This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json) Hash identifier: ck46WaLLetY9WTNQdPsYCphfyXJaSN/HiQlNV/oXAWg= Subject key identifier: 94:A7:51:10:00:B4:FD:1B:8D:11:AB:A2:97:B8:6F:B4:93:69:54:65 Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23 Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23 Certificate serial: 019AF12D79BD35A55BE7A3A360ED9302FB34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft Manifest number: 0A93 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: yFC9xhXnkTbVdMbYMtW39dEy0TgiGysJJKaqL5hXoek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:79:bd:35:a5:5b:e7:a3:a3:60:ed:93:02:fb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23 Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=94a7511000b4fd1b8d11aba297b86fb493695465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:fb:9b:84:19:c2:50:3d:66:87:9f:a9:bf: 41:b5:7d:2d:49:6f:eb:41:f0:d1:94:6a:76:5c:44: 79:a1:8b:ed:06:6b:5f:f9:95:3f:0d:b1:aa:5b:83: d7:9c:56:2b:71:d3:2f:8c:71:e1:95:a0:31:4c:22: 17:a8:1c:24:fc:c9:e2:15:8a:90:f1:64:45:a6:02: 28:70:eb:c5:6f:08:b1:8c:a9:c5:a6:fb:8d:4a:0a: 3a:49:70:85:d2:e9:15:86:5c:1d:a4:be:ac:af:ee: 44:3a:68:38:7b:91:e5:59:c2:59:eb:4b:de:bf:4f: 8a:6e:cf:ab:f2:b9:2a:92:b8:55:c9:67:49:77:5b: 83:c2:cc:22:a5:9f:30:b6:ca:20:a4:37:dd:05:7d: 43:de:29:9f:bd:f0:eb:b6:e6:57:55:ad:eb:ae:88: ca:f9:63:28:fc:03:76:3e:f9:bb:7e:a1:4b:41:f3: 1a:af:4a:b0:7c:8b:b9:41:55:ed:46:f3:cb:66:59: 1b:bb:15:cf:53:ed:16:68:80:11:17:20:65:d9:67: b5:7b:34:ea:b3:69:6c:dd:fa:52:b5:94:6d:6a:2f: 13:b1:0e:3f:30:8e:91:08:e0:1f:29:4f:12:97:64: 69:85:08:7f:fb:33:07:0d:f4:ce:a1:b1:4a:78:29: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:51:10:00:B4:FD:1B:8D:11:AB:A2:97:B8:6F:B4:93:69:54:65 X509v3 Authority Key Identifier: keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ca:71:cf:77:ca:fd:fa:0e:84:4f:d4:ea:33:b1:46:0f:fd: a6:d8:d9:2e:1a:5f:21:f9:c1:47:e2:21:bc:df:4e:ae:1d:e6: 43:0b:65:9b:a1:01:e5:3b:2d:24:75:d5:a4:42:47:03:c5:fc: dd:4d:f2:58:8b:46:eb:06:b2:9f:20:45:1a:20:6b:ba:95:e0: a6:be:a6:a5:20:90:1a:e3:8e:b5:87:76:94:eb:a3:e7:a0:b6: 89:ea:c2:e9:c4:e4:62:d0:9a:c6:07:0f:de:9e:5c:64:fb:00: 42:9f:6b:ec:fb:5a:bf:d0:9d:57:31:af:ff:49:6d:4a:6f:ca: 64:46:ef:f6:94:c9:fe:34:b3:7c:24:cf:4f:e3:54:98:e4:4d: 48:d1:64:86:56:67:64:44:26:eb:f9:42:1c:63:89:54:df:c8: ea:72:6f:8e:4c:ed:90:29:89:1b:76:34:cd:19:25:70:cb:80: 3b:f0:e2:a3:49:7b:d7:32:8b:e4:ed:90:50:74:2e:68:ca:c7: a5:c9:04:25:82:6e:13:ba:a9:7b:9d:46:11:03:9e:d0:81:f7: f2:a5:67:93:74:37:8e:8a:c9:9c:2f:4a:ce:9d:f5:e0:4b:5f: f8:eb:6f:53:13:4c:b0:11:fc:8f:a8:f9:38:fe:91:29:77:77: 17:f9:21:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXm9NaVb56OjYO2TAvs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGRkNjVhYzFkNmRhODRiYTliODFjMjA5ZTBhNzYxNzM0 NWVhMjMwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD Eyg5NGE3NTExMDAwYjRmZDFiOGQxMWFiYTI5N2I4NmZiNDkzNjk1NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApir7m4QZwlA9Zoefqb9BtX0tSW/r QfDRlGp2XER5oYvtBmtf+ZU/DbGqW4PXnFYrcdMvjHHhlaAxTCIXqBwk/MniFYqQ 8WRFpgIocOvFbwixjKnFpvuNSgo6SXCF0ukVhlwdpL6sr+5EOmg4e5HlWcJZ60ve v0+Kbs+r8rkqkrhVyWdJd1uDwswipZ8wtsogpDfdBX1D3imfvfDrtuZXVa3rrojK +WMo/AN2Pvm7fqFLQfMar0qwfIu5QVXtRvPLZlkbuxXPU+0WaIARFyBl2We1ezTq s2ls3fpStZRtai8TsQ4/MI6RCOAfKU8Sl2RphQh/+zMHDfTOobFKeCk5gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSnURAAtP0bjRGrope4b7STaVRlMB8GA1UdIwQY MBaAFK9N1lrB1tqEupuBwgngp2FzReojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUt OGY5NmQ3MjlmMDg0LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUtOGY5NmQ3MjlmMDg0 LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMpxz3fK /foOhE/U6jOxRg/9ptjZLhpfIfnBR+IhvN9Orh3mQwtlm6EB5TstJHXVpEJHA8X8 3U3yWItG6waynyBFGiBrupXgpr6mpSCQGuOOtYd2lOuj56C2ierC6cTkYtCaxgcP 3p5cZPsAQp9r7Ptav9CdVzGv/0ltSm/KZEbv9pTJ/jSzfCTPT+NUmORNSNFkhlZn ZEQm6/lCHGOJVN/I6nJvjkztkCmJG3Y0zRklcMuAO/Dio0l71zKL5O2QUHQuaMrH pckEJYJuE7qpe51GEQOe0IH38qVnk3Q3jorJnC9Kzp314Etf+OtvUxNMsBH8j6j5 OP6RKXd3F/khPw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:52 2025 by rpki-client