This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json) Hash identifier: uTY810T5ZGkyMWcEf83tpVtnEiMzR83PQ3689NL3m8o= Subject key identifier: 87:67:A3:60:9A:51:3E:55:77:17:55:3F:86:67:B0:C9:AD:AA:A9:18 Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03 Certificate serial: 019B330D5C1C1E78A476CCC33A3701D4EC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft Manifest number: 14E2 Signing time: Thu 18 Dec 2025 20:01:12 +0000 Manifest this update: Thu 18 Dec 2025 20:01:12 +0000 Manifest next update: Fri 19 Dec 2025 20:01:12 +0000 Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: hkVA7IYsM70tgUbSaLwjGK3NeSOL2SpdA2n17ScAFsA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:5c:1c:1e:78:a4:76:cc:c3:3a:37:01:d4:ec:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03 Validity Not Before: Dec 18 20:01:12 2025 GMT Not After : Dec 19 20:01:12 2025 GMT Subject: CN=8767a3609a513e557717553f8667b0c9adaaa918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:a6:9d:b4:36:e1:4c:d8:97:b6:1a:03:7b: 4d:6a:40:60:70:a7:2e:55:0c:b9:71:9e:ed:96:b9: 63:53:50:4a:c2:e6:8b:de:5c:fd:3c:7f:0a:8e:2c: e4:62:63:9f:e3:93:1a:3e:cc:15:ef:fd:d5:8e:97: d5:c7:46:0d:40:e3:8d:e7:4a:21:23:67:75:db:2b: cd:3f:e1:7e:3e:01:1f:1c:81:66:df:3a:50:ec:75: 12:fd:e6:ef:c3:55:c8:6c:f6:17:1d:5c:30:09:e0: 16:e5:bd:da:b2:12:df:37:8f:b1:77:ab:e1:25:9d: 53:9a:cb:e4:92:5e:cb:db:de:ab:ef:13:e6:0e:79: fd:15:64:c2:c3:10:77:d5:52:90:44:7c:93:09:42: e1:33:10:24:8a:2f:4f:c5:63:93:ab:72:80:01:95: 7b:3f:64:21:f2:94:f1:06:07:a5:35:1d:cf:d8:60: 70:af:13:8a:60:4c:44:0c:f7:ea:70:e2:d5:fb:95: 60:05:0f:49:34:2e:fb:6d:47:17:46:56:dc:9e:a9: 2f:95:fe:8a:f9:75:a8:92:71:0c:67:ab:2b:fc:04: f2:f2:03:d8:10:b3:68:39:70:ec:d3:8d:6b:e2:40: b1:78:91:af:b3:62:54:b6:47:d8:42:fd:f2:76:41: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:67:A3:60:9A:51:3E:55:77:17:55:3F:86:67:B0:C9:AD:AA:A9:18 X509v3 Authority Key Identifier: keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fa:cd:7d:8f:f3:d9:df:ce:3a:68:ce:d0:5e:69:f4:de:d1: cd:3b:67:ae:d8:a0:b1:d8:f6:1a:ad:91:0f:03:92:86:3d:bb: e1:84:7c:8e:e4:9f:d7:c9:80:08:b6:ca:d6:ef:41:b0:ea:12: 0e:5a:84:1a:a7:a7:8b:86:ab:e0:91:01:97:78:b1:e4:64:97: 98:ee:de:53:28:41:9f:c2:ec:b9:f4:13:7e:5f:37:e5:17:9d: a2:8e:58:68:3e:d5:de:0c:31:8f:87:c2:0a:15:47:87:04:60: f8:12:3a:55:84:fa:f0:36:03:af:bb:34:94:f5:a6:61:85:61: d7:25:bf:ee:38:50:84:2c:e5:b0:dd:3b:be:ce:12:00:72:5a: 21:60:d0:f9:f0:97:92:19:ff:9b:c1:11:55:dd:ca:3a:e7:96: 1d:67:c1:14:05:2c:46:d6:4d:4d:60:5d:40:c2:59:2d:81:a8: 2f:7c:34:e9:f4:bf:b5:1e:3b:b3:0f:df:ca:c9:c3:14:0f:90: ad:80:3e:6d:2c:d2:f3:08:a8:e7:51:57:3f:6e:8c:d2:97:13: 68:03:4c:73:5b:cf:e0:e1:2c:16:5b:63:83:14:1c:ff:16:1a: 0d:5c:2f:df:bc:fd:cb:58:66:b4:66:19:ed:71:5f:58:db:2b: f8:5f:61:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDVwcHnikdszDOjcB1OwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3 MDllMDMwHhcNMjUxMjE4MjAwMTEyWhcNMjUxMjE5MjAwMTEyWjAzMTEwLwYDVQQD Eyg4NzY3YTM2MDlhNTEzZTU1NzcxNzU1M2Y4NjY3YjBjOWFkYWFhOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiamnbQ24UzYl7YaA3tNakBgcKcu VQy5cZ7tlrljU1BKwuaL3lz9PH8KjizkYmOf45MaPswV7/3VjpfVx0YNQOON50oh I2d12yvNP+F+PgEfHIFm3zpQ7HUS/ebvw1XIbPYXHVwwCeAW5b3ashLfN4+xd6vh JZ1Tmsvkkl7L296r7xPmDnn9FWTCwxB31VKQRHyTCULhMxAkii9PxWOTq3KAAZV7 P2Qh8pTxBgelNR3P2GBwrxOKYExEDPfqcOLV+5VgBQ9JNC77bUcXRlbcnqkvlf6K +XWoknEMZ6sr/ATy8gPYELNoOXDs041r4kCxeJGvs2JUtkfYQv3ydkHTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdno2CaUT5VdxdVP4ZnsMmtqqkYMB8GA1UdIwQY MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/rNfY/z 2d/OOmjO0F5p9N7RzTtnrtigsdj2Gq2RDwOShj274YR8juSf18mACLbK1u9BsOoS DlqEGqeni4ar4JEBl3ix5GSXmO7eUyhBn8LsufQTfl835Redoo5YaD7V3gwxj4fC ChVHhwRg+BI6VYT68DYDr7s0lPWmYYVh1yW/7jhQhCzlsN07vs4SAHJaIWDQ+fCX khn/m8ERVd3KOueWHWfBFAUsRtZNTWBdQMJZLYGoL3w06fS/tR47sw/fysnDFA+Q rYA+bSzS8wio51FXP26M0pcTaANMc1vP4OEsFltjgxQc/xYaDVwv37z9y1hmtGYZ 7XFfWNsr+F9hdQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:25:04 2025 by rpki-client