This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft File: T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json) Hash identifier: nCE6ZrjYLeREkhyiqYFuNBsO5T2EBDYj361stLMxkKk= Subject key identifier: 36:16:D9:A6:C6:95:E6:DF:BB:80:F7:69:92:21:E3:00:2B:25:31:CC Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C Certificate issuer: /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c Certificate serial: 019AF16472A26F130F05DCCB8FF452C949F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft Manifest number: 0362 Signing time: Sat 06 Dec 2025 02:01:23 +0000 Manifest this update: Sat 06 Dec 2025 02:01:23 +0000 Manifest next update: Sun 07 Dec 2025 02:01:23 +0000 Files and hashes: 1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: oauAWYvYvaM69X8rsUY0SvSOMzcM8P5V00l+W97938w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:72:a2:6f:13:0f:05:dc:cb:8f:f4:52:c9:49:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c Validity Not Before: Dec 6 02:01:23 2025 GMT Not After : Dec 7 02:01:23 2025 GMT Subject: CN=3616d9a6c695e6dfbb80f7699221e3002b2531cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:c4:9a:99:41:ca:88:84:23:c6:90:22:19: 5e:9a:f3:2c:cb:c2:12:2d:ab:79:d5:33:27:f5:3e: ca:23:14:22:1c:3a:8e:bf:9e:db:69:07:be:5c:74: c6:c3:f5:39:c1:58:c4:0c:9b:e6:6d:ab:97:12:13: 99:99:25:ca:0c:f7:cb:70:61:89:5a:42:0c:bd:4e: df:c6:c5:6e:7b:4a:08:70:4d:df:1e:60:0e:8e:1f: 56:6a:de:b8:95:ec:95:2b:a1:5a:82:11:b5:2d:29: 58:89:b0:ea:9a:1b:e6:81:23:e4:9a:36:c5:18:15: 4a:c6:8b:cb:4c:21:c6:ce:46:a5:cc:dc:e2:7f:41: 28:d6:72:62:77:e1:af:ee:c7:73:9c:05:8b:0d:a3: a9:91:6b:ab:16:d8:a9:00:b0:16:26:08:37:bc:1a: 1b:b8:da:95:76:0e:44:29:f5:68:14:db:b9:38:87: e6:a1:8a:a6:ab:6a:f0:59:3a:cf:11:dc:0b:f2:88: 95:26:ed:24:07:9a:4c:11:6b:4f:ee:b0:73:c4:d8: d9:72:10:13:c4:67:ed:f1:e0:38:0e:4d:69:2c:ca: 66:31:ce:68:ae:8d:c4:85:1e:b3:e6:8a:90:b7:16: 25:d4:e2:43:73:9e:e1:4f:7c:f8:db:9f:58:9a:7d: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:16:D9:A6:C6:95:E6:DF:BB:80:F7:69:92:21:E3:00:2B:25:31:CC X509v3 Authority Key Identifier: keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:3b:5d:33:0f:ed:f6:7b:e5:97:27:5d:6f:ed:cb:54:9f:e1: d7:0c:7c:e7:46:d3:9a:82:a5:38:c7:90:29:8b:ec:95:54:2e: a5:2a:0e:38:ab:10:cd:dc:4a:bd:0a:66:7e:21:b0:ba:f4:74: 78:eb:20:8d:0e:c8:a5:91:f4:92:a1:25:b1:b9:69:72:19:8b: 15:e2:94:c1:76:a2:2b:64:6e:3c:03:6a:02:ee:9c:ce:8b:67: 67:7c:e4:a4:b1:dd:48:58:31:9f:ff:8d:c3:10:8e:7c:05:21: a1:12:2f:05:3a:54:bd:3a:63:1d:a7:2e:eb:4d:9a:80:19:28: 8f:99:18:d8:82:97:a1:07:c8:11:cf:6e:25:ce:72:5c:79:46: c3:3b:cf:00:9a:a9:8c:3c:af:37:c5:45:3e:da:e0:66:09:34: 25:b8:fa:ee:df:0c:12:03:8f:e0:f0:8e:65:a6:e0:6d:e6:72: 6b:37:9e:ca:00:1f:f3:54:92:64:ac:7a:25:8a:a1:3e:02:b6: 3c:17:14:bd:05:ba:27:d1:1c:22:cf:cd:4f:6b:d6:3e:19:46: 0a:f4:50:6c:9b:7f:d0:77:8a:86:db:e3:3e:20:75:cb:19:a3: d8:0a:d3:b5:5e:41:98:5c:e2:84:cc:ec:5d:ca:fb:7f:eb:33: 39:4f:e9:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHKibxMPBdzLj/RSyUn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNTU3MTBhM2U4NDA1YzFhZmRhNmM2M2U5ZTc3MzY2ZWZj NjFlN2MwHhcNMjUxMjA2MDIwMTIzWhcNMjUxMjA3MDIwMTIzWjAzMTEwLwYDVQQD EygzNjE2ZDlhNmM2OTVlNmRmYmI4MGY3Njk5MjIxZTMwMDJiMjUzMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HEmplByoiEI8aQIhlemvMsy8IS Lat51TMn9T7KIxQiHDqOv57baQe+XHTGw/U5wVjEDJvmbauXEhOZmSXKDPfLcGGJ WkIMvU7fxsVue0oIcE3fHmAOjh9Wat64leyVK6FaghG1LSlYibDqmhvmgSPkmjbF GBVKxovLTCHGzkalzNzif0Eo1nJid+Gv7sdznAWLDaOpkWurFtipALAWJgg3vBob uNqVdg5EKfVoFNu5OIfmoYqmq2rwWTrPEdwL8oiVJu0kB5pMEWtP7rBzxNjZchAT xGft8eA4Dk1pLMpmMc5oro3EhR6z5oqQtxYl1OJDc57hT3z4259Ymn3V4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYW2abGlebfu4D3aZIh4wArJTHMMB8GA1UdIwQY MBaAFE9VcQo+hAXBr9psY+nnc2bvxh58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDFWeENqNkVCY0d2Mm14ajZlZHpadV9HSG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMzU1ZjYtMjcwYy00MmI4LWIyNjQt YjBkNzExN2Q3OTRmLzEvVDFWeENqNkVCY0d2Mm14ajZlZHpadV9HSG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wMzU1ZjYtMjcwYy00MmI4LWIyNjQtYjBkNzExN2Q3OTRm LzEvVDFWeENqNkVCY0d2Mm14ajZlZHpadV9HSG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDtdMw/t 9nvllyddb+3LVJ/h1wx850bTmoKlOMeQKYvslVQupSoOOKsQzdxKvQpmfiGwuvR0 eOsgjQ7IpZH0kqElsblpchmLFeKUwXaiK2RuPANqAu6czotnZ3zkpLHdSFgxn/+N wxCOfAUhoRIvBTpUvTpjHacu602agBkoj5kY2IKXoQfIEc9uJc5yXHlGwzvPAJqp jDyvN8VFPtrgZgk0Jbj67t8MEgOP4PCOZabgbeZyazeeygAf81SSZKx6JYqhPgK2 PBcUvQW6J9EcIs/NT2vWPhlGCvRQbJt/0HeKhtvjPiB1yxmj2ArTtV5BmFzihMzs Xcr7f+szOU/pIw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:08 2025 by rpki-client