This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft File: biYdnc3dmGfliSrRpNII32lTEXc.mft (raw, json) Hash identifier: a+jrECJexYz+VvWC8fALt2fnLt1jQ9Q4q91mXYU9MNs= Subject key identifier: A1:90:E8:B2:DE:5A:53:41:D8:40:97:32:DF:BF:48:61:8E:8A:D6:ED Authority key identifier: 6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77 Certificate issuer: /CN=6e261d9dcddd9867e5892ad1a4d208df69531177 Certificate serial: 019B5598F8942024213B82D5A270032E43E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft Manifest number: 0FF1 Signing time: Thu 25 Dec 2025 13:00:47 +0000 Manifest this update: Thu 25 Dec 2025 13:00:47 +0000 Manifest next update: Fri 26 Dec 2025 13:00:47 +0000 Files and hashes: 1: biYdnc3dmGfliSrRpNII32lTEXc.crl (hash: Ia0QCNWiIYjeOYaQlccr5GzFuerX8gO3cYVXryB6xA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:98:f8:94:20:24:21:3b:82:d5:a2:70:03:2e:43:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e261d9dcddd9867e5892ad1a4d208df69531177 Validity Not Before: Dec 25 13:00:47 2025 GMT Not After : Dec 26 13:00:47 2025 GMT Subject: CN=a190e8b2de5a5341d8409732dfbf48618e8ad6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:81:9f:f3:7a:d4:70:40:44:24:63:4c:c9: f2:3f:e6:43:3b:9f:bb:cb:c8:e7:cf:61:b3:f6:d7: cc:50:af:10:88:64:d4:05:72:c4:e3:a9:a9:51:61: a5:bf:e1:64:7e:f9:51:38:0f:c8:df:cf:8b:bc:78: f7:2c:c3:eb:94:05:03:32:00:31:0e:b7:cf:d4:ec: 58:2a:7a:cc:25:ad:bf:a7:6c:27:a2:27:96:5d:66: 4a:8a:4c:4b:84:91:03:15:53:31:a1:80:97:ff:27: 51:28:f0:d0:f0:13:ab:c7:75:81:16:db:e6:cc:06: 4c:69:f9:5c:04:f8:0a:e3:d6:81:94:47:f7:61:3c: d3:1c:31:27:fa:f9:2e:0b:8e:3a:ee:9b:d8:ef:7d: 5b:b1:a8:65:a6:87:d5:18:c8:34:52:db:3f:86:56: ba:ca:5a:be:df:74:d8:b4:20:89:f2:e0:b0:4c:21: de:db:1e:5b:02:0a:80:f5:d0:46:88:f0:34:f0:1f: 8b:46:df:af:2e:85:be:9a:a5:f6:2e:74:2c:b7:f1: 7a:ab:9b:22:9d:b1:ef:3b:d3:be:90:72:59:e1:f7: 83:8c:ed:a5:c9:0b:84:b3:da:f5:9f:84:97:bc:53: ba:cc:5b:13:60:75:b7:4d:e0:e2:82:ee:9c:38:81: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:90:E8:B2:DE:5A:53:41:D8:40:97:32:DF:BF:48:61:8E:8A:D6:ED X509v3 Authority Key Identifier: keyid:6E:26:1D:9D:CD:DD:98:67:E5:89:2A:D1:A4:D2:08:DF:69:53:11:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biYdnc3dmGfliSrRpNII32lTEXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7f52d8-c2ca-4a7f-bd63-fba565238129/1/biYdnc3dmGfliSrRpNII32lTEXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:99:ab:cc:04:dd:cf:bc:fd:a6:a5:9e:49:4f:81:08:ee:f5: 