This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json) Hash identifier: 2ErhuSQ0KKjguYC1pBwKWMXZ2kZPZmd60futlpedRUQ= Subject key identifier: 37:43:82:87:22:5E:75:C2:6D:6F:44:69:8C:82:21:7B:DB:AD:69:2A Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf Certificate serial: 019AF1D18F6DB5442B7905FD8F9FC89235D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft Manifest number: 0E99 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: PUtF8vQcLuO6JUZeekzIWXLy8RIp2b+5ZY78hs3Bf9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8f:6d:b5:44:2b:79:05:fd:8f:9f:c8:92:35:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=37438287225e75c26d6f44698c82217bdbad692a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:0f:46:be:36:eb:c5:6d:5f:73:68:42:47: 85:a7:40:cb:00:89:4d:b2:b0:b4:bc:e4:e4:30:4f: 75:84:f6:4f:b8:f4:cf:94:43:82:18:f7:1d:b4:b1: f3:fc:b0:52:61:bf:08:61:79:96:db:9a:81:6b:8f: 86:ff:4f:e3:e9:de:6d:65:2c:74:1b:93:07:a9:5a: a8:3b:d4:62:5c:75:13:6a:30:fd:fb:e3:fb:04:0f: 31:e6:75:8d:ec:26:ba:18:45:2f:cb:5c:1c:bf:91: 64:46:97:fa:bc:81:a7:f0:b2:e7:78:6f:44:9a:e9: d7:3e:b0:c3:a9:25:54:c8:01:b3:c9:1b:ee:35:36: 76:af:ce:9a:25:5f:e1:33:e4:ab:e8:c4:5c:19:12: b5:e3:40:ce:b7:5a:01:2a:cc:fb:ed:61:11:e4:0e: e5:67:0c:ad:e6:f3:7a:eb:7b:62:d2:0e:b0:37:87: 2b:b3:e7:0a:fd:8b:7e:b9:cd:79:93:f5:8c:6c:99: ed:2c:70:9c:69:44:a5:c1:a9:dc:8b:ad:4f:26:71: fd:dd:7b:65:71:35:9b:f8:d3:46:2c:50:1a:c4:65: 15:7f:e4:54:bc:bc:fb:54:33:06:fb:b3:bb:a2:42: 6c:bf:4c:6f:2b:6d:d2:2c:eb:c2:83:81:55:5b:4a: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:82:87:22:5E:75:C2:6D:6F:44:69:8C:82:21:7B:DB:AD:69:2A X509v3 Authority Key Identifier: keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:91:b4:cb:a8:44:7c:3f:dd:63:db:04:70:34:94:9d:c5:8e: 4c:3b:8b:87:24:45:37:bb:8a:47:9d:f8:38:93:0e:55:e9:f1: 38:fc:1a:cc:75:57:75:24:26:64:82:d7:3a:85:9a:75:38:6a: ca:9f:e0:a7:99:f9:e3:4d:b5:92:02:55:c6:d7:0b:40:09:69: af:77:55:88:c9:02:b3:97:34:8d:38:53:24:80:87:57:cb:2b: 6c:ba:e1:7b:a4:2a:50:33:0d:0f:cb:77:39:43:7c:07:7e:6a: 7a:58:4f:f5:fd:a5:99:02:c1:12:68:12:70:5b:43:4b:82:3b: fd:79:5c:c4:9c:65:c6:31:83:79:41:fe:7b:e8:d8:12:94:bf: 6a:22:15:d5:7a:52:79:b5:03:b6:04:d3:26:70:2e:4a:ea:7f: 5a:d8:d1:7d:24:dc:d0:4a:e7:cf:74:62:6b:ee:70:0e:a4:f9: 2a:02:77:68:46:e2:43:c8:c2:4a:2a:8d:50:ed:ed:8e:16:9b: 1a:c1:fa:e5:3a:d7:b6:aa:a1:87:6e:d9:eb:17:2f:66:d3:ff: 17:e0:8b:a1:6e:af:06:86:ab:8c:da:89:81:7f:f2:4f:e7:cb: 2e:1e:3a:19:27:89:11:b4:90:bc:46:75:ac:e5:ac:be:ad:75: b9:9b:9b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y9ttUQreQX9j5/IkjXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMWQ1YzIxMmIyODE3NDdjOGMzZWM2ZTg2NmUxNWIzOTRj NWJiZGYwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EygzNzQzODI4NzIyNWU3NWMyNmQ2ZjQ0Njk4YzgyMjE3YmRiYWQ2OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE4PRr4268VtX3NoQkeFp0DLAIlN srC0vOTkME91hPZPuPTPlEOCGPcdtLHz/LBSYb8IYXmW25qBa4+G/0/j6d5tZSx0 G5MHqVqoO9RiXHUTajD9++P7BA8x5nWN7Ca6GEUvy1wcv5FkRpf6vIGn8LLneG9E munXPrDDqSVUyAGzyRvuNTZ2r86aJV/hM+Sr6MRcGRK140DOt1oBKsz77WER5A7l Zwyt5vN663ti0g6wN4crs+cK/Yt+uc15k/WMbJntLHCcaUSlwanci61PJnH93Xtl cTWb+NNGLFAaxGUVf+RUvLz7VDMG+7O7okJsv0xvK23SLOvCg4FVW0onCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdDgociXnXCbW9EaYyCIXvbrWkqMB8GA1UdIwQY MBaAFE4dXCErKBdHyMPsboZuFbOUxbvfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGgxY0lTc29GMGZJdy14dWhtNFZzNVRGdTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNzc1MDMtODJlMy00YzE3LTk2OTkt NzEyZTI3NjFkYWY1LzEvVGgxY0lTc29GMGZJdy14dWhtNFZzNVRGdTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNzc1MDMtODJlMy00YzE3LTk2OTktNzEyZTI3NjFkYWY1 LzEvVGgxY0lTc29GMGZJdy14dWhtNFZzNVRGdTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZG0y6hE fD/dY9sEcDSUncWOTDuLhyRFN7uKR534OJMOVenxOPwazHVXdSQmZILXOoWadThq yp/gp5n54021kgJVxtcLQAlpr3dViMkCs5c0jThTJICHV8srbLrhe6QqUDMND8t3 OUN8B35qelhP9f2lmQLBEmgScFtDS4I7/XlcxJxlxjGDeUH+e+jYEpS/aiIV1XpS ebUDtgTTJnAuSup/WtjRfSTc0Ernz3Ria+5wDqT5KgJ3aEbiQ8jCSiqNUO3tjhab GsH65TrXtqqhh27Z6xcvZtP/F+CLoW6vBoarjNqJgX/yT+fLLh46GSeJEbSQvEZ1 rOWsvq11uZubpA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:48 2025 by rpki-client