This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft File: CteC3XOwPU5NdCHikNY6rfdcFyg.mft (raw, json) Hash identifier: Uu9Mfzpoi/GhC5PbkCqSwN8KvXKhsPS3WIA0MMd5Lik= Subject key identifier: B3:7C:7B:18:A1:DB:87:E5:6E:64:16:6C:1E:2F:A7:C9:AE:16:12:2B Authority key identifier: 0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28 Certificate issuer: /CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728 Certificate serial: 019AF5AF062F079D8363C16086DDB754EF81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft Manifest number: D8 Signing time: Sat 06 Dec 2025 22:01:19 +0000 Manifest this update: Sat 06 Dec 2025 22:01:19 +0000 Manifest next update: Sun 07 Dec 2025 22:01:19 +0000 Files and hashes: 1: CteC3XOwPU5NdCHikNY6rfdcFyg.crl (hash: K0eMCuayqQyq+hti6TeV3CW+mf9DB/9x5A6p5ofPJ0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:06:2f:07:9d:83:63:c1:60:86:dd:b7:54:ef:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ad782dd73b03d4e4d7421e290d63aadf75c1728 Validity Not Before: Dec 6 22:01:19 2025 GMT Not After : Dec 7 22:01:19 2025 GMT Subject: CN=b37c7b18a1db87e56e64166c1e2fa7c9ae16122b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a8:2e:72:ac:f9:b9:9b:62:5e:3d:a8:25:7b: cb:02:72:ae:59:f8:d3:1e:38:4c:e8:da:f8:55:c3: 64:43:a8:63:da:7d:bc:ec:c8:5d:3b:36:2a:ba:20: e0:f4:f5:2c:99:b6:cc:83:db:a9:93:57:f6:9f:54: ec:6d:e8:c5:88:45:24:f7:88:54:78:b6:dc:08:a2: 81:04:85:7f:92:cd:90:21:bf:25:fe:53:8a:42:9c: 52:34:e9:a1:b1:b7:1a:e1:ef:0c:1f:ad:6b:5f:c1: 3a:5e:14:33:c1:78:ce:0b:65:f8:ab:53:0a:7a:22: b8:f3:b9:06:d2:e4:85:69:78:4c:03:e8:b0:22:0d: 52:f5:7a:32:6b:7c:a4:11:82:5f:66:69:87:88:23: 99:64:c8:ea:78:f6:50:94:91:df:af:b8:52:27:af: 1b:51:91:e2:f6:e8:4a:8f:97:2f:4e:eb:ba:fe:20: 3d:9f:eb:01:ab:11:54:c5:e9:c1:4b:39:c4:cc:14: ae:c6:38:08:70:67:fb:10:c8:a5:b4:96:d1:a2:bb: 1d:ec:0f:45:7f:ba:04:9b:64:6f:6c:8e:36:58:56: 10:2a:a2:9f:a2:da:dd:d1:f5:b6:4b:77:78:bb:d6: 79:ea:2e:d6:b7:9d:c2:7e:e0:d6:6d:95:73:80:38: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7C:7B:18:A1:DB:87:E5:6E:64:16:6C:1E:2F:A7:C9:AE:16:12:2B X509v3 Authority Key Identifier: keyid:0A:D7:82:DD:73:B0:3D:4E:4D:74:21:E2:90:D6:3A:AD:F7:5C:17:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CteC3XOwPU5NdCHikNY6rfdcFyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/463e99-a52b-4305-a4a5-54036b91845c/1/CteC3XOwPU5NdCHikNY6rfdcFyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c3:67:2b:e9:ac:08:8c:9f:34:16:26:30:a2:54:4e:af:94: 