This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json) Hash identifier: lXhzVJijyYznW5OqsSrlV66pkvrgVRS9jBv9Nw9ffjM= Subject key identifier: 89:62:C0:5D:3A:21:39:B7:21:B3:0D:FE:7A:77:82:82:D4:4E:27:FC Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03 Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003 Certificate serial: 019AF31D5B265655044C2B918DC69444712E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:58 +0000 Manifest this update: Sat 06 Dec 2025 10:02:58 +0000 Manifest next update: Sun 07 Dec 2025 10:02:58 +0000 Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: QbDka+uRHBWjzCIIa4KUQwJHpu1FxFSMnPZWu0B/Hcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5b:26:56:55:04:4c:2b:91:8d:c6:94:44:71:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003 Validity Not Before: Dec 6 10:02:58 2025 GMT Not After : Dec 7 10:02:58 2025 GMT Subject: CN=8962c05d3a2139b721b30dfe7a778282d44e27fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:27:95:db:3e:c7:76:ea:b4:12:ee:75:bd: 0f:f5:56:10:40:89:b7:20:de:18:94:2d:3e:71:e7: 1e:28:60:45:0d:b0:5f:d4:ee:2d:bf:16:1f:28:a6: 6e:d0:5b:54:73:ec:15:41:08:37:18:6c:5f:9b:1c: ef:07:af:3e:97:a4:e2:5c:03:2b:f5:60:c4:d8:f5: 64:02:d1:2d:2a:68:4d:17:58:1d:0a:03:6e:94:fd: 8b:e6:90:cf:db:a1:78:56:2d:d2:44:a4:f2:31:7a: 2f:f6:57:f6:3c:81:fb:3e:1e:3a:98:9d:37:c3:25: 83:72:26:c1:12:b6:73:13:2d:fe:9a:b3:af:fe:57: b9:7c:0d:88:f9:5b:02:12:9e:b5:07:16:f1:2a:4d: 2a:dc:09:28:4c:5d:84:49:07:e5:9e:94:02:ac:58: 22:e8:bc:24:45:ad:6b:4e:b8:e8:0f:dd:4c:a9:76: 8e:ef:65:eb:f8:b0:c2:1d:18:a5:28:9a:d1:37:41: 59:a5:09:b4:63:4b:ba:c6:0d:98:3b:c0:46:04:83: cc:18:dd:5d:c0:7f:34:68:cd:7c:52:ff:c3:6f:1b: e0:89:c8:20:c6:19:3c:eb:ad:90:79:2e:76:54:d7: e7:b7:d9:99:e2:4a:0c:e1:54:f9:3d:0e:85:10:e0: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:62:C0:5D:3A:21:39:B7:21:B3:0D:FE:7A:77:82:82:D4:4E:27:FC X509v3 Authority Key Identifier: keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4c:0c:f6:39:4a:6f:b4:c6:ae:90:43:3a:ec:9e:35:85:f7: fc:5b:46:fe:f9:3d:31:a8:86:c3:2c:4c:4b:aa:d8:3a:a7:b1: 8e:b2:d7:4b:5c:cc:fb:0b:b8:fa:ed:15:0d:24:a4:9f:bb:a0: dd:65:1d:c1:61:68:a5:7d:bd:4c:44:92:55:0a:23:eb:c2:86: f3:54:96:71:07:8d:a3:c1:2e:5e:b5:0e:6d:2c:3c:71:e9:48: df:c0:41:41:54:c2:cf:25:42:91:cc:82:36:56:58:5c:a4:81: 7d:9f:b7:f2:fe:3f:0c:55:24:9b:1e:9f:57:a3:ca:2d:1e:1a: 7f:38:09:6a:6b:f2:79:fb:7c:4b:ca:4c:2b:cc:c6:55:9f:b9: 36:0a:a0:e0:57:98:b2:1d:55:ce:f9:ad:11:35:41:5e:dc:7f: b8:08:42:44:71:4b:43:93:00:1b:4a:40:6f:5b:ee:04:af:1f: 1a:34:95:f8:a9:38:88:95:e5:e2:5a:63:de:93:4d:4c:86:fc: c2:d1:37:6b:b6:59:7a:c3:12:7e:ca:f5:20:fe:99:00:2e:63: 03:00:1b:79:ce:f1:6a:f7:5a:d6:42:6f:f4:b9:3d:a6:8e:3d: 8c:53:19:76:4c:e3:0d:0f:94:c2:51:fa:12:8e:4d:39:3f:17: bc:ae:d7:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVsmVlUETCuRjcaURHEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTBlYzM1MmU4ZGJiMGNkZjZlMDhjNTdjNzFjYWExMWE0 NDUwMDMwHhcNMjUxMjA2MTAwMjU4WhcNMjUxMjA3MTAwMjU4WjAzMTEwLwYDVQQD Eyg4OTYyYzA1ZDNhMjEzOWI3MjFiMzBkZmU3YTc3ODI4MmQ0NGUyN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+snlds+x3bqtBLudb0P9VYQQIm3 IN4YlC0+ceceKGBFDbBf1O4tvxYfKKZu0FtUc+wVQQg3GGxfmxzvB68+l6TiXAMr 9WDE2PVkAtEtKmhNF1gdCgNulP2L5pDP26F4Vi3SRKTyMXov9lf2PIH7Ph46mJ03 wyWDcibBErZzEy3+mrOv/le5fA2I+VsCEp61BxbxKk0q3AkoTF2ESQflnpQCrFgi 6LwkRa1rTrjoD91MqXaO72Xr+LDCHRilKJrRN0FZpQm0Y0u6xg2YO8BGBIPMGN1d wH80aM18Uv/Dbxvgicggxhk8662QeS52VNfnt9mZ4koM4VT5PQ6FEOD7CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIliwF06ITm3IbMN/np3goLUTif8MB8GA1UdIwQY MBaAFK5Q7DUujbsM324IxXxxyqEaRFADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxEc05TNk51d3pmYmdqRmZISEtvUnBFVUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jODk2MWYtZDFkNy00NmFjLTlmOGQt MzNlYmFjMDk1MDc3LzEvcmxEc05TNk51d3pmYmdqRmZISEtvUnBFVUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jODk2MWYtZDFkNy00NmFjLTlmOGQtMzNlYmFjMDk1MDc3 LzEvcmxEc05TNk51d3pmYmdqRmZISEtvUnBFVUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkwM9jlK b7TGrpBDOuyeNYX3/FtG/vk9MaiGwyxMS6rYOqexjrLXS1zM+wu4+u0VDSSkn7ug 3WUdwWFopX29TESSVQoj68KG81SWcQeNo8EuXrUObSw8celI38BBQVTCzyVCkcyC NlZYXKSBfZ+38v4/DFUkmx6fV6PKLR4afzgJamvyeft8S8pMK8zGVZ+5Ngqg4FeY sh1VzvmtETVBXtx/uAhCRHFLQ5MAG0pAb1vuBK8fGjSV+Kk4iJXl4lpj3pNNTIb8 wtE3a7ZZesMSfsr1IP6ZAC5jAwAbec7xavda1kJv9Lk9po49jFMZdkzjDQ+UwlH6 Eo5NOT8XvK7X6g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:57 2025 by rpki-client