This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft File: sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft (raw, json) Hash identifier: XDpKrtUjDbxVHgDcwfe8xr2zVIhzGlrKjvB/Rlq/OV4= Subject key identifier: 89:BF:A0:20:10:31:81:81:8D:64:01:D9:01:E1:73:B2:06:4E:6C:87 Authority key identifier: B1:33:80:79:04:86:DC:37:6D:04:DC:54:1E:98:02:CB:02:F7:52:5A Certificate issuer: /CN=b13380790486dc376d04dc541e9802cb02f7525a Certificate serial: 019AF16483167B30A1C39A20C6CE32D75C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft Manifest number: B0 Signing time: Sat 06 Dec 2025 02:01:27 +0000 Manifest this update: Sat 06 Dec 2025 02:01:27 +0000 Manifest next update: Sun 07 Dec 2025 02:01:27 +0000 Files and hashes: 1: sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl (hash: Giy8zLcjz6sirynrp6qr9DGJ0TC64BbtwZWDaK0fxsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:83:16:7b:30:a1:c3:9a:20:c6:ce:32:d7:5c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b13380790486dc376d04dc541e9802cb02f7525a Validity Not Before: Dec 6 02:01:27 2025 GMT Not After : Dec 7 02:01:27 2025 GMT Subject: CN=89bfa020103181818d6401d901e173b2064e6c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:47:85:57:cb:13:5f:68:3c:b6:1b:64:b4: 17:1b:62:44:42:e8:61:13:20:48:20:ce:6d:a3:12: 65:5c:00:1b:e6:e2:5c:b1:46:73:3b:8b:9a:e6:4e: 15:4a:12:3a:1a:11:a7:f9:fb:39:be:a2:89:ea:7e: 00:bd:45:fa:1a:fd:c2:c6:b9:db:b2:92:e6:74:b6: ef:f5:a2:7a:69:53:1f:65:a5:7d:af:33:40:5d:49: 84:b6:1e:ea:91:6c:ec:f4:6d:02:9b:17:66:7c:13: 44:69:8b:12:41:b6:d3:8c:a8:48:3b:58:96:0b:3d: e5:74:3f:8c:5d:69:1e:b2:64:b5:7d:5d:24:2a:55: ae:3d:c7:32:ba:bc:fb:d7:bd:2f:b6:55:c3:f5:f1: 6c:9e:89:0c:86:36:f7:ef:61:c4:51:5e:59:bb:62: fe:b7:1b:42:e4:59:33:98:28:7f:7c:28:a5:12:5a: 72:66:ba:ef:97:4f:11:5a:4c:fc:4c:c9:63:80:c1: b1:4a:27:58:c3:6f:ca:cc:54:a5:30:9f:f9:e0:c6: 18:ae:60:39:4d:66:9f:03:35:67:9a:8f:53:03:99: 51:18:b1:10:00:7e:f3:af:d7:29:89:6f:8f:c2:24: c7:89:b8:b8:8e:b9:86:dc:33:77:07:ce:47:63:eb: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BF:A0:20:10:31:81:81:8D:64:01:D9:01:E1:73:B2:06:4E:6C:87 X509v3 Authority Key Identifier: keyid:B1:33:80:79:04:86:DC:37:6D:04:DC:54:1E:98:02:CB:02:F7:52:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ac:2b:24:ac:52:2d:93:03:90:9e:d9:75:57:19:60:4b:97: af:e4:48:2f:6b:e7:f7:92:83:8f:77:71:85:ef:d5:f5:83:c2: