This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft File: pS3-y7QxcCl5YaIbfltKPEfeCVs.mft (raw, json) Hash identifier: NfLFQ4fcEC/CGxbHSYe7Yg29+iDV5AVDfDz2bFxMJwk= Subject key identifier: C8:7E:4D:F7:50:4A:40:89:A8:41:C3:D0:B2:53:49:04:22:EA:FA:39 Authority key identifier: A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B Certificate issuer: /CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Certificate serial: 019B2EF975F59DC5E831FA5B44A8261E5F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft Manifest number: 0993 Signing time: Thu 18 Dec 2025 01:00:59 +0000 Manifest this update: Thu 18 Dec 2025 01:00:59 +0000 Manifest next update: Fri 19 Dec 2025 01:00:59 +0000 Files and hashes: 1: pS3-y7QxcCl5YaIbfltKPEfeCVs.crl (hash: SAXgjqGnjPY5M8HzLvrBCqQFXpRM//go3R5qj6UUQMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:75:f5:9d:c5:e8:31:fa:5b:44:a8:26:1e:5f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52dfecbb43170297961a21b7e5b4a3c47de095b Validity Not Before: Dec 18 01:00:59 2025 GMT Not After : Dec 19 01:00:59 2025 GMT Subject: CN=c87e4df7504a4089a841c3d0b253490422eafa39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:35:fc:6a:7c:b9:46:b2:0a:21:6b:df:ce: d8:75:0c:99:34:cd:c1:3f:34:dc:66:64:16:d2:ba: e2:ad:c4:e9:fe:7b:04:03:3c:ea:72:66:ed:35:66: f6:8b:5f:1b:46:29:6e:e1:79:73:ee:04:3f:e6:1f: 1f:7f:c9:f8:03:01:1f:e2:26:fb:de:b2:a4:2d:32: 77:b3:db:6e:ac:b8:d9:8c:51:ef:3d:f8:23:8f:c0: f9:cb:36:17:74:6c:21:f9:55:77:b7:34:99:3e:ec: 00:03:1e:ab:96:46:e6:7f:4a:33:9e:42:ee:e3:0d: 4d:4d:fc:69:43:49:7e:d7:74:50:bd:30:aa:8f:6c: 5e:dd:7b:a4:3e:90:b8:75:4f:de:c3:c9:68:54:2b: f6:9d:4f:6a:c4:f2:8c:33:58:e3:ac:0e:20:7f:fe: f7:d7:c5:0e:f0:83:3c:4f:10:20:bd:f9:78:33:55: 67:82:d3:03:4b:78:3e:b0:a1:3e:0d:ca:d2:cc:d5: d7:37:c9:cd:00:da:2e:1b:1f:d4:3c:30:aa:70:3c: 35:b2:f6:fa:86:aa:c8:70:8a:57:da:96:0c:ea:e5: 37:51:7f:29:86:3e:8d:9f:a1:0d:7b:ef:23:4e:a5: cd:9c:80:bd:57:2b:5a:84:a5:18:50:a1:7f:31:7d: c1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:4D:F7:50:4A:40:89:A8:41:C3:D0:B2:53:49:04:22:EA:FA:39 X509v3 Authority Key Identifier: keyid:A5:2D:FE:CB:B4:31:70:29:79:61:A2:1B:7E:5B:4A:3C:47:DE:09:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS3-y7QxcCl5YaIbfltKPEfeCVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/632915-e7a1-4610-bf15-bd5790a2ba50/1/pS3-y7QxcCl5YaIbfltKPEfeCVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:51:b8:1d:17:5f:64:d4:f8:9e:ec:32:98:ba:af:4e:6a:75: