This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json) Hash identifier: AUaitif/WfaDxdsipD8V72B9WeJQNSORtO9zqlD2k7g= Subject key identifier: 50:12:25:C8:C0:2A:02:E1:EB:1D:E1:B4:EA:C7:D8:B7:3A:9E:F7:40 Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Certificate serial: 019AF31C573152CD1A1C44089A2316996EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft Manifest number: 1692 Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: RlktQYo7/NtnTsT8wC/TfDTR31VnZoo3apLl+5XO+Oo=) 2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:57:31:52:cd:1a:1c:44:08:9a:23:16:99:6e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=501225c8c02a02e1eb1de1b4eac7d8b73a9ef740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:b3:a8:1d:a7:1b:d8:28:c4:c4:52:aa:ec: b7:a0:a0:9d:39:bd:6e:6b:0b:3f:cf:d8:d0:ba:3f: 35:b3:97:48:a2:59:70:4c:d2:8d:55:bd:af:d0:24: 35:eb:7e:12:70:97:96:ac:69:89:e0:52:97:a2:4e: 2b:89:35:cc:30:be:66:48:6d:25:04:2e:0d:31:5d: d2:ff:d3:50:f4:e6:f8:6a:b3:41:2b:54:8f:9c:8e: 36:a7:b7:b0:21:e4:43:f9:70:4d:73:8c:b4:85:eb: f3:17:b3:96:80:b1:ed:77:ad:f0:a5:42:94:06:9a: 46:42:d4:cb:92:a8:52:b8:b7:b8:ad:e0:3e:35:df: f0:91:35:48:57:ad:03:6b:64:32:d3:25:8d:1b:91: a9:4e:f1:2f:13:f5:d6:1c:de:80:6d:76:f0:65:45: 1c:1a:d8:52:f8:54:5c:8a:79:86:fa:78:aa:e7:ea: f5:b2:b2:33:86:c3:ee:4e:5e:84:a5:e0:1b:68:da: 6b:5d:fc:f1:7a:b6:6b:eb:99:26:d3:6c:e4:2b:8a: a4:5f:f0:a7:4c:e0:83:d4:66:04:67:85:d9:09:68: 66:e2:e3:da:6d:1f:94:a9:d2:d8:47:27:8d:b4:10: 73:b7:28:8b:51:24:57:98:1f:f5:b8:ed:45:f5:98: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:12:25:C8:C0:2A:02:E1:EB:1D:E1:B4:EA:C7:D8:B7:3A:9E:F7:40 X509v3 Authority Key Identifier: keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e6:76:ff:67:b5:87:db:c9:7e:09:21:2c:86:5e:0e:d0:17: 71:27:a4:1a:db:6a:1c:20:33:e7:10:9a:07:3e:7a:e7:1d:bc: 5b:68:52:55:0d:5c:5e:c0:2e:13:c2:0d:a4:3b:f2:ee:1f:d5: aa:1a:12:c0:60:3b:c6:49:02:d3:54:d0:9e:dd:54:d3:3a:2d: aa:30:7b:42:d0:e6:ea:47:23:54:46:5a:f1:f6:18:d3:12:ab: 86:ee:13:9a:c0:de:4f:a0:6c:3a:e1:6b:fc:0e:1b:0c:7d:78: 93:b6:46:49:e4:40:c2:0f:41:32:e5:b1:f2:ce:a7:47:e1:11: 62:fa:d4:14:46:ac:73:7a:7e:c5:1a:c7:df:18:97:cd:2c:cd: f0:c6:86:86:98:1f:c9:c1:35:4d:9e:96:bd:b7:3a:66:23:ab: 6b:17:1e:a3:02:fd:73:a0:82:9d:42:f5:82:cd:0c:01:05:52: 34:1d:cc:2d:26:97:32:51:22:aa:be:ac:8f:85:3f:96:d4:d1: 07:5b:63:51:c5:d3:8f:f3:13:f1:2f:63:8b:2b:55:3a:59:ec: b8:b1:7c:93:37:7a:69:7c:70:03:99:82:eb:1b:c4:42:f3:36: 2b:87:2b:c5:7a:7e:17:e0:c4:b6:4c:3d:8f:91:ec:db:19:64: ff:9d:09:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFcxUs0aHEQImiMWmW7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4 N2Q0YjMwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD Eyg1MDEyMjVjOGMwMmEwMmUxZWIxZGUxYjRlYWM3ZDhiNzNhOWVmNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQWzqB2nG9goxMRSquy3oKCdOb1u aws/z9jQuj81s5dIollwTNKNVb2v0CQ1634ScJeWrGmJ4FKXok4riTXMML5mSG0l BC4NMV3S/9NQ9Ob4arNBK1SPnI42p7ewIeRD+XBNc4y0hevzF7OWgLHtd63wpUKU BppGQtTLkqhSuLe4reA+Nd/wkTVIV60Da2Qy0yWNG5GpTvEvE/XWHN6AbXbwZUUc GthS+FRcinmG+niq5+r1srIzhsPuTl6EpeAbaNprXfzxerZr65km02zkK4qkX/Cn TOCD1GYEZ4XZCWhm4uPabR+UqdLYRyeNtBBztyiLUSRXmB/1uO1F9ZgclQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFASJcjAKgLh6x3htOrH2Lc6nvdAMB8GA1UdIwQY MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeZ2/2e1 h9vJfgkhLIZeDtAXcSekGttqHCAz5xCaBz565x28W2hSVQ1cXsAuE8INpDvy7h/V qhoSwGA7xkkC01TQnt1U0zotqjB7QtDm6kcjVEZa8fYY0xKrhu4TmsDeT6BsOuFr /A4bDH14k7ZGSeRAwg9BMuWx8s6nR+ERYvrUFEasc3p+xRrH3xiXzSzN8MaGhpgf ycE1TZ6Wvbc6ZiOraxceowL9c6CCnUL1gs0MAQVSNB3MLSaXMlEiqr6sj4U/ltTR B1tjUcXTj/MT8S9jiytVOlnsuLF8kzd6aXxwA5mC6xvEQvM2K4crxXp+F+DEtkw9 j5Hs2xlk/50Jxw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:39 2025 by rpki-client