This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft File: 11ugWU0GWrciRlz6MF7_jUFhf6g.mft (raw, json) Hash identifier: CWCPOtmEqXJKEI/PH/bHYAdd36gKEWZAw9FH/tnWWa4= Subject key identifier: E9:5C:0A:AB:87:F9:08:02:95:A7:BF:1F:C8:F8:EA:C9:DE:92:FD:CB Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8 Certificate issuer: /CN=d75ba0594d065ab722465cfa305eff8d41617fa8 Certificate serial: 019AF19B097D5477ABA028CD42177AA77CD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft Manifest number: 0E17 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: 11ugWU0GWrciRlz6MF7_jUFhf6g.crl (hash: B7nxoipK9gY2glIuutd3AeE8lWpD/hI019bJNR4uMz4=) 2: BZIfQV280o1RO6UXQb7qG3btz5c.roa (hash: yjsFnIbhow6GJJcPdKVr4HkLXwHEMiYNE9BzFU3IEyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:09:7d:54:77:ab:a0:28:cd:42:17:7a:a7:7c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=e95c0aab87f9080295a7bf1fc8f8eac9de92fdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:d4:49:b8:a5:59:54:50:d5:52:5e:3d:ca: b8:49:f4:e7:b9:bf:6b:60:01:7a:45:3e:aa:42:24: c1:3f:0c:08:9d:f2:34:1e:e9:d5:3f:17:f6:d4:a9: 26:12:b7:b1:1f:45:30:49:42:cc:a6:70:45:34:eb: 03:ed:09:b7:ce:09:86:a0:c6:d5:3e:7a:3d:94:33: ab:57:84:4f:59:b1:6e:b3:3d:2c:b7:27:2c:0c:68: a9:af:bd:ac:fb:cc:3a:67:03:6f:44:f7:72:72:25: 4a:4f:2c:8a:17:1d:01:86:76:06:d6:09:e5:ee:70: 1d:57:d4:0b:ac:2e:53:f4:bd:07:cc:44:65:6d:90: 36:54:50:f2:fa:7f:35:b7:d0:cb:0a:15:b6:4f:16: ba:a2:90:ea:f6:99:10:32:35:da:df:71:0b:e0:2d: 8c:c6:da:4f:6a:8a:55:77:44:34:ae:35:b1:03:e3: 8c:95:51:7b:44:24:47:46:a5:b0:7d:9f:20:c8:05: 75:cf:33:b1:cc:f5:5b:36:4f:8f:24:33:85:38:d9: f2:4e:30:2c:0e:42:53:37:4d:26:67:58:aa:c8:cc: 2a:4b:5b:a4:36:ae:67:f6:d8:2a:d7:21:d7:41:34: 92:a7:e3:0e:d8:45:55:32:b9:f3:c5:fd:56:ad:0f: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5C:0A:AB:87:F9:08:02:95:A7:BF:1F:C8:F8:EA:C9:DE:92:FD:CB X509v3 Authority Key Identifier: keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:75:fa:da:41:9d:f4:17:ab:4c:71:4a:54:a5:33:a6:8f:c3: 42:82:8a:83:90:60:90:f2:03:b6:ab:38:3a:f6:f6:67:90:e2: 18:0a:b6:25:23:4c:e5:ff:c8:2f:d2:ef:cd:28:1b:99:b5:e3: f4:a1:aa:74:54:6c:5f:f1:ff:27:bd:64:69:26:36:a8:b7:f1: 52:85:4e:81:75:01:8b:a2:31:98:8e:4f:ef:15:f9:42:6a:a0: 21:5b:71:54:36:a4:a1:41:90:5b:45:19:c0:8c:bb:5e:1e:70: bc:4a:37:1d:fc:ed:93:1c:e3:6c:73:2e:df:f1:01:d4:d9:3f: 45:b5:2a:92:cd:ea:3f:09:68:95:a9:22:ca:9c:51:50:ee:a5: e9:4c:e3:d4:e5:3a:8f:a8:4e:01:09:3b:03:2d:ac:03:28:9a: 32:68:12:8a:57:cb:78:90:f1:af:4e:b7:d0:1d:be:d5:39:7c: a7:d1:9a:05:04:d9:d7:ea:07:83:88:cc:d1:3c:ee:be:1f:7e: 9c:93:a6:46:d7:e5:4c:5f:6d:ba:a5:78:62:cb:9e:68:50:6d: 3f:b2:a8:36:89:45:45:9b:45:37:bb:52:6d:90:74:74:bc:e0: 57:4f:cc:ab:a5:7b:6a:78:f9:ec:91:ea:ae:0b:8e:2e:f9:8f: 86:44:a2:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwl9VHeroCjNQhd6p3zRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NWJhMDU5NGQwNjVhYjcyMjQ2NWNmYTMwNWVmZjhkNDE2 MTdmYTgwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EyhlOTVjMGFhYjg3ZjkwODAyOTVhN2JmMWZjOGY4ZWFjOWRlOTJmZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuovUSbilWVRQ1VJePcq4SfTnub9r YAF6RT6qQiTBPwwInfI0HunVPxf21KkmErexH0UwSULMpnBFNOsD7Qm3zgmGoMbV Pno9lDOrV4RPWbFusz0stycsDGipr72s+8w6ZwNvRPdyciVKTyyKFx0BhnYG1gnl 7nAdV9QLrC5T9L0HzERlbZA2VFDy+n81t9DLChW2Txa6opDq9pkQMjXa33EL4C2M xtpPaopVd0Q0rjWxA+OMlVF7RCRHRqWwfZ8gyAV1zzOxzPVbNk+PJDOFONnyTjAs DkJTN00mZ1iqyMwqS1ukNq5n9tgq1yHXQTSSp+MO2EVVMrnzxf1WrQ8yZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlcCquH+QgClae/H8j46snekv3LMB8GA1UdIwQY MBaAFNdboFlNBlq3IkZc+jBe/41BYX+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUt MmRlZjM4ZTQ1YmEwLzEvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9hNmNhMGYtNTQ4OS00M2ExLWExYTUtMmRlZjM4ZTQ1YmEw LzEvMTF1Z1dVMEdXcmNpUmx6Nk1GN19qVUZoZjZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3X62kGd 9BerTHFKVKUzpo/DQoKKg5BgkPIDtqs4Ovb2Z5DiGAq2JSNM5f/IL9LvzSgbmbXj 9KGqdFRsX/H/J71kaSY2qLfxUoVOgXUBi6IxmI5P7xX5QmqgIVtxVDakoUGQW0UZ wIy7Xh5wvEo3HfztkxzjbHMu3/EB1Nk/RbUqks3qPwlolakiypxRUO6l6Uzj1OU6 j6hOAQk7Ay2sAyiaMmgSilfLeJDxr0630B2+1Tl8p9GaBQTZ1+oHg4jM0Tzuvh9+ nJOmRtflTF9tuqV4YsueaFBtP7KoNolFRZtFN7tSbZB0dLzgV0/Mq6V7anj57JHq rguOLvmPhkSiNA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:08 2025 by rpki-client