This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json) Hash identifier: 8yz6GKjt+No7a8rFxxCfRx4a3W7Gc+UcKJ66vOBFOeI= Subject key identifier: 5B:CB:4D:E4:CC:B6:DC:95:19:11:AF:79:93:AA:5E:30:99:D5:64:9C Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1 Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1 Certificate serial: 019B2F9EA3F56721903698911FB0B1D35CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft Manifest number: 1603 Signing time: Thu 18 Dec 2025 04:01:24 +0000 Manifest this update: Thu 18 Dec 2025 04:01:24 +0000 Manifest next update: Fri 19 Dec 2025 04:01:24 +0000 Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: A7Z84W8is7VIg1N5WYrxgCjRQlYH2PDnwWNgBsruHD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:a3:f5:67:21:90:36:98:91:1f:b0:b1:d3:5c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1 Validity Not Before: Dec 18 04:01:24 2025 GMT Not After : Dec 19 04:01:24 2025 GMT Subject: CN=5bcb4de4ccb6dc951911af7993aa5e3099d5649c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:c6:db:c7:45:af:d3:ff:2c:1b:91:d2:7c: ed:62:2c:67:80:cd:71:56:a4:d5:22:ed:d0:78:0c: 3e:28:2e:af:d3:c1:2e:0b:44:e6:69:b0:77:5e:c7: 22:f1:8b:e3:a5:c2:82:44:ff:e4:1d:38:46:09:e7: 7b:b2:01:1d:92:c7:cb:05:66:cf:d3:d0:92:ce:fa: 1a:6d:8c:2d:9a:1c:89:1a:97:c0:d6:88:e4:91:22: 3c:4a:2d:bb:41:79:52:5f:1c:17:94:27:6b:4a:f8: 28:8b:6a:d3:d9:28:d5:96:1a:37:20:d3:c8:5f:39: 99:85:58:ca:b2:0b:6f:06:fa:7f:3b:d2:8c:46:fd: dc:80:a0:c0:90:f4:d4:59:54:48:28:7a:da:45:4f: 75:55:b3:77:7d:21:61:f9:7b:02:e8:1a:b8:cb:b9: a3:0b:1b:e6:e5:07:f1:3b:49:73:80:af:9d:28:5e: ff:4c:a3:b2:84:ba:9f:e4:87:9f:6f:b8:d6:61:f4: 11:de:18:79:81:0b:de:d1:53:49:d4:f1:28:d6:7f: 10:3d:bd:b0:37:2d:21:36:1e:f3:ae:81:ee:2e:2e: 8e:36:0a:b4:82:6d:b4:05:28:66:b2:65:8e:8a:61: 2b:24:3d:8a:04:5d:cc:89:76:0d:cd:c9:64:02:30: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:4D:E4:CC:B6:DC:95:19:11:AF:79:93:AA:5E:30:99:D5:64:9C X509v3 Authority Key Identifier: keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:6e:55:a7:10:9a:b0:9d:75:34:ae:2f:17:cb:6a:c5:92: 40:f6:05:2a:20:a2:30:6c:14:2e:b7:54:9e:be:5f:5a:6e:7b: c3:51:ef:cb:18:13:f8:e3:28:d8:b1:7b:95:21:4f:f6:55:12: dd:e0:79:70:b7:e6:b3:b3:48:70:bf:da:af:59:bf:2c:a4:fe: 6b:03:23:df:b2:2a:dd:9a:a5:34:cd:19:8f:57:c0:b5:ec:d4: 72:f1:eb:e8:e3:1a:98:18:57:55:88:16:c9:95:b4:09:8c:f7: 0d:f3:51:9b:4c:de:f5:9f:1f:f0:0f:51:1c:df:52:4c:4a:d1: 01:a4:dc:b3:d9:ba:12:0d:3e:45:a9:45:90:f9:8a:6b:76:6a: cd:c2:be:14:1f:e4:3d:bf:d3:20:7f:97:aa:7e:53:f8:a8:4f: 12:bd:77:64:ad:9d:c8:50:98:b3:8e:42:e4:f4:58:d2:d5:a0: 2b:13:07:fd:5b:53:8e:e8:96:4c:1d:5c:fe:9b:71:94:97:e6: 62:3f:c7:19:5d:61:dc:49:db:84:40:5f:e0:57:67:64:dc:e7: 0e:69:fe:bd:d7:37:76:98:04:f9:10:1e:c3:61:72:95:01:ad: 9e:48:e7:28:5b:5c:13:ce:5f:75:93:0d:d2:c5:c8:b2:45:ca: 9b:0f:ab:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqP1ZyGQNpiRH7Cx01znMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgzNmUzOTZiYzUwNjQ0MzYwNmI5ZmQ3MzM3YTkyMGU3 MWRlZDEwHhcNMjUxMjE4MDQwMTI0WhcNMjUxMjE5MDQwMTI0WjAzMTEwLwYDVQQD Eyg1YmNiNGRlNGNjYjZkYzk1MTkxMWFmNzk5M2FhNWUzMDk5ZDU2NDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYDG28dFr9P/LBuR0nztYixngM1x VqTVIu3QeAw+KC6v08EuC0TmabB3Xsci8YvjpcKCRP/kHThGCed7sgEdksfLBWbP 09CSzvoabYwtmhyJGpfA1ojkkSI8Si27QXlSXxwXlCdrSvgoi2rT2SjVlho3INPI XzmZhVjKsgtvBvp/O9KMRv3cgKDAkPTUWVRIKHraRU91VbN3fSFh+XsC6Bq4y7mj Cxvm5QfxO0lzgK+dKF7/TKOyhLqf5Iefb7jWYfQR3hh5gQve0VNJ1PEo1n8QPb2w Ny0hNh7zroHuLi6ONgq0gm20BShmsmWOimErJD2KBF3MiXYNzclkAjA9fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvLTeTMttyVGRGveZOqXjCZ1WScMB8GA1UdIwQY MBaAFGw4NuOWvFBkQ2Brn9czepIOcd7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMt ZWI2YjEzYzVlMjY4LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMtZWI2YjEzYzVlMjY4 LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARctuVacQ mrCddTSuLxfLasWSQPYFKiCiMGwULrdUnr5fWm57w1HvyxgT+OMo2LF7lSFP9lUS 3eB5cLfms7NIcL/ar1m/LKT+awMj37Iq3ZqlNM0Zj1fAtezUcvHr6OMamBhXVYgW yZW0CYz3DfNRm0ze9Z8f8A9RHN9STErRAaTcs9m6Eg0+RalFkPmKa3ZqzcK+FB/k Pb/TIH+Xqn5T+KhPEr13ZK2dyFCYs45C5PRY0tWgKxMH/VtTjuiWTB1c/ptxlJfm Yj/HGV1h3EnbhEBf4FdnZNznDmn+vdc3dpgE+RAew2FylQGtnkjnKFtcE85fdZMN 0sXIskXKmw+r0Q== -----END CERTIFICATE-----Generated at Thu Dec 18 09:58:44 2025 by rpki-client