This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json) Hash identifier: L7mOg756ru2y2HknX64UOounb+Lyx8O+KctRmcKfpbI= Subject key identifier: 92:58:A2:3F:A0:43:0C:CB:B4:13:1A:C2:7D:A8:AB:14:D6:61:85:BD Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6 Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6 Certificate serial: 019AF1641A5A85F35117EE3AB95F1C36D6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft Manifest number: 0367 Signing time: Sat 06 Dec 2025 02:01:00 +0000 Manifest this update: Sat 06 Dec 2025 02:01:00 +0000 Manifest next update: Sun 07 Dec 2025 02:01:00 +0000 Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: kuHvk2abtQmk4LBaxomGw3JtLqYePbTBDRvCfai1iHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:1a:5a:85:f3:51:17:ee:3a:b9:5f:1c:36:d6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6 Validity Not Before: Dec 6 02:01:00 2025 GMT Not After : Dec 7 02:01:00 2025 GMT Subject: CN=9258a23fa0430ccbb4131ac27da8ab14d66185bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:88:ba:04:e6:b0:a5:f8:5c:3d:c8:15:55: ff:1e:8b:22:60:d9:44:d5:20:4a:4a:ca:f3:c4:3d: ff:1f:b3:fd:6e:9d:2d:66:e7:ab:95:62:c6:ad:50: 67:52:0c:e4:6f:ec:cf:72:ec:dd:c8:a6:70:58:c3: a7:ce:0c:ba:9a:04:09:a0:ad:d9:64:9c:79:01:df: 75:0a:f9:8a:58:b1:f8:ff:63:65:7d:b9:bf:d9:5d: 48:d1:fd:43:ed:21:44:ac:f1:fe:8c:92:b6:f8:60: e2:65:b9:da:b2:7f:03:71:70:c3:01:36:76:db:a4: 93:19:72:a5:55:5c:e1:ba:a3:b7:13:18:f7:60:89: 37:e1:2e:83:c7:a2:5c:ac:ec:27:60:5a:08:96:33: 41:1d:58:78:a6:b0:04:46:d2:d7:e3:72:c2:d3:d7: 83:42:82:c3:4b:99:de:66:70:5b:5e:99:b8:c0:61: 53:59:c7:6f:94:36:40:71:55:c9:d0:84:df:a5:96: a4:a0:0a:ec:2b:05:38:e9:de:e1:d5:ed:ff:65:e7: 13:c4:23:2c:0b:bf:a1:fc:32:85:6b:6a:bf:47:04: ff:a5:8c:54:6b:87:46:e7:3f:06:44:ca:d7:58:a6: 90:08:d3:8d:62:45:44:a1:79:a4:b8:b7:5e:ea:d0: 4e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:58:A2:3F:A0:43:0C:CB:B4:13:1A:C2:7D:A8:AB:14:D6:61:85:BD X509v3 Authority Key Identifier: keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7b:00:02:01:79:a5:81:6c:06:e1:d3:57:2a:a6:d0:5e:2f: 8e:a9:87:d0:0f:0e:16:5c:95:83:4b:cc:dd:ff:4e:e3:dc:61: 6b:53:cf:9b:52:b9:24:c7:c9:f7:41:e2:c0:25:6c:95:66:06: 07:ab:a3:2a:a6:53:01:55:a9:1b:59:b9:0d:bd:08:48:18:c4: 3a:b5:30:a5:3a:79:87:6c:7f:47:82:35:eb:19:a1:7f:93:e3: cb:16:9d:c0:24:b6:67:26:0e:e4:d1:21:62:8c:08:c9:2d:b5: fe:15:c8:58:ac:7b:84:c6:9e:f1:af:68:47:dc:50:d7:39:27: d5:a8:17:15:ae:07:83:b4:19:8b:b9:c0:45:53:15:44:75:82: 23:f3:3c:7b:8c:18:ed:78:b7:cb:8b:24:c3:51:f3:75:6d:17: 61:ad:0b:6d:70:c2:75:6a:6c:c7:37:4e:00:86:8f:f7:cd:37: f5:c2:51:28:33:f6:d4:76:42:0b:7b:63:b4:ee:37:05:45:37: bd:86:f1:8d:18:ea:89:67:d1:2c:c2:74:9c:8f:1f:d8:c6:f4: 9d:07:e7:0f:4a:12:98:af:a5:19:e5:c3:6c:a1:26:db:f1:ed: 76:94:18:de:74:15:13:38:bf:65:67:71:3e:e0:18:bd:5e:88: 47:e0:da:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBpahfNRF+46uV8cNtagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOGYwNmMzNTQ5NDYwOGQ5YWNjZWIwNzBhNGNkMTZhYjk1 ZmY2YTYwHhcNMjUxMjA2MDIwMTAwWhcNMjUxMjA3MDIwMTAwWjAzMTEwLwYDVQQD Eyg5MjU4YTIzZmEwNDMwY2NiYjQxMzFhYzI3ZGE4YWIxNGQ2NjE4NWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/2IugTmsKX4XD3IFVX/HosiYNlE 1SBKSsrzxD3/H7P9bp0tZuerlWLGrVBnUgzkb+zPcuzdyKZwWMOnzgy6mgQJoK3Z ZJx5Ad91CvmKWLH4/2Nlfbm/2V1I0f1D7SFErPH+jJK2+GDiZbnasn8DcXDDATZ2 26STGXKlVVzhuqO3Exj3YIk34S6Dx6JcrOwnYFoIljNBHVh4prAERtLX43LC09eD QoLDS5neZnBbXpm4wGFTWcdvlDZAcVXJ0ITfpZakoArsKwU46d7h1e3/ZecTxCMs C7+h/DKFa2q/RwT/pYxUa4dG5z8GRMrXWKaQCNONYkVEoXmkuLde6tBOPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJYoj+gQwzLtBMawn2oqxTWYYW9MB8GA1UdIwQY MBaAFA+PBsNUlGCNmszrBwpM0Wq5X/amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMt NjBlOWI3ZGM1NTBiLzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9iMDkyMTgtODllNy00ODU5LWIzMmMtNjBlOWI3ZGM1NTBi LzEvRDQ4R3cxU1VZSTJhek9zSENrelJhcmxmOXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3sAAgF5 pYFsBuHTVyqm0F4vjqmH0A8OFlyVg0vM3f9O49xha1PPm1K5JMfJ90HiwCVslWYG B6ujKqZTAVWpG1m5Db0ISBjEOrUwpTp5h2x/R4I16xmhf5PjyxadwCS2ZyYO5NEh YowIyS21/hXIWKx7hMae8a9oR9xQ1zkn1agXFa4Hg7QZi7nARVMVRHWCI/M8e4wY 7Xi3y4skw1HzdW0XYa0LbXDCdWpsxzdOAIaP98039cJRKDP21HZCC3tjtO43BUU3 vYbxjRjqiWfRLMJ0nI8f2Mb0nQfnD0oSmK+lGeXDbKEm2/HtdpQY3nQVEzi/ZWdx PuAYvV6IR+Dasg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:30 2025 by rpki-client