This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft File: _C71HmsUo-6_tImOD6gTq2eIUTY.mft (raw, json) Hash identifier: 82cNTo1+Pd4NRXoFcp/QAXO6i+udAOqhmsWQE9s7Auo= Subject key identifier: A6:3B:DC:78:0D:6C:79:45:11:00:AB:25:18:1B:A4:5C:C3:92:9F:D6 Authority key identifier: FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36 Certificate issuer: /CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136 Certificate serial: 019AF50B2F11D8C3F0191ED802448787CFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft Manifest number: 0EC3 Signing time: Sat 06 Dec 2025 19:02:22 +0000 Manifest this update: Sat 06 Dec 2025 19:02:22 +0000 Manifest next update: Sun 07 Dec 2025 19:02:22 +0000 Files and hashes: 1: _C71HmsUo-6_tImOD6gTq2eIUTY.crl (hash: 0RYAIdZFLyChsSH1h2CKb+eTnzzTkKf/Zv0HqTOrULU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:2f:11:d8:c3:f0:19:1e:d8:02:44:87:87:cf:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2ef51e6b14a3eebfb4898e0fa813ab67885136 Validity Not Before: Dec 6 19:02:22 2025 GMT Not After : Dec 7 19:02:22 2025 GMT Subject: CN=a63bdc780d6c79451100ab25181ba45cc3929fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:d5:88:fb:f1:87:52:58:c5:f4:2d:08:4a: d2:37:f6:f4:67:3a:42:b8:28:a0:56:d0:72:e4:35: 1a:5e:75:62:0e:0f:8a:2a:24:31:e2:6c:84:fe:6d: e4:0a:39:fb:a5:6a:97:83:1b:c2:b5:7d:84:0d:7b: 30:0c:1d:cb:20:97:4f:8b:29:4c:69:09:e5:ba:cd: 6c:5a:03:77:ca:3f:79:0f:3e:de:97:36:ee:8d:57: 2c:ed:a4:bf:ca:f0:91:9a:71:dd:37:0e:c4:01:31: 5a:a3:93:08:af:c6:7f:b5:e9:9f:0e:4a:5e:ac:53: 4b:66:69:74:5e:a9:58:08:83:7c:fb:da:1f:4c:b6: 5e:50:1f:ff:6e:cf:7c:a1:72:b9:d5:99:d0:80:7e: 3d:3a:2c:82:fc:aa:5c:84:c9:74:20:03:0e:6f:7b: 9b:e0:f7:96:17:94:67:74:48:82:0f:2e:2f:df:a6: 5c:7d:a0:ae:fe:04:2f:9c:7d:3f:d0:4f:db:16:f6: db:8a:37:4c:10:c1:6a:b7:bb:d4:c1:db:f8:63:3b: f7:6a:00:42:c9:18:04:81:49:41:a8:a3:77:bb:d0: b7:db:a4:97:c4:11:c3:0f:be:d5:97:99:af:ae:f4: 83:f2:65:98:49:49:3b:ea:bc:df:94:12:1c:1f:c1: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:DC:78:0D:6C:79:45:11:00:AB:25:18:1B:A4:5C:C3:92:9F:D6 X509v3 Authority Key Identifier: keyid:FC:2E:F5:1E:6B:14:A3:EE:BF:B4:89:8E:0F:A8:13:AB:67:88:51:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_C71HmsUo-6_tImOD6gTq2eIUTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/83e14b-9a4a-40c6-a1a0-b5c9d7e565a9/1/_C71HmsUo-6_tImOD6gTq2eIUTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:1d:f5:e3:14:21:cf:9d:bd:5a:3a:60:b6:8a:8c:9a:fb: 