This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json) Hash identifier: Bnd8A4zQveMNc+xLCiuQYLI9y5BD39tv0ChI5wWoGhs= Subject key identifier: A7:0E:86:94:1C:E3:6D:2B:22:C5:D0:D0:7B:18:77:3E:5D:31:4B:F4 Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18 Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518 Certificate serial: 019AF0888D1916E436B32B42984D84F05F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft Manifest number: 16EE Signing time: Fri 05 Dec 2025 22:01:11 +0000 Manifest this update: Fri 05 Dec 2025 22:01:11 +0000 Manifest next update: Sat 06 Dec 2025 22:01:11 +0000 Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: AKbHXRIUHzh16+PdOuhRxznht4u5s1kNh5vshVNGMOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:8d:19:16:e4:36:b3:2b:42:98:4d:84:f0:5f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518 Validity Not Before: Dec 5 22:01:11 2025 GMT Not After : Dec 6 22:01:11 2025 GMT Subject: CN=a70e86941ce36d2b22c5d0d07b18773e5d314bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:76:ee:63:81:02:16:51:65:3d:19:cd:7a: 4b:ba:86:ee:45:c1:0c:51:02:08:85:6b:a3:50:f1: 04:20:d1:7e:43:73:12:f4:71:75:a3:8e:11:0f:3e: 89:5a:ec:e1:16:9c:d5:0e:1c:02:cc:4e:9b:15:dc: 4d:4b:27:2b:51:b6:5a:51:74:b9:a5:30:b7:1c:cc: 0e:3c:1b:56:39:98:4a:cb:db:b3:94:f8:7b:fb:0b: 1c:a0:d1:14:c3:68:7b:50:36:68:b2:6f:63:35:e7: 4f:86:d0:5c:d8:40:7e:fb:dd:94:65:7d:06:2d:08: 9e:b1:c3:80:5c:d7:5b:f9:c1:63:ad:dd:46:74:b8: b1:94:d1:fc:83:21:78:29:a6:3d:00:61:3d:d7:eb: e5:d8:18:30:48:c2:d6:77:57:ae:6b:6c:d8:62:7d: ee:ea:31:5b:5f:d4:61:fa:f1:7d:31:f7:0f:26:29: 3d:56:d4:44:72:e6:8a:02:46:f1:3c:65:6e:b9:a4: b9:6f:cc:8f:38:a1:ea:b7:d4:65:fd:a1:63:f4:ba: 83:39:9f:60:f1:91:61:dc:74:07:e6:c1:f1:54:05: b3:7a:0e:ed:53:d1:a5:76:f8:a3:0d:63:7d:71:03: 15:df:b9:42:66:27:99:32:66:83:bc:40:36:40:7c: dc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:86:94:1C:E3:6D:2B:22:C5:D0:D0:7B:18:77:3E:5D:31:4B:F4 X509v3 Authority Key Identifier: keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5e:95:37:54:56:30:02:d5:12:88:70:c6:50:ee:39:33:e9: e5:24:97:16:af:63:e0:7b:83:fa:1f:6a:69:0e:91:64:f3:c7: 19:af:b0:e1:80:a7:56:c7:2a:ab:c3:9e:a2:20:0d:1e:6e:f8: 37:7f:9b:c3:4b:d8:20:92:7d:74:65:41:d7:4a:79:99:fa:c6: 39:45:ef:23:59:72:ae:29:26:80:aa:52:90:e5:3d:bb:ec:2d: 5e:97:f8:68:89:15:2d:9b:e0:7f:e2:e2:eb:3d:e0:e2:83:b2: 78:de:27:3b:d7:ee:18:26:d5:e9:1e:65:7d:d5:80:c7:3f:bc: 88:c5:5b:78:b6:97:b7:ec:bb:ce:e9:b6:13:c4:61:6a:02:f0: 29:2f:8b:3a:cc:d5:87:09:ae:0a:2a:8f:13:97:e9:37:14:89: 88:9c:90:20:32:1f:5e:30:39:aa:ce:02:67:6c:58:c7:9e:e9: cc:80:ed:1f:68:b0:68:88:7c:3d:28:7c:f3:98:45:54:89:dd: a1:5c:28:28:fc:38:b4:9b:65:4f:fc:75:40:f8:26:fa:43:7c: a3:8e:ab:8e:44:44:59:aa:fc:66:f3:a0:ac:e3:b7:d8:b3:31: e9:50:23:17:b1:17:47:8d:8a:4c:ce:c7:71:40:6f:b7:2f:30: 15:d4:4b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiI0ZFuQ2sytCmE2E8F+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4 MDc1MTgwHhcNMjUxMjA1MjIwMTExWhcNMjUxMjA2MjIwMTExWjAzMTEwLwYDVQQD EyhhNzBlODY5NDFjZTM2ZDJiMjJjNWQwZDA3YjE4NzczZTVkMzE0YmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz927mOBAhZRZT0ZzXpLuobuRcEM UQIIhWujUPEEINF+Q3MS9HF1o44RDz6JWuzhFpzVDhwCzE6bFdxNSycrUbZaUXS5 pTC3HMwOPBtWOZhKy9uzlPh7+wscoNEUw2h7UDZosm9jNedPhtBc2EB++92UZX0G LQiescOAXNdb+cFjrd1GdLixlNH8gyF4KaY9AGE91+vl2BgwSMLWd1eua2zYYn3u 6jFbX9Rh+vF9MfcPJik9VtREcuaKAkbxPGVuuaS5b8yPOKHqt9Rl/aFj9LqDOZ9g 8ZFh3HQH5sHxVAWzeg7tU9GldvijDWN9cQMV37lCZieZMmaDvEA2QHzcXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcOhpQc420rIsXQ0HsYdz5dMUv0MB8GA1UdIwQY MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1 LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl6VN1RW MALVEohwxlDuOTPp5SSXFq9j4HuD+h9qaQ6RZPPHGa+w4YCnVscqq8OeoiANHm74 N3+bw0vYIJJ9dGVB10p5mfrGOUXvI1lyrikmgKpSkOU9u+wtXpf4aIkVLZvgf+Li 6z3g4oOyeN4nO9fuGCbV6R5lfdWAxz+8iMVbeLaXt+y7zum2E8RhagLwKS+LOszV hwmuCiqPE5fpNxSJiJyQIDIfXjA5qs4CZ2xYx57pzIDtH2iwaIh8PSh885hFVInd oVwoKPw4tJtlT/x1QPgm+kN8o46rjkREWar8ZvOgrOO32LMx6VAjF7EXR42KTM7H cUBvty8wFdRLQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:12 2025 by rpki-client