This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json) Hash identifier: KRsmC4fXM7jHABfexKtbKGyt8hsBROYWm1O2pM8Hapw= Subject key identifier: CE:DB:1E:77:96:BF:16:8E:61:45:3E:34:93:D7:55:D6:5D:25:3D:40 Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48 Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48 Certificate serial: 019B2DB00F604FF093A638958B6742878215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft Manifest number: 0331 Signing time: Wed 17 Dec 2025 19:01:11 +0000 Manifest this update: Wed 17 Dec 2025 19:01:11 +0000 Manifest next update: Thu 18 Dec 2025 19:01:11 +0000 Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: S+HWlzRN3NSzN4Br0/5LCZFd022AKFOFu6iE1WALKAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:0f:60:4f:f0:93:a6:38:95:8b:67:42:87:82:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48 Validity Not Before: Dec 17 19:01:11 2025 GMT Not After : Dec 18 19:01:11 2025 GMT Subject: CN=cedb1e7796bf168e61453e3493d755d65d253d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:b5:a7:1b:dd:3e:4e:b0:bb:7b:94:ea:de: 9b:d6:de:fc:c5:e9:a6:4d:a6:ab:39:f4:54:2a:9d: fa:6a:10:b8:b2:32:43:75:ff:13:9f:38:a8:bc:cb: a7:8f:b0:7c:c5:f3:5e:e0:88:4b:ab:23:c4:88:67: 26:a7:19:11:74:f4:b4:a9:9c:f8:ce:38:e5:50:7a: 29:1d:d1:25:16:86:2c:75:37:08:99:c5:43:48:a9: 43:69:94:a4:7c:c0:b7:ea:eb:90:b5:a8:24:b8:ae: cf:df:4b:96:2b:b2:23:79:20:f4:45:63:ce:8d:64: cc:d1:28:4d:cb:0e:32:9f:4f:65:17:b9:26:68:9f: bf:7d:7e:ff:aa:1a:79:84:23:a5:72:8c:38:09:62: a8:f8:e0:2d:70:1e:5b:6e:b7:d4:ae:53:78:89:7c: 9b:20:f8:e4:93:c8:77:65:89:6d:10:b0:80:da:12: be:57:b0:3c:c4:9f:c7:a4:4b:ce:9e:6e:04:35:8a: c8:7a:4b:22:d1:2c:8b:c3:20:39:29:99:e3:25:86: 37:63:8d:84:aa:98:9d:e1:1b:2f:d6:12:a5:29:f7: 49:ef:00:7f:5b:d5:af:42:ba:7d:74:74:c4:c2:e8: 6e:18:07:0b:0d:ec:0f:82:92:8b:59:98:46:01:a0: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DB:1E:77:96:BF:16:8E:61:45:3E:34:93:D7:55:D6:5D:25:3D:40 X509v3 Authority Key Identifier: keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:91:dd:0c:8b:bb:c0:c3:fb:99:38:9e:08:a5:d0:49:76:30: ec:c3:a0:26:bb:61:db:0c:05:19:5d:92:8a:cb:14:c3:3a:b5: 4e:7a:c1:03:11:21:d0:1f:f3:ca:9d:de:0a:5d:9c:9d:a7:97: 71:d7:8e:4e:e4:c3:02:a7:cf:5f:18:02:d8:9e:57:d0:dc:f9: 6e:fe:11:61:86:68:55:99:34:00:d7:e6:ae:21:a7:4f:d8:6c: 82:0a:f8:eb:8a:b1:c2:bb:d6:47:b3:50:81:55:83:8f:5a:6d: f0:4e:d9:13:1d:46:a9:3f:aa:05:f2:e8:46:5f:e1:d3:ba:d6: 41:27:cd:ed:48:69:61:65:b0:11:49:2b:c5:09:5e:9b:01:de: 5e:da:86:1c:f8:d9:32:08:11:ef:b1:fd:18:a2:8a:bc:aa:59: 11:91:53:62:bd:d5:c3:ad:8a:59:f3:6e:27:29:3e:e5:17:b0: 98:4a:25:b8:59:63:88:a6:ba:b3:65:1c:f4:c8:80:fe:16:fd: 0a:71:d3:4d:d2:82:ca:b6:f3:f4:65:2d:0d:5e:06:73:21:bc: 4d:b9:d1:e7:9d:fe:d9:44:67:26:71:23:0e:c4:93:36:21:cc: bd:0f:8b:b5:e5:8b:b7:5f:f2:de:5c:a4:ea:9c:ab:f4:c6:ae: 11:da:0e:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsA9gT/CTpjiVi2dCh4IVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2FiYTZmNzQ0NTVjNGZhM2FiZTIzYWE4MjMwNjdlY2Zj MzNjNDgwHhcNMjUxMjE3MTkwMTExWhcNMjUxMjE4MTkwMTExWjAzMTEwLwYDVQQD EyhjZWRiMWU3Nzk2YmYxNjhlNjE0NTNlMzQ5M2Q3NTVkNjVkMjUzZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGK1pxvdPk6wu3uU6t6b1t78xemm TaarOfRUKp36ahC4sjJDdf8TnziovMunj7B8xfNe4IhLqyPEiGcmpxkRdPS0qZz4 zjjlUHopHdElFoYsdTcImcVDSKlDaZSkfMC36uuQtagkuK7P30uWK7IjeSD0RWPO jWTM0ShNyw4yn09lF7kmaJ+/fX7/qhp5hCOlcow4CWKo+OAtcB5bbrfUrlN4iXyb IPjkk8h3ZYltELCA2hK+V7A8xJ/HpEvOnm4ENYrIeksi0SyLwyA5KZnjJYY3Y42E qpid4Rsv1hKlKfdJ7wB/W9WvQrp9dHTEwuhuGAcLDewPgpKLWZhGAaBYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7bHneWvxaOYUU+NJPXVdZdJT1AMB8GA1UdIwQY MBaAFJh6um90RVxPo6viOqgjBn7PwzxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjIt NmYwMjJhMGU1YWQ5LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjItNmYwMjJhMGU1YWQ5 LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA65HdDIu7 wMP7mTieCKXQSXYw7MOgJrth2wwFGV2SissUwzq1TnrBAxEh0B/zyp3eCl2cnaeX cdeOTuTDAqfPXxgC2J5X0Nz5bv4RYYZoVZk0ANfmriGnT9hsggr464qxwrvWR7NQ gVWDj1pt8E7ZEx1GqT+qBfLoRl/h07rWQSfN7UhpYWWwEUkrxQlemwHeXtqGHPjZ MggR77H9GKKKvKpZEZFTYr3Vw62KWfNuJyk+5RewmEoluFljiKa6s2Uc9MiA/hb9 CnHTTdKCyrbz9GUtDV4GcyG8TbnR553+2URnJnEjDsSTNiHMvQ+LteWLt1/y3lyk 6pyr9MauEdoOUA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:41:51 2025 by rpki-client