This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json) Hash identifier: RncYZkUj0qhnuOx6J2MWWdbjMAi0kDdy7t8EGsv5QPI= Subject key identifier: 30:A1:FF:55:5A:25:31:4A:8C:EB:E4:96:4C:AA:89:28:A7:CB:C5:03 Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c Certificate serial: 019AF2774E101FD135A7361D66CBB06ABF46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft Manifest number: 1260 Signing time: Sat 06 Dec 2025 07:01:36 +0000 Manifest this update: Sat 06 Dec 2025 07:01:36 +0000 Manifest next update: Sun 07 Dec 2025 07:01:36 +0000 Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: 3Xu8ky3p70TyLzx8yiwJ3cJzJn6oc4ulAS7YjcEIgqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:4e:10:1f:d1:35:a7:36:1d:66:cb:b0:6a:bf:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c Validity Not Before: Dec 6 07:01:36 2025 GMT Not After : Dec 7 07:01:36 2025 GMT Subject: CN=30a1ff555a25314a8cebe4964caa8928a7cbc503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:d0:4b:5b:24:1a:8c:45:ef:61:74:c0:53: fc:c6:48:56:3c:3f:4f:15:1b:81:23:03:67:49:cb: 92:f5:3d:b6:2c:7b:8e:a6:fc:c1:b5:8b:6c:7b:f9: 5d:9c:32:30:c9:48:fc:39:92:dc:d4:6c:95:60:83: 0c:4f:86:6b:cd:24:42:e7:32:43:a4:23:a7:11:ea: 7e:21:18:66:16:86:9d:9c:f2:48:ba:43:3a:cd:a9: e3:79:f3:52:52:d0:21:e5:f5:78:55:1b:df:f3:b0: 9c:63:06:e0:6f:3a:99:3e:dc:6b:e1:d3:ce:e1:38: 6b:44:5b:cf:98:32:d3:4c:6c:e7:9d:a7:3d:b9:f7: 0c:79:bd:46:98:9f:42:16:e8:92:76:b9:27:5e:9e: dd:e2:06:83:86:3e:6e:99:d8:7a:6b:12:2a:49:29: b2:51:22:04:1d:9e:e0:94:92:d9:44:68:cf:9e:fa: 48:d3:80:2c:43:34:0d:b5:a8:0d:4b:b0:3c:9d:e2: d4:f1:6c:ed:ae:c2:7a:b6:f9:d6:ff:19:6d:9b:7d: 24:1d:ce:81:4b:6c:64:7a:d8:f3:63:47:26:b9:87: 7e:f1:ed:04:86:0b:f0:ab:5d:80:04:79:b1:7c:15: b1:7b:7e:7c:45:45:25:cb:06:90:fd:b0:8d:2f:b6: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A1:FF:55:5A:25:31:4A:8C:EB:E4:96:4C:AA:89:28:A7:CB:C5:03 X509v3 Authority Key Identifier: keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2e:f1:17:87:7b:d8:15:bc:91:c5:c6:06:ca:d7:24:cf:b4: 7e:e4:86:e1:f1:cd:b7:a8:00:ee:eb:69:24:c0:95:99:74:5f: a7:7c:b2:bc:ab:a3:fa:2d:ff:25:40:70:66:da:a9:9e:a6:75: fe:b5:96:10:46:aa:25:1f:bc:40:35:db:ec:48:03:20:ba:35: 53:13:99:9d:24:2b:96:91:38:49:3a:25:89:79:69:9b:33:b5: e6:54:3e:58:a3:65:5f:8e:96:e3:d2:5d:8a:a1:2e:67:c9:e7: 57:4c:d1:ed:a5:dc:a1:d0:35:92:7a:8e:58:54:f8:5a:4f:e7: 0f:48:d9:e3:af:42:d6:11:4e:07:d2:08:bd:99:32:41:d9:f8: b9:b4:b3:88:1a:5d:af:eb:7d:1a:70:04:bb:1f:7c:12:db:e5: 19:8f:45:f3:40:1c:11:d9:e5:aa:d5:ab:88:9d:dd:5b:0d:ef: dd:47:b8:93:70:ac:38:b9:73:c8:04:98:5c:35:bb:dd:bb:49: 72:b1:1f:33:1a:29:c2:f5:a5:2c:66:43:a2:55:7c:21:4e:d5: 97:4f:15:60:89:62:70:31:da:3a:db:ae:65:c2:61:5c:76:51: a0:8c:c7:56:1d:8e:c9:f9:8d:f8:b6:3f:70:25:04:41:5b:73: c6:d7:71:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd04QH9E1pzYdZsuwar9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDUwM2RkNWY2YWQwYTYwZTdiNDAzYTVhNjQyYWRlNDYx OTk2M2MwHhcNMjUxMjA2MDcwMTM2WhcNMjUxMjA3MDcwMTM2WjAzMTEwLwYDVQQD EygzMGExZmY1NTVhMjUzMTRhOGNlYmU0OTY0Y2FhODkyOGE3Y2JjNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVLQS1skGoxF72F0wFP8xkhWPD9P FRuBIwNnScuS9T22LHuOpvzBtYtse/ldnDIwyUj8OZLc1GyVYIMMT4ZrzSRC5zJD pCOnEep+IRhmFoadnPJIukM6zanjefNSUtAh5fV4VRvf87CcYwbgbzqZPtxr4dPO 4ThrRFvPmDLTTGznnac9ufcMeb1GmJ9CFuiSdrknXp7d4gaDhj5umdh6axIqSSmy USIEHZ7glJLZRGjPnvpI04AsQzQNtagNS7A8neLU8WztrsJ6tvnW/xltm30kHc6B S2xketjzY0cmuYd+8e0Ehgvwq12ABHmxfBWxe358RUUlywaQ/bCNL7YNtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCh/1VaJTFKjOvklkyqiSiny8UDMB8GA1UdIwQY MBaAFJNFA91fatCmDntAOlpkKt5GGZY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQt YzZlYTA4ODc1NzM3LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xMTc0MmEtOGNkMC00MjM3LWIyNmQtYzZlYTA4ODc1NzM3 LzEvazBVRDNWOXEwS1lPZTBBNldtUXEza1labGp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy7xF4d7 2BW8kcXGBsrXJM+0fuSG4fHNt6gA7utpJMCVmXRfp3yyvKuj+i3/JUBwZtqpnqZ1 /rWWEEaqJR+8QDXb7EgDILo1UxOZnSQrlpE4SToliXlpmzO15lQ+WKNlX46W49Jd iqEuZ8nnV0zR7aXcodA1knqOWFT4Wk/nD0jZ469C1hFOB9IIvZkyQdn4ubSziBpd r+t9GnAEux98EtvlGY9F80AcEdnlqtWriJ3dWw3v3Ue4k3CsOLlzyASYXDW73btJ crEfMxopwvWlLGZDolV8IU7Vl08VYIlicDHaOtuuZcJhXHZRoIzHVh2OyfmN+LY/ cCUEQVtzxtdx0g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:31 2025 by rpki-client