42:51:d1:01:37:40:b0:7f:c2:40:6b:27:63:f7:56:d3:df:b7: c0:6e:a1:bf:f9:5a:3c:c6:69:9a:5a:28:94:15:a3:f6:d0:e2: 34:08:91:d1:82:37:ca:cc:12:00:23:8e:ac:8c:eb:4e:3e:07: d8:27:d6:5d:04:45:7f:2c:98:4b:ff:e0:63:04:b9:3e:4e:f0: 93:f1:3b:36:54:4a:3a:da:86:b4:6c:45:7f:22:b5:4a:50:81: 6d:fa:8e:11:c4:5d:fb:1b:f5:b0:3b:40:cb:d8:62:55:d0:cc: a3:1d:9b:fe:e5:a9:77:c0:6f:0a:07:c3:23:16:99:1f:fc:0e: b0:6e:b2:12:0d:88:47:79:ff:5d:ed:aa:91:ed:34:41:12:d3: ce:00:09:63:45:4b:92:1c:14:36:00:db:ef:cc:40:23:82:f9: 20:2c:1c:2f:b3:17:8b:1c:5c:c3:b7:4b:25:4f:94:8e:30:1d: 11:2b:af:a7:35:a8:f2:70:15:21:7b:8f:93:34:16:72:7f:ad: 03:6e:4c:d2:e5:e5:01:da:1e:b6:74:13:42:e9:ab:ed:76:fd: 30:1d:e4:f2:75:9c:55:b7:7c:4b:05:76:ac:c7:77:7f:26:9d: 82:83:97:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwYvB52DY8Fght23VO+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZDc4MmRkNzNiMDNkNGU0ZDc0MjFlMjkwZDYzYWFkZjc1 YzE3MjgwHhcNMjUxMjA2MjIwMTE5WhcNMjUxMjA3MjIwMTE5WjAzMTEwLwYDVQQD EyhiMzdjN2IxOGExZGI4N2U1NmU2NDE2NmMxZTJmYTdjOWFlMTYxMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6agucqz5uZtiXj2oJXvLAnKuWfjT HjhM6Nr4VcNkQ6hj2n287MhdOzYquiDg9PUsmbbMg9upk1f2n1TsbejFiEUk94hU eLbcCKKBBIV/ks2QIb8l/lOKQpxSNOmhsbca4e8MH61rX8E6XhQzwXjOC2X4q1MK eiK487kG0uSFaXhMA+iwIg1S9Xoya3ykEYJfZmmHiCOZZMjqePZQlJHfr7hSJ68b UZHi9uhKj5cvTuu6/iA9n+sBqxFUxenBSznEzBSuxjgIcGf7EMiltJbRorsd7A9F f7oEm2RvbI42WFYQKqKfotrd0fW2S3d4u9Z56i7Wt53CfuDWbZVzgDignwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLN8exih24flbmQWbB4vp8muFhIrMB8GA1UdIwQY MBaAFArXgt1zsD1OTXQh4pDWOq33XBcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3RlQzNYT3dQVTVOZENIaWtOWTZyZmRjRnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80NjNlOTktYTUyYi00MzA1LWE0YTUt NTQwMzZiOTE4NDVjLzEvQ3RlQzNYT3dQVTVOZENIaWtOWTZyZmRjRnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80NjNlOTktYTUyYi00MzA1LWE0YTUtNTQwMzZiOTE4NDVj LzEvQ3RlQzNYT3dQVTVOZENIaWtOWTZyZmRjRnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcNnK+ms CIyfNBYmMKJUTq+UQlHRATdAsH/CQGsnY/dW09+3wG6hv/laPMZpmloolBWj9tDi NAiR0YI3yswSACOOrIzrTj4H2CfWXQRFfyyYS//gYwS5Pk7wk/E7NlRKOtqGtGxF fyK1SlCBbfqOEcRd+xv1sDtAy9hiVdDMox2b/uWpd8BvCgfDIxaZH/wOsG6yEg2I R3n/Xe2qke00QRLTzgAJY0VLkhwUNgDb78xAI4L5ICwcL7MXixxcw7dLJU+UjjAd ESuvpzWo8nAVIXuPkzQWcn+tA25M0uXlAdoetnQTQumr7Xb9MB3k8nWcVbd8SwV2 rMd3fyadgoOXuw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:51:07 2025 by rpki-client