fe:7d:cd:90:db:10:82:95:bc:ea:b7:cf:01:6f:3b:8f:e3:cf: 34:76:e3:0a:f1:1b:af:29:ac:52:d7:95:d9:fa:b8:87:95:6c: 58:4f:9b:56:02:f0:14:fe:05:a9:cb:f1:7f:42:ba:82:b3:98: c0:fc:25:e7:20:e4:62:92:dc:93:02:9a:6e:22:d1:be:83:1d: ca:9b:e6:11:cf:2c:ad:6b:e9:28:be:b4:16:06:30:e0:1e:1f: 4e:ee:37:4a:9c:8f:c5:23:4f:cb:7c:bf:f1:7f:1b:4e:8e:4b: 0f:e7:74:c9:58:e1:ba:9a:da:98:9d:9a:03:6f:bf:78:b1:17: 62:c3:e5:d6:9f:71:88:6e:2b:ea:a5:70:e2:7c:ee:bb:07:6a: f7:69:01:b6:5c:a9:51:fb:58:24:6e:39:d2:40:46:77:66:70: 13:38:c1:0b:c3:1b:1e:22:c7:5a:9e:df:c2:43:e5:39:37:60: bd:5c:0d:66:5d:20:32:6f:83:d2:28:f5:b4:ea:d9:f9:70:f9: c6:2f:78:74:73:56:11:cf:03:2c:12:7e:78:9a:26:21:54:27: 94:2c:fe:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIMWezChw5ogxs4y11xWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMzM4MDc5MDQ4NmRjMzc2ZDA0ZGM1NDFlOTgwMmNiMDJm NzUyNWEwHhcNMjUxMjA2MDIwMTI3WhcNMjUxMjA3MDIwMTI3WjAzMTEwLwYDVQQD Eyg4OWJmYTAyMDEwMzE4MTgxOGQ2NDAxZDkwMWUxNzNiMjA2NGU2Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly1HhVfLE19oPLYbZLQXG2JEQuhh EyBIIM5toxJlXAAb5uJcsUZzO4ua5k4VShI6GhGn+fs5vqKJ6n4AvUX6Gv3Cxrnb spLmdLbv9aJ6aVMfZaV9rzNAXUmEth7qkWzs9G0CmxdmfBNEaYsSQbbTjKhIO1iW Cz3ldD+MXWkesmS1fV0kKlWuPccyurz7170vtlXD9fFsnokMhjb372HEUV5Zu2L+ txtC5FkzmCh/fCilElpyZrrvl08RWkz8TMljgMGxSidYw2/KzFSlMJ/54MYYrmA5 TWafAzVnmo9TA5lRGLEQAH7zr9cpiW+PwiTHibi4jrmG3DN3B85HY+uO+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm/oCAQMYGBjWQB2QHhc7IGTmyHMB8GA1UdIwQY MBaAFLEzgHkEhtw3bQTcVB6YAssC91JaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1RPQWVRU0czRGR0Qk54VUhwZ0N5d0wzVWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zMmVhYjEtYzMxYi00N2I0LWFhMmEt ZTUyOTU2YzQ4MDA2LzEvc1RPQWVRU0czRGR0Qk54VUhwZ0N5d0wzVWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8zMmVhYjEtYzMxYi00N2I0LWFhMmEtZTUyOTU2YzQ4MDA2 LzEvc1RPQWVRU0czRGR0Qk54VUhwZ0N5d0wzVWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKwrJKxS LZMDkJ7ZdVcZYEuXr+RIL2vn95KDj3dxhe/V9YPC/n3NkNsQgpW86rfPAW87j+PP NHbjCvEbrymsUteV2fq4h5VsWE+bVgLwFP4Fqcvxf0K6grOYwPwl5yDkYpLckwKa biLRvoMdypvmEc8srWvpKL60FgYw4B4fTu43SpyPxSNPy3y/8X8bTo5LD+d0yVjh upramJ2aA2+/eLEXYsPl1p9xiG4r6qVw4nzuuwdq92kBtlypUftYJG450kBGd2Zw EzjBC8MbHiLHWp7fwkPlOTdgvVwNZl0gMm+D0ij1tOrZ+XD5xi94dHNWEc8DLBJ+ eJomIVQnlCz+bg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:00 2025 by rpki-client