74:c2:f9:fc:4e:bb:ea:e1:08:d8:ad:77:fa:4d:95:82:d2:82: ed:67:52:a1:cd:9b:c8:f7:a2:c4:dd:28:ae:2d:f9:28:59:a8: 20:a3:60:21:a9:52:3e:84:de:f0:b0:ea:7a:39:71:1a:9c:d5: 49:9f:48:67:5e:83:9c:05:81:5e:85:98:95:49:af:49:2c:7c: c8:c9:62:31:6e:da:b0:fd:b6:6e:a0:7b:e4:e6:33:a2:72:e5: 99:37:49:57:48:da:ac:2d:4d:ff:50:9b:60:7e:0c:da:0f:15: 5f:b4:e0:78:d4:4b:fc:c1:4c:ab:78:1f:04:6a:b9:19:6b:40: fd:47:a6:39:fe:ed:5e:3f:4e:d5:a9:94:30:27:3f:1c:a8:5d: 11:9e:96:5a:92:56:75:4a:b1:db:fe:53:9f:c5:fb:91:d4:9f: 72:a2:71:5e:51:8d:7c:bc:04:7c:67:8f:17:90:eb:3f:64:22: 34:18:37:b5:44:91:dd:85:2f:60:51:83:50:dc:fa:db:d8:7d: bf:db:64:31:d6:ed:e3:34:1a:e6:e5:a3:e8:65:9c:0d:aa:14: 6b:e6:9f:fb:f5:fe:e7:50:d7:83:33:47:10:c4:e3:38:a5:92: f9:8b:26:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cy8R2MPwGR7YAkSHh8/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmVmNTFlNmIxNGEzZWViZmI0ODk4ZTBmYTgxM2FiNjc4 ODUxMzYwHhcNMjUxMjA2MTkwMjIyWhcNMjUxMjA3MTkwMjIyWjAzMTEwLwYDVQQD EyhhNjNiZGM3ODBkNmM3OTQ1MTEwMGFiMjUxODFiYTQ1Y2MzOTI5ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr/ViPvxh1JYxfQtCErSN/b0ZzpC uCigVtBy5DUaXnViDg+KKiQx4myE/m3kCjn7pWqXgxvCtX2EDXswDB3LIJdPiylM aQnlus1sWgN3yj95Dz7elzbujVcs7aS/yvCRmnHdNw7EATFao5MIr8Z/temfDkpe rFNLZml0XqlYCIN8+9ofTLZeUB//bs98oXK51ZnQgH49OiyC/KpchMl0IAMOb3ub 4PeWF5RndEiCDy4v36ZcfaCu/gQvnH0/0E/bFvbbijdMEMFqt7vUwdv4Yzv3agBC yRgEgUlBqKN3u9C326SXxBHDD77Vl5mvrvSD8mWYSUk76rzflBIcH8H2/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY73HgNbHlFEQCrJRgbpFzDkp/WMB8GA1UdIwQY MBaAFPwu9R5rFKPuv7SJjg+oE6tniFE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0M3MUhtc1VvLTZfdEltT0Q2Z1RxMmVJVVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84M2UxNGItOWE0YS00MGM2LWExYTAt YjVjOWQ3ZTU2NWE5LzEvX0M3MUhtc1VvLTZfdEltT0Q2Z1RxMmVJVVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC84M2UxNGItOWE0YS00MGM2LWExYTAtYjVjOWQ3ZTU2NWE5 LzEvX0M3MUhtc1VvLTZfdEltT0Q2Z1RxMmVJVVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnkd9eMU Ic+dvVo6YLaKjJr7dML5/E676uEI2K13+k2VgtKC7WdSoc2byPeixN0ori35KFmo IKNgIalSPoTe8LDqejlxGpzVSZ9IZ16DnAWBXoWYlUmvSSx8yMliMW7asP22bqB7 5OYzonLlmTdJV0jarC1N/1CbYH4M2g8VX7TgeNRL/MFMq3gfBGq5GWtA/UemOf7t Xj9O1amUMCc/HKhdEZ6WWpJWdUqx2/5Tn8X7kdSfcqJxXlGNfLwEfGePF5DrP2Qi NBg3tUSR3YUvYFGDUNz629h9v9tkMdbt4zQa5uWj6GWcDaoUa+af+/X+51DXgzNH EMTjOKWS+Ysm2g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:52 2025 by rpki-client