This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json) Hash identifier: F90HrVIBds/nngAn1+SLLam8haKg24JnOfK7D1gKHyM= Subject key identifier: 64:BD:2A:3E:2D:FC:C2:23:19:F3:B2:7A:B3:B9:8B:AC:AD:BB:50:E0 Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a Certificate serial: 019AF19B1B40CCFF1F17F8A295B9B3448553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: iCJvuNNt7Men+VMCBTPkm0GFtSvf0VFXI+7Mk84iXcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1b:40:cc:ff:1f:17:f8:a2:95:b9:b3:44:85:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=64bd2a3e2dfcc22319f3b27ab3b98bacadbb50e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:d7:9b:34:da:83:90:1a:64:f2:78:04:be: 00:52:a5:b9:28:ea:ac:37:3a:29:bc:c3:ec:eb:3c: a9:31:8f:18:c2:45:9a:71:e1:a4:82:5f:db:04:54: 65:24:93:13:55:f1:34:67:5b:b3:db:6f:d7:43:9a: ae:05:6f:a2:60:05:47:ac:62:be:7e:0f:48:80:18: ed:f1:9c:5b:ed:dd:a9:05:4e:4b:ef:d7:04:28:d5: e7:26:5f:0a:fe:fa:c7:c1:34:fe:0c:d4:9b:47:e3: 99:38:c7:df:3a:a3:26:c1:81:af:be:07:68:d1:3f: a4:b6:8d:28:24:91:09:ce:cd:db:7c:ca:1a:a3:4c: 5a:1f:f9:95:0c:3f:c7:2b:25:81:86:ae:d2:62:e6: 2d:84:23:c3:7d:7a:38:38:65:1c:01:10:eb:44:04: 3e:bb:4e:06:1b:6e:45:c5:7f:1c:08:ed:ab:38:d6: 76:56:2a:8e:fb:3b:31:c7:bb:2f:49:5a:14:2b:49: 8d:39:4d:1b:58:27:76:0f:83:58:a7:2a:8e:94:1c: 7a:7c:25:aa:d9:d6:10:63:29:5b:dd:9f:61:80:42: c7:8f:93:3a:93:46:cb:f1:bb:48:f2:0e:6a:b2:ab: 52:e1:74:28:bb:f8:69:14:db:9b:98:a1:aa:da:17: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:BD:2A:3E:2D:FC:C2:23:19:F3:B2:7A:B3:B9:8B:AC:AD:BB:50:E0 X509v3 Authority Key Identifier: keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fc:4f:03:86:29:df:71:f5:37:b7:ea:67:c9:3a:28:ad:4f: 4c:9f:57:a0:4a:bf:07:0f:d7:5e:bb:b0:44:22:e6:91:91:de: 53:e6:13:dc:5b:a0:8e:99:4e:93:90:3c:5e:e5:47:6b:ad:e0: 6b:64:d4:3f:97:64:50:97:b0:59:e7:51:40:3a:e3:43:34:a1: e5:a4:03:d2:8d:0f:cc:a6:91:3c:0f:b6:e5:d7:14:6d:97:24: 41:8c:44:31:68:53:95:53:c2:9d:a6:62:ff:b7:50:af:36:ad: db:a6:12:0f:a1:7b:25:8f:f6:b8:9b:58:83:3b:d1:7f:d0:c5: c1:a1:c9:ba:f8:a2:79:62:9c:7e:41:df:4e:7e:6b:ca:34:82: 1c:be:61:dc:7d:50:94:6b:67:9a:b9:99:d9:f5:cd:a5:d1:7a: f0:4c:99:71:3a:63:d5:4b:33:ce:c7:2d:6d:b8:cc:0f:b9:48: a9:0b:bf:ab:ba:e4:c4:d5:6c:83:db:c8:9e:86:a6:43:20:73: a9:6e:a9:3f:10:74:c9:4d:29:e8:4b:42:a7:2d:23:84:f9:1f: 6e:b1:d9:27:1e:b8:45:a5:8a:e7:d3:cc:c8:0e:53:7f:09:33: a6:ef:14:d8:2e:f5:d9:44:da:1b:5e:2f:01:2e:96:e4:53:f5: 8d:de:91:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxtAzP8fF/iilbmzRIVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNWUzZmQ5MzZhMjliNDI5YTE0ODJiNGVmNDFjMzI2ZTI5 MzdkMmEwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD Eyg2NGJkMmEzZTJkZmNjMjIzMTlmM2IyN2FiM2I5OGJhY2FkYmI1MGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh3XmzTag5AaZPJ4BL4AUqW5KOqs NzopvMPs6zypMY8YwkWaceGkgl/bBFRlJJMTVfE0Z1uz22/XQ5quBW+iYAVHrGK+ fg9IgBjt8Zxb7d2pBU5L79cEKNXnJl8K/vrHwTT+DNSbR+OZOMffOqMmwYGvvgdo 0T+kto0oJJEJzs3bfMoao0xaH/mVDD/HKyWBhq7SYuYthCPDfXo4OGUcARDrRAQ+ u04GG25FxX8cCO2rONZ2ViqO+zsxx7svSVoUK0mNOU0bWCd2D4NYpyqOlBx6fCWq 2dYQYylb3Z9hgELHj5M6k0bL8btI8g5qsqtS4XQou/hpFNubmKGq2hdlJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS9Kj4t/MIjGfOyerO5i6ytu1DgMB8GA1UdIwQY MBaAFNteP9k2optCmhSCtO9Bwybik30qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjE0XzJUYWltMEthRklLMDcwSERKdUtUZlNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hYWUxN2YtYzM1Yi00MDdjLTg5NmIt N2U1NzY5MWJiZWQ5LzEvMjE0XzJUYWltMEthRklLMDcwSERKdUtUZlNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9hYWUxN2YtYzM1Yi00MDdjLTg5NmItN2U1NzY5MWJiZWQ5 LzEvMjE0XzJUYWltMEthRklLMDcwSERKdUtUZlNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavxPA4Yp 33H1N7fqZ8k6KK1PTJ9XoEq/Bw/XXruwRCLmkZHeU+YT3FugjplOk5A8XuVHa63g a2TUP5dkUJewWedRQDrjQzSh5aQD0o0PzKaRPA+25dcUbZckQYxEMWhTlVPCnaZi /7dQrzat26YSD6F7JY/2uJtYgzvRf9DFwaHJuviieWKcfkHfTn5ryjSCHL5h3H1Q lGtnmrmZ2fXNpdF68EyZcTpj1UszzsctbbjMD7lIqQu/q7rkxNVsg9vInoamQyBz qW6pPxB0yU0p6EtCpy0jhPkfbrHZJx64RaWK59PMyA5Tfwkzpu8U2C712UTaG14v AS6W5FP1jd6RWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:18 2025 by rpki-client