This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft File: enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json) Hash identifier: bKILbUunzgL/o5LxapEZAxR4NbvE3XbmYvnL8+6T1RE= Subject key identifier: 71:80:8E:E9:36:FA:6A:EF:73:21:7D:50:26:DF:BA:1D:19:97:9C:06 Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 Certificate issuer: /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Certificate serial: 019AF19A93BCEBE8547F917A71A32CAB2F08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: 9AoHYFst/bXSkmV/zw2Li75RTTLgMNZYJeY6fD4iGNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:93:bc:eb:e8:54:7f:91:7a:71:a3:2c:ab:2f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=71808ee936fa6aef73217d5026dfba1d19979c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:bd:4f:3e:2c:d2:15:a8:4c:d0:bb:ce:33: cb:39:e7:20:33:4c:82:5c:62:5d:4e:39:4a:d2:b9: 12:52:4e:97:83:c6:b3:6f:e0:7a:fe:34:4a:0c:7d: 5f:17:0d:63:bb:95:64:87:6f:19:27:1b:a8:c3:dd: 46:71:5a:e3:93:d9:31:ed:c0:e2:db:34:16:b8:92: a2:1a:38:70:23:37:a2:15:ea:9c:48:ca:27:3e:0a: e5:86:cc:df:37:52:78:08:3d:1f:b0:2c:60:5f:40: b1:c4:6b:d5:08:52:44:ec:3c:ba:1d:8e:8e:6b:b9: d9:62:1d:82:1f:75:af:03:16:92:a1:c1:90:79:51: b1:cf:c1:88:63:c5:f9:ab:42:c8:e9:24:9e:c8:03: f9:61:0e:d0:61:d6:63:86:1f:3b:aa:08:3c:b5:2e: a8:26:6d:2b:61:0d:52:4f:4e:d4:7f:20:6e:ad:51: 8f:69:a4:13:db:da:f9:5e:94:2e:8f:0d:31:97:36: b1:4b:a7:43:e8:76:ce:5f:7d:8a:c5:be:51:6d:a9: 67:33:8e:e7:67:41:37:ef:29:04:cb:61:23:7e:25: db:2c:3b:67:29:7c:04:65:7b:55:8c:ac:79:7d:0e: e6:94:50:d0:05:9b:b7:20:4d:1e:ff:54:cb:7d:af: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:80:8E:E9:36:FA:6A:EF:73:21:7D:50:26:DF:BA:1D:19:97:9C:06 X509v3 Authority Key Identifier: keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:24:77:e9:c7:90:37:51:3d:8d:ad:0c:f3:4b:df:83:67:54: 6b:ff:ad:d1:04:66:47:bd:05:85:d7:d5:97:a4:8b:93:b2:44: 51:22:87:68:ae:37:f6:3f:78:55:87:96:69:e6:bd:4f:c6:3b: ca:ee:6a:cc:97:78:df:39:a1:08:d4:dd:39:87:8c:56:f4:26: 7c:cb:28:31:4d:c7:f8:a9:3c:fc:ef:c4:17:1b:be:5a:ef:17: c7:0b:f4:45:a4:e2:0c:5c:bd:7c:da:dc:a2:9d:ec:f5:94:05: 7e:dd:b4:74:17:d6:78:e8:b3:40:4a:9f:19:92:85:f3:bf:b3: 6a:9d:38:2a:0a:5b:d2:4d:b3:da:35:68:6d:4e:ca:33:48:0a: 40:c5:6e:bd:ce:52:2a:b3:c6:b2:43:29:f9:ab:24:a5:8b:e3: d3:c3:42:44:d9:f3:66:31:8a:15:1a:fa:85:6f:ee:fc:71:71: e7:b3:aa:52:c9:f9:06:63:fb:18:c2:74:23:a0:56:4d:d7:46: 8d:3e:7e:39:7e:d1:41:d2:be:19:7a:be:b8:8a:50:e1:35:02: 95:46:2a:a6:75:3a:42:59:03:e8:40:b4:8f:4a:c8:2f:aa:4b: 88:6b:f2:e4:f2:16:06:7c:4f:d8:1d:63:93:24:61:bc:00:73: fc:1f:0e:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpO86+hUf5F6caMsqy8IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNzUwZWI2ZDEyYzU3ZWE2NDMwYjlmMDIzOTVjYWYyYTgx YmVjZjgwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD Eyg3MTgwOGVlOTM2ZmE2YWVmNzMyMTdkNTAyNmRmYmExZDE5OTc5YzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35a9Tz4s0hWoTNC7zjPLOecgM0yC XGJdTjlK0rkSUk6Xg8azb+B6/jRKDH1fFw1ju5Vkh28ZJxuow91GcVrjk9kx7cDi 2zQWuJKiGjhwIzeiFeqcSMonPgrlhszfN1J4CD0fsCxgX0CxxGvVCFJE7Dy6HY6O a7nZYh2CH3WvAxaSocGQeVGxz8GIY8X5q0LI6SSeyAP5YQ7QYdZjhh87qgg8tS6o Jm0rYQ1ST07UfyBurVGPaaQT29r5XpQujw0xlzaxS6dD6HbOX32Kxb5RbalnM47n Z0E37ykEy2EjfiXbLDtnKXwEZXtVjKx5fQ7mlFDQBZu3IE0e/1TLfa9XOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGAjuk2+mrvcyF9UCbfuh0Zl5wGMB8GA1UdIwQY MBaAFHp1DrbRLFfqZDC58COVyvKoG+z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUt NTcyMjc5ODJhMDAwLzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUtNTcyMjc5ODJhMDAw LzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyR36ceQ N1E9ja0M80vfg2dUa/+t0QRmR70FhdfVl6SLk7JEUSKHaK439j94VYeWaea9T8Y7 yu5qzJd43zmhCNTdOYeMVvQmfMsoMU3H+Kk8/O/EFxu+Wu8Xxwv0RaTiDFy9fNrc op3s9ZQFft20dBfWeOizQEqfGZKF87+zap04Kgpb0k2z2jVobU7KM0gKQMVuvc5S KrPGskMp+askpYvj08NCRNnzZjGKFRr6hW/u/HFx57OqUsn5BmP7GMJ0I6BWTddG jT5+OX7RQdK+GXq+uIpQ4TUClUYqpnU6QlkD6EC0j0rIL6pLiGvy5PIWBnxP2B1j kyRhvABz/B8OJg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:05 2025 by rpki-client