This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json) Hash identifier: 5WbRy1K2/shN2TWbnQ1phVFmulhWbR1I/hIN/PpKqnE= Subject key identifier: B8:5F:BF:2C:C2:02:17:F5:4E:66:FB:B9:E5:6B:A9:3A:4F:87:01:BC Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94 Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94 Certificate serial: 019AF19B79BB608F28E4BC45AE62D311385D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: 5tvVpsnZVC3sTzCW4rsLFVENuAnjgiFR/ikq0OLxDLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:79:bb:60:8f:28:e4:bc:45:ae:62:d3:11:38:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=b85fbf2cc20217f54e66fbb9e56ba93a4f8701bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:43:14:26:c7:34:7a:50:97:d5:95:32:32: 23:c8:37:e8:e8:d6:99:f5:61:38:64:e5:8c:8f:50: 10:fd:f9:8a:67:56:d8:62:61:6a:11:a8:b8:97:35: c7:14:a4:89:b6:58:8a:5c:d3:a5:6f:96:9d:71:51: 03:2d:40:34:ea:d4:9b:ee:03:f8:b2:0b:be:9d:c4: e1:85:e5:c5:67:dc:be:3e:13:78:da:d6:23:21:e7: 35:89:6f:46:e6:08:73:e9:15:b6:8c:99:2a:f8:93: f7:9e:fa:e8:1d:3e:a1:0a:0c:ff:90:d3:39:72:b6: 3c:23:a8:17:9d:b5:4f:2d:74:cf:81:f7:b4:98:76: bc:cc:c4:8c:7a:ba:79:db:4b:44:cc:ad:1a:b4:28: 8c:a6:0b:fe:e1:69:e7:70:41:8a:40:37:11:71:3c: 78:d7:44:58:8a:1c:2e:02:9f:ed:ba:52:0d:d6:71: 6c:43:7d:f2:39:2b:5d:85:e7:da:78:21:8a:8b:a9: 98:99:61:49:6e:f9:4f:2d:a1:ec:f4:e4:e8:15:08: 87:41:87:4c:6d:e9:19:82:b7:2a:a2:b8:b0:8d:7f: c6:b9:ba:cc:d9:5e:ed:ff:76:5c:3d:4f:25:a4:04: 51:ae:d5:60:78:3e:2a:7d:c2:39:53:d4:b6:a6:98: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:BF:2C:C2:02:17:F5:4E:66:FB:B9:E5:6B:A9:3A:4F:87:01:BC X509v3 Authority Key Identifier: keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bd:dd:04:4d:c0:64:40:e3:72:fd:88:eb:29:d7:cf:fa:ff: 0b:36:cf:78:97:b0:6a:fe:9b:36:52:e2:dc:bf:6f:8b:68:fb: e3:6b:9d:fe:ea:f0:ae:29:af:75:d9:86:fe:9c:43:ed:00:50: 6e:85:8e:1f:73:df:90:19:00:61:f4:dc:1e:30:c2:eb:18:a3: 77:85:94:6c:ff:1b:f5:47:6f:7a:f5:2e:59:7a:57:51:1f:7c: bf:18:78:86:b4:0d:f9:78:c1:2a:49:af:bc:23:3c:61:d6:90: 98:25:8e:f0:31:0d:ff:1b:ce:02:ec:6a:8e:00:83:a6:e3:7c: b9:fc:32:ff:f0:be:ca:17:d0:15:e9:4e:24:3c:7d:00:0a:14: 95:97:cb:8e:7b:ff:e4:57:cf:ca:dd:79:51:3b:45:22:7a:64: 0f:34:a3:32:3b:64:ac:10:d5:3c:c7:4f:18:08:17:cf:26:4d: 9f:9a:0a:7f:92:37:24:3f:d9:6a:26:59:5c:7e:9f:7e:9b:c0: 64:04:86:2f:ce:63:1b:90:2f:f5:59:7c:8d:ae:36:db:cb:08: 0c:81:a1:28:38:89:e6:f1:c3:02:55:c8:b7:dc:0f:35:30:dc: 29:8a:a1:6f:0b:c9:95:a9:b5:65:13:24:cc:f5:5c:f2:af:77: cd:74:5c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3m7YI8o5LxFrmLTEThdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmN2U1ZWJkNmZhNDY5YzVlMzcwYmZjMTA2YzRkNGFhZDFl MWRiOTQwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EyhiODVmYmYyY2MyMDIxN2Y1NGU2NmZiYjllNTZiYTkzYTRmODcwMWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsNDFCbHNHpQl9WVMjIjyDfo6NaZ 9WE4ZOWMj1AQ/fmKZ1bYYmFqEai4lzXHFKSJtliKXNOlb5adcVEDLUA06tSb7gP4 sgu+ncThheXFZ9y+PhN42tYjIec1iW9G5ghz6RW2jJkq+JP3nvroHT6hCgz/kNM5 crY8I6gXnbVPLXTPgfe0mHa8zMSMerp520tEzK0atCiMpgv+4WnncEGKQDcRcTx4 10RYihwuAp/tulIN1nFsQ33yOStdhefaeCGKi6mYmWFJbvlPLaHs9OToFQiHQYdM bekZgrcqoriwjX/GubrM2V7t/3ZcPU8lpARRrtVgeD4qfcI5U9S2ppgmewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhfvyzCAhf1Tmb7ueVrqTpPhwG8MB8GA1UdIwQY MBaAFH9+Xr1vpGnF43C/wQbE1KrR4duUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjM1ZXZXLWthY1hqY0xfQkJzVFVxdEhoMjVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jM2U4ZWQtNTk3YS00ODVhLTk0YTMt OTgyY2ZiMzU5YWVlLzEvZjM1ZXZXLWthY1hqY0xfQkJzVFVxdEhoMjVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jM2U4ZWQtNTk3YS00ODVhLTk0YTMtOTgyY2ZiMzU5YWVl LzEvZjM1ZXZXLWthY1hqY0xfQkJzVFVxdEhoMjVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb73dBE3A ZEDjcv2I6ynXz/r/CzbPeJewav6bNlLi3L9vi2j742ud/urwrimvddmG/pxD7QBQ boWOH3PfkBkAYfTcHjDC6xijd4WUbP8b9UdvevUuWXpXUR98vxh4hrQN+XjBKkmv vCM8YdaQmCWO8DEN/xvOAuxqjgCDpuN8ufwy//C+yhfQFelOJDx9AAoUlZfLjnv/ 5FfPyt15UTtFInpkDzSjMjtkrBDVPMdPGAgXzyZNn5oKf5I3JD/ZaiZZXH6ffpvA ZASGL85jG5Av9Vl8ja4228sIDIGhKDiJ5vHDAlXIt9wPNTDcKYqhbwvJlam1ZRMk zPVc8q93zXRcnA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:10 2025 by rpki-client