This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json) Hash identifier: GvEHx/YwDRB7VfGKaTSJieIaZS9OP/qa8cJnhn03BBM= Subject key identifier: 7D:A8:91:5A:0A:8E:51:E1:E6:1A:EF:DA:06:C2:30:27:CB:24:1A:A7 Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e Certificate serial: 019AF208EDF524644F3835371FD794CB18AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft Manifest number: 0E33 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: u1c/neBZwIx02vf0C5FgB+FtoYRkGatlTGJas0nbe3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:f5:24:64:4f:38:35:37:1f:d7:94:cb:18:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e385733213b34236019a140ff19c5398ed71730e Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=7da8915a0a8e51e1e61aefda06c23027cb241aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:f6:83:66:13:a5:f2:95:af:46:5b:c7:30: 79:f1:16:28:a7:39:ff:f7:61:8d:dd:21:d5:5a:1e: 25:31:d8:9e:fb:96:b5:a0:74:62:3f:a8:f7:0f:ab: c9:da:8c:eb:22:ab:f2:ec:9e:b5:d9:f2:82:9b:4b: 51:c9:04:17:39:b4:96:d8:40:7c:b0:28:83:21:20: bd:fd:ec:9a:f8:1c:4b:7f:ff:84:02:66:ec:94:a2: ca:5e:1f:76:00:55:29:a5:95:9f:66:d8:d4:1c:4b: 84:c4:6f:32:33:42:59:9b:83:50:f2:22:52:e1:7a: a3:4f:1b:99:14:43:dd:3b:fc:39:1d:d7:4d:dd:e5: 9b:ec:c8:8c:aa:1f:42:9e:08:a3:9e:bb:5c:8d:be: a8:6e:cf:94:d8:c9:e1:28:4b:57:d1:e2:5e:09:bd: e3:db:21:11:7c:da:65:55:d7:c8:20:ee:27:15:bd: ea:d5:ca:de:21:9d:4d:39:b9:f1:ed:8a:79:29:e9: c6:fb:01:02:de:c7:c5:cf:43:28:73:9d:5f:8a:5e: 4b:b9:e9:d2:41:a1:81:a8:2d:7c:81:81:dc:4b:07: cc:64:56:41:20:2a:7e:4b:f4:92:62:bd:2b:84:9c: e0:c5:b5:2a:59:24:62:6a:9d:49:97:50:2d:63:34: 93:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A8:91:5A:0A:8E:51:E1:E6:1A:EF:DA:06:C2:30:27:CB:24:1A:A7 X509v3 Authority Key Identifier: keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:23:03:aa:5f:4c:6e:15:af:dc:00:ac:c3:e7:07:87:c9:5d: d4:8d:38:29:55:82:28:ec:1c:21:17:e7:50:fa:e9:3f:c4:d6: 09:5a:29:8a:52:bd:da:23:cf:d4:34:53:b4:13:f0:9a:8c:04: 81:3a:6f:2c:7f:6e:ed:00:73:87:34:02:48:36:83:9c:df:44: e5:7c:3b:2e:9f:08:51:03:b3:d3:c1:d5:94:0d:a6:b8:33:53: 62:af:d7:10:82:e6:03:96:95:9e:c8:18:f9:05:1b:05:d0:5d: 8f:6a:50:5d:e0:53:8c:8d:54:07:48:75:93:85:e4:50:b6:22: 72:02:b4:f1:2d:7d:0e:1c:84:d4:46:ca:e4:ca:31:42:a6:fe: 8f:7a:93:b0:61:0b:47:ba:6b:c4:0a:71:ec:50:46:de:95:05: 92:28:37:a3:94:a5:95:a4:c4:bf:76:99:08:ff:0a:13:3b:d9: 44:3d:34:af:d2:a1:b9:c5:37:98:4d:50:b7:cc:f2:34:af:34: 1f:8e:9e:01:95:c3:cd:09:d5:e0:ca:94:ae:03:ef:c3:7b:ab: 0d:6b:e5:38:2c:ae:f7:33:7c:80:61:70:6d:fc:d4:9f:93:04: ba:0f:aa:7b:23:a2:04:45:d3:8f:a0:81:1c:d7:21:74:b3:36: b8:dc:b9:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO31JGRPODU3H9eUyxiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3 MTczMGUwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg3ZGE4OTE1YTBhOGU1MWUxZTYxYWVmZGEwNmMyMzAyN2NiMjQxYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPL2g2YTpfKVr0ZbxzB58RYopzn/ 92GN3SHVWh4lMdie+5a1oHRiP6j3D6vJ2ozrIqvy7J612fKCm0tRyQQXObSW2EB8 sCiDISC9/eya+BxLf/+EAmbslKLKXh92AFUppZWfZtjUHEuExG8yM0JZm4NQ8iJS 4XqjTxuZFEPdO/w5HddN3eWb7MiMqh9Cngijnrtcjb6obs+U2MnhKEtX0eJeCb3j 2yERfNplVdfIIO4nFb3q1creIZ1NObnx7Yp5KenG+wEC3sfFz0Moc51fil5LuenS QaGBqC18gYHcSwfMZFZBICp+S/SSYr0rhJzgxbUqWSRiap1Jl1AtYzST/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2okVoKjlHh5hrv2gbCMCfLJBqnMB8GA1UdIwQY MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3 LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiMDql9M bhWv3ACsw+cHh8ld1I04KVWCKOwcIRfnUPrpP8TWCVopilK92iPP1DRTtBPwmowE gTpvLH9u7QBzhzQCSDaDnN9E5Xw7Lp8IUQOz08HVlA2muDNTYq/XEILmA5aVnsgY +QUbBdBdj2pQXeBTjI1UB0h1k4XkULYicgK08S19DhyE1EbK5MoxQqb+j3qTsGEL R7prxApx7FBG3pUFkig3o5SllaTEv3aZCP8KEzvZRD00r9KhucU3mE1Qt8zyNK80 H46eAZXDzQnV4MqUrgPvw3urDWvlOCyu9zN8gGFwbfzUn5MEug+qeyOiBEXTj6CB HNchdLM2uNy5vA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:44:29 2025 by rpki-client