This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft File: 639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json) Hash identifier: n+xKIQpUBMiwQSXFV87QDiPhcCoQy5ob+CfkWfJB7r4= Subject key identifier: 96:83:C7:8A:D5:19:44:90:F0:40:9C:83:B3:BB:3B:80:03:1D:E5:C0 Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4 Certificate issuer: /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4 Certificate serial: 019AF31C508F1DC38C67C04427A3956E7A03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: RE3nOTdYPvBFfrqJdR9u83U5XxegLkJ43nB6tc0hTCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:50:8f:1d:c3:8c:67:c0:44:27:a3:95:6e:7a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4 Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=9683c78ad5194490f0409c83b3bb3b80031de5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:51:1e:55:27:71:80:52:af:ad:40:86:2a: 3f:61:c8:e7:0e:a2:2d:da:aa:9e:70:d2:5f:37:98: 99:81:1e:1a:20:50:bb:d3:0d:2d:67:12:8c:1f:1c: 9b:ce:62:28:a6:fa:11:f7:9d:00:b0:ef:0c:60:ac: 4d:e2:47:f0:e3:f4:80:ae:db:4f:4b:80:61:69:ce: 8a:d6:7e:d2:4d:10:ad:9c:6e:d0:4a:41:5b:19:68: 9d:80:21:90:87:80:df:cd:40:cc:45:25:02:ae:86: a6:cb:d2:81:7a:d2:18:a8:6e:6d:2c:c3:c3:8b:ad: c1:2f:b4:60:c8:c6:a0:4f:e7:f1:43:c8:d5:bf:4a: 60:00:01:72:cc:c8:29:49:73:a9:3d:50:42:e5:f3: 76:f6:34:8e:ca:fe:66:9a:9f:81:6d:5c:48:01:3e: 36:9d:39:e7:a0:e2:cf:59:a3:e1:a3:88:13:85:f5: 29:38:57:0b:4f:d8:4c:14:3f:ee:d6:4e:bf:96:d8: c4:63:ec:cb:46:37:02:31:24:0b:ea:3f:71:71:f0: ab:df:f4:6b:2e:8d:c9:5e:67:f9:0a:66:a4:70:49: 6b:7e:e0:1f:7e:70:32:3e:13:98:2a:b8:87:49:7c: 62:f3:a4:c9:a3:b2:80:57:c0:21:11:de:7d:88:6e: 37:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:83:C7:8A:D5:19:44:90:F0:40:9C:83:B3:BB:3B:80:03:1D:E5:C0 X509v3 Authority Key Identifier: keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:15:f8:14:32:b4:6a:57:bb:b8:14:6d:08:bc:1d:71:29:fc: 9a:a2:ec:4d:46:29:46:07:6a:98:ab:6d:dd:28:94:71:c6:32: 70:9e:3c:30:96:62:f9:47:e7:a6:63:bb:8a:b0:88:1a:8e:4b: 9d:c1:04:59:ea:44:34:6c:88:e7:67:2a:42:16:b2:60:f3:58: 1f:62:dc:04:9d:39:f3:4e:61:60:0c:68:a6:88:7f:e3:20:c4: 10:c4:9f:f6:21:bb:d5:36:94:31:e5:26:8b:55:a4:8e:7c:ca: ca:e9:69:bb:82:de:51:6a:75:f3:d0:ca:6a:04:b5:9f:74:5e: 3b:b8:af:1b:66:45:b8:07:d8:9b:d9:2b:c5:ce:b6:c6:7a:b0: 31:40:54:a1:9f:2f:39:9b:fb:14:9e:6c:db:de:c8:e3:75:1b: 82:de:14:1d:c1:49:62:0a:9f:43:98:2f:eb:67:4f:12:75:9c: 5b:ad:2a:fa:84:5a:5e:a2:af:55:6a:0a:fa:33:8a:02:7f:71: 00:e8:a9:b5:e6:0d:16:de:b6:a7:2f:d9:31:11:61:f0:6f:0b: b7:a0:f8:54:2d:e9:13:a0:30:b6:8c:5f:99:ae:e6:bb:a9:9c: 86:83:cd:32:23:ac:be:db:06:d5:2a:66:b5:93:92:3a:01:8b: 53:b3:53:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFCPHcOMZ8BEJ6OVbnoDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViN2Y2YjUzZjk4OGI1NzczMjBlZjI4OTMzODBhNWVhODI0 YjZhZTQwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD Eyg5NjgzYzc4YWQ1MTk0NDkwZjA0MDljODNiM2JiM2I4MDAzMWRlNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsxRHlUncYBSr61Ahio/YcjnDqIt 2qqecNJfN5iZgR4aIFC70w0tZxKMHxybzmIopvoR950AsO8MYKxN4kfw4/SArttP S4Bhac6K1n7STRCtnG7QSkFbGWidgCGQh4DfzUDMRSUCroamy9KBetIYqG5tLMPD i63BL7RgyMagT+fxQ8jVv0pgAAFyzMgpSXOpPVBC5fN29jSOyv5mmp+BbVxIAT42 nTnnoOLPWaPho4gThfUpOFcLT9hMFD/u1k6/ltjEY+zLRjcCMSQL6j9xcfCr3/Rr Lo3JXmf5CmakcElrfuAffnAyPhOYKriHSXxi86TJo7KAV8AhEd59iG43VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaDx4rVGUSQ8ECcg7O7O4ADHeXAMB8GA1UdIwQY MBaAFOt/a1P5iLV3Mg7yiTOApeqCS2rkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjIt MDJmMzAxM2Q5MWE5LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mZmFjZWUtMDljYy00MWNiLTkzNjItMDJmMzAxM2Q5MWE5 LzEvNjM5clVfbUl0WGN5RHZLSk00Q2w2b0pMYXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxX4FDK0 ale7uBRtCLwdcSn8mqLsTUYpRgdqmKtt3SiUccYycJ48MJZi+UfnpmO7irCIGo5L ncEEWepENGyI52cqQhayYPNYH2LcBJ05805hYAxopoh/4yDEEMSf9iG71TaUMeUm i1WkjnzKyulpu4LeUWp189DKagS1n3ReO7ivG2ZFuAfYm9krxc62xnqwMUBUoZ8v OZv7FJ5s297I43Ubgt4UHcFJYgqfQ5gv62dPEnWcW60q+oRaXqKvVWoK+jOKAn9x AOipteYNFt62py/ZMRFh8G8Lt6D4VC3pE6Awtoxfma7mu6mchoPNMiOsvtsG1Spm tZOSOgGLU7NT4g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:25 2025 by rpki-client