This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json) Hash identifier: pptCWiHll2XAJuuB6WcO1k5ia3KWLORu52Lcwe8XsKU= Subject key identifier: 13:57:1C:32:7C:BE:F7:47:C7:1E:88:9B:79:61:86:3D:EC:EB:9B:96 Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa Certificate serial: 019AF19B2A2A22CC871946C1E23EC0D84ECD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft Manifest number: 0848 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: YgXKYB0x+mAGyEC9Mn9/TjsBy7ebjycy3vjbFdT190I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2a:2a:22:cc:87:19:46:c1:e2:3e:c0:d8:4e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=13571c327cbef747c71e889b7961863deceb9b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:70:0c:9f:a7:bd:ee:5e:33:3c:e7:6b:35:fd: 24:ed:93:ba:cd:e4:50:8f:ec:78:0c:c6:1a:03:19: 1e:c7:7e:2f:2c:dd:0f:4f:51:ae:5e:d9:cc:10:79: 07:38:1c:90:75:c5:9d:5a:6f:f7:d2:eb:2c:31:04: e1:c7:d5:02:39:33:2d:56:d0:11:c8:fc:23:6d:8a: 9e:36:8a:44:58:04:67:67:87:fd:bc:30:67:fc:07: 1d:58:76:d3:08:69:be:09:2b:61:81:34:37:61:70: b5:5b:5b:9f:09:2d:03:9f:53:54:ed:d2:cd:5b:68: eb:b8:63:27:78:44:ef:58:20:eb:08:9f:c7:d7:1d: 95:45:30:73:89:c4:18:f2:25:ba:ff:7a:6b:ab:89: 92:19:1a:9d:b4:d3:46:c6:67:ba:94:76:dc:d6:c5: 7a:d3:86:d7:e4:18:e2:ec:12:92:11:70:38:16:82: 47:42:52:a4:cc:51:63:4c:4e:81:75:35:af:a5:47: 03:24:1a:10:40:a9:f9:65:0b:fe:50:2f:a0:7e:4e: 21:47:eb:8d:6a:93:1a:36:cd:af:1e:c9:9e:39:2c: c3:e3:a6:f4:04:fd:52:be:22:96:82:9a:9e:0a:25: 1e:16:63:ac:f6:6e:99:cc:8b:c2:52:d3:e8:d8:93: ef:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:1C:32:7C:BE:F7:47:C7:1E:88:9B:79:61:86:3D:EC:EB:9B:96 X509v3 Authority Key Identifier: keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b1:92:6f:bd:c2:d4:b2:db:09:f4:a8:46:bf:52:f6:02:1f: 12:9c:b6:41:e9:81:44:3f:bf:46:ee:b1:80:c8:c9:0a:2e:7a: f2:99:f2:be:c1:c1:d5:70:5d:3e:6f:1d:65:ef:f8:af:5e:06: 80:ae:b2:d2:cf:fe:2f:67:c0:f7:e7:25:d5:e4:36:d3:0d:96: 19:dc:c0:f9:44:bb:3b:8b:d7:00:b3:98:93:cf:f8:b4:0b:72: 59:8c:ac:f1:b5:cc:38:d9:c1:a2:e9:20:4c:91:dc:66:1f:70: 40:5e:45:f1:a6:2c:f4:5a:7c:67:54:10:ec:aa:6b:f7:9a:b1: 49:f9:49:99:4b:a7:f2:1b:eb:6e:1a:6e:c4:c6:87:bc:d0:8b: 89:49:4f:f0:f3:2a:c6:8e:5e:4a:ec:9b:4c:40:08:86:ce:cb: ed:32:f0:21:2e:51:17:48:78:d0:db:8b:d8:6d:2f:1e:05:80: 2b:9a:09:26:80:66:25:73:d3:94:d2:41:5d:8d:cf:2e:46:f4: 6c:99:ff:de:1c:ee:95:99:c2:3d:8d:d5:a2:47:0d:4c:6a:44: ad:bc:ca:64:d3:6a:c9:12:ab:88:b9:b1:85:a2:cd:47:58:d3: 94:f2:e3:01:80:5e:2e:df:7c:c9:77:77:f3:20:1a:a7:ac:67: 82:8d:90:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyoqIsyHGUbB4j7A2E7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTNlOTRiNDI0YTVjNWQzZjMwMzIwMmI3NTQxNjliOGIw Yzk1ZmEwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EygxMzU3MWMzMjdjYmVmNzQ3YzcxZTg4OWI3OTYxODYzZGVjZWI5Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nAMn6e97l4zPOdrNf0k7ZO6zeRQ j+x4DMYaAxkex34vLN0PT1GuXtnMEHkHOByQdcWdWm/30ussMQThx9UCOTMtVtAR yPwjbYqeNopEWARnZ4f9vDBn/AcdWHbTCGm+CSthgTQ3YXC1W1ufCS0Dn1NU7dLN W2jruGMneETvWCDrCJ/H1x2VRTBzicQY8iW6/3prq4mSGRqdtNNGxme6lHbc1sV6 04bX5Bji7BKSEXA4FoJHQlKkzFFjTE6BdTWvpUcDJBoQQKn5ZQv+UC+gfk4hR+uN apMaNs2vHsmeOSzD46b0BP1SviKWgpqeCiUeFmOs9m6ZzIvCUtPo2JPvRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNXHDJ8vvdHxx6Im3lhhj3s65uWMB8GA1UdIwQY MBaAFJ2j6UtCSlxdPzAyArdUFpuLDJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMt YTVhNWQ2ZWI4NDBmLzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMtYTVhNWQ2ZWI4NDBm LzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7GSb73C 1LLbCfSoRr9S9gIfEpy2QemBRD+/Ru6xgMjJCi568pnyvsHB1XBdPm8dZe/4r14G gK6y0s/+L2fA9+cl1eQ20w2WGdzA+US7O4vXALOYk8/4tAtyWYys8bXMONnBoukg TJHcZh9wQF5F8aYs9Fp8Z1QQ7Kpr95qxSflJmUun8hvrbhpuxMaHvNCLiUlP8PMq xo5eSuybTEAIhs7L7TLwIS5RF0h40NuL2G0vHgWAK5oJJoBmJXPTlNJBXY3PLkb0 bJn/3hzulZnCPY3VokcNTGpErbzKZNNqyRKriLmxhaLNR1jTlPLjAYBeLt98yXd3 8yAap6xngo2Qkg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:49 2025 by rpki-client