This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json) Hash identifier: D085xEtKCzz6/oHMWtaACpVOp+E9uGuqfhgOzSwJB/A= Subject key identifier: 1E:1D:99:57:5A:04:B8:A4:0F:B4:A6:D5:8F:26:E4:74:2C:FB:37:06 Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93 Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193 Certificate serial: 019AF276A63C4150D4E474B5A1607D979EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft Manifest number: 0789 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: V2e5Hvd1Nt46i9Etqve73h4v/U004LW/sVBuIpVM1P8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a6:3c:41:50:d4:e4:74:b5:a1:60:7d:97:9e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88eafafff81b95dcee57727057ed67114a338193 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=1e1d99575a04b8a40fb4a6d58f26e4742cfb3706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:92:20:a4:9a:28:54:f9:60:86:39:9a:a5:39: 11:7d:75:5b:42:72:2d:7d:d1:80:2b:72:bf:4e:b5: 18:fc:e0:4a:d9:40:09:51:01:fa:96:0c:91:58:da: 2f:41:eb:77:6f:0c:c1:93:bd:24:e0:ed:0c:fa:28: 68:86:7c:ac:67:80:7b:4d:6b:da:b1:b3:ec:fa:b5: ff:74:08:f1:02:9b:f8:e5:fa:73:b2:45:97:2a:76: a4:1b:fa:ac:c1:a1:db:61:d9:02:53:a0:80:0d:ae: 01:f2:2b:15:21:da:98:4f:0a:cf:c3:dd:58:a5:3d: 15:89:8e:3d:22:5c:0d:aa:40:6b:d3:bd:9f:01:f2: ea:45:8f:58:8e:3b:df:4a:22:ac:76:1d:1c:17:ed: 46:d7:ca:74:68:ba:09:e1:88:8f:4e:ef:59:ad:2e: d3:cc:b1:dd:5b:c0:06:6b:dd:b0:13:fe:68:66:31: c0:6f:c9:8b:a4:6e:4a:75:d1:44:61:21:32:f3:66: 17:12:e8:18:df:ae:ad:0e:96:45:2a:f1:bd:14:1c: ad:ff:d6:c6:3d:ff:39:bf:dc:b4:be:3c:0d:90:e2: 97:04:5c:ff:35:89:18:8c:25:b9:0a:ac:35:48:be: 25:0f:93:d9:97:f7:ec:7d:5c:76:d5:35:12:3d:25: 8a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1D:99:57:5A:04:B8:A4:0F:B4:A6:D5:8F:26:E4:74:2C:FB:37:06 X509v3 Authority Key Identifier: keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f1:17:9d:ff:87:ec:f0:63:3c:15:79:56:9f:6b:2e:ea:12: f4:95:9e:17:cd:02:e4:ae:c9:49:8f:ad:1a:b5:b0:22:7a:b4: 9f:32:18:2f:30:77:47:43:ab:5e:8f:83:90:5c:fd:0b:2a:e8: 11:82:ea:45:45:53:f9:d8:6b:b9:74:49:40:26:f5:36:bc:24: 9b:95:d5:6f:6e:95:59:04:11:0e:43:b4:a6:10:77:50:9a:30: 20:69:97:44:dc:09:e6:69:dc:3c:db:8e:b7:9f:87:cd:91:52: 41:95:d2:1c:ea:9e:e1:ba:3d:01:fa:34:07:20:5f:30:80:a0: cb:64:e2:f0:ff:cd:8a:d2:74:38:18:30:8f:6e:f0:2e:51:ee: 62:42:59:5b:e6:36:ea:43:7b:ea:28:13:dd:36:2f:4e:8c:ee: 91:c1:7f:61:8e:e4:ac:57:bb:f5:9d:ad:ec:89:e1:ef:af:09: b6:9d:f8:ac:9d:57:5a:61:29:a7:42:fb:88:fc:c7:f1:8a:f2: c0:77:89:28:09:7c:ba:f8:4d:c4:0e:d9:65:37:12:76:f5:f8: 9e:ba:42:8d:3a:d4:96:d8:8e:3d:21:1a:95:1e:4d:e2:07:3e: 14:d9:6e:70:73:5c:5c:3a:c8:4b:f3:a7:e4:85:cb:a9:11:ee: 41:23:d1:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqY8QVDU5HS1oWB9l57vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWFmYWZmZjgxYjk1ZGNlZTU3NzI3MDU3ZWQ2NzExNGEz MzgxOTMwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EygxZTFkOTk1NzVhMDRiOGE0MGZiNGE2ZDU4ZjI2ZTQ3NDJjZmIzNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95IgpJooVPlghjmapTkRfXVbQnIt fdGAK3K/TrUY/OBK2UAJUQH6lgyRWNovQet3bwzBk70k4O0M+ihohnysZ4B7TWva sbPs+rX/dAjxApv45fpzskWXKnakG/qswaHbYdkCU6CADa4B8isVIdqYTwrPw91Y pT0ViY49IlwNqkBr072fAfLqRY9YjjvfSiKsdh0cF+1G18p0aLoJ4YiPTu9ZrS7T zLHdW8AGa92wE/5oZjHAb8mLpG5KddFEYSEy82YXEugY366tDpZFKvG9FByt/9bG Pf85v9y0vjwNkOKXBFz/NYkYjCW5Cqw1SL4lD5PZl/fsfVx21TUSPSWKewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4dmVdaBLikD7Sm1Y8m5HQs+zcGMB8GA1UdIwQY MBaAFIjq+v/4G5Xc7ldycFftZxFKM4GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMt MWEzODdhNDU2NTc5LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9mOWVkNjQtNWNjMy00YTBkLWE3MGMtMWEzODdhNDU2NTc5 LzEvaU9yNl9fZ2JsZHp1VjNKd1YtMW5FVW96Z1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPEXnf+H 7PBjPBV5Vp9rLuoS9JWeF80C5K7JSY+tGrWwInq0nzIYLzB3R0OrXo+DkFz9Cyro EYLqRUVT+dhruXRJQCb1Nrwkm5XVb26VWQQRDkO0phB3UJowIGmXRNwJ5mncPNuO t5+HzZFSQZXSHOqe4bo9Afo0ByBfMICgy2Ti8P/NitJ0OBgwj27wLlHuYkJZW+Y2 6kN76igT3TYvTozukcF/YY7krFe79Z2t7Inh768Jtp34rJ1XWmEpp0L7iPzH8Yry wHeJKAl8uvhNxA7ZZTcSdvX4nrpCjTrUltiOPSEalR5N4gc+FNlucHNcXDrIS/On 5IXLqRHuQSPR2g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:44 2025 by rpki-client