This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft File: 98_k1DTTh2RAV9JB6sb2nT7oHBI.mft (raw, json) Hash identifier: qUvGlJUo+1HRVili1x/m9iGfvvwl3WqIg3JJmwa/laI= Subject key identifier: 3E:DA:7A:73:66:A7:A2:01:B5:C1:CB:0F:E2:30:A0:B7:24:AD:8B:EA Authority key identifier: F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12 Certificate issuer: /CN=f7cfe4d434d387644057d241eac6f69d3ee81c12 Certificate serial: 019AFBB0D437ADB88A044B9015E62F1DE372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft Manifest number: 098C Signing time: Mon 08 Dec 2025 02:01:01 +0000 Manifest this update: Mon 08 Dec 2025 02:01:01 +0000 Manifest next update: Tue 09 Dec 2025 02:01:01 +0000 Files and hashes: 1: 98_k1DTTh2RAV9JB6sb2nT7oHBI.crl (hash: FDh7zFptmJKod2QfvOHF9QmuAulx+TiqTlX8Eod+D1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b0:d4:37:ad:b8:8a:04:4b:90:15:e6:2f:1d:e3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7cfe4d434d387644057d241eac6f69d3ee81c12 Validity Not Before: Dec 8 02:01:01 2025 GMT Not After : Dec 9 02:01:01 2025 GMT Subject: CN=3eda7a7366a7a201b5c1cb0fe230a0b724ad8bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:19:4e:1b:43:cc:4a:2a:2f:ff:1b:f7:57: 85:05:b5:69:df:fe:5f:17:18:80:5c:46:35:e0:42: 21:9c:e5:22:9e:c2:03:a9:c3:1e:0b:7e:84:85:49: 13:8d:57:6e:a4:71:5c:29:af:36:ab:cc:06:d8:ad: 51:0f:93:62:a5:63:be:e3:f3:6f:7f:ca:4f:81:e6: 74:34:27:98:c8:ff:20:55:72:9d:41:7f:d9:28:42: ad:cb:74:e0:7f:70:4a:2c:54:df:5d:4c:f7:53:b5: ee:de:da:e4:65:30:c1:7b:ab:37:85:ca:87:b5:f1: 3d:e1:5d:68:87:32:c6:25:77:5e:8f:b5:aa:ed:30: 7f:c2:c0:44:7c:9f:81:e1:4d:31:89:42:0e:da:d7: e4:5d:12:16:2d:0e:d1:9f:e8:a0:80:57:a7:3d:07: b3:59:30:ca:52:d6:91:2b:d8:a9:b0:24:a8:33:ba: 80:a7:ae:5f:19:03:1f:cf:9f:a4:5e:b4:15:d0:d2: 33:9a:c7:ef:cc:f4:08:8e:24:78:88:a8:7a:bb:2a: b0:69:b3:7e:e3:dc:e6:7a:97:75:e9:b9:d8:4f:b5: db:d2:18:23:39:df:a7:d5:07:3b:44:ca:74:8c:0f: ec:0c:b3:17:ff:a2:ce:42:93:ed:f5:26:a8:7e:8b: 4c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DA:7A:73:66:A7:A2:01:B5:C1:CB:0F:E2:30:A0:B7:24:AD:8B:EA X509v3 Authority Key Identifier: keyid:F7:CF:E4:D4:34:D3:87:64:40:57:D2:41:EA:C6:F6:9D:3E:E8:1C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98_k1DTTh2RAV9JB6sb2nT7oHBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0c8008-8a52-4176-b693-c40544281eb0/1/98_k1DTTh2RAV9JB6sb2nT7oHBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4c:f0:78:21:e2:fb:c9:0a:8c:f3:60:31:71:4b:7f:45:51: 