This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json) Hash identifier: eKrbvnJ2VwRSq90G2OBwGoAi5SLsqHhMDx+gq6mme+E= Subject key identifier: D2:18:9F:2C:DD:67:C2:8E:E3:CE:96:C0:31:FE:1A:90:FF:16:1A:8A Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5 Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5 Certificate serial: 019B2C66360CD639AF9D1A84A28538709B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft Manifest number: 0B68 Signing time: Wed 17 Dec 2025 13:00:54 +0000 Manifest this update: Wed 17 Dec 2025 13:00:54 +0000 Manifest next update: Thu 18 Dec 2025 13:00:54 +0000 Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: wngLWtwBh5oK4p/fz9dcrLl8qQqL9q55iRizTwmAXtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:36:0c:d6:39:af:9d:1a:84:a2:85:38:70:9b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5 Validity Not Before: Dec 17 13:00:54 2025 GMT Not After : Dec 18 13:00:54 2025 GMT Subject: CN=d2189f2cdd67c28ee3ce96c031fe1a90ff161a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:5b:ca:13:34:3d:32:f6:17:59:f8:1e:65: 64:45:53:2e:67:1f:ea:b8:e7:ae:81:be:49:82:e7: b4:91:f7:1c:eb:09:ee:4d:3a:c7:02:af:90:e6:bd: 40:76:97:7a:c6:02:e6:8c:f2:3b:42:31:b8:2c:fa: 12:5f:9f:17:22:85:3c:58:3d:a6:b2:95:82:cd:54: 52:f3:0b:0d:c9:0f:e6:cf:fd:2e:fd:b7:d3:1c:36: 70:66:2d:6f:87:30:fc:1e:fb:ac:6c:23:bc:a1:40: fa:ee:f1:86:50:a1:14:91:46:97:de:fd:a7:ec:e7: cd:58:33:26:2f:2f:3c:46:17:06:ec:d9:f5:d6:2d: 2b:97:92:ac:99:2e:ec:38:9a:ca:d6:83:76:e5:2d: 37:73:c1:79:27:00:c3:3e:0a:76:28:12:2e:f3:99: 1a:c7:2e:0c:45:32:2b:d8:89:11:b7:23:96:74:09: cd:b5:af:f6:da:c8:c7:41:50:0a:b0:5d:a0:4a:ef: 82:58:95:8c:8e:1a:09:5b:08:e2:45:3c:a2:ed:13: 89:b3:72:14:30:5f:43:ff:38:d0:88:2c:50:ea:83: 6c:f3:8b:72:af:8f:c2:db:99:e7:3f:94:38:8d:15: eb:c7:a5:1f:a6:ea:c4:23:41:23:e7:c4:74:6e:6d: 97:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:9F:2C:DD:67:C2:8E:E3:CE:96:C0:31:FE:1A:90:FF:16:1A:8A X509v3 Authority Key Identifier: keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1d:8a:e1:27:65:9a:a5:4c:81:c9:7e:54:0d:4e:17:6c:2e: d7:a6:eb:bd:34:ab:f3:84:f0:89:00:a0:f4:36:47:29:95:dc: 65:a4:d9:cf:c4:c6:bc:6a:9a:43:bc:bb:33:d5:03:03:5e:49: d7:4f:f0:ad:df:61:0a:c6:b3:36:12:fc:87:a8:cb:b8:55:45: 43:5e:bb:91:9a:c2:4d:34:ae:e3:1f:34:59:0f:20:8f:2a:de: 1c:b4:b5:7e:4f:7d:6c:a3:62:56:aa:77:8c:2f:17:1c:e5:fb: 18:2e:7b:2e:a3:8e:8e:23:ce:5d:bd:1d:2a:37:7a:6e:1b:6a: b1:1e:82:6d:3a:1c:a4:ae:f2:f3:e5:10:0d:61:bf:72:ac:d2: b7:63:a4:62:a3:89:b3:af:20:33:1b:96:67:d8:c8:51:c2:61: 53:40:40:f3:21:54:dd:c0:a4:82:36:6c:09:ff:47:1d:2b:7b: c7:b7:ae:80:72:88:25:8e:a7:d5:bd:da:c9:43:7f:49:1e:c1: 88:0a:16:4d:c2:39:d9:7b:23:cc:8b:46:bd:cb:f6:c9:04:02: c1:44:73:91:a8:55:41:f1:63:a7:e3:67:35:7b:27:f2:e6:e3: c3:76:13:64:cc:19:0a:af:07:5d:16:67:bf:05:11:c7:ef:9a: b4:01:3b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZjYM1jmvnRqEooU4cJsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzcwODExNmIwNGJjMmI3Njc1M2UxYTQzMGI3Y2JlZTA5 Y2RiYTUwHhcNMjUxMjE3MTMwMDU0WhcNMjUxMjE4MTMwMDU0WjAzMTEwLwYDVQQD EyhkMjE4OWYyY2RkNjdjMjhlZTNjZTk2YzAzMWZlMWE5MGZmMTYxYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xdbyhM0PTL2F1n4HmVkRVMuZx/q uOeugb5Jgue0kfcc6wnuTTrHAq+Q5r1Adpd6xgLmjPI7QjG4LPoSX58XIoU8WD2m spWCzVRS8wsNyQ/mz/0u/bfTHDZwZi1vhzD8HvusbCO8oUD67vGGUKEUkUaX3v2n 7OfNWDMmLy88RhcG7Nn11i0rl5KsmS7sOJrK1oN25S03c8F5JwDDPgp2KBIu85ka xy4MRTIr2IkRtyOWdAnNta/22sjHQVAKsF2gSu+CWJWMjhoJWwjiRTyi7ROJs3IU MF9D/zjQiCxQ6oNs84tyr4/C25nnP5Q4jRXrx6UfpurEI0Ej58R0bm2XJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIYnyzdZ8KO486WwDH+GpD/FhqKMB8GA1UdIwQY MBaAFAg3CBFrBLwrdnU+GkMLfL7gnNulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUt MGYyOTI5OTZmODZjLzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUtMGYyOTI5OTZmODZj LzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASR2K4Sdl mqVMgcl+VA1OF2wu16brvTSr84TwiQCg9DZHKZXcZaTZz8TGvGqaQ7y7M9UDA15J 10/wrd9hCsazNhL8h6jLuFVFQ167kZrCTTSu4x80WQ8gjyreHLS1fk99bKNiVqp3 jC8XHOX7GC57LqOOjiPOXb0dKjd6bhtqsR6CbTocpK7y8+UQDWG/cqzSt2OkYqOJ s68gMxuWZ9jIUcJhU0BA8yFU3cCkgjZsCf9HHSt7x7eugHKIJY6n1b3ayUN/SR7B iAoWTcI52XsjzItGvcv2yQQCwURzkahVQfFjp+NnNXsn8ubjw3YTZMwZCq8HXRZn vwURx++atAE7Qw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:37:29 2025 by rpki-client