This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json) Hash identifier: /Lk0EQLdrnQVgnD/WcvClhQeP5tPnFl4u+HHS99KgGY= Subject key identifier: 4F:E6:24:0C:F9:80:17:19:DA:AF:B4:9E:CA:76:4D:AE:3F:F1:05:61 Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b Certificate serial: 019AF3C0899A304F745522C0CC744B9261CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft Manifest number: 0E5C Signing time: Sat 06 Dec 2025 13:01:12 +0000 Manifest this update: Sat 06 Dec 2025 13:01:12 +0000 Manifest next update: Sun 07 Dec 2025 13:01:12 +0000 Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: gBBoirQDvzb6ypnkVdyw+nGHEvdzinpAcPT7HDQxAhQ=) 2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:89:9a:30:4f:74:55:22:c0:cc:74:4b:92:61:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b Validity Not Before: Dec 6 13:01:12 2025 GMT Not After : Dec 7 13:01:12 2025 GMT Subject: CN=4fe6240cf9801719daafb49eca764dae3ff10561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:84:7c:12:97:34:1b:01:19:f9:88:3d:37: 5a:fd:20:f8:ab:d0:18:b8:e1:88:83:9e:86:ab:d4: 9f:35:b7:51:71:e0:7c:a4:e1:ed:9d:a7:bd:fb:3b: cb:93:51:8e:6d:a8:2f:0d:c4:a3:27:bd:0f:b0:a9: 11:b7:64:87:95:38:1a:5d:12:31:1b:30:99:ec:9a: 1c:ae:e3:6f:25:a5:3d:5e:d0:85:da:f2:b1:29:99: 7d:6a:34:43:e9:b3:84:bb:db:83:ea:14:ad:60:4c: d7:ce:59:7f:35:46:96:76:2d:bc:4a:69:3c:56:df: c3:91:92:5f:5c:f9:3d:a4:ac:80:c5:2f:60:d2:46: b3:90:42:f3:bb:56:64:ed:5a:a4:bc:f6:a2:fe:c7: 2e:ef:59:6e:a8:de:89:94:59:21:96:6f:18:37:49: a2:3b:77:a5:b1:2f:53:22:56:79:ff:af:00:1d:68: 80:81:d5:77:dc:4a:c5:51:65:06:8a:8c:80:da:b3: bb:87:a1:80:f0:cd:ef:96:5e:a5:f4:8e:4a:a7:1d: fb:db:f9:21:6b:29:6f:62:bd:15:63:80:4a:4a:58: c7:ea:cb:26:05:21:48:58:f8:5f:d1:86:2b:82:0a: f1:a3:27:a8:58:c1:66:32:a7:00:70:b8:2c:83:a8: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E6:24:0C:F9:80:17:19:DA:AF:B4:9E:CA:76:4D:AE:3F:F1:05:61 X509v3 Authority Key Identifier: keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:28:f9:d8:9b:1d:a6:34:e2:6e:7a:96:c0:d9:f3:46:2f:64: 20:33:50:39:48:27:72:4c:81:ca:de:65:a7:06:0c:ca:2c:84: 3c:a0:8d:5a:1a:30:be:60:8d:13:6b:05:0c:f4:b2:87:f3:c8: f9:bd:9b:6f:92:10:86:c2:0a:a2:e3:51:e7:dd:ed:c4:fe:6c: 0b:d3:8f:a1:85:90:77:17:ac:15:2b:d1:68:02:59:e8:29:3d: 71:d7:2a:3b:0b:69:e5:25:0e:bd:4c:8d:3e:62:d8:25:42:d1: a6:cf:44:80:d6:67:7b:b4:17:1c:4b:fe:34:0b:76:ba:80:36: d7:19:1c:68:7e:51:c1:40:59:e9:04:35:2b:9e:fa:3e:2b:89: 29:b5:48:98:b9:2c:51:ff:aa:95:8f:73:24:72:27:d8:62:3e: 1f:14:5e:2a:f8:c1:fe:a7:cc:3d:7c:bf:e8:03:8b:a5:dd:d0: 8d:3a:93:22:49:a4:ac:b6:eb:18:43:ae:66:53:84:8b:86:10: 3c:f0:64:df:97:82:25:44:ec:58:6c:99:92:95:d7:55:f0:f0: 40:2e:44:6b:4f:40:a3:b7:08:de:e8:57:03:ed:d5:2c:09:39: 1b:da:2e:e3:de:a1:06:61:db:09:3c:65:ad:d7:72:2e:b6:7e: 59:85:dd:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwImaME90VSLAzHRLkmHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm ZjA1MGIwHhcNMjUxMjA2MTMwMTEyWhcNMjUxMjA3MTMwMTEyWjAzMTEwLwYDVQQD Eyg0ZmU2MjQwY2Y5ODAxNzE5ZGFhZmI0OWVjYTc2NGRhZTNmZjEwNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoaEfBKXNBsBGfmIPTda/SD4q9AY uOGIg56Gq9SfNbdRceB8pOHtnae9+zvLk1GObagvDcSjJ70PsKkRt2SHlTgaXRIx GzCZ7JocruNvJaU9XtCF2vKxKZl9ajRD6bOEu9uD6hStYEzXzll/NUaWdi28Smk8 Vt/DkZJfXPk9pKyAxS9g0kazkELzu1Zk7VqkvPai/scu71luqN6JlFkhlm8YN0mi O3elsS9TIlZ5/68AHWiAgdV33ErFUWUGioyA2rO7h6GA8M3vll6l9I5Kpx372/kh aylvYr0VY4BKSljH6ssmBSFIWPhf0YYrggrxoyeoWMFmMqcAcLgsg6hhWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/mJAz5gBcZ2q+0nsp2Ta4/8QVhMB8GA1UdIwQY MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCj52Jsd pjTibnqWwNnzRi9kIDNQOUgnckyByt5lpwYMyiyEPKCNWhowvmCNE2sFDPSyh/PI +b2bb5IQhsIKouNR593txP5sC9OPoYWQdxesFSvRaAJZ6Ck9cdcqOwtp5SUOvUyN PmLYJULRps9EgNZne7QXHEv+NAt2uoA21xkcaH5RwUBZ6QQ1K576PiuJKbVImLks Uf+qlY9zJHIn2GI+HxReKvjB/qfMPXy/6AOLpd3QjTqTIkmkrLbrGEOuZlOEi4YQ PPBk35eCJUTsWGyZkpXXVfDwQC5Ea09Ao7cI3uhXA+3VLAk5G9ou496hBmHbCTxl rddyLrZ+WYXdeA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:05 2025 by rpki-client