This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json) Hash identifier: ipmj/AJa/ZxDe569K2kM5pf3wrQhcshAuHhshHXRQ40= Subject key identifier: 5A:A8:6E:0F:67:FA:BA:7F:74:6E:9B:CD:F2:9F:DF:9C:3F:ED:11:26 Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89 Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489 Certificate serial: 019AF163F569830AFE8480D49F328B44C592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: VEtO2W8wDoAP3CHZN0yY12mCcgBWmZmU59Ut2PlGqRM=) 2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f5:69:83:0a:fe:84:80:d4:9f:32:8b:44:c5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=5aa86e0f67faba7f746e9bcdf29fdf9c3fed1126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a0:59:31:dc:97:be:a0:a6:fa:6c:cf:d4:b4: 73:13:ec:66:58:67:29:61:e4:2c:54:b6:f0:bf:22: 2d:22:b9:f8:0c:45:2f:72:ca:ed:c7:0c:cd:09:d9: 7f:df:ba:06:ce:76:18:46:8b:19:a8:d6:5d:76:8a: bb:6b:bd:6f:c6:8f:25:2d:1f:d6:3d:dd:53:3c:3b: c5:c6:cc:2f:95:7d:38:7f:83:17:00:48:0c:d5:b2: 83:23:12:aa:f1:ee:eb:6d:aa:20:ef:28:2d:33:ba: 6c:19:5d:ea:df:9c:cc:ab:3b:33:38:2b:b4:69:22: 39:19:3f:df:bd:5d:49:8e:8c:59:1a:63:fe:1e:20: 54:f2:6b:9e:42:8a:b7:83:23:44:73:48:cb:a4:28: 25:f2:c3:3c:9a:78:ca:97:ba:63:27:cc:2c:9d:05: fb:7d:cf:2e:4a:3b:78:d3:0d:dd:64:1d:69:d8:ec: 00:ec:cb:a4:31:41:20:1b:e4:62:96:b8:9c:e2:5b: 08:9b:84:45:ab:bb:0e:87:75:dd:b3:8c:0a:52:4f: 26:c2:39:aa:fc:f5:ba:d4:7e:c9:60:38:93:42:3b: f2:20:8f:27:dd:b2:a9:66:7c:64:de:82:8b:de:5f: 83:50:78:d8:14:31:52:93:04:07:72:70:6e:ef:8f: 15:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:6E:0F:67:FA:BA:7F:74:6E:9B:CD:F2:9F:DF:9C:3F:ED:11:26 X509v3 Authority Key Identifier: keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:55:f2:f8:ca:fd:8a:73:2a:fa:94:0b:40:84:a8:97:66:2f: 0e:9b:80:e1:50:25:75:04:4c:b3:fc:59:e8:5d:76:fe:01:2e: c3:85:0b:c0:00:71:8c:c2:53:8e:c0:a0:71:81:d5:ed:20:71: 1a:f5:bd:4a:50:a0:35:0e:4e:ee:39:b7:72:3e:84:65:af:3a: 5a:3c:be:5e:7b:f4:3c:11:60:a0:cd:07:dd:81:50:92:74:83: 3e:4c:88:99:0f:90:f7:7e:1d:12:cd:35:74:2e:df:1a:e6:78: 45:a9:83:58:4d:4b:96:cd:22:9c:f0:db:a6:82:49:6a:e3:b2: ae:3c:33:14:40:3f:5b:e1:2b:ef:7a:5e:c1:50:dd:b7:ff:69: de:bb:e1:14:47:9b:76:42:38:58:6a:7b:48:fe:bd:aa:44:d6: b1:ac:77:ec:aa:ca:eb:5e:f7:ca:b2:81:0b:1f:54:69:01:0e: 18:c1:75:99:ed:6f:31:50:a2:fc:10:0b:4c:33:d2:b2:90:1b: 21:db:74:44:4c:23:bf:bb:57:ae:55:d8:e9:6e:ac:ce:c7:97: 0e:0a:fb:9d:2d:f4:31:94:a2:f5:fc:8c:bd:14:4e:8e:a3:7e: 00:10:f3:16:18:b6:fc:57:0b:c5:4b:19:82:30:20:1a:6b:fe: 7c:08:b8:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Vpgwr+hIDUnzKLRMWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzAwMGQ2N2M4ZGViNjI2MmUwMDlhOWFmZjQyMmExMDM4 ZjQ0ODkwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD Eyg1YWE4NmUwZjY3ZmFiYTdmNzQ2ZTliY2RmMjlmZGY5YzNmZWQxMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aBZMdyXvqCm+mzP1LRzE+xmWGcp YeQsVLbwvyItIrn4DEUvcsrtxwzNCdl/37oGznYYRosZqNZddoq7a71vxo8lLR/W Pd1TPDvFxswvlX04f4MXAEgM1bKDIxKq8e7rbaog7ygtM7psGV3q35zMqzszOCu0 aSI5GT/fvV1JjoxZGmP+HiBU8mueQoq3gyNEc0jLpCgl8sM8mnjKl7pjJ8wsnQX7 fc8uSjt40w3dZB1p2OwA7MukMUEgG+Rilric4lsIm4RFq7sOh3Xds4wKUk8mwjmq /PW61H7JYDiTQjvyII8n3bKpZnxk3oKL3l+DUHjYFDFSkwQHcnBu748VAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqobg9n+rp/dG6bzfKf35w/7REmMB8GA1UdIwQY MBaAFHlwANZ8jetiYuAJqa/0IqEDj0SJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQt YmFlOWQyYjI5NjAxLzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9lMmNkYWMtODkwMS00MDUyLTk1NTQtYmFlOWQyYjI5NjAx LzEvZVhBQTFueU42MkppNEFtcHJfUWlvUU9QUklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVXy+Mr9 inMq+pQLQISol2YvDpuA4VAldQRMs/xZ6F12/gEuw4ULwABxjMJTjsCgcYHV7SBx GvW9SlCgNQ5O7jm3cj6EZa86Wjy+Xnv0PBFgoM0H3YFQknSDPkyImQ+Q934dEs01 dC7fGuZ4RamDWE1Lls0inPDbpoJJauOyrjwzFEA/W+Er73pewVDdt/9p3rvhFEeb dkI4WGp7SP69qkTWsax37KrK6173yrKBCx9UaQEOGMF1me1vMVCi/BALTDPSspAb Idt0REwjv7tXrlXY6W6szseXDgr7nS30MZSi9fyMvRROjqN+ABDzFhi2/FcLxUsZ gjAgGmv+fAi4QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:02 2025 by rpki-client