This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json) Hash identifier: WzPZ1nMgs+GJQ5cNupM+GjQh+lRH/gVE1Mcmnq6jKEo= Subject key identifier: 64:FA:2E:C6:CC:7A:B3:68:CD:B2:69:4C:88:B0:AF:92:DB:E7:B4:8B Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a Certificate serial: 019AF31BE045314ACE15573AC9EAB0445F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft Manifest number: 0E1B Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: NvzVyDpwLpkBNUNfrGUy/dFj7hGFF6ZMIbspirQ327E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e0:45:31:4a:ce:15:57:3a:c9:ea:b0:44:5f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=64fa2ec6cc7ab368cdb2694c88b0af92dbe7b48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:42:be:c7:f0:b8:87:0b:89:c2:95:5b:57: f4:8d:4b:fc:8a:ba:03:6e:f1:b3:74:39:4f:d4:aa: 72:81:00:fa:bd:bb:47:a7:cd:36:ba:1c:63:44:16: 0f:cf:34:6b:cc:2c:d2:b5:11:da:de:89:1f:26:71: 85:e0:d2:5a:52:72:7b:b9:9e:77:a5:7b:0c:0c:84: 3f:ef:69:61:5d:55:ad:54:07:53:58:1c:32:39:1c: 0d:c2:29:6c:83:65:52:c8:4f:40:35:e7:b6:cb:ac: 43:42:2f:60:19:aa:de:a4:4e:c5:93:40:49:ed:1a: 6c:e6:e7:8c:87:b6:eb:82:8f:48:35:34:cd:4f:6d: 1d:60:10:bb:46:8b:ef:79:7d:21:34:ca:0e:83:1b: a8:fe:bb:3a:5a:d5:2f:30:7a:ca:71:72:8e:18:27: 91:e4:d9:78:b9:8a:04:72:09:ad:f5:87:da:da:ce: f5:f0:ee:4d:bb:6d:a9:b6:70:b8:9a:52:a3:10:2c: 82:d2:ee:cd:c2:4f:f6:e5:cb:bb:69:fd:0c:61:3c: 2f:0c:aa:30:7c:f7:96:1f:7a:1e:32:79:88:57:a7: 0f:15:45:5a:44:fe:9f:70:4a:6e:cb:a6:be:32:97: 5c:d4:70:f1:92:1a:4b:90:05:44:39:ec:50:c6:3c: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:2E:C6:CC:7A:B3:68:CD:B2:69:4C:88:B0:AF:92:DB:E7:B4:8B X509v3 Authority Key Identifier: keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption fa:73:17:14:64:2d:d3:06:2c:23:a0:d4:60:31:4d:19:3f:5a: 45:2e:76:60:f6:af:4d:4b:7d:f2:71:ea:41:bc:25:a9:f9:02: e7:ea:88:eb:7b:45:1a:2c:ee:c8:c5:aa:f8:61:13:15:2d:20: bf:3f:68:3d:50:26:e0:cc:bd:d9:6b:bf:9c:b7:66:d2:75:f1: 5d:18:54:0e:4b:9e:6d:05:81:f0:0a:a1:34:02:7b:a3:0b:f5: c4:5d:25:bb:06:d5:4a:0f:fb:03:00:d1:9c:c6:02:c0:84:c2: a4:29:21:27:ad:c4:3c:ad:b3:50:6e:ca:ea:30:a0:44:22:09: 08:6a:0a:ec:47:a6:1b:8e:14:a5:6b:99:a2:e9:7c:f1:24:a8: c5:a2:e2:b5:5a:ce:33:66:8f:a1:df:ba:af:fa:3a:52:ef:39: 7e:20:58:43:24:8d:eb:04:93:bb:5b:09:34:9b:0a:de:d0:c2: 90:d1:21:f2:eb:21:6a:9e:dc:09:60:47:d0:76:d2:05:bd:37: c1:bd:bf:cb:5b:46:e5:55:92:c9:06:6f:24:b4:95:b3:ab:7d: 30:a3:f4:78:42:14:22:ba:bb:70:70:a5:75:32:74:e1:76:85: d4:36:ff:3b:75:40:30:15:dd:51:33:d8:56:a1:af:c9:3b:dd: db:84:e0:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+BFMUrOFVc6yeqwRF8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjJiYjNlOWQzNWI1YWY5ZGNhMDhlYTdjY2VmZjQzNTE5 YTRhNmEwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD Eyg2NGZhMmVjNmNjN2FiMzY4Y2RiMjY5NGM4OGIwYWY5MmRiZTdiNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzFCvsfwuIcLicKVW1f0jUv8iroD bvGzdDlP1KpygQD6vbtHp802uhxjRBYPzzRrzCzStRHa3okfJnGF4NJaUnJ7uZ53 pXsMDIQ/72lhXVWtVAdTWBwyORwNwilsg2VSyE9ANee2y6xDQi9gGarepE7Fk0BJ 7Rps5ueMh7brgo9INTTNT20dYBC7RovveX0hNMoOgxuo/rs6WtUvMHrKcXKOGCeR 5Nl4uYoEcgmt9Yfa2s718O5Nu22ptnC4mlKjECyC0u7Nwk/25cu7af0MYTwvDKow fPeWH3oeMnmIV6cPFUVaRP6fcEpuy6a+Mpdc1HDxkhpLkAVEOexQxjwFdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT6LsbMerNozbJpTIiwr5Lb57SLMB8GA1UdIwQY MBaAFGliuz6dNbWvncoI6nzO/0NRmkpqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYt NTEzNmYyNjIyNjQxLzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yZWRkMzctODE0MC00OGM1LWJlYWYtNTEzNmYyNjIyNjQx LzEvYVdLN1BwMDF0YS1keWdqcWZNN19RMUdhU21vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+nMXFGQt 0wYsI6DUYDFNGT9aRS52YPavTUt98nHqQbwlqfkC5+qI63tFGizuyMWq+GETFS0g vz9oPVAm4My92Wu/nLdm0nXxXRhUDkuebQWB8AqhNAJ7owv1xF0luwbVSg/7AwDR nMYCwITCpCkhJ63EPK2zUG7K6jCgRCIJCGoK7EemG44UpWuZoul88SSoxaLitVrO M2aPod+6r/o6Uu85fiBYQySN6wSTu1sJNJsK3tDCkNEh8ushap7cCWBH0HbSBb03 wb2/y1tG5VWSyQZvJLSVs6t9MKP0eEIUIrq7cHCldTJ04XaF1Db/O3VAMBXdUTPY VqGvyTvd24Tgxw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:21 2025 by rpki-client