This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft File: adSSvj_PjMWoWckEjFD9QL_bd4c.mft (raw, json) Hash identifier: Dk9J/fN9L9yd0mJLx6eXmT8NoNpeZ6MgfbjICeBYemI= Subject key identifier: 69:F6:E7:5F:57:17:27:27:AC:44:48:41:4E:B3:60:9F:24:74:7B:9C Authority key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 Certificate issuer: /CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Certificate serial: 019B4249B82F91AFEC7B4ECC096F8E5305FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft Manifest number: 047C Signing time: Sun 21 Dec 2025 19:01:25 +0000 Manifest this update: Sun 21 Dec 2025 19:01:25 +0000 Manifest next update: Mon 22 Dec 2025 19:01:25 +0000 Files and hashes: 1: adSSvj_PjMWoWckEjFD9QL_bd4c.crl (hash: wl+KNtPFf+ke+QphY9bADS8HQFeJjngvHbvfvLsnS7w=) 2: rvjv-klu4UPy3RgCuDK0uwY_4pQ.roa (hash: VpYiP9YZqNvc2RLGse05pZkEy6ixiDuEG/Kk/ZGHkkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:b8:2f:91:af:ec:7b:4e:cc:09:6f:8e:53:05:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787 Validity Not Before: Dec 21 19:01:25 2025 GMT Not After : Dec 22 19:01:25 2025 GMT Subject: CN=69f6e75f57172727ac4448414eb3609f24747b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:ce:15:c6:96:84:21:fe:a3:89:2a:65:38: 7b:b5:44:b2:2f:24:db:eb:ce:bc:67:00:5c:b5:aa: 37:b4:3e:78:da:3a:33:bd:8f:e2:56:7f:a6:2d:f1: a9:5a:04:fd:69:63:06:41:c4:83:88:78:47:bb:e1: d8:96:06:2d:72:60:ed:37:29:30:c2:eb:28:16:43: 5d:73:d0:5c:53:3f:c5:02:be:f2:a0:a1:a1:87:06: b1:19:b9:dc:04:be:ee:c5:15:13:e1:8b:c2:82:a7: c6:14:de:41:4d:68:bb:e6:e8:16:f4:cb:32:d5:06: 42:f4:88:2c:3e:fc:0e:3e:8a:0d:ee:12:5c:7c:b1: 50:7a:76:ba:ad:f7:81:09:21:88:34:fe:a1:24:ca: 07:ab:01:c3:0b:75:33:9d:fe:e3:7e:3c:88:cc:99: d3:32:5b:d3:c1:ce:df:4d:e7:82:d2:9f:33:6d:e1: c5:cd:5f:ba:b2:dd:da:27:1c:2f:d0:b3:c1:85:63: c3:af:42:0a:2b:4a:29:57:cb:c0:0c:94:c5:df:20: 11:b7:12:b0:22:4b:10:b4:86:0a:27:5f:20:45:5c: 04:e2:04:7a:29:cb:30:54:e7:eb:0d:c4:df:54:ac: 13:c3:41:20:71:84:5b:1c:61:3a:dc:f7:56:85:4e: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F6:E7:5F:57:17:27:27:AC:44:48:41:4E:B3:60:9F:24:74:7B:9C X509v3 Authority Key Identifier: keyid:69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:15:65:0a:51:19:46:b0:e7:c9:41:03:89:a4:0f:13:ce:98: ca:c2:3c:f6:16:ad:8c:3a:80:97:3a:b0:eb:6e:d6:20:ab:2b: 52:08:86:43:d5:05:f4:f2:aa:b0:a7:73:18:13:d2:ec:4a:75: 79:93:65:44:44:92:1c:1a:75:51:ba:0c:eb:d5:b5:d5:a5:d3: 15:15:07:d9:58:09:4d:00:e4:48:f4:9e:ac:b8:de:82:2e:4a: 23:6f:dd:58:af:8b:9c:32:63:87:90:89:2f:3f:56:07:df:92: 7e:e4:56:2a:5d:88:32:54:41:fc:10:ea:e8:97:f0:c3:8e:3a: 37:ee:b7:aa:b7:f8:93:4b:19:07:6b:31:db:be:bf:22:d0:06: 66:d0:da:ec:dd:56:f7:df:8d:1a:8c:6b:9f:50:26:31:a6:8b: 8b:90:dc:b0:7e:a4:24:37:7d:90:7b:ab:0d:00:09:7d:f6:24: 35:ba:b8:38:a7:37:dc:b9:77:4e:48:42:30:d4:8d:e6:95:2a: f1:fb:1a:98:6c:19:1c:66:38:93:2b:f5:69:b8:0c:9e:aa:9d: 64:c7:dd:39:9f:64:f4:18:6b:37:7b:bb:7e:c1:61:8e:0f:01: b8:82:81:f5:99:92:e3:8f:8f:5f:a2:ce:e7:55:da:aa:62:96: 0a:60:87:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSbgvka/se07MCW+OUwX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDQ5MmJlM2ZjZjhjYzVhODU5YzkwNDhjNTBmZDQwYmZk Yjc3ODcwHhcNMjUxMjIxMTkwMTI1WhcNMjUxMjIyMTkwMTI1WjAzMTEwLwYDVQQD Eyg2OWY2ZTc1ZjU3MTcyNzI3YWM0NDQ4NDE0ZWIzNjA5ZjI0NzQ3YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOzOFcaWhCH+o4kqZTh7tUSyLyTb 6868ZwBctao3tD542jozvY/iVn+mLfGpWgT9aWMGQcSDiHhHu+HYlgYtcmDtNykw wusoFkNdc9BcUz/FAr7yoKGhhwaxGbncBL7uxRUT4YvCgqfGFN5BTWi75ugW9Msy 1QZC9IgsPvwOPooN7hJcfLFQena6rfeBCSGINP6hJMoHqwHDC3Uznf7jfjyIzJnT MlvTwc7fTeeC0p8zbeHFzV+6st3aJxwv0LPBhWPDr0IKK0opV8vADJTF3yARtxKw IksQtIYKJ18gRVwE4gR6KcswVOfrDcTfVKwTw0EgcYRbHGE63PdWhU6iRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn2519XFycnrERIQU6zYJ8kdHucMB8GA1UdIwQY MBaAFGnUkr4/z4zFqFnJBIxQ/UC/23eHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUt NTkyMDhiYWJlYjEzLzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iNThkNTEtMWFjZS00OTBlLThjMmUtNTkyMDhiYWJlYjEz LzEvYWRTU3ZqX1BqTVdvV2NrRWpGRDlRTF9iZDRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRVlClEZ RrDnyUEDiaQPE86YysI89hatjDqAlzqw627WIKsrUgiGQ9UF9PKqsKdzGBPS7Ep1 eZNlRESSHBp1UboM69W11aXTFRUH2VgJTQDkSPSerLjegi5KI2/dWK+LnDJjh5CJ Lz9WB9+SfuRWKl2IMlRB/BDq6Jfww446N+63qrf4k0sZB2sx276/ItAGZtDa7N1W 99+NGoxrn1AmMaaLi5DcsH6kJDd9kHurDQAJffYkNbq4OKc33Ll3TkhCMNSN5pUq 8fsamGwZHGY4kyv1abgMnqqdZMfdOZ9k9BhrN3u7fsFhjg8BuIKB9ZmS44+PX6LO 51XaqmKWCmCHXg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:43:00 2025 by rpki-client