ff:fd:0b:b5:aa:0b:ea:95:17:c0:0f:49:f1:25:ae:af:58:35: 19:a1:f9:8f:e4:73:56:ae:eb:2d:74:f2:19:85:d6:50:1c:96: 3a:71:59:14:e6:f5:e8:ee:99:0d:cd:75:2c:69:00:eb:03:91: d9:8c:7e:6a:1c:b9:70:f9:6a:e4:55:bb:0c:37:35:6f:b4:28: 0f:36:ff:ff:80:a7:0f:2b:47:dc:c7:ed:06:a8:ec:95:c6:5d: 2d:ee:51:96:33:8e:83:9d:4e:52:b2:63:8f:4a:ce:82:bb:dd: 9a:8f:ca:aa:76:75:84:b1:48:17:28:81:10:c8:32:80:ea:b3: ed:25:b6:d2:18:89:fe:a4:72:fe:67:06:d8:16:88:d7:2a:18: 23:ad:ae:f3:30:d6:8a:90:ac:e4:e0:03:27:49:0a:fd:0d:2b: 1c:39:7d:88:8c:10:9f:93:ac:51:01:71:9c:9e:58:6c:b0:0a: fe:4c:87:6d:a4:13:4c:a0:b8:11:d1:66:b5:e1:d7:1c:12:79: 0a:09:62:d7:81:8a:e8:a6:71:e6:8b:a8:50:ac:34:0a:ae:51: ee:55:22:32:b2:f9:ce:c1:f1:c1:58:06:4d:09:c6:3a:3a:40: 00:0b:cb:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+XX1ncXoMfpbRKgmHl+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmRmZWNiYjQzMTcwMjk3OTYxYTIxYjdlNWI0YTNjNDdk ZTA5NWIwHhcNMjUxMjE4MDEwMDU5WhcNMjUxMjE5MDEwMDU5WjAzMTEwLwYDVQQD EyhjODdlNGRmNzUwNGE0MDg5YTg0MWMzZDBiMjUzNDkwNDIyZWFmYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy401/Gp8uUayCiFr387YdQyZNM3B PzTcZmQW0rrircTp/nsEAzzqcmbtNWb2i18bRilu4Xlz7gQ/5h8ff8n4AwEf4ib7 3rKkLTJ3s9turLjZjFHvPfgjj8D5yzYXdGwh+VV3tzSZPuwAAx6rlkbmf0oznkLu 4w1NTfxpQ0l+13RQvTCqj2xe3XukPpC4dU/ew8loVCv2nU9qxPKMM1jjrA4gf/73 18UO8IM8TxAgvfl4M1VngtMDS3g+sKE+DcrSzNXXN8nNANouGx/UPDCqcDw1svb6 hqrIcIpX2pYM6uU3UX8phj6Nn6ENe+8jTqXNnIC9VytahKUYUKF/MX3B9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh+TfdQSkCJqEHD0LJTSQQi6vo5MB8GA1UdIwQY MBaAFKUt/su0MXApeWGiG35bSjxH3glbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUt YmQ1NzkwYTJiYTUwLzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82MzI5MTUtZTdhMS00NjEwLWJmMTUtYmQ1NzkwYTJiYTUw LzEvcFMzLXk3UXhjQ2w1WWFJYmZsdEtQRWZlQ1ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClG4HRdf ZNT4nuwymLqvTmp1//0LtaoL6pUXwA9J8SWur1g1GaH5j+RzVq7rLXTyGYXWUByW OnFZFOb16O6ZDc11LGkA6wOR2Yx+ahy5cPlq5FW7DDc1b7QoDzb//4CnDytH3Mft BqjslcZdLe5RljOOg51OUrJjj0rOgrvdmo/KqnZ1hLFIFyiBEMgygOqz7SW20hiJ /qRy/mcG2BaI1yoYI62u8zDWipCs5OADJ0kK/Q0rHDl9iIwQn5OsUQFxnJ5YbLAK /kyHbaQTTKC4EdFmteHXHBJ5Cgli14GK6KZx5ouoUKw0Cq5R7lUiMrL5zsHxwVgG TQnGOjpAAAvLtg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:02:57 2025 by rpki-client