This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft File: rKcX8QfgYizkyz71KwFU-n-baS0.mft (raw, json) Hash identifier: 02Lf4IY8EK36LazPt1dZlrUtaOoNami06rzlVgWGyMU= Subject key identifier: 1B:B4:54:10:82:65:40:6F:75:66:16:F8:72:7B:FA:7F:CF:BF:91:39 Authority key identifier: AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D Certificate issuer: /CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d Certificate serial: 019AF12D1BD86101A3488419A18F90E3FB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft Manifest number: 12DF Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: rKcX8QfgYizkyz71KwFU-n-baS0.crl (hash: mj7aFSwo4seVEzhk214zwOXN+WKlPqaDIxUB0jByvtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1b:d8:61:01:a3:48:84:19:a1:8f:90:e3:fb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca717f107e0622ce4cb3ef52b0154fa7f9b692d Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=1bb454108265406f756616f8727bfa7fcfbf9139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:d7:e6:ea:4c:94:b5:73:98:de:e0:d9:31: 2f:19:51:dd:de:60:a7:b3:93:74:d6:32:72:07:4a: 80:2d:70:24:22:17:b7:db:41:46:cc:36:9e:fe:91: d2:64:9e:b6:e0:e7:3f:ec:13:f3:c4:bc:d0:92:aa: 71:9b:dc:a7:c0:a2:22:35:4d:05:ea:bb:4f:a4:46: bd:42:3d:ef:d7:4a:f8:be:2a:4a:45:6a:cc:a3:2c: 2e:8e:44:ce:ea:dc:d0:7a:bc:eb:0e:6e:d3:6c:3a: d4:46:5e:df:8a:42:90:74:40:c0:68:99:a0:2c:b5: 29:b4:b2:61:b2:ce:b7:6e:35:3e:9f:fd:b2:55:88: 06:03:40:b0:e1:70:62:a5:31:5d:18:98:f4:19:04: 4c:af:7c:5a:8b:e0:3e:f5:1d:ed:b5:9f:cd:15:fb: 73:20:1d:03:6d:23:81:f8:7a:42:f4:52:1a:43:51: ab:56:b6:8a:08:f8:b7:52:0c:24:27:6e:80:cb:33: d6:dc:53:e1:bb:17:aa:3e:e1:4f:64:07:fa:0f:df: 78:f0:4f:c8:72:d4:a5:fd:ed:a6:ee:d2:31:82:69: 59:84:d1:9b:5b:0c:5b:54:af:8b:d1:2c:0c:34:2e: 1a:b3:58:7e:60:de:b3:77:45:9a:83:f0:36:11:2c: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B4:54:10:82:65:40:6F:75:66:16:F8:72:7B:FA:7F:CF:BF:91:39 X509v3 Authority Key Identifier: keyid:AC:A7:17:F1:07:E0:62:2C:E4:CB:3E:F5:2B:01:54:FA:7F:9B:69:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKcX8QfgYizkyz71KwFU-n-baS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0942ec-2e9f-4172-8c53-c4946b8e630d/1/rKcX8QfgYizkyz71KwFU-n-baS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9f:ef:b6:ba:15:37:88:79:58:24:30:2c:77:cf:87:93:60: 04:d2:96:b4:60:2f:90:6c:ff:36:3c:42:17:e4:6c:1d:b7:9c: 46:f2:24:1c:69:d2:85:54:b2:94:22:00:4e:96:f1:f2:11:a5: 0d:9c:e8:c1:46:31:ec:1a:21:f8:26:98:a8:29:e0:76:78:7c: 76:81:0c:0f:4f:96:ec:00:c6:5e:74:77:fb:3d:da:b8:48:ba: 85:3d:f4:e6:78:e4:72:70:00:90:98:0f:c2:71:c5:69:7f:9a: 61:11:9d:88:70:4f:f9:c0:57:57:42:4a:fc:f7:96:4f:1f:80: 01:bf:d3:f6:49:d9:6f:69:75:35:11:37:fd:00:23:9c:21:56: 70:b8:3f:b1:d7:94:68:96:a0:0b:11:8c:1e:80:93:8a:c9:80: 81:26:eb:b0:a5:27:3b:72:ea:60:f5:aa:30:d3:63:55:0b:17: e4:c1:82:67:cc:12:64:e9:2f:0e:cd:ab:f9:90:f1:57:1d:58: 90:5c:66:43:18:df:ef:a3:89:c5:be:1b:72:ab:ce:80:a5:ac: 06:99:27:c8:94:d5:18:13:65:e0:91:d2:5d:8d:03:e9:f9:31: 94:c7:b4:33:9d:3f:e6:7a:b5:e5:47:63:a8:3f:29:a8:2f:2d: 4b:18:21:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRvYYQGjSIQZoY+Q4/uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTcxN2YxMDdlMDYyMmNlNGNiM2VmNTJiMDE1NGZhN2Y5 YjY5MmQwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EygxYmI0NTQxMDgyNjU0MDZmNzU2NjE2Zjg3MjdiZmE3ZmNmYmY5MTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a7X5upMlLVzmN7g2TEvGVHd3mCn s5N01jJyB0qALXAkIhe320FGzDae/pHSZJ624Oc/7BPzxLzQkqpxm9ynwKIiNU0F 6rtPpEa9Qj3v10r4vipKRWrMoywujkTO6tzQerzrDm7TbDrURl7fikKQdEDAaJmg LLUptLJhss63bjU+n/2yVYgGA0Cw4XBipTFdGJj0GQRMr3xai+A+9R3ttZ/NFftz IB0DbSOB+HpC9FIaQ1GrVraKCPi3UgwkJ26AyzPW3FPhuxeqPuFPZAf6D9948E/I ctSl/e2m7tIxgmlZhNGbWwxbVK+L0SwMNC4as1h+YN6zd0Wag/A2ESwnMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu0VBCCZUBvdWYW+HJ7+n/Pv5E5MB8GA1UdIwQY MBaAFKynF/EH4GIs5Ms+9SsBVPp/m2ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktjWDhRZmdZaXpreXo3MUt3RlUtbi1iYVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wOTQyZWMtMmU5Zi00MTcyLThjNTMt YzQ5NDZiOGU2MzBkLzEvcktjWDhRZmdZaXpreXo3MUt3RlUtbi1iYVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wOTQyZWMtMmU5Zi00MTcyLThjNTMtYzQ5NDZiOGU2MzBk LzEvcktjWDhRZmdZaXpreXo3MUt3RlUtbi1iYVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5/vtroV N4h5WCQwLHfPh5NgBNKWtGAvkGz/NjxCF+RsHbecRvIkHGnShVSylCIATpbx8hGl DZzowUYx7Boh+CaYqCngdnh8doEMD0+W7ADGXnR3+z3auEi6hT305njkcnAAkJgP wnHFaX+aYRGdiHBP+cBXV0JK/PeWTx+AAb/T9knZb2l1NRE3/QAjnCFWcLg/sdeU aJagCxGMHoCTismAgSbrsKUnO3LqYPWqMNNjVQsX5MGCZ8wSZOkvDs2r+ZDxVx1Y kFxmQxjf76OJxb4bcqvOgKWsBpknyJTVGBNl4JHSXY0D6fkxlMe0M50/5nq15Udj qD8pqC8tSxgh5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:51 2025 by rpki-client