This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json) Hash identifier: HnYak2QSQq7RUdNkX0Et4S31uoJBGKHE/di9iECHz7k= Subject key identifier: 71:A6:2D:1B:B8:8D:5B:AC:1F:1C:0E:AC:3B:AB:CD:EA:3C:2E:05:74 Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e Certificate serial: 019AF653A97646E940F73BF3CA7455BE9230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft Manifest number: 065F Signing time: Sun 07 Dec 2025 01:01:09 +0000 Manifest this update: Sun 07 Dec 2025 01:01:09 +0000 Manifest next update: Mon 08 Dec 2025 01:01:09 +0000 Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: 3Ed6B7h7euCSJ4qwdiQ0mJ8Z2iLKtbsUI7yaZInfBvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:a9:76:46:e9:40:f7:3b:f3:ca:74:55:be:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e Validity Not Before: Dec 7 01:01:09 2025 GMT Not After : Dec 8 01:01:09 2025 GMT Subject: CN=71a62d1bb88d5bac1f1c0eac3babcdea3c2e0574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:9d:71:8d:46:2e:04:03:bb:72:d2:f2:d5: e9:a0:de:42:9a:8c:a1:dc:aa:fc:bf:8e:2f:d2:d3: d6:ab:d7:36:be:88:77:1f:7e:fa:33:36:3d:c6:43: 77:f3:3a:22:74:13:25:4b:2b:90:87:8e:80:f0:b4: cd:7c:17:45:a9:4b:d0:d5:dc:62:f8:4e:21:97:04: 18:47:bb:48:30:ed:5d:b3:5d:90:ed:25:76:6e:51: fe:77:56:80:05:f9:9a:48:90:37:98:e1:03:e7:6a: 8f:26:45:4c:1c:b1:ed:74:a2:a3:18:b7:8b:4f:9f: 60:7c:9a:f4:e0:9d:28:c0:ab:12:f6:b6:f3:a1:82: 45:a5:af:a2:82:ee:d2:27:5b:7c:7f:07:8d:5b:43: 70:d2:3f:a5:e7:49:fa:fd:dd:77:b6:5f:01:c0:59: 77:4b:62:87:39:52:1b:8d:e7:bd:f7:e1:a1:01:e0: 4b:88:e8:84:53:54:3e:dd:1f:36:47:22:11:d4:97: fc:8f:48:7c:14:57:8d:da:5d:6d:ea:1a:f0:cf:cb: ef:83:4b:06:b0:63:82:28:30:41:89:98:34:5e:33: f6:85:ca:90:15:a0:24:fc:18:37:f4:60:98:e4:63: 18:0f:47:ef:0c:99:fb:22:8b:86:44:33:dc:03:c4: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A6:2D:1B:B8:8D:5B:AC:1F:1C:0E:AC:3B:AB:CD:EA:3C:2E:05:74 X509v3 Authority Key Identifier: keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a1:f0:7d:f1:20:4e:31:5a:1c:9e:25:27:89:64:28:e6:2c: 46:72:04:76:66:04:f5:f9:1b:1c:d3:1a:be:f4:34:0f:45:67: 24:f7:85:76:c5:27:46:8e:02:f0:d5:e5:c0:8b:c6:2b:fe:ab: 28:3d:88:76:16:46:58:5d:b0:40:c3:d5:fd:3d:b9:4f:ea:e1: f8:66:3d:b7:1d:76:01:b3:83:53:99:63:44:ef:e8:b8:a3:4d: e3:4a:7f:84:f3:43:57:69:07:8c:40:a9:61:7a:28:c1:f3:5e: 68:c2:39:b7:e1:6b:f6:81:93:b5:63:ad:f2:7f:9c:39:23:c6: 43:15:24:3b:f0:cf:cc:a0:79:35:a0:8c:7a:64:ae:68:6f:32: 01:33:35:ea:fc:82:9d:03:55:a8:a7:ac:07:f1:15:7c:55:c0: ae:95:55:1c:73:7d:84:90:63:6d:3c:e7:fb:9a:44:27:f8:16: 27:5d:8f:55:5e:1b:25:1c:de:37:e9:57:53:ba:08:32:98:24: b4:f0:27:b7:0d:ae:fd:83:cc:d7:36:a5:ca:2f:09:04:24:a0: c7:32:8f:1e:a2:ba:d2:fc:7a:27:3c:5f:d7:f3:d7:ca:b4:8d: f1:2f:11:f5:6e:4e:d6:b6:46:82:5d:da:15:d9:79:32:b2:8a: bc:21:a8:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6l2RulA9zvzynRVvpIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YjQzN2IzMWI1MDY3MDM4NGZhNWQyMGQ4OTI0ZDYxMWI5 MTYzM2UwHhcNMjUxMjA3MDEwMTA5WhcNMjUxMjA4MDEwMTA5WjAzMTEwLwYDVQQD Eyg3MWE2MmQxYmI4OGQ1YmFjMWYxYzBlYWMzYmFiY2RlYTNjMmUwNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySSdcY1GLgQDu3LS8tXpoN5Cmoyh 3Kr8v44v0tPWq9c2voh3H376MzY9xkN38zoidBMlSyuQh46A8LTNfBdFqUvQ1dxi +E4hlwQYR7tIMO1ds12Q7SV2blH+d1aABfmaSJA3mOED52qPJkVMHLHtdKKjGLeL T59gfJr04J0owKsS9rbzoYJFpa+igu7SJ1t8fweNW0Nw0j+l50n6/d13tl8BwFl3 S2KHOVIbjee99+GhAeBLiOiEU1Q+3R82RyIR1Jf8j0h8FFeN2l1t6hrwz8vvg0sG sGOCKDBBiZg0XjP2hcqQFaAk/Bg39GCY5GMYD0fvDJn7IouGRDPcA8SVnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGmLRu4jVusHxwOrDurzeo8LgV0MB8GA1UdIwQY MBaAFES0N7MbUGcDhPpdINiSTWEbkWM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgt ZGUzYjc1NDczZmRkLzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lMmVjMzQtYjdmMy00MDU1LTgzODgtZGUzYjc1NDczZmRk LzEvUkxRM3N4dFFad09FLWwwZzJKSk5ZUnVSWXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqHwffEg TjFaHJ4lJ4lkKOYsRnIEdmYE9fkbHNMavvQ0D0VnJPeFdsUnRo4C8NXlwIvGK/6r KD2IdhZGWF2wQMPV/T25T+rh+GY9tx12AbODU5ljRO/ouKNN40p/hPNDV2kHjECp YXoowfNeaMI5t+Fr9oGTtWOt8n+cOSPGQxUkO/DPzKB5NaCMemSuaG8yATM16vyC nQNVqKesB/EVfFXArpVVHHN9hJBjbTzn+5pEJ/gWJ12PVV4bJRzeN+lXU7oIMpgk tPAntw2u/YPM1zalyi8JBCSgxzKPHqK60vx6Jzxf1/PXyrSN8S8R9W5O1rZGgl3a Fdl5MrKKvCGosA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:36 2025 by rpki-client