This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json) Hash identifier: MAWL5QpITCR954u7eW2O/jEq0zCqTeMLDauZEsb0xr0= Subject key identifier: 2A:67:DA:70:EC:1B:0D:CF:CC:D8:52:04:44:54:1C:BE:5A:86:0F:CD Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03 Certificate serial: 019AF3526D4841053B0F5BE820B4AC0D4478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft Manifest number: 14C1 Signing time: Sat 06 Dec 2025 11:00:56 +0000 Manifest this update: Sat 06 Dec 2025 11:00:56 +0000 Manifest next update: Sun 07 Dec 2025 11:00:56 +0000 Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: fj7QffsIZpO+k/ukLt3d2hiExIzcV641lwWQ8ri/ylg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:6d:48:41:05:3b:0f:5b:e8:20:b4:ac:0d:44:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03 Validity Not Before: Dec 6 11:00:56 2025 GMT Not After : Dec 7 11:00:56 2025 GMT Subject: CN=2a67da70ec1b0dcfccd8520444541cbe5a860fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:a5:97:46:71:73:d7:b7:9f:65:c7:1a:77: 63:54:78:a0:ff:e0:c5:3d:e8:ff:53:55:bd:b0:09: f6:bc:d4:5a:3d:f5:12:ba:ba:56:47:ca:a3:c5:93: 3a:b4:f1:de:a0:e3:93:e1:29:5a:3d:2d:c3:c6:90: ab:ff:7c:34:b9:0b:74:7a:52:43:9a:0e:30:ef:a7: 37:06:7e:f4:75:68:b0:fd:09:e7:3a:35:53:3a:f0: 09:b2:8d:3a:ee:9c:31:38:db:c7:ca:5a:4d:3f:9d: f9:47:81:d5:9b:c7:24:c6:14:15:92:df:13:48:1a: bb:ea:2b:54:4b:0c:b8:04:43:ec:64:c6:ff:4f:72: 8d:82:62:52:9a:77:4e:71:9b:43:a1:09:3d:e9:9b: 05:53:6b:99:b2:04:c1:6e:3c:a7:38:fd:6b:f2:21: b6:14:91:43:22:d5:db:4a:9c:6a:b4:2a:a7:a6:d3: 48:34:ca:77:f9:cc:ff:b6:25:85:26:a8:61:e3:f5: f1:15:0a:05:95:58:51:9a:9d:7a:c6:f6:c8:08:7d: 05:49:7d:61:20:73:e6:1c:b9:c2:e5:25:92:43:d7: af:e9:94:c3:3d:53:3f:d6:90:77:a1:21:1d:e2:71: 84:e0:31:cc:48:dd:92:45:eb:1b:ad:38:b6:18:ba: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:DA:70:EC:1B:0D:CF:CC:D8:52:04:44:54:1C:BE:5A:86:0F:CD X509v3 Authority Key Identifier: keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:0d:56:c9:61:3f:bb:0f:31:50:c9:04:7f:f7:fa:b6:0f: 26:0b:95:0a:4e:f7:65:1d:4e:a4:a0:ad:7c:fa:4c:13:11:22: 09:b4:a2:b3:dc:73:0b:36:6e:dc:1f:78:ec:d5:4b:b2:12:96: 78:b9:03:76:68:37:aa:ed:86:72:7b:fb:58:ef:9c:70:7e:8f: db:e0:12:10:98:96:f8:ba:6d:8e:14:a5:11:53:04:ab:c3:74: 49:06:6a:b0:12:0a:cd:d8:70:d2:eb:8f:03:47:df:eb:dc:5d: db:cb:8a:9f:fc:9d:0e:01:d2:10:bc:af:2c:6b:c2:af:06:6d: a7:6b:fe:74:8b:12:00:e0:d2:a7:bf:e8:bb:18:a9:3d:22:74: 16:50:8d:a5:1f:89:35:6e:cd:5f:e0:4a:14:ab:b6:27:24:da: 4e:d4:35:9d:8d:aa:c3:d9:38:47:5a:d5:dc:b7:52:13:7c:e0: df:9c:8f:a5:99:0c:89:a7:80:1c:76:8a:a1:52:d4:58:23:df: 24:35:8f:9a:ae:74:ac:87:20:5d:6c:03:2d:1e:e4:e3:81:ae: 60:e1:c5:c9:5a:b3:e3:4b:42:62:45:83:90:f8:66:e7:e7:1e: f2:a6:50:1c:a7:bf:36:eb:b8:45:27:e6:70:80:55:9c:33:6b: c7:bf:b3:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUm1IQQU7D1voILSsDUR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YWUyMmVkYTk2Mjc0ZWU5Njk3Y2FhYWNiNTNkZjkxNzM3 MDllMDMwHhcNMjUxMjA2MTEwMDU2WhcNMjUxMjA3MTEwMDU2WjAzMTEwLwYDVQQD EygyYTY3ZGE3MGVjMWIwZGNmY2NkODUyMDQ0NDU0MWNiZTVhODYwZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ2ll0Zxc9e3n2XHGndjVHig/+DF Pej/U1W9sAn2vNRaPfUSurpWR8qjxZM6tPHeoOOT4SlaPS3DxpCr/3w0uQt0elJD mg4w76c3Bn70dWiw/QnnOjVTOvAJso067pwxONvHylpNP535R4HVm8ckxhQVkt8T SBq76itUSwy4BEPsZMb/T3KNgmJSmndOcZtDoQk96ZsFU2uZsgTBbjynOP1r8iG2 FJFDItXbSpxqtCqnptNINMp3+cz/tiWFJqhh4/XxFQoFlVhRmp16xvbICH0FSX1h IHPmHLnC5SWSQ9ev6ZTDPVM/1pB3oSEd4nGE4DHMSN2SResbrTi2GLrhMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpn2nDsGw3PzNhSBERUHL5ahg/NMB8GA1UdIwQY MBaAFLeuIu2pYnTulpfKqstT35FzcJ4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQt MzcwZjAwMGMzYzBlLzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yNDQwODYtZTk3NC00YjQ4LWFlNzQtMzcwZjAwMGMzYzBl LzEvdDY0aTdhbGlkTzZXbDhxcXkxUGZrWE53bmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegQNVslh P7sPMVDJBH/3+rYPJguVCk73ZR1OpKCtfPpMExEiCbSis9xzCzZu3B947NVLshKW eLkDdmg3qu2Gcnv7WO+ccH6P2+ASEJiW+LptjhSlEVMEq8N0SQZqsBIKzdhw0uuP A0ff69xd28uKn/ydDgHSELyvLGvCrwZtp2v+dIsSAODSp7/ouxipPSJ0FlCNpR+J NW7NX+BKFKu2JyTaTtQ1nY2qw9k4R1rV3LdSE3zg35yPpZkMiaeAHHaKoVLUWCPf JDWPmq50rIcgXWwDLR7k44GuYOHFyVqz40tCYkWDkPhm5+ce8qZQHKe/Nuu4RSfm cIBVnDNrx7+zQw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:03 2025 by rpki-client