This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json) Hash identifier: McCESmNFGzR9zMGn4dSAYjQ3gmq45DGdKEO4hNwB3zk= Subject key identifier: 62:73:89:E9:F9:B3:4A:B0:64:01:EE:66:C8:90:DB:31:3C:55:28:8B Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Certificate serial: 019AF208BF836FC221041344E451E7640C63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft Manifest number: 145E Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: tWvlCIqTKv3MkPQcvJjlo1sAg6ax7EfP6244nMDQXEA=) 2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bf:83:6f:c2:21:04:13:44:e4:51:e7:64:0c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=627389e9f9b34ab06401ee66c890db313c55288b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5a:ac:a7:4b:dc:28:12:a4:77:be:42:37:73: 5c:8e:07:9f:61:ae:4b:94:20:b8:df:e4:6b:5b:26: 69:a1:c8:42:0b:15:aa:f4:26:2b:a8:57:c5:22:3c: 9d:65:fb:28:54:e8:c6:67:fd:70:65:bf:17:90:ae: 14:8c:58:4e:77:9c:71:d5:ab:9a:a3:12:c9:7b:aa: 8d:62:57:00:c5:cf:42:d8:fa:4e:05:fc:df:c6:a7: b5:17:12:99:de:fc:e8:1f:91:de:ba:40:e7:49:1e: 8e:ed:45:48:95:45:ad:51:37:a3:10:bd:0f:d9:a2: 47:48:0d:15:5c:08:31:33:2a:cc:5c:bd:68:02:62: 3e:94:b9:d1:6d:55:d0:a9:ba:54:88:07:a4:5d:73: 0e:ae:ea:2f:4d:dd:00:fb:80:53:e3:20:2a:06:b7: 74:d3:e0:7a:84:72:87:02:da:72:ed:f8:fa:66:b4: fe:a9:03:91:b9:f8:0e:35:78:56:b5:4d:dc:b8:67: 7e:fa:e0:bf:5e:f0:06:fa:53:e0:b1:25:fc:fb:da: d5:c9:af:f6:b1:b8:12:e1:98:c1:39:e5:e2:23:13: 6c:d1:b5:df:3b:ba:b4:74:de:41:9d:95:5e:8e:ce: bf:04:34:e8:f4:8e:03:2c:3f:44:58:c7:19:59:f6: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:73:89:E9:F9:B3:4A:B0:64:01:EE:66:C8:90:DB:31:3C:55:28:8B X509v3 Authority Key Identifier: keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:53:84:c1:ed:c0:75:c5:34:a1:78:64:32:23:84:12:c7:6f: bb:88:8e:d7:a2:0d:9f:a6:3f:b8:7e:06:b5:50:36:91:59:ea: 14:f4:3d:90:d9:72:aa:75:d4:40:cc:92:fd:99:70:e8:e4:38: 35:29:40:d6:34:b1:3e:b3:ef:61:72:ba:fc:c2:a2:35:84:67: 4e:d2:6c:d3:7e:50:6b:74:7d:96:27:75:7f:26:36:1b:c9:49: 0d:a8:71:17:cd:1f:19:71:09:31:d0:d4:de:d4:d8:a3:61:16: 49:65:d7:3e:12:2a:d1:ba:ac:b2:13:13:28:8f:27:99:d4:df: 95:5a:a0:8f:73:c9:8e:22:47:37:8c:79:d3:40:b6:80:e8:f2: 41:0b:10:39:12:c5:f2:cb:7a:8e:8c:76:39:8d:cf:9a:02:41: c3:3b:e4:72:b0:d9:09:c1:f1:20:4c:3c:28:1e:89:43:4c:5c: 98:d2:45:44:34:14:55:5d:98:04:4d:80:59:c2:8f:a5:bd:49: c5:b4:d9:e2:ba:c9:8c:a8:50:23:81:0a:0e:17:c3:d4:10:fc: e3:6f:e0:0d:0a:46:f3:92:04:1c:fc:98:1e:66:6b:a6:f5:4a: 8e:b0:ac:a0:0e:7a:22:1a:1b:72:e5:8c:bc:ca:a8:c1:03:a4: d2:c1:7c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL+Db8IhBBNE5FHnZAxjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0 ZDBjYTAwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD Eyg2MjczODllOWY5YjM0YWIwNjQwMWVlNjZjODkwZGIzMTNjNTUyODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlqsp0vcKBKkd75CN3NcjgefYa5L lCC43+RrWyZpochCCxWq9CYrqFfFIjydZfsoVOjGZ/1wZb8XkK4UjFhOd5xx1aua oxLJe6qNYlcAxc9C2PpOBfzfxqe1FxKZ3vzoH5HeukDnSR6O7UVIlUWtUTejEL0P 2aJHSA0VXAgxMyrMXL1oAmI+lLnRbVXQqbpUiAekXXMOruovTd0A+4BT4yAqBrd0 0+B6hHKHAtpy7fj6ZrT+qQORufgONXhWtU3cuGd++uC/XvAG+lPgsSX8+9rVya/2 sbgS4ZjBOeXiIxNs0bXfO7q0dN5BnZVejs6/BDTo9I4DLD9EWMcZWfaUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJzien5s0qwZAHuZsiQ2zE8VSiLMB8GA1UdIwQY MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt ZjkyMTI4YmU4Yjc5LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5 LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFOEwe3A dcU0oXhkMiOEEsdvu4iO16INn6Y/uH4GtVA2kVnqFPQ9kNlyqnXUQMyS/Zlw6OQ4 NSlA1jSxPrPvYXK6/MKiNYRnTtJs035Qa3R9lid1fyY2G8lJDahxF80fGXEJMdDU 3tTYo2EWSWXXPhIq0bqsshMTKI8nmdTflVqgj3PJjiJHN4x500C2gOjyQQsQORLF 8st6jox2OY3PmgJBwzvkcrDZCcHxIEw8KB6JQ0xcmNJFRDQUVV2YBE2AWcKPpb1J xbTZ4rrJjKhQI4EKDhfD1BD842/gDQpG85IEHPyYHmZrpvVKjrCsoA56IhobcuWM vMqowQOk0sF8wA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:49 2025 by rpki-client