This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft File: _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json) Hash identifier: SXtMCP8PMvWLsYTZF2dDViSbW4DBwZBBIohSpFU2LO8= Subject key identifier: 83:68:62:8D:04:AA:58:98:FC:D6:EE:D5:F3:9F:43:66:0B:C0:30:3C Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60 Certificate issuer: /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160 Certificate serial: 019AF49C12648712F78A7BE07E9A3F66BEB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 17:01:00 +0000 Manifest this update: Sat 06 Dec 2025 17:01:00 +0000 Manifest next update: Sun 07 Dec 2025 17:01:00 +0000 Files and hashes: 1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: B4roZ6hwMds6946uwy0AbCWME6lcrihbO/gB55MmlYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:12:64:87:12:f7:8a:7b:e0:7e:9a:3f:66:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160 Validity Not Before: Dec 6 17:01:00 2025 GMT Not After : Dec 7 17:01:00 2025 GMT Subject: CN=8368628d04aa5898fcd6eed5f39f43660bc0303c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:29:d6:bf:6c:81:36:26:a3:62:e7:b7:64: 00:9e:0f:4a:5e:14:c3:b8:b5:0a:23:56:c7:10:09: 9d:fa:dd:c1:46:f8:45:d6:8b:72:98:e1:dd:d3:38: 6c:8c:dd:a9:80:0c:21:f3:8f:06:1d:f3:0d:c2:22: 37:b2:9d:64:4d:44:30:10:4b:07:7d:fb:3d:e8:f4: e6:d5:fa:be:32:52:6a:51:fa:3e:79:92:b9:9e:21: 0d:df:df:fb:a4:2e:50:d3:56:5c:31:d2:1c:cb:71: 64:79:3f:05:1f:39:ea:5e:dd:50:6d:36:fa:89:18: cc:c2:74:d7:cb:4d:70:6e:eb:a4:cf:f5:dd:17:7a: cb:72:e7:cc:98:a3:45:2e:77:3b:b6:5d:18:13:ef: 10:52:66:e1:99:59:55:bd:f5:d4:39:76:26:87:17: 29:be:ac:2f:55:d0:dd:0e:d3:56:e1:09:8c:2a:99: 6d:e1:52:a8:dd:e5:90:40:48:6c:43:5f:1d:3d:ff: 47:9a:c7:67:1d:96:1c:24:50:fa:69:8a:25:b3:dd: 5e:8a:bc:8b:0b:0b:5d:4a:93:13:c6:0e:90:3b:59: 3e:c1:2e:d6:e5:93:1b:ba:94:03:5a:62:ac:a8:04: 79:13:72:61:6f:d4:36:12:16:37:b1:4f:57:fc:17: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:68:62:8D:04:AA:58:98:FC:D6:EE:D5:F3:9F:43:66:0B:C0:30:3C X509v3 Authority Key Identifier: keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5a:08:66:f1:05:b1:04:2e:f3:28:63:4f:15:f0:3c:79:51: 07:11:df:3c:f3:fd:f0:36:df:49:97:3b:7d:24:8c:4e:2e:6a: 82:cf:c4:10:32:b8:6b:05:44:e0:e3:93:d5:3b:8c:72:28:b7: b2:b0:d7:3a:cf:ae:97:83:1a:de:ef:3e:39:06:b7:e3:63:be: c6:93:35:13:b1:7e:bb:0d:5c:41:c2:d9:31:b2:6e:cd:09:52: de:d0:21:07:e2:ae:d1:54:65:be:68:24:d9:8d:62:f1:04:9e: 66:06:4c:c3:f3:d2:43:64:2c:8f:a4:ba:fe:9e:7f:38:00:cc: 7d:a7:7a:88:06:07:47:dc:b3:fe:b7:f4:08:0d:6e:ef:2b:0a: 9c:44:84:cf:f4:a1:24:6f:1e:30:34:c0:98:c2:76:4c:92:d9: 07:44:67:70:ce:6d:66:b5:76:e1:dc:c9:12:ed:57:d6:0d:48: e3:86:11:e2:64:25:d1:45:ec:87:77:c6:11:9b:01:37:5b:37: be:8f:94:e7:40:42:31:8c:e7:6c:78:d1:ff:42:80:7f:90:ed: f3:b5:cf:de:b4:4c:87:67:30:a8:31:bb:5e:fc:36:1f:bf:f6: dc:94:35:dd:d6:0f:f7:cc:d0:b5:fd:23:b0:55:c8:f0:55:7b: d4:13:81:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBJkhxL3invgfpo/Zr6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZmY1ZWQxZDc1MzViY2ZhMDNlMWYyODhhYzJjNzc1NmEx YjExNjAwHhcNMjUxMjA2MTcwMTAwWhcNMjUxMjA3MTcwMTAwWjAzMTEwLwYDVQQD Eyg4MzY4NjI4ZDA0YWE1ODk4ZmNkNmVlZDVmMzlmNDM2NjBiYzAzMDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRgp1r9sgTYmo2Lnt2QAng9KXhTD uLUKI1bHEAmd+t3BRvhF1otymOHd0zhsjN2pgAwh848GHfMNwiI3sp1kTUQwEEsH ffs96PTm1fq+MlJqUfo+eZK5niEN39/7pC5Q01ZcMdIcy3FkeT8FHznqXt1QbTb6 iRjMwnTXy01wbuukz/XdF3rLcufMmKNFLnc7tl0YE+8QUmbhmVlVvfXUOXYmhxcp vqwvVdDdDtNW4QmMKplt4VKo3eWQQEhsQ18dPf9HmsdnHZYcJFD6aYols91eiryL CwtdSpMTxg6QO1k+wS7W5ZMbupQDWmKsqAR5E3Jhb9Q2EhY3sU9X/Bdf1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINoYo0EqliY/Nbu1fOfQ2YLwDA8MB8GA1UdIwQY MBaAFP7/XtHXU1vPoD4fKIrCx3VqGxFgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZDczNzEtZGRlMy00YzE1LThiZTAt NThhMTFiYjg5M2NkLzEvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9lZDczNzEtZGRlMy00YzE1LThiZTAtNThhMTFiYjg5M2Nk LzEvX3Y5ZTBkZFRXOC1nUGg4b2lzTEhkV29iRVdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFoIZvEF sQQu8yhjTxXwPHlRBxHfPPP98DbfSZc7fSSMTi5qgs/EEDK4awVE4OOT1TuMcii3 srDXOs+ul4Ma3u8+OQa342O+xpM1E7F+uw1cQcLZMbJuzQlS3tAhB+Ku0VRlvmgk 2Y1i8QSeZgZMw/PSQ2Qsj6S6/p5/OADMfad6iAYHR9yz/rf0CA1u7ysKnESEz/Sh JG8eMDTAmMJ2TJLZB0RncM5tZrV24dzJEu1X1g1I44YR4mQl0UXsh3fGEZsBN1s3 vo+U50BCMYznbHjR/0KAf5Dt87XP3rRMh2cwqDG7Xvw2H7/23JQ13dYP98zQtf0j sFXI8FV71BOBbA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:43:31 2025 by rpki-client