This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json) Hash identifier: DL0ZmqDkGjf7AcAqc0RRVIm/MGy7/YQKuUC+MWz7ZJE= Subject key identifier: EA:4F:35:1D:06:00:F0:9F:C0:0B:B0:66:B5:F6:61:C5:E2:9C:F5:D6 Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b Certificate serial: 019AF3F770B842EB978902C32466F03EE3AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft Manifest number: 1464 Signing time: Sat 06 Dec 2025 14:01:10 +0000 Manifest this update: Sat 06 Dec 2025 14:01:10 +0000 Manifest next update: Sun 07 Dec 2025 14:01:10 +0000 Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: 71SnQnuFPVQ9QIZl4DXOiZj9zEadlIfIOW4AEN/LjIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:70:b8:42:eb:97:89:02:c3:24:66:f0:3e:e3:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b Validity Not Before: Dec 6 14:01:10 2025 GMT Not After : Dec 7 14:01:10 2025 GMT Subject: CN=ea4f351d0600f09fc00bb066b5f661c5e29cf5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:36:4a:1f:30:9f:b3:40:79:94:31:f5:db: 30:3e:56:c3:97:e8:31:57:86:44:b1:24:a7:94:a0: 06:51:5a:84:02:9c:85:9b:49:2b:90:0e:58:c7:07: 9d:ee:93:db:4f:20:b0:aa:3c:f1:45:ed:72:c0:a6: 34:3e:37:29:4c:4c:d1:7c:75:b4:64:29:2d:92:1a: b8:38:b8:cb:7c:14:b1:7d:69:be:b8:8c:82:56:74: dc:0d:48:1f:fe:13:80:bf:c2:ba:4c:67:99:64:fd: ce:66:30:2e:c1:54:f5:79:e1:8a:63:46:d2:44:5b: 7e:76:3c:22:77:68:e0:41:92:15:84:3b:4b:d3:6a: 16:f8:99:eb:1a:79:3c:1f:6d:d0:a3:ea:2c:2a:5e: 71:8e:69:d5:7b:86:b0:98:1f:aa:fd:cd:d8:61:fa: a8:09:91:49:36:a4:90:74:f3:31:3f:f3:36:f3:db: e7:a4:e8:94:b4:c6:43:58:9d:65:95:a3:a9:36:c4: 2b:59:95:96:bf:24:fb:fe:a4:54:a7:4d:de:1e:e3: d6:14:57:0d:ba:b2:dc:4a:1e:2d:a8:dc:d2:72:88: 40:2b:04:58:5f:ab:28:12:2d:93:6a:62:ac:02:38: dd:2a:85:40:40:bb:3f:a1:b4:b5:8b:14:8c:1a:3e: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:35:1D:06:00:F0:9F:C0:0B:B0:66:B5:F6:61:C5:E2:9C:F5:D6 X509v3 Authority Key Identifier: keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bd:f5:75:18:1f:d3:d8:1f:95:77:d8:e5:4f:aa:a5:55:5f: 81:af:23:e4:7f:dd:56:83:27:41:d6:2f:0e:dd:27:13:c6:ac: 7f:a6:18:2c:f5:95:1f:8a:16:bf:5b:3f:b7:4e:33:f8:a5:57: e0:61:87:ae:95:5c:08:d7:d4:a8:9f:d9:74:fb:54:66:b8:df: 73:44:e2:36:cb:41:e7:37:9d:ac:de:b1:2c:94:dd:b3:36:d3: 3a:c7:ff:18:1f:07:63:4b:f2:60:9b:1d:8a:32:3f:42:15:ae: 49:63:da:d6:7b:71:5a:58:5b:77:e7:7a:f1:de:e6:76:b6:ef: 9f:fa:e5:3e:fe:71:21:ed:ea:b0:0d:18:7e:9a:83:0a:43:0b: c9:b8:f0:e8:ae:3a:3a:aa:75:b3:4f:b6:d7:de:b7:a9:8d:30: 92:7d:d3:3f:63:81:b5:5a:e3:81:81:8e:75:a6:56:ed:97:96: 4e:70:96:04:01:bb:56:96:03:79:3e:f4:f7:01:44:05:fa:4f: 4c:b4:42:a9:93:8f:64:04:e2:63:93:a3:78:70:8c:d9:a5:19: a2:98:7b:d5:a5:db:64:ec:e4:1c:dc:98:07:9e:c5:ba:a2:2e: ba:3c:75:4b:96:43:79:1d:2a:7d:95:4b:4e:29:d3:46:50:14: c3:60:0d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93C4QuuXiQLDJGbwPuOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWFmY2Y0ZGU5MjBiOWNlNjQ1ZDZlNjk2ZGYwOGFhOGIw NTUxOWIwHhcNMjUxMjA2MTQwMTEwWhcNMjUxMjA3MTQwMTEwWjAzMTEwLwYDVQQD EyhlYTRmMzUxZDA2MDBmMDlmYzAwYmIwNjZiNWY2NjFjNWUyOWNmNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuY2Sh8wn7NAeZQx9dswPlbDl+gx V4ZEsSSnlKAGUVqEApyFm0krkA5Yxwed7pPbTyCwqjzxRe1ywKY0PjcpTEzRfHW0 ZCktkhq4OLjLfBSxfWm+uIyCVnTcDUgf/hOAv8K6TGeZZP3OZjAuwVT1eeGKY0bS RFt+djwid2jgQZIVhDtL02oW+JnrGnk8H23Qo+osKl5xjmnVe4awmB+q/c3YYfqo CZFJNqSQdPMxP/M289vnpOiUtMZDWJ1llaOpNsQrWZWWvyT7/qRUp03eHuPWFFcN urLcSh4tqNzScohAKwRYX6soEi2TamKsAjjdKoVAQLs/obS1ixSMGj7jzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpPNR0GAPCfwAuwZrX2YcXinPXWMB8GA1UdIwQY MBaAFNLq/PTekguc5kXW5pbfCKqLBVGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHVyODlONlNDNXptUmRibWx0OElxb3NGVVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84Mjc4NWYtZjBjNS00MzEzLTkxYTEt NmRmZDhiYmFkZmU5LzEvMHVyODlONlNDNXptUmRibWx0OElxb3NGVVpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84Mjc4NWYtZjBjNS00MzEzLTkxYTEtNmRmZDhiYmFkZmU5 LzEvMHVyODlONlNDNXptUmRibWx0OElxb3NGVVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar31dRgf 09gflXfY5U+qpVVfga8j5H/dVoMnQdYvDt0nE8asf6YYLPWVH4oWv1s/t04z+KVX 4GGHrpVcCNfUqJ/ZdPtUZrjfc0TiNstB5zedrN6xLJTdszbTOsf/GB8HY0vyYJsd ijI/QhWuSWPa1ntxWlhbd+d68d7mdrbvn/rlPv5xIe3qsA0YfpqDCkMLybjw6K46 Oqp1s0+21963qY0wkn3TP2OBtVrjgYGOdaZW7ZeWTnCWBAG7VpYDeT709wFEBfpP TLRCqZOPZATiY5OjeHCM2aUZoph71aXbZOzkHNyYB57FuqIuujx1S5ZDeR0qfZVL TinTRlAUw2AN/A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:59 2025 by rpki-client