This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json) Hash identifier: u0HQdKYjCTR+E0Cy0/G9l1g1z1WqSbMrVRgOdQ2C6qc= Subject key identifier: 9B:76:15:A4:AB:7B:15:83:E8:9A:49:5C:4B:06:63:DA:60:57:97:CE Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5 Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5 Certificate serial: 019AF31CD4FA470EF9343A7539125C6C6BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft Manifest number: 10DD Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: Up+/Nxerk8vuxSjLdTd7FzYw2yRYG1iCsuRmxqmruDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d4:fa:47:0e:f9:34:3a:75:39:12:5c:6c:6b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=9b7615a4ab7b1583e89a495c4b0663da605797ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:48:3b:3a:44:2a:ad:14:17:a8:60:3d:f6: af:76:cb:a7:3a:f9:75:11:5a:61:4e:c0:ca:d8:0c: a4:3c:48:34:be:25:1c:5a:40:09:30:a6:33:79:bc: 76:72:6a:06:58:98:78:da:55:38:f7:55:fa:a1:79: a2:0b:1e:5d:45:57:4b:58:cc:ca:e5:8a:e2:c1:4d: a1:2f:a9:e6:28:15:c5:c1:a5:3e:68:7a:8a:c7:f9: 1b:e4:e9:cf:22:11:05:28:19:c6:9a:3a:d8:ee:28: a8:78:58:67:a0:6e:93:87:a0:c3:ce:84:33:f7:7f: 6d:86:be:b4:f1:c7:9b:23:71:42:19:b0:bf:3d:8a: cd:e9:8d:9d:64:47:b0:90:c4:01:a2:2b:3b:4a:d3: 6a:0b:e5:7c:4a:1c:0e:89:78:fc:c1:97:a8:94:e1: 0b:2f:29:06:bb:0e:fd:03:4a:83:d9:de:c6:41:0f: 52:cd:0e:84:75:ac:29:c0:a8:82:6f:69:1b:0c:95: d6:1a:63:9a:9e:47:54:f7:a1:56:97:1c:c1:3b:05: 73:be:f8:88:5f:e6:4f:6c:a7:4f:1d:0f:63:dd:d1: 47:e2:67:45:d6:90:4f:cd:07:19:dd:2e:e1:06:7c: d9:08:39:0b:d0:c1:a8:bf:88:96:6e:47:72:f6:2f: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:76:15:A4:AB:7B:15:83:E8:9A:49:5C:4B:06:63:DA:60:57:97:CE X509v3 Authority Key Identifier: keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:11:83:c9:46:7b:6a:2a:af:ea:c4:36:f9:3f:93:f9:96:b8: ba:12:d8:3c:24:66:8b:6a:75:c4:bb:7b:3c:e7:5e:aa:a4:2c: 2e:36:31:ba:9e:ee:22:43:6c:07:62:6a:37:7f:39:99:39:29: 79:fa:66:a7:4a:1b:91:72:98:a0:4c:fb:3e:3f:a9:8c:e8:b1: 1f:f2:2f:3a:21:22:98:27:13:4a:60:d6:b2:9a:73:91:16:90: f5:72:23:cb:9c:1c:34:9c:9e:b4:c3:65:43:7e:d9:2c:fe:0c: d2:3b:bb:bd:18:8d:67:85:74:e9:3d:5e:6d:a0:7f:a2:0d:b5: f6:fb:32:dd:86:3d:08:14:93:80:7e:4c:d6:48:b0:bb:6a:4b: e6:45:da:b7:c8:87:ce:8c:d3:83:f8:ff:be:df:2c:8e:74:23: 50:e2:ae:9a:29:c3:0d:4a:0d:c0:46:b8:f0:9f:4d:94:82:99: b3:35:d2:c0:07:d7:6d:b2:74:73:4c:44:b8:09:27:0f:7d:70: 0c:dd:db:cc:ce:44:87:55:f0:c4:4c:8b:fd:2a:dc:fc:fa:96: 28:38:2a:ae:bb:82:07:bc:e3:75:76:4c:57:77:d2:4c:86:50: 61:f0:81:14:23:86:c9:39:73:7d:43:ec:75:42:43:92:2b:8d: 68:1b:66:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNT6Rw75NDp1ORJcbGuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2Y3ODVlMTQzNDBhYzZhODQwNDg2M2Q3YmY3YWY5NGU1 YWI5YjUwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD Eyg5Yjc2MTVhNGFiN2IxNTgzZTg5YTQ5NWM0YjA2NjNkYTYwNTc5N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TZIOzpEKq0UF6hgPfavdsunOvl1 EVphTsDK2AykPEg0viUcWkAJMKYzebx2cmoGWJh42lU491X6oXmiCx5dRVdLWMzK 5YriwU2hL6nmKBXFwaU+aHqKx/kb5OnPIhEFKBnGmjrY7iioeFhnoG6Th6DDzoQz 939thr608cebI3FCGbC/PYrN6Y2dZEewkMQBois7StNqC+V8ShwOiXj8wZeolOEL LykGuw79A0qD2d7GQQ9SzQ6EdawpwKiCb2kbDJXWGmOankdU96FWlxzBOwVzvviI X+ZPbKdPHQ9j3dFH4mdF1pBPzQcZ3S7hBnzZCDkL0MGov4iWbkdy9i/AQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJt2FaSrexWD6JpJXEsGY9pgV5fOMB8GA1UdIwQY MBaAFHA/eF4UNArGqEBIY9e/evlOWrm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMt NDc2YmNjNDQxNTRkLzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMtNDc2YmNjNDQxNTRk LzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhGDyUZ7 aiqv6sQ2+T+T+Za4uhLYPCRmi2p1xLt7POdeqqQsLjYxup7uIkNsB2JqN385mTkp efpmp0obkXKYoEz7Pj+pjOixH/IvOiEimCcTSmDWsppzkRaQ9XIjy5wcNJyetMNl Q37ZLP4M0ju7vRiNZ4V06T1ebaB/og219vsy3YY9CBSTgH5M1kiwu2pL5kXat8iH zozTg/j/vt8sjnQjUOKuminDDUoNwEa48J9NlIKZszXSwAfXbbJ0c0xEuAknD31w DN3bzM5Eh1XwxEyL/Src/PqWKDgqrruCB7zjdXZMV3fSTIZQYfCBFCOGyTlzfUPs dUJDkiuNaBtmXw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:57 2025 by rpki-client