This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft File: 793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json) Hash identifier: ywro/w3+17Cw8GU2Ip8oy+i/vq660rB+yRRpJi33ZB8= Subject key identifier: 83:5C:38:4F:D3:73:BA:89:4B:AB:63:A7:AF:00:C0:CC:C5:90:3C:43 Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F Certificate issuer: /CN=efddc86b82005ff8c7c264a2e067037a608b481f Certificate serial: 019AF31B5ADE5B030A55A795B9503687E165 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: Y6440wxGDMeEeQu4QssG1qYcD8eiLKZqIMrq9H+lN3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5a:de:5b:03:0a:55:a7:95:b9:50:36:87:e1:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=835c384fd373ba894bab63a7af00c0ccc5903c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:b1:ec:b0:c8:8e:c1:b3:fc:dd:88:4c:99: 34:f8:9a:af:ba:2e:47:23:d4:83:6a:c9:d6:6c:08: 8f:a5:da:39:60:4f:30:84:8d:3d:a1:76:6e:19:90: 01:e6:57:ee:3e:c7:04:bd:32:48:e2:6c:e4:86:7c: b2:f9:97:96:6b:df:5b:78:b2:e4:12:05:99:62:bc: 4a:46:e6:48:60:44:1d:4a:4c:d8:87:a9:5b:21:ea: 31:87:fe:9a:ea:44:f5:8c:c6:a8:5e:ce:f8:e4:40: 4c:98:28:bc:48:9e:67:ab:38:57:82:9e:db:71:43: a7:26:5c:98:c2:95:2e:22:6c:06:44:bb:5f:67:14: b2:b1:05:4e:ce:8c:09:45:f6:8e:43:9e:bb:97:fb: 9c:86:a5:79:ec:70:3f:8b:cc:b2:de:5f:f5:c8:a7: 8b:d7:63:f0:62:2c:f5:43:08:5c:c3:d0:92:99:f6: 12:ef:f3:06:2c:f6:82:41:83:84:bb:63:3f:68:1b: 51:08:3d:7d:54:bc:ac:ce:dc:b7:52:99:25:9b:fb: f0:22:93:d5:4b:8d:c5:58:5c:7f:2c:6b:a9:70:ab: 12:6e:89:b6:52:56:a9:e1:65:91:79:a8:40:59:b4: 54:37:83:e9:9f:61:3a:7e:48:d8:5b:4f:fc:22:22: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5C:38:4F:D3:73:BA:89:4B:AB:63:A7:AF:00:C0:CC:C5:90:3C:43 X509v3 Authority Key Identifier: keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ca:ac:6a:8c:c3:c9:05:e8:7e:78:bb:47:7a:60:25:85:46: 73:4d:95:b5:f3:4a:48:d5:21:c8:16:94:a8:b1:15:c7:5f:65: d8:f5:4e:03:21:eb:66:f0:b6:dc:dd:b1:12:1e:68:b0:54:b9: 6a:7f:c1:d3:99:9f:46:3b:c5:61:c7:40:d6:96:c4:b5:38:df: 08:2d:48:e3:74:0e:a9:49:e3:05:df:29:a4:39:bb:e5:5f:07: cb:cb:41:c3:86:db:f8:20:87:f7:22:fe:11:9f:7e:6f:a3:b9: 85:fe:0c:cc:38:78:2f:f2:eb:3f:d8:d7:3a:10:34:4e:2e:ae: c3:77:99:8b:5e:80:f4:f5:ec:ba:49:2f:91:fd:41:85:e4:e9: 8e:62:34:12:1a:16:7d:a7:d3:51:03:ff:46:72:a4:d1:5f:67: f1:55:24:85:82:db:2e:3c:1f:ec:3a:58:62:74:dc:f2:9a:bf: 2f:93:59:3b:f2:e0:33:49:e2:4c:25:6d:d3:77:68:e1:23:6c: 5d:28:e6:7a:1b:8b:05:7c:95:e7:74:79:96:4e:e4:90:da:6a: 88:88:d3:9f:28:cb:42:72:6e:5d:4a:ad:f1:00:11:c7:9b:ff: 9c:a3:e0:d8:2d:8f:16:99:e1:24:f6:73:e8:a6:81:96:66:70: d1:ba:10:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1reWwMKVaeVuVA2h+FlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZGRjODZiODIwMDVmZjhjN2MyNjRhMmUwNjcwMzdhNjA4 YjQ4MWYwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD Eyg4MzVjMzg0ZmQzNzNiYTg5NGJhYjYzYTdhZjAwYzBjY2M1OTAzYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheyx7LDIjsGz/N2ITJk0+Jqvui5H I9SDasnWbAiPpdo5YE8whI09oXZuGZAB5lfuPscEvTJI4mzkhnyy+ZeWa99beLLk EgWZYrxKRuZIYEQdSkzYh6lbIeoxh/6a6kT1jMaoXs745EBMmCi8SJ5nqzhXgp7b cUOnJlyYwpUuImwGRLtfZxSysQVOzowJRfaOQ567l/uchqV57HA/i8yy3l/1yKeL 12PwYiz1Qwhcw9CSmfYS7/MGLPaCQYOEu2M/aBtRCD19VLyszty3Upklm/vwIpPV S43FWFx/LGupcKsSbom2Ulap4WWReahAWbRUN4Ppn2E6fkjYW0/8IiL7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINcOE/Tc7qJS6tjp68AwMzFkDxDMB8GA1UdIwQY MBaAFO/dyGuCAF/4x8JkouBnA3pgi0gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMt M2ViMTQ4OGNlOGUxLzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMtM2ViMTQ4OGNlOGUx LzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsqsaozD yQXofni7R3pgJYVGc02VtfNKSNUhyBaUqLEVx19l2PVOAyHrZvC23N2xEh5osFS5 an/B05mfRjvFYcdA1pbEtTjfCC1I43QOqUnjBd8ppDm75V8Hy8tBw4bb+CCH9yL+ EZ9+b6O5hf4MzDh4L/LrP9jXOhA0Ti6uw3eZi16A9PXsukkvkf1BheTpjmI0EhoW fafTUQP/RnKk0V9n8VUkhYLbLjwf7DpYYnTc8pq/L5NZO/LgM0niTCVt03do4SNs XSjmehuLBXyV53R5lk7kkNpqiIjTnyjLQnJuXUqt8QARx5v/nKPg2C2PFpnhJPZz 6KaBlmZw0boQtA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:05 2025 by rpki-client