This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json) Hash identifier: C7hYmhH2ZmHlJkBXjqOtH3yTWIiQHnIADhqP6fGos6w= Subject key identifier: 20:2D:EF:24:D1:15:4F:C9:D3:81:6B:40:BE:03:B6:51:CF:A8:A2:B2 Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb Certificate serial: 019AF464E8C9E2C82148B86CAACFC8E2DAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:45 +0000 Manifest this update: Sat 06 Dec 2025 16:00:45 +0000 Manifest next update: Sun 07 Dec 2025 16:00:45 +0000 Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: v/eOqiypACdtyjE4Q/reeqpoNKNwSJTK/MOuyGjWIak=) 2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:e8:c9:e2:c8:21:48:b8:6c:aa:cf:c8:e2:da:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb Validity Not Before: Dec 6 16:00:45 2025 GMT Not After : Dec 7 16:00:45 2025 GMT Subject: CN=202def24d1154fc9d3816b40be03b651cfa8a2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:9d:80:3d:fb:65:db:65:94:4c:00:de:a9: 5e:ad:36:a3:e0:79:23:42:a2:b1:e4:b0:58:dd:7a: 36:4e:7d:a5:2c:e0:c4:dc:55:3f:2e:65:06:03:32: b3:97:04:60:28:e6:c4:1e:41:30:b0:d3:f5:72:2d: 08:a8:fb:1d:54:5f:30:f4:23:0d:2b:65:f2:36:5a: 2a:8a:57:2a:4a:12:28:f7:e1:43:45:1f:35:88:4c: 2d:83:d5:5e:f5:58:8b:65:33:61:ff:24:30:58:ce: 52:ac:c5:c6:e8:ff:be:ac:a5:0c:08:05:19:c0:6a: 5d:ab:b0:73:d3:a7:1f:ac:91:db:63:d7:a3:89:f3: bb:de:c6:f8:d8:9b:a0:d3:f1:f6:58:b7:fc:c0:8f: dc:7f:56:5e:f2:02:5d:66:49:c3:73:6e:b5:3c:d6: 31:42:e0:6f:e1:5b:91:05:55:05:bc:b4:5c:cc:c0: fe:67:22:98:0a:8c:e7:71:19:d9:83:97:ca:63:c9: 2a:c9:f1:f7:70:5d:78:52:2e:ea:fb:34:c8:32:57: 9d:83:62:97:49:4e:de:3c:71:05:bf:f8:40:f0:e6: 64:d2:72:76:02:ec:b4:a4:54:23:9e:53:1a:b3:05: 44:d0:e1:be:ed:0c:1e:98:f7:f5:70:f4:48:fd:7e: fa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2D:EF:24:D1:15:4F:C9:D3:81:6B:40:BE:03:B6:51:CF:A8:A2:B2 X509v3 Authority Key Identifier: keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:da:b8:dc:e6:82:62:c0:fa:9c:04:51:6a:28:df:57:b7:1e: 0f:4b:3d:43:d4:a7:1b:90:97:62:79:13:72:3e:f6:2a:da:23: 4d:af:11:27:ee:cf:d1:c1:5a:91:01:96:31:e6:d5:12:87:46: b2:ef:36:65:96:ef:d1:be:81:ee:e1:13:af:52:32:f4:65:13: 2c:48:05:e6:95:5b:a1:70:4b:70:16:81:6a:2a:a7:ee:b3:d5: 6c:33:a1:09:5f:c3:25:47:c1:c7:97:2b:75:0f:00:54:04:84: c3:50:c8:84:c7:47:18:4e:98:63:cc:84:f9:71:4e:fc:a9:26: a4:ea:47:0d:9e:55:d1:bb:61:80:da:71:a8:16:bc:e8:e9:3a: 7e:f9:5c:98:2c:cd:f0:fe:07:17:83:29:ae:b0:7e:4c:61:20: 2c:84:75:f2:99:b5:c4:91:1c:c9:e5:00:08:8b:e5:5a:88:87: dc:ee:ee:6b:ad:7b:69:6b:2d:f8:d0:6f:70:9a:39:e9:43:eb: 8c:48:e4:e4:39:aa:4b:5f:26:a3:43:31:3d:54:e5:89:9d:70: 35:04:ef:45:55:9d:93:cc:7b:4f:55:5d:08:4e:76:83:8a:1a: 3a:0d:18:ad:e4:68:05:79:a2:02:87:51:fe:b7:07:ba:23:e6: 93:b2:80:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOjJ4sghSLhsqs/I4trFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNTliY2U2MWJhOWQyYTBlMzU1YmUwMWYxMzQxYjhkZjc2 YWViZGIwHhcNMjUxMjA2MTYwMDQ1WhcNMjUxMjA3MTYwMDQ1WjAzMTEwLwYDVQQD EygyMDJkZWYyNGQxMTU0ZmM5ZDM4MTZiNDBiZTAzYjY1MWNmYThhMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3+dgD37ZdtllEwA3qlerTaj4Hkj QqKx5LBY3Xo2Tn2lLODE3FU/LmUGAzKzlwRgKObEHkEwsNP1ci0IqPsdVF8w9CMN K2XyNloqilcqShIo9+FDRR81iEwtg9Ve9ViLZTNh/yQwWM5SrMXG6P++rKUMCAUZ wGpdq7Bz06cfrJHbY9ejifO73sb42Jug0/H2WLf8wI/cf1Ze8gJdZknDc261PNYx QuBv4VuRBVUFvLRczMD+ZyKYCozncRnZg5fKY8kqyfH3cF14Ui7q+zTIMledg2KX SU7ePHEFv/hA8OZk0nJ2Auy0pFQjnlMaswVE0OG+7QwemPf1cPRI/X76pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAt7yTRFU/J04FrQL4DtlHPqKKyMB8GA1UdIwQY MBaAFNtZvOYbqdKg41W+AfE0G433auvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWIt M2EwNDJmNzdiNzM4LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWItM2EwNDJmNzdiNzM4 LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1tq43OaC YsD6nARRaijfV7ceD0s9Q9SnG5CXYnkTcj72KtojTa8RJ+7P0cFakQGWMebVEodG su82ZZbv0b6B7uETr1Iy9GUTLEgF5pVboXBLcBaBaiqn7rPVbDOhCV/DJUfBx5cr dQ8AVASEw1DIhMdHGE6YY8yE+XFO/KkmpOpHDZ5V0bthgNpxqBa86Ok6fvlcmCzN 8P4HF4MprrB+TGEgLIR18pm1xJEcyeUACIvlWoiH3O7ua617aWst+NBvcJo56UPr jEjk5DmqS18mo0MxPVTliZ1wNQTvRVWdk8x7T1VdCE52g4oaOg0YreRoBXmiAodR /rcHuiPmk7KAsg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:08 2025 by rpki-client