This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft File: C4K9iLuhoX0siu9h3sHaxmFe75A.mft (raw, json) Hash identifier: GtZA2cpeUbnPoSrcxxoEFVMt/aigXOdPtlDL/CG1pbA= Subject key identifier: 69:B5:E3:11:B5:48:14:F4:DA:9C:B2:1A:7D:40:67:E5:8B:D2:52:8A Authority key identifier: 0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90 Certificate issuer: /CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90 Certificate serial: 019AF50AB11444FFBCEEA9F38C0FEBE2A310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:49 +0000 Manifest this update: Sat 06 Dec 2025 19:01:49 +0000 Manifest next update: Sun 07 Dec 2025 19:01:49 +0000 Files and hashes: 1: C4K9iLuhoX0siu9h3sHaxmFe75A.crl (hash: G7ULP5zkeLSyXDBQJbu2aOwFjIl5Yle1jEgXrgW1bro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:b1:14:44:ff:bc:ee:a9:f3:8c:0f:eb:e2:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b82bd88bba1a17d2c8aef61dec1dac6615eef90 Validity Not Before: Dec 6 19:01:49 2025 GMT Not After : Dec 7 19:01:49 2025 GMT Subject: CN=69b5e311b54814f4da9cb21a7d4067e58bd2528a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:07:b9:a4:8a:80:97:81:b1:a5:26:d9:43: d4:c2:cc:d6:f4:1a:fc:24:8d:00:71:a8:17:cf:64: 55:4e:21:dd:30:84:c8:f6:38:66:05:3d:b6:22:e4: 12:84:16:c3:fe:d4:bb:8d:f6:b2:2b:c0:3e:52:81: f8:bb:7b:3e:e5:a5:c0:3a:84:f9:82:82:3a:01:1a: c3:f9:27:e0:dd:ff:8b:ce:84:59:a4:35:3b:d0:5b: 7c:57:9d:ba:49:44:2a:09:52:2e:b9:f5:71:2d:37: a7:fd:c1:ef:85:12:e9:88:b7:ee:0e:56:2a:ea:f3: 81:c6:47:4c:52:af:3b:be:82:cf:bf:d1:f9:ef:e7: d9:e7:1c:b9:3f:3e:77:56:4c:4b:de:04:04:c0:08: 8e:7f:26:7e:27:9d:b7:ec:de:b3:2f:8d:bc:96:65: d4:06:e4:e1:2b:6e:a5:d7:fd:00:90:7b:82:4b:e2: 18:4b:e6:b7:0b:c6:60:ad:90:d9:b6:9c:36:ed:07: de:f7:0b:cb:46:64:07:ff:8c:8c:91:7c:da:13:d0: 99:bf:19:6f:44:4f:78:e6:81:e6:4e:59:5e:f1:20: fa:85:c9:ee:60:03:22:2e:8f:45:c2:3d:8d:5d:c8: ee:17:1a:28:77:a7:22:38:96:ee:a8:8c:65:a4:d9: 50:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:E3:11:B5:48:14:F4:DA:9C:B2:1A:7D:40:67:E5:8B:D2:52:8A X509v3 Authority Key Identifier: keyid:0B:82:BD:88:BB:A1:A1:7D:2C:8A:EF:61:DE:C1:DA:C6:61:5E:EF:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4K9iLuhoX0siu9h3sHaxmFe75A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b7a50-e872-40ef-b758-15881c7df0b8/1/C4K9iLuhoX0siu9h3sHaxmFe75A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f8:7e:e0:8d:83:74:83:8e:40:3e:b4:73:bb:74:26:3b:d1: 