This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json) Hash identifier: L9oLJQ74eOyEUnTjWEIohJGpCSq/4A6j6e0kBdz2kZs= Subject key identifier: 5C:2D:B9:BB:8B:8B:64:B8:35:7F:14:4A:CB:EB:AA:E8:19:B5:BA:62 Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35 Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35 Certificate serial: 019AF31D87B8CC954844F99AF17DDED46D3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft Manifest number: 0A83 Signing time: Sat 06 Dec 2025 10:03:10 +0000 Manifest this update: Sat 06 Dec 2025 10:03:10 +0000 Manifest next update: Sun 07 Dec 2025 10:03:10 +0000 Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: 5YLp79B4xFrmNjIkEgqCDT8U2jnGNJPrZw0xm9WPKJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:87:b8:cc:95:48:44:f9:9a:f1:7d:de:d4:6d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35 Validity Not Before: Dec 6 10:03:10 2025 GMT Not After : Dec 7 10:03:10 2025 GMT Subject: CN=5c2db9bb8b8b64b8357f144acbebaae819b5ba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ad:91:3d:05:8f:9f:8b:b4:30:1f:1a:fb:fd: 4e:e6:13:81:5f:38:8d:ce:d9:db:e5:25:40:9f:98: 31:4c:20:3c:7c:16:e2:dc:3a:5e:bf:ca:95:8a:8d: a3:53:e1:7e:bb:cb:6e:dc:16:34:3a:44:1b:a0:88: 0c:db:e4:69:ce:58:ce:a6:75:5d:6a:29:f4:f9:e5: 5d:57:13:48:49:f0:db:98:22:5d:e2:f2:39:c7:f4: 75:38:8e:82:fe:ed:c7:d1:d6:e3:34:98:68:96:9f: aa:b3:fd:54:f5:69:43:e9:24:07:c7:ae:66:f0:fe: 36:fa:4b:c7:03:58:5f:6f:84:b2:14:35:21:71:c3: 9b:fe:b9:dc:97:20:cb:82:57:8d:c3:20:64:46:8e: fd:76:27:3e:b8:5e:f1:2e:2d:04:ff:ec:c7:de:51: 40:6e:e5:4c:65:de:87:6c:48:b7:7a:d6:bf:38:e2: be:3c:ed:42:da:06:5c:b1:4a:0e:9c:3c:48:2f:44: 54:3e:b7:21:34:bf:64:67:19:fb:58:03:f4:7a:4d: bd:67:ca:b0:44:4e:e8:9c:f1:08:6c:5e:79:ad:3d: 7d:c2:8c:3f:49:37:45:9f:c6:93:56:02:b9:bb:34: 81:dc:ff:54:d4:55:2d:12:cc:c4:55:76:97:b0:03: 74:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2D:B9:BB:8B:8B:64:B8:35:7F:14:4A:CB:EB:AA:E8:19:B5:BA:62 X509v3 Authority Key Identifier: keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:88:3c:36:cc:91:d4:31:58:90:bd:38:26:04:d4:5c:ce:f9: 61:e2:e6:6c:27:7a:b5:77:4e:1e:aa:cf:5e:9f:d5:c7:e6:80: c6:4f:0f:2a:5d:f0:5c:61:c3:cc:87:a3:3d:d0:59:c1:cb:48: 7b:59:68:d1:0b:6c:a2:21:ef:b5:fb:b5:eb:c3:6c:45:31:11: e3:40:5d:d9:0a:06:d5:f9:77:b2:2d:ca:ef:9d:c6:3f:a5:a7: e2:2b:0a:f0:09:53:4f:23:af:0b:36:81:8b:df:99:9d:47:72: e4:67:c8:ef:2a:59:fe:bc:4f:82:58:67:14:9a:86:fa:c6:a8: 94:0a:08:2a:64:1f:e5:70:1c:16:34:ca:0b:0d:33:69:df:bd: 74:7a:cd:96:c0:f5:d2:06:fc:9e:ee:55:3f:ba:0f:cf:9b:00: 75:77:7e:69:65:5c:16:e2:42:b6:98:f6:5a:1a:99:18:00:50: d2:60:0d:29:6c:f9:66:0e:de:d4:aa:b1:08:f4:f2:51:05:6f: a7:9b:6e:85:79:b8:e8:72:da:35:b6:72:a6:c8:c2:c8:16:f7: c1:1c:be:9d:7a:07:a1:09:97:4e:b6:6b:88:63:b2:32:7d:d2: de:38:e2:0d:15:4d:ca:16:c9:dd:0f:d8:08:78:6a:52:59:20: 51:ff:11:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHYe4zJVIRPma8X3e1G07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDE3YmEwYTZlYmIzZjNiMWI4MmFmNzUwZmJlMjhhODZh NDFiMzUwHhcNMjUxMjA2MTAwMzEwWhcNMjUxMjA3MTAwMzEwWjAzMTEwLwYDVQQD Eyg1YzJkYjliYjhiOGI2NGI4MzU3ZjE0NGFjYmViYWFlODE5YjViYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi62RPQWPn4u0MB8a+/1O5hOBXziN ztnb5SVAn5gxTCA8fBbi3Dpev8qVio2jU+F+u8tu3BY0OkQboIgM2+RpzljOpnVd ain0+eVdVxNISfDbmCJd4vI5x/R1OI6C/u3H0dbjNJholp+qs/1U9WlD6SQHx65m 8P42+kvHA1hfb4SyFDUhccOb/rnclyDLgleNwyBkRo79dic+uF7xLi0E/+zH3lFA buVMZd6HbEi3eta/OOK+PO1C2gZcsUoOnDxIL0RUPrchNL9kZxn7WAP0ek29Z8qw RE7onPEIbF55rT19wow/STdFn8aTVgK5uzSB3P9U1FUtEszEVXaXsAN02QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwtubuLi2S4NX8USsvrqugZtbpiMB8GA1UdIwQY MBaAFJNBe6Cm67Pzsbgq91D74oqGpBs1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMt NzI4ZmQ2YmFiYWZmLzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xOGM5OTktYjczYS00MjE0LWEyMmMtNzI4ZmQ2YmFiYWZm LzEvazBGN29LYnJzX094dUNyM1VQdmlpb2FrR3pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYg8NsyR 1DFYkL04JgTUXM75YeLmbCd6tXdOHqrPXp/Vx+aAxk8PKl3wXGHDzIejPdBZwctI e1lo0QtsoiHvtfu168NsRTER40Bd2QoG1fl3si3K753GP6Wn4isK8AlTTyOvCzaB i9+ZnUdy5GfI7ypZ/rxPglhnFJqG+saolAoIKmQf5XAcFjTKCw0zad+9dHrNlsD1 0gb8nu5VP7oPz5sAdXd+aWVcFuJCtpj2WhqZGABQ0mANKWz5Zg7e1KqxCPTyUQVv p5tuhXm46HLaNbZypsjCyBb3wRy+nXoHoQmXTrZriGOyMn3S3jjiDRVNyhbJ3Q/Y CHhqUlkgUf8RfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:36 2025 by rpki-client