0c:c3:dd:42:31:19:59:e8:48:59:80:a6:6b:bb:5a:0e:51:39: 0a:1c:05:51:e0:c2:0d:04:55:8c:21:45:9e:5c:cc:7d:4e:68: 48:d5:2e:80:88:20:4f:9c:8d:b3:2e:16:7a:b9:10:5d:64:dd: 37:10:4c:c6:a2:30:eb:c1:b9:ad:03:70:ee:0a:7b:d5:d5:4d: 21:60:7a:73:d7:25:56:5e:82:c1:e3:dc:f6:ba:6c:a2:98:51: 41:22:db:ea:70:ef:2e:98:44:65:4b:6b:cd:08:b8:97:04:0b: 0e:5d:c4:4d:43:97:82:18:1d:a4:29:3d:b6:26:0d:c1:95:c7: 9d:7f:54:3c:de:74:2e:1d:0f:4a:07:45:c3:28:ef:1f:d8:bc: 01:3f:ed:26:eb:84:f5:70:c5:b6:d6:85:33:7e:6b:25:ab:26: 3a:ac:d3:fe:6e:12:74:84:30:60:1b:92:87:36:de:42:6a:56: 64:b0:75:b7:2f:5c:8d:c8:08:17:f5:8e:d9:25:16:03:e5:e9: a9:24:47:4e:6d:99:b6:68:83:fe:01:63:4e:a8:37:9c:57:ae: a6:60:e1:ba:fa:66:88:56:39:5d:9d:4b:5e:70:7f:e6:59:b9: 50:15:62:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sNQ3rbiKBEuQFeYvHeNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3Y2ZlNGQ0MzRkMzg3NjQ0MDU3ZDI0MWVhYzZmNjlkM2Vl ODFjMTIwHhcNMjUxMjA4MDIwMTAxWhcNMjUxMjA5MDIwMTAxWjAzMTEwLwYDVQQD EygzZWRhN2E3MzY2YTdhMjAxYjVjMWNiMGZlMjMwYTBiNzI0YWQ4YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsQZThtDzEoqL/8b91eFBbVp3/5f FxiAXEY14EIhnOUinsIDqcMeC36EhUkTjVdupHFcKa82q8wG2K1RD5NipWO+4/Nv f8pPgeZ0NCeYyP8gVXKdQX/ZKEKty3Tgf3BKLFTfXUz3U7Xu3trkZTDBe6s3hcqH tfE94V1ohzLGJXdej7Wq7TB/wsBEfJ+B4U0xiUIO2tfkXRIWLQ7Rn+iggFenPQez WTDKUtaRK9ipsCSoM7qAp65fGQMfz5+kXrQV0NIzmsfvzPQIjiR4iKh6uyqwabN+ 49zmepd16bnYT7Xb0hgjOd+n1Qc7RMp0jA/sDLMX/6LOQpPt9SaofotMPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7aenNmp6IBtcHLD+IwoLckrYvqMB8GA1UdIwQY MBaAFPfP5NQ004dkQFfSQerG9p0+6BwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYzgwMDgtOGE1Mi00MTc2LWI2OTMt YzQwNTQ0MjgxZWIwLzEvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wYzgwMDgtOGE1Mi00MTc2LWI2OTMtYzQwNTQ0MjgxZWIw LzEvOThfazFEVFRoMlJBVjlKQjZzYjJuVDdvSEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEzweCHi +8kKjPNgMXFLf0VRDMPdQjEZWehIWYCma7taDlE5ChwFUeDCDQRVjCFFnlzMfU5o SNUugIggT5yNsy4WerkQXWTdNxBMxqIw68G5rQNw7gp71dVNIWB6c9clVl6CwePc 9rpsophRQSLb6nDvLphEZUtrzQi4lwQLDl3ETUOXghgdpCk9tiYNwZXHnX9UPN50 Lh0PSgdFwyjvH9i8AT/tJuuE9XDFttaFM35rJasmOqzT/m4SdIQwYBuShzbeQmpW ZLB1ty9cjcgIF/WO2SUWA+XpqSRHTm2ZtmiD/gFjTqg3nFeupmDhuvpmiFY5XZ1L XnB/5lm5UBViGQ== -----END CERTIFICATE-----Generated at Mon Dec 8 10:27:58 2025 by rpki-client