This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft File: e8DFmvgYqB1_53rx-3MC5LQRflE.mft (raw, json) Hash identifier: onPKck4Vpf9aul4qI12wsMhmPZkBrIjvhbhYl3AQ3JA= Subject key identifier: 47:D3:CB:9F:74:4F:8A:B9:0D:E3:57:CD:75:83:9C:78:A2:9D:16:E8 Authority key identifier: 7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51 Certificate issuer: /CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51 Certificate serial: 019B32D66CABA29D14AF5B8931833FD21754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 19:01:11 +0000 Manifest this update: Thu 18 Dec 2025 19:01:11 +0000 Manifest next update: Fri 19 Dec 2025 19:01:11 +0000 Files and hashes: 1: e8DFmvgYqB1_53rx-3MC5LQRflE.crl (hash: 3hnMXmu9090CuJezf14PZ0NcDEB+kihB43IBjMW7C44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:6c:ab:a2:9d:14:af:5b:89:31:83:3f:d2:17:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc0c59af818a81d7fe77af1fb7302e4b4117e51 Validity Not Before: Dec 18 19:01:11 2025 GMT Not After : Dec 19 19:01:11 2025 GMT Subject: CN=47d3cb9f744f8ab90de357cd75839c78a29d16e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:ec:ce:c7:90:6a:2c:37:fc:78:a6:6c:78: ad:ba:24:21:6a:e8:35:db:dc:1e:e6:87:1f:15:8b: 7e:48:e6:03:4b:82:6f:6b:51:01:a9:94:fc:fb:17: 72:86:e8:45:79:bb:07:6e:1c:29:d4:04:0a:d3:38: ce:a0:87:52:e4:d2:01:61:08:fc:35:b2:94:62:c5: 8a:49:d3:85:55:eb:cb:50:62:bb:e3:46:b2:4c:97: f9:80:f8:e5:93:14:ab:ee:a4:c1:fa:08:9c:5e:13: da:0e:58:19:2e:ec:3a:5e:93:aa:5b:06:25:60:e9: 78:94:a2:38:d0:6b:2e:9f:17:86:de:7a:8b:56:48: c2:9b:ff:b1:a6:d1:07:27:6b:f5:ea:9a:1d:eb:6b: 54:5f:f4:91:a8:d1:64:47:96:fc:56:a9:f4:94:58: d9:ec:03:6f:8b:86:18:d7:7d:23:e8:f8:f4:df:31: 44:36:3f:91:7d:3e:c6:a3:30:3f:e0:67:7f:83:b7: c0:8d:b8:e8:72:7f:e8:f8:cd:ef:ce:3a:55:ac:e9: 2b:13:f9:a2:5e:8e:0a:e6:9b:93:d4:0e:21:d0:e1: 1d:67:e3:95:e7:23:e8:1a:01:3d:9a:6f:d4:09:a9: 7d:45:be:b3:35:ed:a3:37:35:0d:bd:06:ff:80:e1: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:CB:9F:74:4F:8A:B9:0D:E3:57:CD:75:83:9C:78:A2:9D:16:E8 X509v3 Authority Key Identifier: keyid:7B:C0:C5:9A:F8:18:A8:1D:7F:E7:7A:F1:FB:73:02:E4:B4:11:7E:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8DFmvgYqB1_53rx-3MC5LQRflE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3fe087-a350-413d-87a1-9aba55c9eb5f/1/e8DFmvgYqB1_53rx-3MC5LQRflE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b8:89:ea:d1:e6:ea:80:0a:eb:c5:86:b6:73:d5:89:45:de: 