This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft File: h679om6egcITEDruPQGowoqv_Pg.mft (raw, json) Hash identifier: +pujEjMGsVRfl7il+swM0M0ND88lkXBpPnUdBOFQ1RY= Subject key identifier: E5:05:E2:8A:D5:AC:7F:F1:05:2E:64:85:3D:4E:43:63:A2:A0:0B:8C Authority key identifier: 87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8 Certificate issuer: /CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8 Certificate serial: 019AF2098EB63D72ADAC05A3DE1DB60CA26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft Manifest number: 38 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: h679om6egcITEDruPQGowoqv_Pg.crl (hash: mRa6kG3iW42K0jtk7ZRVYCAvDZo5jLsr6F+ulhWXQAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8e:b6:3d:72:ad:ac:05:a3:de:1d:b6:0c:a2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87aefda26e9e81c213103aee3d01a8c28aaffcf8 Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=e505e28ad5ac7ff1052e64853d4e4363a2a00b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:9f:a1:c1:25:30:7a:54:b9:7f:b8:b8:ec: fe:a7:66:40:2b:3c:48:e7:7a:b4:b1:19:f5:d2:62: be:ee:ab:b2:dd:f5:30:83:99:b3:6c:44:f4:d5:af: f8:4e:c4:b7:8a:1d:a5:8a:84:bb:9f:6f:36:8f:d1: 6a:3d:20:0a:9d:97:6e:5b:d4:d7:c6:5a:62:06:61: 4f:bf:b7:ce:8c:b2:d3:99:05:42:8e:61:62:76:08: 35:59:e1:df:70:9c:8b:51:c1:8c:c9:1d:16:cc:94: d5:a4:6c:2e:9a:6c:80:a6:ea:a2:c4:b1:f9:15:7e: bf:c6:ba:ab:7f:65:78:8e:87:ca:49:91:5f:f4:a2: 38:38:ba:15:3e:d5:c9:25:ab:16:88:b6:31:a1:59: aa:a8:89:5d:91:d2:da:3a:a5:3c:24:20:a5:7e:c5: a3:2e:0d:ac:4a:2c:7c:23:34:4a:c9:8b:73:a5:69: 55:90:72:bc:75:92:fe:2a:c7:e5:da:c2:96:2b:5b: dd:d8:b1:83:18:78:9e:13:fe:03:27:87:7a:2c:2f: 42:ce:bd:df:91:cc:42:1d:8d:fe:ed:fc:dd:87:7d: 98:08:88:16:21:4b:a4:78:56:30:1b:57:99:e2:07: 44:c4:de:e7:8d:b2:bd:66:19:1f:cd:aa:c7:32:49: 7f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:05:E2:8A:D5:AC:7F:F1:05:2E:64:85:3D:4E:43:63:A2:A0:0B:8C X509v3 Authority Key Identifier: keyid:87:AE:FD:A2:6E:9E:81:C2:13:10:3A:EE:3D:01:A8:C2:8A:AF:FC:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h679om6egcITEDruPQGowoqv_Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/aaa9b3-67fb-4274-b971-d2a73f3dedb7/1/h679om6egcITEDruPQGowoqv_Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1d:72:71:87:83:35:b1:74:95:c3:65:82:d2:fb:04:c0:8f: b8:6d:c7:c5:2a:05:6a:30:47:0f:46:bc:20:9f:cb:ad:9c:df: c1:83:1f:60:b2:87:25:bf:04:eb:ca:c6:8c:7a:f8:95:47:15: 63:9a:4d:f8:e0:b0:04:6b:d5:19:29:a0:c2:da:4a:41:c1:1a: 4e:5f:71:b1:f0:39:7a:d5:54:24:08:8a:14:e9:73:75:43:3a: b5:dc:e5:4c:51:73:26:c3:b2:ef:66:15:87:0d:a0:1a:3d:b4: 16:d3:88:89:d6:55:89:6b:8c:4d:09:a4:07:3d:e1:b3:76:33: 5f:ea:3e:25:4e:bf:fb:97:93:17:65:99:51:53:b6:5e:71:54: 6b:77:63:0d:f5:8e:89:e8:eb:d6:29:2d:45:90:98:0b:46:39: b8:15:c1:e4:fd:5a:0f:a4:f5:7e:ac:4a:f3:e1:98:18:e0:2c: 89:74:9f:fc:30:97:3b:9d:dc:01:2d:f0:d4:d8:5f:b1:8e:40: 04:c4:85:2b:47:f2:51:63:37:d4:b5:7d:91:23:16:7c:4a:f8: cf:58:bb:3d:55:56:66:f8:36:b0:60:38:ea:7a:d1:ec:c5:36: 18:83:e4:37:45:4d:d2:68:54:2c:85:b8:24:30:7e:42:f9:f2: 0a:56:f9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY62PXKtrAWj3h22DKJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YWVmZGEyNmU5ZTgxYzIxMzEwM2FlZTNkMDFhOGMyOGFh ZmZjZjgwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD EyhlNTA1ZTI4YWQ1YWM3ZmYxMDUyZTY0ODUzZDRlNDM2M2EyYTAwYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofCfocElMHpUuX+4uOz+p2ZAKzxI 53q0sRn10mK+7quy3fUwg5mzbET01a/4TsS3ih2lioS7n282j9FqPSAKnZduW9TX xlpiBmFPv7fOjLLTmQVCjmFidgg1WeHfcJyLUcGMyR0WzJTVpGwummyApuqixLH5 FX6/xrqrf2V4jofKSZFf9KI4OLoVPtXJJasWiLYxoVmqqIldkdLaOqU8JCClfsWj Lg2sSix8IzRKyYtzpWlVkHK8dZL+Ksfl2sKWK1vd2LGDGHieE/4DJ4d6LC9Czr3f kcxCHY3+7fzdh32YCIgWIUukeFYwG1eZ4gdExN7njbK9ZhkfzarHMkl/wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUF4orVrH/xBS5khT1OQ2OioAuMMB8GA1UdIwQY MBaAFIeu/aJunoHCExA67j0BqMKKr/z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYWE5YjMtNjdmYi00Mjc0LWI5NzEt ZDJhNzNmM2RlZGI3LzEvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hYWE5YjMtNjdmYi00Mjc0LWI5NzEtZDJhNzNmM2RlZGI3 LzEvaDY3OW9tNmVnY0lURURydVBRR293b3F2X1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx1ycYeD NbF0lcNlgtL7BMCPuG3HxSoFajBHD0a8IJ/LrZzfwYMfYLKHJb8E68rGjHr4lUcV Y5pN+OCwBGvVGSmgwtpKQcEaTl9xsfA5etVUJAiKFOlzdUM6tdzlTFFzJsOy72YV hw2gGj20FtOIidZViWuMTQmkBz3hs3YzX+o+JU6/+5eTF2WZUVO2XnFUa3djDfWO iejr1iktRZCYC0Y5uBXB5P1aD6T1fqxK8+GYGOAsiXSf/DCXO53cAS3w1NhfsY5A BMSFK0fyUWM31LV9kSMWfEr4z1i7PVVWZvg2sGA46nrR7MU2GIPkN0VN0mhULIW4 JDB+QvnyClb5Ug== -----END CERTIFICATE-----Generated at Sat Dec 6 10:48:53 2025 by rpki-client