This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft File: rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json) Hash identifier: /03cbNRqTb5sV+CMpHCV8T1aB6Z4C7br8rxe/LdvNms= Subject key identifier: 43:EC:3B:F0:12:59:AF:B8:B8:FE:FE:9A:1F:AC:16:1D:FF:8C:A4:F8 Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF Certificate issuer: /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef Certificate serial: 019AF50A57BDF104B849DC5AA406780372E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft Manifest number: 124C Signing time: Sat 06 Dec 2025 19:01:27 +0000 Manifest this update: Sat 06 Dec 2025 19:01:27 +0000 Manifest next update: Sun 07 Dec 2025 19:01:27 +0000 Files and hashes: 1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: rwECgOPeJ4B2A5bBbW7wPvkqqjgAEYM2GICcT3PhNLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:57:bd:f1:04:b8:49:dc:5a:a4:06:78:03:72:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef Validity Not Before: Dec 6 19:01:27 2025 GMT Not After : Dec 7 19:01:27 2025 GMT Subject: CN=43ec3bf01259afb8b8fefe9a1fac161dff8ca4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:43:f7:09:b8:cf:66:8a:47:27:67:ad:18: 87:c5:8d:a7:86:0a:f9:fb:c8:c6:11:96:47:a3:6f: c1:60:5e:ba:54:6c:32:6c:5b:be:41:05:3c:0c:b2: 37:d9:e2:4f:3a:a1:bc:b2:d3:a1:08:49:34:51:d0: bb:61:bc:e1:ae:5a:9d:9c:6e:a9:c1:1e:ea:79:d0: da:83:ce:9f:d5:78:9d:8f:ad:12:27:df:2d:e9:ea: 69:06:a3:14:d6:49:17:6a:fd:e4:d7:36:a5:0a:36: dd:51:99:99:33:3d:aa:15:ea:41:56:f8:91:99:5b: 65:ff:5d:71:93:97:f4:c0:f9:58:67:22:be:76:e5: d2:6f:29:8e:0d:3a:2d:9e:ae:a9:d6:f9:e6:30:be: 98:39:53:5f:b3:e7:a6:78:0c:66:fa:37:2d:87:54: 40:75:bc:a9:cd:f2:34:34:d4:bc:66:1d:83:c8:fd: 80:fb:f2:e1:52:41:82:fb:e0:de:c7:f6:92:14:e5: 77:ad:e6:55:34:a4:04:8a:fd:55:79:87:72:6c:91: 05:78:21:f1:c5:ca:3c:8c:74:90:6a:d0:86:c6:b2: 08:86:38:23:25:7a:2c:4f:2b:fe:85:a9:b3:d3:5b: be:f5:53:9c:42:b4:3d:76:e7:46:85:4e:0b:84:c4: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:3B:F0:12:59:AF:B8:B8:FE:FE:9A:1F:AC:16:1D:FF:8C:A4:F8 X509v3 Authority Key Identifier: keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f4:ae:4f:3c:a2:89:cd:03:e9:e2:01:f3:6b:d3:25:ea:97: d9:28:56:f9:7d:17:b0:5c:40:67:7c:42:dc:06:8f:73:f7:29: 90:44:44:57:90:c5:3b:ba:e5:56:cb:ba:d7:2d:c5:18:5b:68: 6e:b7:c2:8b:a8:95:d6:23:44:c5:ff:de:8c:66:82:77:4c:25: 10:ad:bd:d0:77:8b:64:c9:f8:ad:6f:9a:5c:e1:88:3e:a8:38: 18:02:09:3b:6c:ed:bc:c7:92:b4:78:c6:e1:7c:3b:c3:b6:6a: 2d:e0:28:6b:a8:7f:2a:4f:2c:ac:d0:4b:4c:0e:dc:0d:1b:d3: b3:df:3b:19:79:09:f3:4c:89:ae:bf:27:86:b3:20:5e:e4:00: 1f:ab:65:3c:b7:4d:6e:e6:8d:1e:d9:85:22:9c:28:82:19:7e: 45:4f:63:1d:59:3a:6b:9c:20:59:05:41:21:7a:fc:71:06:b0: 2b:3d:a1:bb:d7:9c:e3:6a:c3:1a:6c:31:27:24:37:e4:4e:9e: f0:80:ee:5a:ef:9b:5f:3f:fa:ad:71:12:8f:36:29:e2:e0:48: 17:64:a5:14:40:63:01:3b:2a:e1:03:97:68:58:91:24:e4:96: da:ab:7e:81:8a:ed:31:09:70:23:e8:99:e8:29:45:c7:8c:48: a0:7f:90:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cle98QS4SdxapAZ4A3LmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMzVhODM3YjJhZjViNmZiMThjYTM1ZDE2MGI5YTlhMTgy MjA0ZWYwHhcNMjUxMjA2MTkwMTI3WhcNMjUxMjA3MTkwMTI3WjAzMTEwLwYDVQQD Eyg0M2VjM2JmMDEyNTlhZmI4YjhmZWZlOWExZmFjMTYxZGZmOGNhNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBFD9wm4z2aKRydnrRiHxY2nhgr5 +8jGEZZHo2/BYF66VGwybFu+QQU8DLI32eJPOqG8stOhCEk0UdC7YbzhrlqdnG6p wR7qedDag86f1Xidj60SJ98t6eppBqMU1kkXav3k1zalCjbdUZmZMz2qFepBVviR mVtl/11xk5f0wPlYZyK+duXSbymODTotnq6p1vnmML6YOVNfs+emeAxm+jcth1RA dbypzfI0NNS8Zh2DyP2A+/LhUkGC++Dex/aSFOV3reZVNKQEiv1VeYdybJEFeCHx xco8jHSQatCGxrIIhjgjJXosTyv+hamz01u+9VOcQrQ9dudGhU4LhMRASQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPsO/ASWa+4uP7+mh+sFh3/jKT4MB8GA1UdIwQY MBaAFKw1qDeyr1tvsYyjXRYLmpoYIgTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckRXb043S3ZXMi14aktOZEZndWFtaGdpQk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTc4MWEtYmNmYi00YTJiLWI2MTct YjUxMWZiYTEzMjlhLzEvckRXb043S3ZXMi14aktOZEZndWFtaGdpQk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC82ZTc4MWEtYmNmYi00YTJiLWI2MTctYjUxMWZiYTEzMjlh LzEvckRXb043S3ZXMi14aktOZEZndWFtaGdpQk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvSuTzyi ic0D6eIB82vTJeqX2ShW+X0XsFxAZ3xC3AaPc/cpkEREV5DFO7rlVsu61y3FGFto brfCi6iV1iNExf/ejGaCd0wlEK290HeLZMn4rW+aXOGIPqg4GAIJO2ztvMeStHjG 4Xw7w7ZqLeAoa6h/Kk8srNBLTA7cDRvTs987GXkJ80yJrr8nhrMgXuQAH6tlPLdN buaNHtmFIpwoghl+RU9jHVk6a5wgWQVBIXr8cQawKz2hu9ec42rDGmwxJyQ35E6e 8IDuWu+bXz/6rXESjzYp4uBIF2SlFEBjATsq4QOXaFiRJOSW2qt+gYrtMQlwI+iZ 6ClFx4xIoH+QGA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:06 2025 by rpki-client