This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json) Hash identifier: lf5vps39fgsz4ruEAukOFEYjBhgMvlPZHyHrvCcNnIU= Subject key identifier: 83:0D:0D:39:C5:81:36:40:26:D1:65:1F:15:7A:BC:12:27:6E:5A:F5 Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Certificate serial: 019B4EF209840BFFEE26337DDDF8801E541A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft Manifest number: 1722 Signing time: Wed 24 Dec 2025 06:00:43 +0000 Manifest this update: Wed 24 Dec 2025 06:00:43 +0000 Manifest next update: Thu 25 Dec 2025 06:00:43 +0000 Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: lm0uGw3qxaAcZnjRnMAUxDoLmQ6bzga/KB/URPKog8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:09:84:0b:ff:ee:26:33:7d:dd:f8:80:1e:54:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Validity Not Before: Dec 24 06:00:43 2025 GMT Not After : Dec 25 06:00:43 2025 GMT Subject: CN=830d0d39c581364026d1651f157abc12276e5af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:77:83:ae:e3:c5:d8:98:ce:bf:57:f6:d3: 48:f9:0f:28:f7:b7:24:19:a2:57:8d:a8:f8:34:5d: 97:60:bd:3c:ed:09:87:27:af:a7:9a:fe:68:64:9c: a7:fd:b5:d0:51:3c:74:64:0c:64:04:7e:48:cd:b6: 43:d8:26:46:a3:cb:1b:1e:eb:42:2b:b0:df:ef:e8: 81:a8:90:da:c2:d3:2e:5b:53:f1:31:0d:ac:06:24: b7:35:94:7d:31:39:4a:1a:f5:21:10:bc:a0:03:e5: ea:dc:b9:42:e3:c3:a9:a1:d6:df:b8:b4:f2:dd:90: 12:24:f0:d8:88:52:13:ab:be:cc:d3:12:d0:89:37: 88:08:4d:b5:b5:fe:74:5b:ec:a0:d1:c4:b4:bc:40: 5e:66:f7:4a:d6:c6:79:fe:5b:c2:e6:f0:e6:d8:38: 09:8c:e5:7c:6e:92:61:bb:89:c6:12:f4:a2:98:81: cd:51:ac:20:f7:74:91:2d:0f:32:41:10:ae:ea:c7: c9:7f:76:14:1c:63:6b:32:55:77:a1:35:d9:16:90: ad:4f:9d:07:2b:ff:7b:27:89:47:5b:83:a5:17:1b: 9b:71:b1:b2:83:01:ff:d8:08:fa:e4:82:33:96:59: 92:61:88:25:ea:f9:e6:d3:e7:09:0d:b9:8f:5d:00: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0D:0D:39:C5:81:36:40:26:D1:65:1F:15:7A:BC:12:27:6E:5A:F5 X509v3 Authority Key Identifier: keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ad:03:66:d1:72:50:bd:2e:77:23:2c:3c:cb:bf:6f:8f:6c: d0:d6:2c:eb:27:b6:3c:92:03:86:60:aa:cc:24:09:80:91:6c: 8c:e8:cc:70:cc:59:7d:4d:42:19:c0:9b:b5:d0:bc:e5:a2:71: 56:fd:9e:73:12:85:07:2f:4b:36:31:d7:a1:b8:1f:d7:ce:b1: e2:1b:9a:02:cc:1c:57:0a:b3:a3:08:99:2e:8f:12:83:78:79: 16:ee:af:3f:5a:f5:f4:c7:a2:fb:fb:ff:a3:43:03:ad:06:d8: 49:95:b7:73:16:fa:c6:92:dd:30:1d:be:f7:a3:9e:8d:ed:66: 7f:e2:9c:22:d2:0a:17:93:35:f2:54:b7:3e:95:cd:2c:e2:98: ca:af:dc:6d:e9:f2:a4:07:2f:1e:1b:e7:40:1e:03:73:c4:e2: d8:d9:f2:4d:a0:8f:fd:39:0c:25:99:a8:40:18:53:ed:e6:b6: d5:46:ac:28:a6:98:4f:35:6e:b1:cd:38:08:53:1e:e1:d6:a9: 65:b2:72:1c:01:fa:8c:7b:db:8b:bf:f8:c5:e4:79:71:4c:c5: ed:94:a1:bd:e1:2d:67:bf:6a:8b:07:15:41:bf:0c:df:12:e0: e7:e0:a8:16:d1:35:e0:5c:4a:07:6b:5f:e2:98:2d:98:d9:ee: 6e:ce:b9:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8gmEC//uJjN93fiAHlQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw YzNkY2MwHhcNMjUxMjI0MDYwMDQzWhcNMjUxMjI1MDYwMDQzWjAzMTEwLwYDVQQD Eyg4MzBkMGQzOWM1ODEzNjQwMjZkMTY1MWYxNTdhYmMxMjI3NmU1YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZ3g67jxdiYzr9X9tNI+Q8o97ck GaJXjaj4NF2XYL087QmHJ6+nmv5oZJyn/bXQUTx0ZAxkBH5IzbZD2CZGo8sbHutC K7Df7+iBqJDawtMuW1PxMQ2sBiS3NZR9MTlKGvUhELygA+Xq3LlC48OpodbfuLTy 3ZASJPDYiFITq77M0xLQiTeICE21tf50W+yg0cS0vEBeZvdK1sZ5/lvC5vDm2DgJ jOV8bpJhu4nGEvSimIHNUawg93SRLQ8yQRCu6sfJf3YUHGNrMlV3oTXZFpCtT50H K/97J4lHW4OlFxubcbGygwH/2Aj65IIzllmSYYgl6vnm0+cJDbmPXQC+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMNDTnFgTZAJtFlHxV6vBInblr1MB8GA1UdIwQY MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoa0DZtFy UL0udyMsPMu/b49s0NYs6ye2PJIDhmCqzCQJgJFsjOjMcMxZfU1CGcCbtdC85aJx Vv2ecxKFBy9LNjHXobgf186x4huaAswcVwqzowiZLo8Sg3h5Fu6vP1r19Mei+/v/ o0MDrQbYSZW3cxb6xpLdMB2+96Oeje1mf+KcItIKF5M18lS3PpXNLOKYyq/cbeny pAcvHhvnQB4Dc8Ti2NnyTaCP/TkMJZmoQBhT7ea21UasKKaYTzVusc04CFMe4dap ZbJyHAH6jHvbi7/4xeR5cUzF7ZShveEtZ79qiwcVQb8M3xLg5+CoFtE14FxKB2tf 4pgtmNnubs65xQ== -----END CERTIFICATE-----Generated at Wed Dec 24 13:27:27 2025 by rpki-client