This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft File: kc04OOdPhNIERp3vJ7j-ehQAFLo.mft (raw, json) Hash identifier: WQfqS+qui0PKJobHopScV0vumzcSsM1X5lB0JnO10c0= Subject key identifier: 8B:03:61:00:C3:0E:C7:49:08:26:40:AE:78:FA:4F:13:8F:2D:AE:84 Authority key identifier: 91:CD:38:38:E7:4F:84:D2:04:46:9D:EF:27:B8:FE:7A:14:00:14:BA Certificate issuer: /CN=91cd3838e74f84d204469def27b8fe7a140014ba Certificate serial: 019AF276857C0A9D97434DE08FD1BC3FA210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft Manifest number: DB Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: kc04OOdPhNIERp3vJ7j-ehQAFLo.crl (hash: KggFAVvMlMqS+k8t0T9ZAme2yowrH9XI76kFB9JPjpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:85:7c:0a:9d:97:43:4d:e0:8f:d1:bc:3f:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91cd3838e74f84d204469def27b8fe7a140014ba Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=8b036100c30ec749082640ae78fa4f138f2dae84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:79:53:18:bd:a2:37:84:1b:20:f6:20:d0: cc:67:e2:70:f7:a9:59:18:17:29:b0:ce:e2:c1:d0: e0:99:77:50:d4:73:dc:0a:8d:3d:bd:68:4c:5a:57: e7:01:6a:80:df:ae:56:40:fa:6b:51:ed:24:8d:a2: 16:36:66:0e:77:38:03:98:30:da:48:49:0a:b6:b7: 80:a6:6b:13:86:61:72:ba:97:55:4d:44:47:53:82: 95:91:44:c3:d5:b4:c5:79:f4:47:ca:0c:d0:97:62: 85:61:55:1a:ae:57:a2:e3:f9:87:77:39:ce:42:2f: 76:3b:2d:21:19:e9:af:69:48:49:a2:69:5a:88:9e: a5:52:e9:82:2e:9a:ae:19:48:92:a8:43:bd:9a:58: 21:21:49:4c:48:3c:2c:45:15:f2:89:23:08:d4:0f: 4b:fd:6b:54:b1:25:e7:e8:96:f1:78:79:86:4f:c4: f7:9b:2c:28:34:fa:97:86:6f:6e:3e:a7:a4:4f:56: 19:db:b1:7b:a9:a1:41:6f:95:8d:70:d0:ed:78:0a: 73:c1:c5:a8:6f:16:e5:34:9d:e6:69:83:d1:03:02: bb:a5:bc:fc:50:3e:9e:2f:5c:1c:df:ff:87:a9:d5: 57:e4:af:93:36:d2:ca:de:9b:92:6a:a2:5f:3c:a9: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:61:00:C3:0E:C7:49:08:26:40:AE:78:FA:4F:13:8F:2D:AE:84 X509v3 Authority Key Identifier: keyid:91:CD:38:38:E7:4F:84:D2:04:46:9D:EF:27:B8:FE:7A:14:00:14:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:17:4e:59:b5:2d:2c:57:bf:4e:1e:f2:71:bc:76:c4:cf:76: f7:5c:c9:15:a0:d0:9f:8e:ca:46:5f:96:5d:b3:3f:c8:d5:39: 44:9c:1b:b1:9a:75:c3:8e:92:d5:8a:71:23:f7:dc:e0:18:a6: e8:35:e6:6c:98:0b:79:66:0d:03:0c:12:d9:ce:0a:cb:a2:c9: 8d:7d:9e:a7:8b:b5:da:1c:9e:b4:b0:78:8a:2f:55:47:c2:a5: 1b:a5:7c:39:0b:3a:1f:bf:9b:8a:89:85:ed:77:47:ec:e6:37: f1:6f:6d:7d:75:b9:8c:1c:2e:d7:00:84:b3:ed:12:34:30:a3: 85:21:7f:4c:c0:80:0a:2b:38:b9:ed:63:78:23:26:05:15:42: 5a:db:1e:ba:6a:ce:33:bb:a8:cf:60:85:6a:3b:ae:ba:5c:f3: b6:b9:6b:d5:1d:63:68:ce:d2:9c:21:47:5c:0f:2b:d9:fb:cb: b8:31:54:fa:22:ac:a6:06:de:c9:80:b5:87:2d:dd:f3:c0:fb: 83:c3:3f:fe:77:4f:33:bd:96:2f:e3:d0:10:90:ea:f6:39:ad: 3b:8b:63:15:ba:9e:83:61:ac:3e:ba:f8:1f:86:0d:c8:1b:02: fe:78:7d:30:70:ce:08:04:b7:97:72:46:a8:00:56:9f:35:dd: 4c:4b:63:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoV8Cp2XQ03gj9G8P6IQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxY2QzODM4ZTc0Zjg0ZDIwNDQ2OWRlZjI3YjhmZTdhMTQw MDE0YmEwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD Eyg4YjAzNjEwMGMzMGVjNzQ5MDgyNjQwYWU3OGZhNGYxMzhmMmRhZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6J5Uxi9ojeEGyD2INDMZ+Jw96lZ GBcpsM7iwdDgmXdQ1HPcCo09vWhMWlfnAWqA365WQPprUe0kjaIWNmYOdzgDmDDa SEkKtreApmsThmFyupdVTURHU4KVkUTD1bTFefRHygzQl2KFYVUarlei4/mHdznO Qi92Oy0hGemvaUhJomlaiJ6lUumCLpquGUiSqEO9mlghIUlMSDwsRRXyiSMI1A9L /WtUsSXn6JbxeHmGT8T3mywoNPqXhm9uPqekT1YZ27F7qaFBb5WNcNDteApzwcWo bxblNJ3maYPRAwK7pbz8UD6eL1wc3/+HqdVX5K+TNtLK3puSaqJfPKkNrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsDYQDDDsdJCCZArnj6TxOPLa6EMB8GA1UdIwQY MBaAFJHNODjnT4TSBEad7ye4/noUABS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2MwNE9PZFBoTklFUnAzdko3ai1laFFBRkxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hOTRjMTgtMTVjYS00YjllLTgzODAt MmFmYzk4YWZkY2M3LzEva2MwNE9PZFBoTklFUnAzdko3ai1laFFBRkxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9hOTRjMTgtMTVjYS00YjllLTgzODAtMmFmYzk4YWZkY2M3 LzEva2MwNE9PZFBoTklFUnAzdko3ai1laFFBRkxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxdOWbUt LFe/Th7ycbx2xM9291zJFaDQn47KRl+WXbM/yNU5RJwbsZp1w46S1YpxI/fc4Bim 6DXmbJgLeWYNAwwS2c4Ky6LJjX2ep4u12hyetLB4ii9VR8KlG6V8OQs6H7+biomF 7XdH7OY38W9tfXW5jBwu1wCEs+0SNDCjhSF/TMCACis4ue1jeCMmBRVCWtseumrO M7uoz2CFajuuulzztrlr1R1jaM7SnCFHXA8r2fvLuDFU+iKspgbeyYC1hy3d88D7 g8M//ndPM72WL+PQEJDq9jmtO4tjFbqeg2GsPrr4H4YNyBsC/nh9MHDOCAS3l3JG qABWnzXdTEtj6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:55 2025 by rpki-client