This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json) Hash identifier: KewUgLmqOC/4VQVJ5ZoMzX1q7dRWUPJRboEizV2ywMI= Subject key identifier: A7:73:AD:5E:68:E8:53:24:08:30:3C:E7:07:D1:78:9C:73:9C:68:3C Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95 Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95 Certificate serial: 019AF12E2C6C6370AF530DF1A2CB417F4C35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft Manifest number: 04A0 Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: 2O/QkP2bXdcBZ5XGd8OfB2ElWzheQoWT5jLqGcLonQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2c:6c:63:70:af:53:0d:f1:a2:cb:41:7f:4c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95 Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=a773ad5e68e8532408303ce707d1789c739c683c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:bb:d8:28:fc:e8:ad:02:cb:49:04:33:e6: 32:62:a6:1a:14:3a:b6:66:14:c6:fc:92:0e:b4:4a: ac:77:c2:84:86:a5:6e:1f:7a:9e:bf:f0:04:a0:db: 30:74:11:0e:95:dd:4c:bf:09:26:18:79:f4:08:b0: 5b:a4:b2:2f:eb:1b:24:80:85:7a:2c:f0:b8:ad:d1: c9:45:67:48:3c:55:d9:f5:45:90:68:21:35:01:8e: ab:ae:7e:6c:85:71:58:9b:52:ed:e6:31:ad:35:8c: d2:82:40:0a:86:9e:51:f6:b7:5f:fa:e4:e0:72:33: 72:01:1a:ca:a4:19:35:94:b9:42:8b:80:42:52:68: da:57:86:7c:d9:b6:a1:1c:29:35:8d:45:74:e7:71: 9a:9e:bb:25:97:6d:c0:08:7b:14:c1:1d:47:23:b3: 2f:2d:fd:2d:8b:78:7e:fb:8f:88:78:7a:9b:a1:62: a1:c9:4e:42:e3:69:07:36:52:3f:db:5d:8b:70:45: a8:e8:16:5a:18:3c:ac:d8:61:56:f5:5a:01:65:a8: 33:16:c2:0f:ef:a2:6f:04:dc:3b:b3:ac:ff:88:d9: 33:85:f4:35:33:13:57:d4:74:4f:03:e7:c0:5b:f5: a7:d6:fa:06:27:65:44:20:12:6e:ff:82:2c:b2:39: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:73:AD:5E:68:E8:53:24:08:30:3C:E7:07:D1:78:9C:73:9C:68:3C X509v3 Authority Key Identifier: keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7a:f0:55:01:40:94:0b:6b:84:0f:a4:ec:0e:1d:38:3c:5a: 7a:0a:cc:db:aa:c7:ec:59:55:21:a4:bb:9a:f0:c3:38:c5:8a: c8:25:c4:75:c5:af:72:7b:65:3a:bb:7a:52:e3:36:0f:df:8f: 0b:08:cb:9f:c7:b5:72:c6:ea:01:f7:23:df:63:1f:ff:3f:78: d9:4f:03:1a:e7:c1:12:f0:f5:b2:33:3a:2e:16:d4:e0:ee:5b: dd:2e:f0:9f:8e:5f:23:a9:2b:0c:27:7d:e5:a4:b8:a6:68:98: 95:bb:40:2c:c3:c6:3c:04:1f:bc:15:cb:77:b7:c0:c1:fe:57: 47:b0:d1:77:61:67:25:f7:c6:5b:45:16:c9:17:70:7a:68:f6: ae:cd:50:b1:ae:23:e6:9b:05:16:9d:96:71:6b:a7:31:d3:d7: 4e:28:61:97:77:6a:07:64:bb:99:c0:0e:21:9b:68:d4:99:83: d7:15:57:05:fb:6d:60:eb:60:4f:5f:3c:83:3d:73:5c:ec:57: f8:27:03:9e:fc:1c:46:c2:bb:ed:7b:4e:6f:2c:ac:84:67:d5: 27:a1:76:f8:ca:5a:2f:e1:27:53:59:a6:db:1c:12:83:6a:3c: 1a:64:cf:38:dd:19:6c:5b:f6:1b:9c:74:7a:55:3a:7b:35:f1: 3a:1e:27:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLixsY3CvUw3xostBf0w1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Mjk0Y2ZmZDYxMmI1ZWM3YjQ4Yjg0MjMyYTQ1ZDZhYjZk ZGZmOTUwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EyhhNzczYWQ1ZTY4ZTg1MzI0MDgzMDNjZTcwN2QxNzg5YzczOWM2ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugK72Cj86K0Cy0kEM+YyYqYaFDq2 ZhTG/JIOtEqsd8KEhqVuH3qev/AEoNswdBEOld1MvwkmGHn0CLBbpLIv6xskgIV6 LPC4rdHJRWdIPFXZ9UWQaCE1AY6rrn5shXFYm1Lt5jGtNYzSgkAKhp5R9rdf+uTg cjNyARrKpBk1lLlCi4BCUmjaV4Z82bahHCk1jUV053Ganrsll23ACHsUwR1HI7Mv Lf0ti3h++4+IeHqboWKhyU5C42kHNlI/212LcEWo6BZaGDys2GFW9VoBZagzFsIP 76JvBNw7s6z/iNkzhfQ1MxNX1HRPA+fAW/Wn1voGJ2VEIBJu/4IssjnK5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdzrV5o6FMkCDA85wfReJxznGg8MB8GA1UdIwQY MBaAFJkpTP/WErXse0i4QjKkXWq23f+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNsTV85WVN0ZXg3U0xoQ01xUmRhcmJkXzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83Y2FjNGEtNmI5OS00NTFkLWE2NDkt NWQ5MjcyZTQ4YTdjLzEvbVNsTV85WVN0ZXg3U0xoQ01xUmRhcmJkXzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83Y2FjNGEtNmI5OS00NTFkLWE2NDktNWQ5MjcyZTQ4YTdj LzEvbVNsTV85WVN0ZXg3U0xoQ01xUmRhcmJkXzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXrwVQFA lAtrhA+k7A4dODxaegrM26rH7FlVIaS7mvDDOMWKyCXEdcWvcntlOrt6UuM2D9+P CwjLn8e1csbqAfcj32Mf/z942U8DGufBEvD1sjM6LhbU4O5b3S7wn45fI6krDCd9 5aS4pmiYlbtALMPGPAQfvBXLd7fAwf5XR7DRd2FnJffGW0UWyRdwemj2rs1Qsa4j 5psFFp2WcWunMdPXTihhl3dqB2S7mcAOIZto1JmD1xVXBfttYOtgT188gz1zXOxX +CcDnvwcRsK77XtObyyshGfVJ6F2+MpaL+EnU1mm2xwSg2o8GmTPON0ZbFv2G5x0 elU6ezXxOh4ncA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:59 2025 by rpki-client