This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft File: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json) Hash identifier: REkbSx9oPGmpWeiqoX8fNPW9MkjmPzIsuk/Uw3KxlbM= Subject key identifier: EB:C7:B9:A4:62:40:C4:B0:52:52:E9:EF:18:B9:D5:04:13:44:75:97 Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc Certificate serial: 019AF38935186121B9CDB358752D0DA2FC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft Manifest number: 09AC Signing time: Sat 06 Dec 2025 12:00:46 +0000 Manifest this update: Sat 06 Dec 2025 12:00:46 +0000 Manifest next update: Sun 07 Dec 2025 12:00:46 +0000 Files and hashes: 1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: 0GOs34pZ2yOEVUmcEQwdmmPMv8tWdvMEoLHc6tcdOlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:35:18:61:21:b9:cd:b3:58:75:2d:0d:a2:fc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc Validity Not Before: Dec 6 12:00:46 2025 GMT Not After : Dec 7 12:00:46 2025 GMT Subject: CN=ebc7b9a46240c4b05252e9ef18b9d50413447597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:28:66:e6:fe:b2:dc:19:8e:5a:e4:72:e2: 3d:b7:04:e7:99:f1:a6:ff:7e:0a:38:18:28:05:bc: cb:96:6a:3c:e6:68:b2:4c:40:07:b1:83:9d:42:b1: eb:c2:40:08:23:c8:46:8a:58:e9:c2:35:86:39:42: 2b:e8:17:85:6f:5c:5c:e8:17:01:b8:13:b8:21:1c: 9e:00:77:3b:bf:b0:c4:26:2e:00:6a:04:6b:d1:f1: c6:d2:27:83:7e:a1:cc:36:c7:e6:8c:a7:f3:97:7f: 0a:e2:06:b8:64:a0:21:bf:9b:3d:a0:54:4f:ca:a3: c6:92:da:8a:57:ae:c8:05:8f:b3:9d:a3:25:c5:de: b0:d8:47:7c:00:a4:85:5e:ad:9b:82:b9:db:39:0b: 3b:f6:e8:0e:2d:af:9c:42:92:d2:e3:3a:3f:36:a2: ab:29:60:bd:4c:64:ef:f9:88:de:cd:9a:e4:d5:80: 0e:f3:7c:09:23:e5:bb:fe:75:8a:bc:f3:f6:5c:78: 74:23:b8:aa:f6:98:fa:4d:fe:ed:f4:4d:63:31:9f: 60:1a:98:50:f2:00:be:a3:d4:2e:47:8b:51:27:55: 81:c2:ec:90:d6:a5:d3:93:6c:b5:00:3c:30:6b:ca: 43:48:8a:fb:82:27:80:87:79:67:4d:bf:f5:f7:15: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:B9:A4:62:40:C4:B0:52:52:E9:EF:18:B9:D5:04:13:44:75:97 X509v3 Authority Key Identifier: keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cb:36:3e:da:43:5d:c2:ae:2d:8c:66:10:bc:00:b6:82:f9: ff:d8:f3:1c:fd:6a:06:ad:72:81:26:f1:22:c0:94:43:9d:ec: 0a:7f:18:9b:f1:b5:71:5e:4c:1b:02:6d:47:61:9c:42:db:29: 2a:95:35:3e:7e:73:9d:a0:70:4b:10:a3:77:22:26:94:75:9c: 25:5f:74:03:53:34:15:62:84:69:4f:14:d0:79:93:a6:3d:e3: 1d:df:14:3f:2d:d5:6f:2e:e9:52:ab:46:25:f3:12:48:b9:dd: df:4e:d2:58:90:da:57:34:17:f1:8d:02:3a:a5:f3:ab:ca:2f: f7:ca:32:f0:69:20:af:64:88:d7:b4:c7:46:4b:06:42:41:46: 88:3c:77:ab:b1:cd:35:0f:85:36:4e:d2:98:6e:2d:b1:5b:f1: ee:98:ab:67:f5:b0:ad:50:ab:ac:75:7d:a3:24:f5:90:95:b8: ce:ad:c1:0d:85:ee:18:c7:f3:33:e2:6a:37:5d:1f:d8:95:c2: c2:67:3f:17:0b:57:6a:11:4c:34:5e:20:61:da:0a:c2:a0:d8: 03:b9:0c:1f:ce:aa:2c:e4:e3:ef:b2:55:67:b1:de:45:fa:9e: 37:7b:14:58:72:f9:24:6f:10:66:a2:47:60:5c:d0:7d:50:fc: 28:45:03:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTUYYSG5zbNYdS0Novw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzc3M2MyMGFjOGU0MDkzZGY2MmJiYjg3MmNhZmNkYjY4 YjU1ZGMwHhcNMjUxMjA2MTIwMDQ2WhcNMjUxMjA3MTIwMDQ2WjAzMTEwLwYDVQQD EyhlYmM3YjlhNDYyNDBjNGIwNTI1MmU5ZWYxOGI5ZDUwNDEzNDQ3NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbEoZub+stwZjlrkcuI9twTnmfGm /34KOBgoBbzLlmo85miyTEAHsYOdQrHrwkAII8hGiljpwjWGOUIr6BeFb1xc6BcB uBO4IRyeAHc7v7DEJi4AagRr0fHG0ieDfqHMNsfmjKfzl38K4ga4ZKAhv5s9oFRP yqPGktqKV67IBY+znaMlxd6w2Ed8AKSFXq2bgrnbOQs79ugOLa+cQpLS4zo/NqKr KWC9TGTv+YjezZrk1YAO83wJI+W7/nWKvPP2XHh0I7iq9pj6Tf7t9E1jMZ9gGphQ 8gC+o9QuR4tRJ1WBwuyQ1qXTk2y1ADwwa8pDSIr7gieAh3lnTb/19xVkBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvHuaRiQMSwUlLp7xi51QQTRHWXMB8GA1UdIwQY MBaAFNHHc8IKyOQJPfYru4csr822i1XcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTkt ODg1NmM2NWZlMTgyLzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lZTM4MjItYWJlYS00OGQ5LTkzYTktODg1NmM2NWZlMTgy LzEvMGNkendnckk1QWs5OWl1N2h5eXZ6YmFMVmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8s2PtpD XcKuLYxmELwAtoL5/9jzHP1qBq1ygSbxIsCUQ53sCn8Ym/G1cV5MGwJtR2GcQtsp KpU1Pn5znaBwSxCjdyImlHWcJV90A1M0FWKEaU8U0HmTpj3jHd8UPy3Vby7pUqtG JfMSSLnd307SWJDaVzQX8Y0COqXzq8ov98oy8Gkgr2SI17THRksGQkFGiDx3q7HN NQ+FNk7SmG4tsVvx7pirZ/WwrVCrrHV9oyT1kJW4zq3BDYXuGMfzM+JqN10f2JXC wmc/FwtXahFMNF4gYdoKwqDYA7kMH86qLOTj77JVZ7HeRfqeN3sUWHL5JG8QZqJH YFzQfVD8KEUDqw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:06 2025 by rpki-client