This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft File: PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft (raw, json) Hash identifier: DQbx72hRNGLgFARXN8y8PB+ZcJnVaX47o109+9mRM0g= Subject key identifier: D3:82:79:6B:DC:F1:72:90:27:22:0F:EF:A0:0E:92:03:58:53:D2:89 Authority key identifier: 3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A Certificate issuer: /CN=3f2177a3e86c839cfd193dbb46eda8087d82141a Certificate serial: 019AF31BB17832DE93365EAE4793EAC25FB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft Manifest number: 1450 Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl (hash: wAx02ykCjfCZQF18WXsUyzJfZH1huTVD/28LBM7MD/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b1:78:32:de:93:36:5e:ae:47:93:ea:c2:5f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2177a3e86c839cfd193dbb46eda8087d82141a Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=d382796bdcf1729027220fefa00e92035853d289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:78:48:60:41:f0:ba:fb:d0:49:69:16:ee: 04:f7:1b:1a:3a:0a:6d:f9:d8:fa:74:d9:7f:0c:13: 2b:57:fb:1e:00:0c:35:53:56:d5:f8:be:42:ec:01: 4c:f7:42:3f:0d:c7:8f:7d:54:49:17:07:54:0a:32: ac:76:4d:fb:33:4f:47:79:d4:47:a0:84:18:72:70: dc:3f:9c:47:68:3e:c9:e8:10:7f:b1:7a:3d:a7:03: b4:e6:c9:18:29:9e:33:6c:fc:0c:dd:bf:e4:71:50: 1c:0b:e4:89:72:2d:f6:ff:9a:57:06:36:53:86:a6: e6:dc:67:5f:69:7f:a6:45:34:f5:03:96:f8:57:1d: 7e:e2:2d:31:1e:db:27:fc:15:8c:66:b8:c8:ae:b1: 40:88:23:13:bd:cf:83:b7:6a:cc:45:84:b8:2d:db: b8:6b:9e:e3:00:eb:db:fb:27:73:55:a2:dc:4f:92: 7a:c1:67:05:92:b3:82:73:6f:f9:23:72:33:b8:91: 00:c9:eb:d7:bd:40:0f:d5:84:76:10:30:fc:f7:95: b1:44:1b:b5:20:80:6f:c1:e2:5b:91:85:c6:9e:a6: 73:3d:37:1c:80:d0:11:1b:f2:3d:ef:aa:22:91:db: 41:1a:f7:60:30:02:9d:a3:85:56:01:1d:f2:06:56: 5d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:82:79:6B:DC:F1:72:90:27:22:0F:EF:A0:0E:92:03:58:53:D2:89 X509v3 Authority Key Identifier: keyid:3F:21:77:A3:E8:6C:83:9C:FD:19:3D:BB:46:ED:A8:08:7D:82:14:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyF3o-hsg5z9GT27Ru2oCH2CFBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2cf926-810e-411e-bd5b-161e513ebdc2/1/PyF3o-hsg5z9GT27Ru2oCH2CFBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ec:62:72:0c:72:fe:3c:74:74:dc:b4:28:42:fb:d5:cc:b1: 59:a5:a9:e1:f6:e2:37:17:90:9f:48:6c:15:2d:8c:6d:3f:ef: 14:9c:84:3f:76:97:66:11:ba:be:e2:f2:6c:20:0f:6c:b7:d9: b3:02:85:74:d7:f4:19:a7:87:ba:59:23:25:10:15:88:68:03: f5:02:4f:0e:c3:00:8f:68:77:6b:b8:91:18:6d:13:cd:82:c1: bb:8a:c5:d6:1a:d2:70:9c:5b:db:5d:6d:02:d7:d3:78:c9:e8: ac:dd:7e:49:ac:a3:2a:6a:e3:a4:97:2b:c7:e8:7c:e2:a6:f1: 5c:86:46:78:4d:0f:01:a8:ef:06:bf:81:f2:24:fe:77:27:6f: ff:e1:ed:04:7c:71:c7:ec:2a:18:9a:97:70:fa:fb:bd:48:82: 0d:1c:ad:aa:3f:9a:17:9e:db:75:5a:e2:f7:6b:4d:08:86:91: dd:61:f6:38:33:f8:03:ce:78:79:54:e4:1a:1a:72:d5:36:1d: 62:7c:a6:22:10:96:30:d3:1b:f6:99:e1:66:7f:6b:ef:45:40: ca:6d:a5:67:56:b9:61:5d:66:0f:06:40:83:ec:fd:83:4d:95: 41:4a:53:1f:a7:b9:30:a0:da:f1:6d:84:68:97:53:c8:f4:9c: 0b:40:f1:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7F4Mt6TNl6uR5Pqwl+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjE3N2EzZTg2YzgzOWNmZDE5M2RiYjQ2ZWRhODA4N2Q4 MjE0MWEwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD EyhkMzgyNzk2YmRjZjE3MjkwMjcyMjBmZWZhMDBlOTIwMzU4NTNkMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjh4SGBB8Lr70ElpFu4E9xsaOgpt +dj6dNl/DBMrV/seAAw1U1bV+L5C7AFM90I/DcePfVRJFwdUCjKsdk37M09HedRH oIQYcnDcP5xHaD7J6BB/sXo9pwO05skYKZ4zbPwM3b/kcVAcC+SJci32/5pXBjZT hqbm3GdfaX+mRTT1A5b4Vx1+4i0xHtsn/BWMZrjIrrFAiCMTvc+Dt2rMRYS4Ldu4 a57jAOvb+ydzVaLcT5J6wWcFkrOCc2/5I3IzuJEAyevXvUAP1YR2EDD895WxRBu1 IIBvweJbkYXGnqZzPTccgNARG/I976oikdtBGvdgMAKdo4VWAR3yBlZdIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOCeWvc8XKQJyIP76AOkgNYU9KJMB8GA1UdIwQY MBaAFD8hd6PobIOc/Rk9u0btqAh9ghQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWIt MTYxZTUxM2ViZGMyLzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yY2Y5MjYtODEwZS00MTFlLWJkNWItMTYxZTUxM2ViZGMy LzEvUHlGM28taHNnNXo5R1QyN1J1Mm9DSDJDRkJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOxicgxy /jx0dNy0KEL71cyxWaWp4fbiNxeQn0hsFS2MbT/vFJyEP3aXZhG6vuLybCAPbLfZ swKFdNf0GaeHulkjJRAViGgD9QJPDsMAj2h3a7iRGG0TzYLBu4rF1hrScJxb211t AtfTeMnorN1+SayjKmrjpJcrx+h84qbxXIZGeE0PAajvBr+B8iT+dydv/+HtBHxx x+wqGJqXcPr7vUiCDRytqj+aF57bdVri92tNCIaR3WH2ODP4A854eVTkGhpy1TYd YnymIhCWMNMb9pnhZn9r70VAym2lZ1a5YV1mDwZAg+z9g02VQUpTH6e5MKDa8W2E aJdTyPScC0Dxjw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:41 2025 by rpki-client