8e:46:d8:ab:5b:11:cd:91:68:e9:3b:e3:ee:d5:75:f5:4a:10: d2:ea:2e:b3:7a:a9:e2:3a:52:60:94:a9:8e:db:a5:fb:d9:7d: 4d:98:ef:06:22:c8:6e:b5:d9:38:fe:34:15:3a:3e:68:e6:b6: 7b:26:32:61:15:08:26:b6:10:cb:1f:e0:a4:5d:e4:e8:a5:e5: ae:90:0c:5f:0c:f5:9e:48:b5:b6:18:5c:b5:5b:fe:57:27:c4: 80:7f:a7:21:95:dc:ab:0a:49:0d:f2:90:b2:34:cf:fa:19:8e: 69:c5:f6:3e:af:4f:43:bc:70:83:fe:15:fa:7d:04:ac:fd:f5: 3d:11:6e:05:6b:17:7a:92:d9:70:f4:0f:ba:fe:bf:ea:a8:f6: 46:47:fa:0f:00:df:a1:e5:0a:44:de:d2:e7:86:95:bc:86:d8: 0f:11:e2:13:2b:43:32:3b:f5:32:8b:e1:f1:9e:4d:ed:9d:e7: b8:12:b5:b1:cf:af:bf:fa:48:85:6e:3d:3a:1d:22:d8:33:28: 03:42:4b:f2:d0:d6:dc:7d:f0:3a:92:23:3e:6c:ae:8c:1f:ae: d1:c7:bd:31:ed:4d:ee:66:d7:f5:23:27:ca:b5:6c:2d:33:2b: a0:66:65:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1myrop0Ur1uJMYM/0hdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzBjNTlhZjgxOGE4MWQ3ZmU3N2FmMWZiNzMwMmU0YjQx MTdlNTEwHhcNMjUxMjE4MTkwMTExWhcNMjUxMjE5MTkwMTExWjAzMTEwLwYDVQQD Eyg0N2QzY2I5Zjc0NGY4YWI5MGRlMzU3Y2Q3NTgzOWM3OGEyOWQxNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7szseQaiw3/HimbHituiQhaug1 29we5ocfFYt+SOYDS4Jva1EBqZT8+xdyhuhFebsHbhwp1AQK0zjOoIdS5NIBYQj8 NbKUYsWKSdOFVevLUGK740ayTJf5gPjlkxSr7qTB+gicXhPaDlgZLuw6XpOqWwYl YOl4lKI40GsunxeG3nqLVkjCm/+xptEHJ2v16pod62tUX/SRqNFkR5b8Vqn0lFjZ 7ANvi4YY130j6Pj03zFENj+RfT7GozA/4Gd/g7fAjbjocn/o+M3vzjpVrOkrE/mi Xo4K5puT1A4h0OEdZ+OV5yPoGgE9mm/UCal9Rb6zNe2jNzUNvQb/gOEp1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfTy590T4q5DeNXzXWDnHiinRboMB8GA1UdIwQY MBaAFHvAxZr4GKgdf+d68ftzAuS0EX5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zZmUwODctYTM1MC00MTNkLTg3YTEt OWFiYTU1YzllYjVmLzEvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zZmUwODctYTM1MC00MTNkLTg3YTEtOWFiYTU1YzllYjVm LzEvZThERm12Z1lxQjFfNTNyeC0zTUM1TFFSZmxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7iJ6tHm 6oAK68WGtnPViUXejkbYq1sRzZFo6Tvj7tV19UoQ0uous3qp4jpSYJSpjtul+9l9 TZjvBiLIbrXZOP40FTo+aOa2eyYyYRUIJrYQyx/gpF3k6KXlrpAMXwz1nki1thhc tVv+VyfEgH+nIZXcqwpJDfKQsjTP+hmOacX2Pq9PQ7xwg/4V+n0ErP31PRFuBWsX epLZcPQPuv6/6qj2Rkf6DwDfoeUKRN7S54aVvIbYDxHiEytDMjv1Movh8Z5N7Z3n uBK1sc+vv/pIhW49Oh0i2DMoA0JL8tDW3H3wOpIjPmyujB+u0ce9Me1N7mbX9SMn yrVsLTMroGZlWw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:43 2025 by rpki-client