This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft File: cIx-If6q6sViZpSXVEPndzXz_Kc.mft (raw, json) Hash identifier: vA4gg9iiOHBkqc4z2hGkvjbhWIXh9oZtj2nKoRaeAP4= Subject key identifier: 7C:E2:94:42:D7:2D:2A:DB:CE:DD:74:FB:88:7B:03:3E:28:AF:64:06 Authority key identifier: 70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7 Certificate issuer: /CN=708c7e21feaaeac5626694975443e77735f3fca7 Certificate serial: 019AF12D221A6B4620DB6C688FF6343E1D07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft Manifest number: 5D Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: cIx-If6q6sViZpSXVEPndzXz_Kc.crl (hash: YVPGQj49ytqx9tuqXvR9m0QfezF2ngvhcVJj+m++LpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:22:1a:6b:46:20:db:6c:68:8f:f6:34:3e:1d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708c7e21feaaeac5626694975443e77735f3fca7 Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=7ce29442d72d2adbcedd74fb887b033e28af6406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:8c:10:1f:21:6f:1a:71:63:2c:b8:58:81: b9:c9:83:2b:1f:0b:e4:54:c4:02:ec:87:8b:55:05: e8:44:4e:cb:6d:47:39:dd:fe:cf:88:0c:22:24:64: 84:2b:65:5b:ff:7d:69:af:60:09:07:c8:49:42:ef: c7:15:17:0c:86:85:8c:65:40:97:a4:8f:72:f3:18: 85:ca:bf:d0:69:d5:a2:af:fc:34:76:cc:01:a2:6c: 20:05:14:c1:67:07:fd:4b:9f:ff:0a:14:e0:01:14: 22:1d:2f:85:62:ca:32:eb:44:a2:de:b5:e1:2e:99: 32:ef:5e:2f:07:45:34:04:09:a0:91:ff:f4:52:21: 45:b2:12:23:57:7b:2f:a7:26:2a:01:9d:60:8f:a5: 34:a6:6e:f1:83:aa:fe:83:3f:6a:e5:b6:73:1b:2f: 09:16:09:d8:57:0e:71:19:fb:59:46:97:d1:78:98: c6:7c:08:0a:9c:4b:c0:ec:40:02:20:b3:18:5b:f8: dc:cf:47:06:23:f3:35:ab:47:b9:85:f1:11:ad:32: ef:21:d5:46:fd:e3:8b:59:55:9c:23:a7:65:14:2e: 78:7d:b4:ad:db:46:96:7f:c0:c9:a5:62:ed:89:35: bb:d9:e3:51:c0:97:2f:5c:e8:f2:12:75:12:43:ce: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E2:94:42:D7:2D:2A:DB:CE:DD:74:FB:88:7B:03:3E:28:AF:64:06 X509v3 Authority Key Identifier: keyid:70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d1:be:27:7e:b2:c9:41:9b:a7:9e:df:f3:e8:e3:9f:ed:ad: f5:6b:95:5a:c4:01:4f:a8:db:24:22:c6:11:77:2f:a4:66:79: 20:af:14:61:09:1d:4a:73:8c:88:33:6e:f6:14:5c:5b:86:6e: 96:66:6d:57:a5:30:97:fe:71:be:9b:61:4b:85:fb:0d:23:58: 47:26:87:fd:23:f6:d2:37:28:71:c5:64:ef:b0:ac:0e:ba:85: 63:e6:84:9b:a6:c8:2a:66:69:57:5d:1d:78:de:49:5f:f6:43: 17:9e:73:f3:c0:29:1a:ea:53:90:8a:b1:17:17:6c:5e:d1:40: 84:e1:12:d8:01:a4:95:02:6c:91:42:f0:97:e2:46:49:23:f2: ee:4b:c9:d3:2f:f4:81:31:f2:39:a4:22:98:97:16:c7:6a:7a: b7:8f:62:fc:c7:d6:a9:c7:0b:18:07:d7:bf:ac:ba:8b:9a:59: aa:f5:27:05:b2:1c:e3:c8:95:f0:11:df:56:a4:03:f1:d6:74: 04:ee:ea:8c:61:7a:29:0d:b2:2e:fd:0c:ff:c9:39:50:7c:e5: 12:ad:5c:e0:0b:21:f1:4b:2d:5c:a8:49:41:ae:02:a6:c3:0c: 48:fb:35:e9:40:b4:41:24:38:05:ab:6a:27:41:5e:0d:81:5e: 0c:72:73:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSIaa0Yg22xoj/Y0Ph0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOGM3ZTIxZmVhYWVhYzU2MjY2OTQ5NzU0NDNlNzc3MzVm M2ZjYTcwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD Eyg3Y2UyOTQ0MmQ3MmQyYWRiY2VkZDc0ZmI4ODdiMDMzZTI4YWY2NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0teMEB8hbxpxYyy4WIG5yYMrHwvk VMQC7IeLVQXoRE7LbUc53f7PiAwiJGSEK2Vb/31pr2AJB8hJQu/HFRcMhoWMZUCX pI9y8xiFyr/QadWir/w0dswBomwgBRTBZwf9S5//ChTgARQiHS+FYsoy60Si3rXh Lpky714vB0U0BAmgkf/0UiFFshIjV3svpyYqAZ1gj6U0pm7xg6r+gz9q5bZzGy8J FgnYVw5xGftZRpfReJjGfAgKnEvA7EACILMYW/jcz0cGI/M1q0e5hfERrTLvIdVG /eOLWVWcI6dlFC54fbSt20aWf8DJpWLtiTW72eNRwJcvXOjyEnUSQ86pewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzilELXLSrbzt10+4h7Az4or2QGMB8GA1UdIwQY MBaAFHCMfiH+qurFYmaUl1RD53c18/ynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgt ODdhYWUzNTc1YTJhLzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS82ZjU5MGEtYzFmZC00MDE5LWJiZTgtODdhYWUzNTc1YTJh LzEvY0l4LUlmNnE2c1ZpWnBTWFZFUG5kelh6X0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtG+J36y yUGbp57f8+jjn+2t9WuVWsQBT6jbJCLGEXcvpGZ5IK8UYQkdSnOMiDNu9hRcW4Zu lmZtV6Uwl/5xvpthS4X7DSNYRyaH/SP20jcoccVk77CsDrqFY+aEm6bIKmZpV10d eN5JX/ZDF55z88ApGupTkIqxFxdsXtFAhOES2AGklQJskULwl+JGSSPy7kvJ0y/0 gTHyOaQimJcWx2p6t49i/MfWqccLGAfXv6y6i5pZqvUnBbIc48iV8BHfVqQD8dZ0 BO7qjGF6KQ2yLv0M/8k5UHzlEq1c4Ash8UstXKhJQa4CpsMMSPs16UC0QSQ4Batq J0FeDYFeDHJzzw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:12 2025 by rpki-client