This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json) Hash identifier: HnYvxWmtNXS6FgaYT6XJJ77/+ltVJmrL7QL0ZZjPGsM= Subject key identifier: B9:F7:76:E2:B7:E1:C4:DE:58:D3:C1:6E:59:11:88:8D:B9:D3:6C:4F Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95 Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695 Certificate serial: 019AF19B9FE7BF29ADCE0E42A82173DC0ACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft Manifest number: 1498 Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: 6WMVV7kaELUS0VOqOrI4B5DHbdmSHs+0pwZOprIWSIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9f:e7:bf:29:ad:ce:0e:42:a8:21:73:dc:0a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695 Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=b9f776e2b7e1c4de58d3c16e5911888db9d36c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:5f:70:22:04:25:c8:1c:16:d5:ef:54:06: 19:98:79:64:05:43:00:26:58:98:af:49:1f:40:11: ab:27:0c:9d:91:48:3b:02:3b:39:78:be:f4:be:58: c8:c0:7b:c9:0e:9c:62:7e:40:56:7f:21:ed:20:30: fe:89:9e:8b:35:77:fa:bb:20:16:9d:66:f9:6b:d8: 88:07:78:5e:82:b8:c1:1d:ee:96:3f:9c:45:07:84: 93:0b:5b:fd:7a:25:0e:95:04:19:74:37:4a:ce:06: fd:61:46:94:e0:6c:fd:65:6c:60:75:78:85:b7:90: 35:bc:38:80:9b:67:4c:77:20:ca:a1:cb:d9:88:6e: 88:11:9a:d3:9e:d4:14:4a:19:87:98:0e:48:dc:a8: d3:cd:37:5f:79:ce:23:ed:02:ce:83:87:35:38:64: 0d:9a:17:55:8b:67:9b:6f:07:48:79:b9:5d:08:7f: 33:6c:5d:b9:16:74:ec:ec:ba:b5:79:92:9f:97:c9: 2b:46:7d:b3:6b:70:ca:41:28:d2:b9:c1:36:92:3c: 86:72:b7:d7:b4:f2:40:15:eb:e4:8e:ff:04:f6:8a: d5:76:ee:c8:10:bd:a6:ec:b5:9d:27:35:10:81:bb: ff:4a:80:1c:8f:5c:00:33:54:0c:75:fa:f8:82:4c: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F7:76:E2:B7:E1:C4:DE:58:D3:C1:6E:59:11:88:8D:B9:D3:6C:4F X509v3 Authority Key Identifier: keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:16:ec:d4:e8:bc:c7:1a:e9:39:1b:5f:a3:54:b0:c6:33:e6: 3c:55:f4:16:f2:53:85:91:86:c5:a2:f2:4d:65:a9:f5:cf:67: 95:fb:87:ff:2a:3a:04:4f:b5:2c:82:ee:f4:75:90:54:82:03: 61:05:5a:80:3a:49:7f:1e:c3:90:cb:c0:c8:47:98:91:d8:41: cc:1c:ed:c6:fc:dc:1d:48:a3:a0:5c:d1:cd:d5:ef:6f:b9:d1: 0c:b2:f6:13:20:c8:00:11:f4:2f:5e:4d:91:bf:82:ed:3f:84: ac:ac:64:f1:6d:57:10:80:fa:b1:7c:00:65:8b:70:0b:a6:41: 92:67:e7:70:75:fe:da:0e:1f:43:77:8b:0d:86:ad:a1:24:50: 86:20:42:4b:b8:77:d1:4b:55:34:fa:2d:64:24:3d:09:a9:24: 10:b4:31:c4:97:69:aa:4d:1d:a5:b9:a3:c7:d7:ab:96:96:20: 59:44:80:5c:cb:e7:81:88:0c:9c:e1:5b:64:15:20:0f:b6:e9: d1:5e:68:0d:ae:7c:c9:5c:bb:14:9a:1f:c9:14:ae:cd:d1:20: ed:26:5d:c5:fc:eb:d7:3f:8f:40:c4:78:1a:6a:12:2a:80:2f: b7:6b:e7:45:ce:b5:6d:9b:82:92:1b:e0:ee:91:31:29:35:04: 56:91:ee:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5/nvymtzg5CqCFz3ArKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNzBkNGRkZTIzYTkyMTY2YTY3YmIxM2Y2MGJjNzBiNjY3 ZDg2OTUwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD EyhiOWY3NzZlMmI3ZTFjNGRlNThkM2MxNmU1OTExODg4ZGI5ZDM2YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MBfcCIEJcgcFtXvVAYZmHlkBUMA JliYr0kfQBGrJwydkUg7Ajs5eL70vljIwHvJDpxifkBWfyHtIDD+iZ6LNXf6uyAW nWb5a9iIB3hegrjBHe6WP5xFB4STC1v9eiUOlQQZdDdKzgb9YUaU4Gz9ZWxgdXiF t5A1vDiAm2dMdyDKocvZiG6IEZrTntQUShmHmA5I3KjTzTdfec4j7QLOg4c1OGQN mhdVi2ebbwdIebldCH8zbF25FnTs7Lq1eZKfl8krRn2za3DKQSjSucE2kjyGcrfX tPJAFevkjv8E9orVdu7IEL2m7LWdJzUQgbv/SoAcj1wAM1QMdfr4gkz0CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn3duK34cTeWNPBblkRiI2502xPMB8GA1UdIwQY MBaAFNFw1N3iOpIWame7E/YLxwtmfYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81NmE2ZWMtMzdiZS00MzY4LTk0MzQt N2E1NzE0ZjhlNmRhLzEvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81NmE2ZWMtMzdiZS00MzY4LTk0MzQtN2E1NzE0ZjhlNmRh LzEvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxbs1Oi8 xxrpORtfo1SwxjPmPFX0FvJThZGGxaLyTWWp9c9nlfuH/yo6BE+1LILu9HWQVIID YQVagDpJfx7DkMvAyEeYkdhBzBztxvzcHUijoFzRzdXvb7nRDLL2EyDIABH0L15N kb+C7T+ErKxk8W1XEID6sXwAZYtwC6ZBkmfncHX+2g4fQ3eLDYatoSRQhiBCS7h3 0UtVNPotZCQ9CakkELQxxJdpqk0dpbmjx9erlpYgWUSAXMvngYgMnOFbZBUgD7bp 0V5oDa58yVy7FJofyRSuzdEg7SZdxfzr1z+PQMR4GmoSKoAvt2vnRc61bZuCkhvg 7pExKTUEVpHu+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:07 2025 by rpki-client