This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json) Hash identifier: k8DN+gtePHEhRYebb0IpSHdQNQkU1ZzPYHQVMGff6mA= Subject key identifier: 83:12:3C:3E:43:86:D1:1B:14:99:3A:1F:D8:02:9F:3F:0C:C3:80:30 Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03 Certificate serial: 019B76A409F23717BE9F0AB5BD530869980C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft Manifest number: 1505 Signing time: Wed 31 Dec 2025 23:00:20 +0000 Manifest this update: Wed 31 Dec 2025 23:00:20 +0000 Manifest next update: Thu 01 Jan 2026 23:00:20 +0000 Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: mY2rXhf8IXrAJPA2rEWb/ZrT7xu6Lve9oOQ/l4uQNwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:09:f2:37:17:be:9f:0a:b5:bd:53:08:69:98:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03 Validity Not Before: Dec 31 23:00:20 2025 GMT Not After : Jan 1 23:00:20 2026 GMT Subject: CN=83123c3e4386d11b14993a1fd8029f3f0cc38030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fd:39:e4:9c:92:5d:14:f9:bb:71:0c:0a:9d: 0b:a4:77:46:f8:dd:4e:d2:9c:b9:01:6b:0d:8a:4a: 21:aa:c5:e7:31:07:f3:22:97:25:75:66:b6:be:c4: 1a:33:ec:87:f1:63:99:15:f2:68:48:b5:f5:7b:d5: c9:37:b0:58:64:c9:80:50:ce:9b:0f:b9:cb:88:79: 67:e1:f2:73:45:ca:f3:3e:e0:d8:bf:de:69:23:44: 16:ff:1a:bc:ec:a3:ac:2f:ad:38:b8:1c:36:79:0d: 20:2c:71:c7:6a:09:c9:75:cc:85:dc:c2:85:55:1e: 15:19:0e:21:bd:d2:d5:fe:73:0a:1c:6d:90:b9:60: b7:67:21:7d:07:a0:0d:29:bc:0d:52:03:d8:c0:5f: 9d:f2:b1:29:f3:4d:18:64:e9:b6:06:cc:c3:1c:79: 67:e9:f6:d6:5d:17:13:21:e1:55:a5:34:1e:82:b3: b1:bf:20:1b:5c:e7:54:9a:23:e4:61:49:b8:c2:ae: 62:c5:8d:8a:94:97:8b:6d:17:e3:7f:7b:ab:e9:cc: 8f:08:dc:7f:33:64:d5:a0:58:da:ee:33:f4:7e:84: 4b:12:e3:06:54:a4:5b:bf:b4:d4:63:5b:cf:71:0f: 1b:f4:31:20:aa:a3:27:57:71:98:83:5f:11:80:87: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:12:3C:3E:43:86:D1:1B:14:99:3A:1F:D8:02:9F:3F:0C:C3:80:30 X509v3 Authority Key Identifier: keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:50:e3:9b:06:a1:e7:12:70:8b:46:4a:ff:d6:48:b8:35:3d: 2f:79:a1:19:a9:47:cb:18:ad:90:8f:ba:30:9f:a8:08:9a:1d: 6d:a9:cb:48:45:53:01:c2:22:bd:a0:63:73:ac:d1:9b:d1:9e: a2:5c:9c:41:99:f3:b2:87:59:31:5a:26:0f:e0:d7:38:48:6b: ad:2f:91:d3:ed:28:97:f6:f9:44:40:b9:61:5d:7a:7d:e7:26: 5a:dc:49:64:26:fd:83:45:77:e4:44:7d:6a:5d:f4:c6:99:6a: 22:49:f1:41:79:33:e7:57:ed:2b:bf:fb:60:cf:c6:36:48:af: 22:d3:19:35:bb:98:16:a2:0d:a0:19:0f:c7:a5:cc:a4:76:64: 98:8c:79:ee:62:54:c4:e2:64:90:f9:68:3c:b3:e7:12:58:b8: b6:73:fc:b4:9f:79:24:c2:3e:e0:80:d3:f6:09:41:ac:45:7c: ba:2e:f6:b4:a7:9e:ae:2d:3a:a8:ad:24:0c:14:ca:0e:94:d4: 3e:b2:a2:ef:a6:3f:50:61:06:a6:91:04:d9:5c:c9:69:2e:a4: 72:71:19:dc:91:be:6e:85:63:67:10:b5:8f:6c:58:22:7e:5f: c4:f5:39:9c:ff:0a:12:21:39:3c:ac:47:5f:a4:37:d2:b0:88: b0:cb:a6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pAnyNxe+nwq1vVMIaZgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3 MDllMDMwHhcNMjUxMjMxMjMwMDIwWhcNMjYwMTAxMjMwMDIwWjAzMTEwLwYDVQQD Eyg4MzEyM2MzZTQzODZkMTFiMTQ5OTNhMWZkODAyOWYzZjBjYzM4MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/055JySXRT5u3EMCp0LpHdG+N1O 0py5AWsNikohqsXnMQfzIpcldWa2vsQaM+yH8WOZFfJoSLX1e9XJN7BYZMmAUM6b D7nLiHln4fJzRcrzPuDYv95pI0QW/xq87KOsL604uBw2eQ0gLHHHagnJdcyF3MKF VR4VGQ4hvdLV/nMKHG2QuWC3ZyF9B6ANKbwNUgPYwF+d8rEp800YZOm2BszDHHln 6fbWXRcTIeFVpTQegrOxvyAbXOdUmiPkYUm4wq5ixY2KlJeLbRfjf3ur6cyPCNx/ M2TVoFja7jP0foRLEuMGVKRbv7TUY1vPcQ8b9DEgqqMnV3GYg18RgIdPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMSPD5DhtEbFJk6H9gCnz8Mw4AwMB8GA1UdIwQY MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFDjmwah 5xJwi0ZK/9ZIuDU9L3mhGalHyxitkI+6MJ+oCJodbanLSEVTAcIivaBjc6zRm9Ge olycQZnzsodZMVomD+DXOEhrrS+R0+0ol/b5REC5YV16fecmWtxJZCb9g0V35ER9 al30xplqIknxQXkz51ftK7/7YM/GNkivItMZNbuYFqINoBkPx6XMpHZkmIx57mJU xOJkkPloPLPnEli4tnP8tJ95JMI+4IDT9glBrEV8ui72tKeeri06qK0kDBTKDpTU PrKi76Y/UGEGppEE2VzJaS6kcnEZ3JG+boVjZxC1j2xYIn5fxPU5nP8KEiE5PKxH X6Q30rCIsMumAw== -----END CERTIFICATE-----Generated at Thu Jan 1 03:57:20 2026 by rpki-client