This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft File: gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json) Hash identifier: wEbhmu2hSNzfj3c23OEWtb35dleaBw7TBcArJ5YQZms= Subject key identifier: 7D:10:9D:EB:F0:3B:B4:82:EA:1D:99:5D:5C:B0:C8:1C:E4:47:C2:93 Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F Certificate issuer: /CN=803f6e8176c911daa2c343053311fe3f03d7d67f Certificate serial: 019AF31D10002B88EC9F3C7B96A470285285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft Manifest number: 149A Signing time: Sat 06 Dec 2025 10:02:39 +0000 Manifest this update: Sat 06 Dec 2025 10:02:39 +0000 Manifest next update: Sun 07 Dec 2025 10:02:39 +0000 Files and hashes: 1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: LVdkV9gwptADaVuBQHA7rhlHLQ8UMKKJJtduktfX5HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:10:00:2b:88:ec:9f:3c:7b:96:a4:70:28:52:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f Validity Not Before: Dec 6 10:02:39 2025 GMT Not After : Dec 7 10:02:39 2025 GMT Subject: CN=7d109debf03bb482ea1d995d5cb0c81ce447c293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:23:83:59:ed:b7:80:ca:85:15:99:ff:fb: 87:94:81:8f:ea:ec:46:91:56:eb:1d:79:22:1b:2f: 0c:a4:79:c3:d9:7e:23:ba:bd:5f:63:94:b1:47:cb: 43:45:ee:a9:f9:04:07:cb:7f:01:6d:8e:b7:02:ab: 74:ed:e8:ad:c4:f2:e6:69:27:af:fc:22:e1:87:17: ed:a2:9a:32:7f:6a:b0:95:5d:1f:b2:a8:75:63:c6: e3:32:40:c7:ce:d4:26:b2:9a:ea:fa:76:9c:23:96: 33:77:4f:03:bc:e3:3d:00:0f:61:15:96:c0:3e:58: a9:24:36:69:68:dd:3d:8c:bf:0f:e3:d1:4a:8d:fe: 45:f8:ed:f1:06:21:7c:cc:f2:4d:78:70:14:cf:6e: 3b:65:61:c3:27:7d:aa:02:c5:04:4c:20:32:94:e4: 74:72:16:2c:e9:8a:65:bc:d7:4b:61:c8:5b:9c:66: 2d:ee:89:e7:5b:92:37:95:19:99:c3:0a:fa:78:5f: 83:b6:b8:b6:cb:3b:f6:9e:02:d7:bf:a0:cb:ef:c8: e2:8d:02:f8:f7:89:5a:4d:0c:81:e6:d8:07:09:f2: ec:67:86:76:f7:bf:b6:1e:3e:ff:e3:e4:8e:ab:2c: 7f:89:34:8d:ef:3b:c4:c6:23:4d:34:ee:af:d7:4d: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:10:9D:EB:F0:3B:B4:82:EA:1D:99:5D:5C:B0:C8:1C:E4:47:C2:93 X509v3 Authority Key Identifier: keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:96:87:b0:c3:89:38:84:52:01:dd:c9:fd:2e:2a:19:43:68: 03:00:52:70:81:64:22:ec:3e:de:b4:c8:8b:c9:33:5d:dd:f9: ea:8e:c8:96:a3:bf:87:c7:f0:53:ca:de:f8:55:3c:1f:13:cb: 09:37:57:0c:6b:12:45:9e:96:ca:94:b8:82:10:81:fa:ad:d5: d5:a4:ca:c4:39:06:d3:bc:0b:27:84:16:38:d4:69:d0:06:2d: fc:fb:92:fc:20:07:cd:5a:38:00:38:52:97:72:6b:b8:a4:c5: 6c:98:f5:cf:d3:ea:d5:8b:9f:d3:9e:1b:d5:6a:78:b1:ac:d4: 82:04:6a:17:40:58:44:c0:68:ce:95:11:6e:b3:78:fc:ce:a2: dc:c6:d9:41:37:fe:6c:c7:a8:1b:cf:5a:5a:c4:1c:44:36:b5: 9e:b4:85:09:b5:a7:a9:8f:b0:0e:9e:08:43:48:2d:d1:1e:f9: 45:7e:f0:fc:fa:90:1c:43:3b:ec:ce:b3:d9:6c:1b:12:3c:2f: e3:33:5b:83:f7:df:c5:04:27:bf:7b:b9:54:ef:31:9e:d9:0b: 32:66:3b:05:dc:64:83:5d:c0:d9:36:7d:5f:e1:6b:93:a6:7e: 50:a8:8e:7b:38:06:ac:8b:4c:31:3a:aa:64:b2:62:59:7f:56: 4a:f7:84:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRAAK4jsnzx7lqRwKFKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwM2Y2ZTgxNzZjOTExZGFhMmMzNDMwNTMzMTFmZTNmMDNk N2Q2N2YwHhcNMjUxMjA2MTAwMjM5WhcNMjUxMjA3MTAwMjM5WjAzMTEwLwYDVQQD Eyg3ZDEwOWRlYmYwM2JiNDgyZWExZDk5NWQ1Y2IwYzgxY2U0NDdjMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE0jg1ntt4DKhRWZ//uHlIGP6uxG kVbrHXkiGy8MpHnD2X4jur1fY5SxR8tDRe6p+QQHy38BbY63Aqt07eitxPLmaSev /CLhhxftopoyf2qwlV0fsqh1Y8bjMkDHztQmsprq+nacI5Yzd08DvOM9AA9hFZbA PlipJDZpaN09jL8P49FKjf5F+O3xBiF8zPJNeHAUz247ZWHDJ32qAsUETCAylOR0 chYs6YplvNdLYchbnGYt7onnW5I3lRmZwwr6eF+Dtri2yzv2ngLXv6DL78jijQL4 94laTQyB5tgHCfLsZ4Z297+2Hj7/4+SOqyx/iTSN7zvExiNNNO6v1039kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0QnevwO7SC6h2ZXVywyBzkR8KTMB8GA1UdIwQY MBaAFIA/boF2yRHaosNDBTMR/j8D19Z/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMt MGUzNDQ3ZjcxYjVmLzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMtMGUzNDQ3ZjcxYjVm LzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJaHsMOJ OIRSAd3J/S4qGUNoAwBScIFkIuw+3rTIi8kzXd356o7IlqO/h8fwU8re+FU8HxPL CTdXDGsSRZ6WypS4ghCB+q3V1aTKxDkG07wLJ4QWONRp0AYt/PuS/CAHzVo4ADhS l3JruKTFbJj1z9Pq1Yuf054b1Wp4sazUggRqF0BYRMBozpURbrN4/M6i3MbZQTf+ bMeoG89aWsQcRDa1nrSFCbWnqY+wDp4IQ0gt0R75RX7w/PqQHEM77M6z2WwbEjwv 4zNbg/ffxQQnv3u5VO8xntkLMmY7Bdxkg13A2TZ9X+Frk6Z+UKiOezgGrItMMTqq ZLJiWX9WSveEBA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:28 2025 by rpki-client