This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft File: A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json) Hash identifier: UjtrIXSq9NSvy/gwSFPLaxUUw02vPzW68nXaNRy5SqU= Subject key identifier: 27:13:6A:30:E0:1A:13:76:92:43:DD:3C:C5:27:FE:B1:78:B2:FC:1F Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72 Certificate issuer: /CN=03f83f5955669cb0a818fbac027c682aeaed5d72 Certificate serial: 019AF2769D9B0B1DDEE16CC921860D127F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft Manifest number: 1281 Signing time: Sat 06 Dec 2025 07:00:50 +0000 Manifest this update: Sat 06 Dec 2025 07:00:50 +0000 Manifest next update: Sun 07 Dec 2025 07:00:50 +0000 Files and hashes: 1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: 8zje5TLmsIN1+d4AhVSHXi55PyqFRdgx6CF6QPVCjdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9d:9b:0b:1d:de:e1:6c:c9:21:86:0d:12:7f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72 Validity Not Before: Dec 6 07:00:50 2025 GMT Not After : Dec 7 07:00:50 2025 GMT Subject: CN=27136a30e01a13769243dd3cc527feb178b2fc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:ee:cd:9a:01:be:fe:74:e0:87:bb:97:78: 2e:f9:16:fd:86:ec:4b:5d:5d:1b:52:af:56:8f:d6: 20:60:34:74:18:be:3c:ce:56:0f:cc:41:a3:02:13: 68:da:64:62:ff:04:65:23:27:42:4d:ca:fa:65:fd: c1:f5:ea:35:da:e7:4b:64:b0:fb:20:cc:20:e0:15: 3e:47:19:7d:44:16:8d:4a:05:34:3d:f0:dd:14:f9: 68:3c:6f:f6:31:fd:26:2e:84:e9:09:ff:26:92:09: b5:c7:66:58:16:f7:6e:1a:04:df:99:52:03:cf:a9: 6a:d4:bb:f4:a4:f4:52:bc:e5:21:99:df:20:47:50: 19:a7:db:a7:d6:fd:b7:48:e8:4e:73:18:0b:43:df: ac:85:b9:f2:9d:4c:aa:90:c4:9f:2f:d7:6d:41:ed: 4c:a9:df:0b:4e:a2:c5:43:54:8e:32:32:c5:5d:6e: 56:b5:48:7d:93:3d:e6:ba:49:1c:e7:45:0c:bc:18: f5:7b:a8:f8:b1:10:f3:cc:90:81:dc:41:29:18:ca: 7a:1c:fb:9f:0a:ea:a4:d7:30:cf:16:bc:99:15:dc: 7c:a9:46:91:9c:45:11:cf:56:83:3e:b7:fe:f7:5f: 86:ff:cd:37:e6:9f:75:20:d1:ff:e8:e4:2c:0f:5c: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:6A:30:E0:1A:13:76:92:43:DD:3C:C5:27:FE:B1:78:B2:FC:1F X509v3 Authority Key Identifier: keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a5:84:91:1d:1b:32:54:31:31:f4:c1:c4:da:b1:11:50:df: 13:fb:d8:60:62:d0:2b:f4:26:f6:3c:16:82:bd:b1:e6:4d:46: 90:f6:78:37:58:eb:99:fc:4e:3a:4a:1e:69:b0:b4:6e:5b:e6: f8:cd:de:af:28:f3:a9:ae:f9:e6:87:92:9b:b2:0a:8c:4e:c8: 7f:c8:f4:60:9a:77:e5:4f:80:29:28:26:56:2a:84:dc:78:ff: 95:34:ac:00:46:0c:1d:4b:60:de:1f:47:b4:01:cb:e4:b5:21: 54:c7:69:80:f0:0a:7d:0d:d9:64:83:8c:7c:a9:7a:ea:ab:e1: b9:fc:5c:96:f4:4a:9d:c7:a4:f1:03:3c:3d:1a:1a:d3:bf:10: 84:a4:cc:2a:ed:ef:cf:64:a4:34:f4:35:a6:14:7f:d5:d7:5b: ee:3c:ca:86:1e:d2:e5:4c:d9:ea:21:7c:fd:f1:01:27:3a:4c: 27:d8:17:e6:34:9f:72:6e:3e:d2:ff:6e:39:c1:46:b9:f1:96: e1:31:40:49:12:14:1b:66:49:b7:46:04:19:cb:26:ad:f2:64: db:94:4d:d9:76:47:88:5a:eb:6e:6f:a9:16:68:29:13:34:d9: 88:b1:28:50:83:ba:2d:e6:2c:cb:ee:a8:95:7d:3d:3f:9e:90: 8c:59:90:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp2bCx3e4WzJIYYNEn9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjgzZjU5NTU2NjljYjBhODE4ZmJhYzAyN2M2ODJhZWFl ZDVkNzIwHhcNMjUxMjA2MDcwMDUwWhcNMjUxMjA3MDcwMDUwWjAzMTEwLwYDVQQD EygyNzEzNmEzMGUwMWExMzc2OTI0M2RkM2NjNTI3ZmViMTc4YjJmYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rTuzZoBvv504Ie7l3gu+Rb9huxL XV0bUq9Wj9YgYDR0GL48zlYPzEGjAhNo2mRi/wRlIydCTcr6Zf3B9eo12udLZLD7 IMwg4BU+Rxl9RBaNSgU0PfDdFPloPG/2Mf0mLoTpCf8mkgm1x2ZYFvduGgTfmVID z6lq1Lv0pPRSvOUhmd8gR1AZp9un1v23SOhOcxgLQ9+shbnynUyqkMSfL9dtQe1M qd8LTqLFQ1SOMjLFXW5WtUh9kz3mukkc50UMvBj1e6j4sRDzzJCB3EEpGMp6HPuf Cuqk1zDPFryZFdx8qUaRnEURz1aDPrf+91+G/8035p91INH/6OQsD1ySVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcTajDgGhN2kkPdPMUn/rF4svwfMB8GA1UdIwQY MBaAFAP4P1lVZpywqBj7rAJ8aCrq7V1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjIt ZjE2ZjFhNzBhYjJkLzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZmJiMGYtNGE5YS00YzMwLThhNjItZjE2ZjFhNzBhYjJk LzEvQV9nX1dWVm1uTENvR1B1c0FueG9LdXJ0WFhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6WEkR0b MlQxMfTBxNqxEVDfE/vYYGLQK/Qm9jwWgr2x5k1GkPZ4N1jrmfxOOkoeabC0blvm +M3eryjzqa755oeSm7IKjE7If8j0YJp35U+AKSgmViqE3Hj/lTSsAEYMHUtg3h9H tAHL5LUhVMdpgPAKfQ3ZZIOMfKl66qvhufxclvRKncek8QM8PRoa078QhKTMKu3v z2SkNPQ1phR/1ddb7jzKhh7S5UzZ6iF8/fEBJzpMJ9gX5jSfcm4+0v9uOcFGufGW 4TFASRIUG2ZJt0YEGcsmrfJk25RN2XZHiFrrbm+pFmgpEzTZiLEoUIO6LeYsy+6o lX09P56QjFmQgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:02 2025 by rpki-client