25:31:41:68:29:94:62:90:ae:10:9a:05:ac:cf:19:c0:b9:e1: ca:53:eb:9b:57:6d:55:dc:d9:ad:3d:19:7c:54:35:1b:4a:5e: e2:27:87:87:78:38:e6:75:af:f1:a0:33:99:08:3c:df:e0:e4: 3d:fd:00:fc:8e:9a:ae:24:93:11:b4:d0:07:75:a8:59:0f:df: 19:06:ea:0b:a3:bb:21:31:d3:8e:b1:08:95:44:9a:60:9e:9e: e9:42:f7:af:98:7b:60:c4:ed:fa:e0:32:df:45:1d:c8:b6:6f: 61:37:48:5e:26:7e:47:5a:7f:d8:ac:41:28:34:d7:e8:bf:9c: d1:9f:cc:fe:21:ee:1f:84:d4:3f:6d:9a:46:6f:08:99:27:24: 86:ca:6e:a6:88:6c:97:cc:7d:1d:b7:bb:a3:b7:60:26:52:0d: 2a:d6:af:1a:b8:79:92:25:cc:55:ea:a4:04:98:33:b6:39:56: e8:b9:6e:9b:46:00:82:7f:dc:a0:f8:5e:c2:54:dc:54:16:99: 62:d0:9e:23:61:c0:e3:20:eb:5d:f9:65:94:ca:e5:1f:00:75: 5d:71:c2:05:23:b8:68:a3:39:f8:39:89:1c:da:a9:f6:bd:86: 88:91:7c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CrEURP+87qnzjA/r4qMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiODJiZDg4YmJhMWExN2QyYzhhZWY2MWRlYzFkYWM2NjE1 ZWVmOTAwHhcNMjUxMjA2MTkwMTQ5WhcNMjUxMjA3MTkwMTQ5WjAzMTEwLwYDVQQD Eyg2OWI1ZTMxMWI1NDgxNGY0ZGE5Y2IyMWE3ZDQwNjdlNThiZDI1MjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNwHuaSKgJeBsaUm2UPUwszW9Br8 JI0AcagXz2RVTiHdMITI9jhmBT22IuQShBbD/tS7jfayK8A+UoH4u3s+5aXAOoT5 goI6ARrD+Sfg3f+LzoRZpDU70Ft8V526SUQqCVIuufVxLTen/cHvhRLpiLfuDlYq 6vOBxkdMUq87voLPv9H57+fZ5xy5Pz53VkxL3gQEwAiOfyZ+J5237N6zL428lmXU BuThK26l1/0AkHuCS+IYS+a3C8ZgrZDZtpw27Qfe9wvLRmQH/4yMkXzaE9CZvxlv RE945oHmTlle8SD6hcnuYAMiLo9Fwj2NXcjuFxood6ciOJbuqIxlpNlQfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm14xG1SBT02pyyGn1AZ+WL0lKKMB8GA1UdIwQY MBaAFAuCvYi7oaF9LIrvYd7B2sZhXu+QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81YjdhNTAtZTg3Mi00MGVmLWI3NTgt MTU4ODFjN2RmMGI4LzEvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81YjdhNTAtZTg3Mi00MGVmLWI3NTgtMTU4ODFjN2RmMGI4 LzEvQzRLOWlMdWhvWDBzaXU5aDNzSGF4bUZlNzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfh+4I2D dIOOQD60c7t0JjvRJTFBaCmUYpCuEJoFrM8ZwLnhylPrm1dtVdzZrT0ZfFQ1G0pe 4ieHh3g45nWv8aAzmQg83+DkPf0A/I6ariSTEbTQB3WoWQ/fGQbqC6O7ITHTjrEI lUSaYJ6e6UL3r5h7YMTt+uAy30UdyLZvYTdIXiZ+R1p/2KxBKDTX6L+c0Z/M/iHu H4TUP22aRm8ImSckhspupohsl8x9Hbe7o7dgJlINKtavGrh5kiXMVeqkBJgztjlW 6Llum0YAgn/coPhewlTcVBaZYtCeI2HA4yDrXflllMrlHwB1XXHCBSO4aKM5+DmJ HNqp9r2GiJF8yg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:05 2025 by rpki-client