14:d6:d6:35:22:a4:fe:5e:00:8b:0c:02:4a:b3:5e:88:bd:ee: 38:c2:c1:73:ea:86:00:6c:54:a1:4d:7c:84:0c:92:92:aa:9a: 84:c0:b4:86:a4:8b:f3:f4:1a:44:84:0d:df:66:ba:35:de:e0: c6:b8:05:c5:92:92:34:0c:15:f5:4d:ac:44:b1:6a:94:07:bf: 01:ce:05:c4:27:e5:31:c1:15:35:d8:bd:7c:6e:65:35:f0:44: 70:f7:84:03:c1:9a:b3:c0:fa:a3:34:4d:f5:5d:26:21:c0:0c: c8:12:33:cd:13:39:59:8b:ce:97:67:b7:79:65:83:d9:b3:4f: 38:90:3c:b0:9c:a3:db:c7:a6:b6:2f:e3:87:6b:a9:50:df:bd: 70:49:28:85:e4:50:b3:a1:9b:fd:cb:9c:cf:c5:89:a0:ae:17: 91:43:95:83:58:d5:16:ec:f8:29:7b:df:28:66:53:31:75:86: 5e:9e:03:ba:b6:42:70:58:2e:5d:10:2b:e7:b1:c2:d2:0c:d1: c7:9c:cb:2b:f9:ff:62:90:f0:c2:ad:6e:7e:93:43:06:bf:08: ae:2d:2c:50:10:d7:41:60:ab:75:e4:f2:63:9f:92:08:ce:c0: 8b:56:a5:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmPiUICQhO4LVonADLkPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMjYxZDlkY2RkZDk4NjdlNTg5MmFkMWE0ZDIwOGRmNjk1 MzExNzcwHhcNMjUxMjI1MTMwMDQ3WhcNMjUxMjI2MTMwMDQ3WjAzMTEwLwYDVQQD EyhhMTkwZThiMmRlNWE1MzQxZDg0MDk3MzJkZmJmNDg2MThlOGFkNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5OBn/N61HBARCRjTMnyP+ZDO5+7 y8jnz2Gz9tfMUK8QiGTUBXLE46mpUWGlv+FkfvlROA/I38+LvHj3LMPrlAUDMgAx DrfP1OxYKnrMJa2/p2wnoieWXWZKikxLhJEDFVMxoYCX/ydRKPDQ8BOrx3WBFtvm zAZMaflcBPgK49aBlEf3YTzTHDEn+vkuC4467pvY731bsahlpofVGMg0Uts/hla6 ylq+33TYtCCJ8uCwTCHe2x5bAgqA9dBGiPA08B+LRt+vLoW+mqX2LnQst/F6q5si nbHvO9O+kHJZ4feDjO2lyQuEs9r1n4SXvFO6zFsTYHW3TeDigu6cOIFStwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGQ6LLeWlNB2ECXMt+/SGGOitbtMB8GA1UdIwQY MBaAFG4mHZ3N3Zhn5Ykq0aTSCN9pUxF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmlZZG5jM2RtR2ZsaVNyUnBOSUkzMmxURVhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83ZjUyZDgtYzJjYS00YTdmLWJkNjMt ZmJhNTY1MjM4MTI5LzEvYmlZZG5jM2RtR2ZsaVNyUnBOSUkzMmxURVhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83ZjUyZDgtYzJjYS00YTdmLWJkNjMtZmJhNTY1MjM4MTI5 LzEvYmlZZG5jM2RtR2ZsaVNyUnBOSUkzMmxURVhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuZmrzATd z7z9pqWeSU+BCO71FNbWNSKk/l4AiwwCSrNeiL3uOMLBc+qGAGxUoU18hAySkqqa hMC0hqSL8/QaRIQN32a6Nd7gxrgFxZKSNAwV9U2sRLFqlAe/Ac4FxCflMcEVNdi9 fG5lNfBEcPeEA8Gas8D6ozRN9V0mIcAMyBIzzRM5WYvOl2e3eWWD2bNPOJA8sJyj 28emti/jh2upUN+9cEkoheRQs6Gb/cucz8WJoK4XkUOVg1jVFuz4KXvfKGZTMXWG Xp4DurZCcFguXRAr57HC0gzRx5zLK/n/YpDwwq1ufpNDBr8Iri0sUBDXQWCrdeTy Y5+SCM7Ai1alpw== -----END CERTIFICATE-----Generated at Thu Dec 25 22:14:13 2025 by rpki-client