This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json) Hash identifier: HnDBZB+MFKKbwxRg4m/YvicFPemyFLBPL2dL4HA/cYQ= Subject key identifier: 46:58:C4:16:84:01:CD:D8:84:17:7B:A7:20:56:DD:2A:D0:1A:A6:9E Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2 Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2 Certificate serial: 019AF19A92A09D222FD71D897FF5834D0BBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft Manifest number: 0A9E Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: EUMl6oTW+HcdEz8gSij/K5eFf6Wi3zSA8EC5edhRu9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:92:a0:9d:22:2f:d7:1d:89:7f:f5:83:4d:0b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2 Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=4658c4168401cdd884177ba72056dd2ad01aa69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:ce:1e:8f:c4:89:00:06:6e:99:5d:17:b0: 41:e5:cd:93:e6:4a:e3:8f:ba:d1:82:47:9e:ce:03: 24:86:bb:c7:5e:92:b7:2a:d9:97:ab:57:82:ec:5a: eb:12:a0:43:32:a2:2a:09:2c:01:c9:ff:33:73:0f: be:94:4f:17:93:78:9d:25:2c:68:c1:08:c2:32:c7: 26:53:6c:20:92:ee:9b:27:30:15:89:02:0b:7b:ef: d5:b4:0a:90:8c:53:89:da:4a:be:00:a7:8e:1c:9d: cf:86:71:5a:61:18:19:0b:77:91:1d:45:f4:f1:22: 9a:78:b2:05:54:3a:6b:7e:dc:ff:5d:d6:bb:b7:42: b7:c5:2b:6c:e6:65:d5:07:0e:ce:06:1f:05:e9:f3: 0d:c6:21:de:28:8d:eb:95:5a:68:08:77:99:e6:94: 5a:9f:95:38:57:c2:87:a5:01:40:fa:3a:96:31:0c: 39:eb:6e:78:8c:fd:d9:16:04:3d:ef:c7:2b:0e:0d: 8f:a4:5b:91:31:d6:a8:4a:45:2b:62:3d:ac:63:23: 5a:87:3b:9e:97:f1:5e:d9:b7:7f:2d:2d:06:81:67: 8b:66:ca:ef:03:cb:4f:26:19:80:b9:42:c6:51:af: 08:84:50:46:6e:21:c5:3b:6f:63:df:06:74:51:3b: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:58:C4:16:84:01:CD:D8:84:17:7B:A7:20:56:DD:2A:D0:1A:A6:9E X509v3 Authority Key Identifier: keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e6:2e:5a:99:40:6d:2c:c5:d8:3e:92:fe:f4:fb:1e:ae:48: 5f:39:5d:ed:f6:83:90:5f:58:51:d7:4e:20:0c:29:17:e6:a0: ec:d6:41:54:32:11:2c:bb:a5:d2:df:31:0a:bb:52:96:e8:3e: 99:e8:fe:cd:30:0e:76:05:7c:52:e5:65:e1:d1:c3:42:cb:0a: 7d:e3:11:c4:8a:31:69:84:e9:fe:44:95:03:5a:d2:94:ac:fd: 67:d2:f8:4e:fc:d8:50:dc:ad:75:82:99:a6:23:4f:37:93:3d: 69:f7:29:5d:3e:3d:00:b6:f7:36:09:b3:b6:80:58:e1:57:6e: ea:d9:84:1b:f1:f8:f9:e2:bc:a2:b6:65:e4:3e:08:c6:34:9f: 3f:ec:81:a1:5f:b9:61:84:4f:ff:a9:f8:6b:fa:32:d7:ca:fc: c7:61:38:78:05:78:69:99:3f:10:84:04:6f:e5:7c:76:d0:5e: d6:2a:ea:8e:2c:2a:e3:27:e6:74:a7:71:48:ec:c3:e2:84:43: 35:46:75:36:41:25:61:fa:14:3b:b5:81:1d:6b:34:07:e1:dc: de:f0:09:76:c0:dd:bd:ed:d4:c2:8b:9a:8b:dd:6d:3b:ed:e4: c1:0e:f8:8f:e0:5e:d4:96:ac:cc:bd:c7:01:54:96:49:29:e7: 4a:57:33:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpKgnSIv1x2Jf/WDTQu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNDJiNGRhMGFlYTU3OGNhMjdmMjVkZWIwY2ZlZDYxYTgw YjllYTIwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD Eyg0NjU4YzQxNjg0MDFjZGQ4ODQxNzdiYTcyMDU2ZGQyYWQwMWFhNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth3OHo/EiQAGbpldF7BB5c2T5krj j7rRgkeezgMkhrvHXpK3KtmXq1eC7FrrEqBDMqIqCSwByf8zcw++lE8Xk3idJSxo wQjCMscmU2wgku6bJzAViQILe+/VtAqQjFOJ2kq+AKeOHJ3PhnFaYRgZC3eRHUX0 8SKaeLIFVDprftz/Xda7t0K3xSts5mXVBw7OBh8F6fMNxiHeKI3rlVpoCHeZ5pRa n5U4V8KHpQFA+jqWMQw56254jP3ZFgQ978crDg2PpFuRMdaoSkUrYj2sYyNahzue l/Fe2bd/LS0GgWeLZsrvA8tPJhmAuULGUa8IhFBGbiHFO29j3wZ0UTv2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZYxBaEAc3YhBd7pyBW3SrQGqaeMB8GA1UdIwQY MBaAFP5CtNoK6leMon8l3rDP7WGoC56iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYzA3NTAtZjQ2MS00ZDYzLThlZjIt NjhmMzJlYTlmMGE3LzEvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jYzA3NTAtZjQ2MS00ZDYzLThlZjItNjhmMzJlYTlmMGE3 LzEvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOYuWplA bSzF2D6S/vT7Hq5IXzld7faDkF9YUddOIAwpF+ag7NZBVDIRLLul0t8xCrtSlug+ mej+zTAOdgV8UuVl4dHDQssKfeMRxIoxaYTp/kSVA1rSlKz9Z9L4TvzYUNytdYKZ piNPN5M9afcpXT49ALb3NgmztoBY4Vdu6tmEG/H4+eK8orZl5D4IxjSfP+yBoV+5 YYRP/6n4a/oy18r8x2E4eAV4aZk/EIQEb+V8dtBe1irqjiwq4yfmdKdxSOzD4oRD NUZ1NkElYfoUO7WBHWs0B+Hc3vAJdsDdve3Uwouai91tO+3kwQ74j+Be1JaszL3H AVSWSSnnSlczRg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:09 2025 by rpki-client