This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json) Hash identifier: BICUVsItjLf398B31czkK1HtV3nawaCp3vxhUU6zCWE= Subject key identifier: 87:83:B6:A3:7B:43:E9:CB:97:57:B1:E2:DE:C8:3D:55:9D:42:45:41 Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f Certificate serial: 019B3BD95870CFE277CA81B8AA11E84CD36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft Manifest number: 0CDD Signing time: Sat 20 Dec 2025 13:00:58 +0000 Manifest this update: Sat 20 Dec 2025 13:00:58 +0000 Manifest next update: Sun 21 Dec 2025 13:00:58 +0000 Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: lRj6RcrXOF44uECM/46dq+3aBCmCRS39Qmu6iNgSMng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:58:70:cf:e2:77:ca:81:b8:aa:11:e8:4c:d3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f Validity Not Before: Dec 20 13:00:58 2025 GMT Not After : Dec 21 13:00:58 2025 GMT Subject: CN=8783b6a37b43e9cb9757b1e2dec83d559d424541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:85:d1:7f:a0:a3:a2:04:96:fa:bf:f3:e6:33: d7:76:04:1a:47:ac:ff:b7:76:4b:bf:96:3d:ce:b3: 2e:40:86:6b:8c:98:7c:b3:a5:d9:96:fa:ba:f3:3e: 1c:a4:06:53:53:a6:7d:d7:b8:8b:c0:45:31:0e:8e: b3:3a:6e:f7:b9:6f:2a:71:30:16:39:02:d8:4b:0c: f1:90:fa:26:e5:70:41:b2:4e:ac:24:5f:e9:cf:48: 52:b1:0c:ec:2a:26:88:cb:c1:3a:a9:32:fd:fc:ff: 7d:fd:c7:0c:45:5c:33:96:26:53:24:c1:79:3a:c7: 5b:27:36:9f:ba:49:fe:bb:96:d8:2c:30:c5:11:52: 08:52:f4:8d:bf:f0:21:64:c9:d2:e3:a4:40:b6:d0: 5f:ae:80:7d:fe:4d:d8:69:03:76:31:fc:a7:54:0a: f0:cb:1e:60:a8:17:95:af:16:c0:6c:b1:6e:96:81: b3:ec:5b:f6:93:38:b6:24:9d:e1:21:89:12:35:e1: 74:da:b5:73:49:7a:51:7b:69:a4:1d:65:d2:01:45: 31:75:c2:23:5f:4a:ab:2e:a1:e2:cd:ed:da:0c:2d: 1a:f9:ff:cc:c5:72:4b:a8:63:1d:dd:a0:89:67:ed: e2:03:fd:3c:1e:d0:f1:aa:78:4b:ec:c5:e2:1d:99: 73:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:83:B6:A3:7B:43:E9:CB:97:57:B1:E2:DE:C8:3D:55:9D:42:45:41 X509v3 Authority Key Identifier: keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ea:22:61:ed:4d:ad:ba:9f:60:c1:1e:6e:09:5b:8d:a3:e6: 4b:62:7a:59:0d:ef:e9:e8:65:7f:1c:b1:19:55:3e:c0:07:88: e3:b8:b4:f0:f5:90:d9:f9:d6:28:d9:b1:dc:e9:6a:a7:6c:80: c1:de:24:52:3f:00:2c:a5:ec:4e:a3:ed:2e:6d:3a:fa:f0:da: b9:d0:04:af:58:f2:68:6c:4d:af:66:89:51:06:c3:96:ae:99: 7f:0c:23:c5:6f:84:de:95:e1:43:6b:fe:0b:93:3b:45:27:ed: ae:e8:8a:58:0e:6b:09:19:05:6a:c5:ee:60:fa:5e:97:21:38: 0a:2a:b9:ea:46:48:e0:4c:2b:df:f1:2a:43:b8:25:39:55:5b: f4:8c:9d:47:3b:39:15:be:6e:5c:ee:5c:99:88:57:14:1d:b3: 7b:7f:7a:1a:3a:69:f1:21:72:b4:fe:c9:3a:eb:f0:bf:e6:f0: 3f:c7:be:bf:30:be:24:dc:75:67:7f:37:39:87:c6:e5:e5:17: da:de:b2:1d:32:e4:e0:c0:00:5a:42:42:5c:4f:2b:c9:bd:3b: 48:ce:73:a8:79:7b:e7:9e:7f:ea:0b:50:73:a9:98:ed:c7:fd: 73:a3:10:98:84:c0:cd:3e:45:36:69:d0:1e:06:72:13:87:be: c5:c3:08:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Vhwz+J3yoG4qhHoTNNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmIwMWRkYzUxZDkyNzQyYzNjYzRhMmIzMWRjN2ZjMTgz YmU1N2YwHhcNMjUxMjIwMTMwMDU4WhcNMjUxMjIxMTMwMDU4WjAzMTEwLwYDVQQD Eyg4NzgzYjZhMzdiNDNlOWNiOTc1N2IxZTJkZWM4M2Q1NTlkNDI0NTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IXRf6CjogSW+r/z5jPXdgQaR6z/ t3ZLv5Y9zrMuQIZrjJh8s6XZlvq68z4cpAZTU6Z917iLwEUxDo6zOm73uW8qcTAW OQLYSwzxkPom5XBBsk6sJF/pz0hSsQzsKiaIy8E6qTL9/P99/ccMRVwzliZTJMF5 OsdbJzafukn+u5bYLDDFEVIIUvSNv/AhZMnS46RAttBfroB9/k3YaQN2MfynVArw yx5gqBeVrxbAbLFuloGz7Fv2kzi2JJ3hIYkSNeF02rVzSXpRe2mkHWXSAUUxdcIj X0qrLqHize3aDC0a+f/MxXJLqGMd3aCJZ+3iA/08HtDxqnhL7MXiHZlzBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeDtqN7Q+nLl1ex4t7IPVWdQkVBMB8GA1UdIwQY MBaAFK9rAd3FHZJ0LDzEorMdx/wYO+V/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAt MjljYTE2NTc2ZWRlLzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zN2EwMDItMjA3MS00NGVjLWJmNTAtMjljYTE2NTc2ZWRl LzEvcjJzQjNjVWRrblFzUE1TaXN4M0hfQmc3NVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+oiYe1N rbqfYMEebglbjaPmS2J6WQ3v6ehlfxyxGVU+wAeI47i08PWQ2fnWKNmx3Olqp2yA wd4kUj8ALKXsTqPtLm06+vDaudAEr1jyaGxNr2aJUQbDlq6ZfwwjxW+E3pXhQ2v+ C5M7RSftruiKWA5rCRkFasXuYPpelyE4Ciq56kZI4Ewr3/EqQ7glOVVb9IydRzs5 Fb5uXO5cmYhXFB2ze396Gjpp8SFytP7JOuvwv+bwP8e+vzC+JNx1Z383OYfG5eUX 2t6yHTLk4MAAWkJCXE8ryb07SM5zqHl7555/6gtQc6mY7cf9c6MQmITAzT5FNmnQ HgZyE4e+xcMImw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:39 2025 by rpki-client