cb:e0:28:f1:eb:78:e1:ba:14:f8:75:cd: ae:45:c1:af:52:98:3f:70:0a:4a:ce:d3:76:94:92:ed:31:79: 1a:a2:9e:08:ad:3d:52:9e:9a:f3:c2:a9:c5:d0:10:63:17:3f: ae:a5:5a:dc:28:06:14:b0:54:94:33:c4:ca:45:a6:0c:03:54: 55:00:96:47:0b:d8:1e:49:25:a8:f3:29:39:73:a3:2d:d0:d0: 5d:de:fd:89:f2:1a:5e:b8:95:ec:71:f6:5a:ee:1a:9e:80:53: 5a:24:69:8a:a3:7b:35:e4:87:4b:ae:2b:55:70:30:a3:43:2b: 22:1b:a2:4b:78:3f:4a:24:ef:ea:64:53:ba:e2:3d:ea:68:42: 92:d9:29:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPLsXrJWg6ymI0p+UA/c2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx ODBmNTMwHhcNMjUxMjI0MTIwMTU1WhcNMjUxMjI1MTIwMTU1WjAzMTEwLwYDVQQD Eyg1ZGM0ZGQ3MmRkN2Y0MzFjNmY3MjcyOGU0Nzc5ZTExODQ5YzY3OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva+KrI1N2nxgbbj6zfZzXyK4box6 zU3ya2pnYTT8x2IGGTvpC4fgF+Z1rSq6ffUmSG7unKygug0qqnDAg8WrAvQwXCYT wJszu53J3+7tiuND/Rblxu6h+bTRyrhTkWacHlwW55z4nTk3kWl0QSHULic/EGj/ SvC9EVZywx+llqvyyyBehSyG/ebBRY/9bc2BpQWIXBLxuOULy0CQrQEjsx4zmOGw +W23StGWQp2YW17lVX14mvHd0qy6RbVzC5KOO0gsDNIgYYIB/ZScx1Uyp8TerMOl nIueQkjGFNfsYSiUz/Im3tLRrofcgBzyHEpE5oocCJUioad4H/wNPUjfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3E3XLdf0Mcb3Jyjkd54RhJxnnUMB8GA1UdIwQY MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1 LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGI4GuAa WBS/6t2dAr0Fk5DtLjYu1vHIYq/Bl/W6jveSOvT1IBNQuwflRGCnWGorMKCoaepP 8HtFGlplFMwpsTMQFDToFBiZMCYuV/VU5d9GYoGIhJMhwuVNuGS+IZVTERg24miv MDFkcils6g7Nxvkdy+Ao8et44boU+HXNrkXBr1KYP3AKSs7TdpSS7TF5GqKeCK09 Up6a88KpxdAQYxc/rqVa3CgGFLBUlDPEykWmDANUVQCWRwvYHkklqPMpOXOjLdDQ Xd79ifIaXriV7HH2Wu4anoBTWiRpiqN7NeSHS64rVXAwo0MrIhuiS3g/SiTv6mRT uuI96mhCktkpHQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:42 2025 by rpki-client