This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json) Hash identifier: YuB2eD5i1LU0xJIdseswgK5aYMB3P/Ex59m/KIDpv/8= Subject key identifier: C9:51:7D:8A:50:10:99:3E:41:DD:6B:E2:75:D9:57:53:BC:1B:46:6E Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f Certificate serial: 019AF12D061E7410B054F02494F1457B40FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft Manifest number: 0B47 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: C4oZMegiy4dARFjLXgX0iyICYq4NyVA6enuuDSP3F48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:06:1e:74:10:b0:54:f0:24:94:f1:45:7b:40:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=c9517d8a5010993e41dd6be275d95753bc1b466e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:3a:4c:64:4b:b8:d0:27:37:8d:f1:c8:1e: 20:62:94:86:83:4c:e1:ec:f7:9f:f9:7a:a0:a1:66: ba:2c:4a:2a:3f:40:95:51:20:cc:8a:5f:cd:c5:0b: ab:09:82:5a:36:09:d6:a5:ea:ad:c3:63:af:ce:19: f9:a0:69:f5:b0:30:13:3e:47:e9:b8:3d:ac:2f:8f: 6b:cb:fb:eb:6a:12:90:a0:31:23:b5:3e:e5:75:31: ba:ce:3f:d2:3c:2c:0d:3c:96:0d:d1:9c:5e:8d:e9: a2:4b:9f:7a:ee:d1:fa:70:1f:4c:df:7b:fb:92:53: f0:26:62:53:36:c3:4a:b1:87:5f:39:26:9a:44:6d: 97:94:cd:69:90:c0:14:1a:4e:14:3a:d5:89:05:9d: 02:e3:0a:8f:68:e7:da:0b:a0:13:4c:55:f1:fc:87: 10:c3:c7:40:f3:82:93:9c:1d:27:dd:ce:89:89:05: 2a:17:cf:cb:e3:6d:43:78:c3:41:05:d0:df:63:7a: 6f:63:c2:17:a9:94:42:f8:1c:a7:12:0a:03:6e:11: 66:ad:01:9a:c1:21:5d:b2:bb:84:4d:f8:b0:94:0c: 72:58:f9:1b:63:ea:8b:05:08:41:b8:95:6c:a9:0a: cf:be:06:f1:00:8f:77:a1:91:d9:af:3a:b1:0b:b8: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:51:7D:8A:50:10:99:3E:41:DD:6B:E2:75:D9:57:53:BC:1B:46:6E X509v3 Authority Key Identifier: keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:be:4d:3a:72:a1:cc:1b:3a:a7:3d:1a:ee:94:f4:95:69: 6a:0d:f4:8c:bd:0b:f3:9b:9e:47:7a:d8:61:c6:7d:d7:18:11: a7:83:91:24:ee:e4:f5:c9:65:d4:8b:2e:76:9a:50:b0:6b:65: f1:b2:37:d3:44:f4:6d:9c:e7:b7:44:79:23:4f:15:00:2f:a9: 79:ad:17:9b:a3:dd:91:75:da:3c:fa:7e:62:e2:4f:58:8b:fd: fe:f7:81:2a:9e:5e:d6:11:89:d0:71:0a:4f:c3:79:27:12:ef: 21:1c:2b:0d:00:76:8b:a5:2e:4f:84:67:9c:18:24:d5:a1:9b: b7:f5:56:b4:34:46:bf:39:e6:27:24:17:1b:7d:e2:23:6a:d2: 44:91:ad:aa:e3:7c:b0:de:ec:16:db:a5:6b:2d:df:dd:b8:f3: d2:7a:10:eb:de:0e:59:3a:81:13:54:53:56:0c:8f:86:08:e5: 5e:5a:d2:dd:d5:b8:e2:4d:ea:6f:27:fb:f1:92:f4:6f:e9:e1: f8:0d:38:5f:1e:ea:bb:68:dc:25:db:e0:6f:9a:90:54:89:1e: b1:7f:52:d5:88:67:af:2d:ae:1b:d2:89:b1:4c:b3:2d:1e:8d: fb:4f:d2:8b:b1:bc:9c:09:45:ef:89:1a:d6:01:f7:fc:a0:57: 2c:9a:85:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQYedBCwVPAklPFFe0D+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODU1OTZhNmRlMWNjYmVhNjY1YjQ1NmM0ZDJjY2QwOTY0 OTliMWYwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EyhjOTUxN2Q4YTUwMTA5OTNlNDFkZDZiZTI3NWQ5NTc1M2JjMWI0NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nk6TGRLuNAnN43xyB4gYpSGg0zh 7Pef+XqgoWa6LEoqP0CVUSDMil/NxQurCYJaNgnWpeqtw2Ovzhn5oGn1sDATPkfp uD2sL49ry/vrahKQoDEjtT7ldTG6zj/SPCwNPJYN0ZxejemiS5967tH6cB9M33v7 klPwJmJTNsNKsYdfOSaaRG2XlM1pkMAUGk4UOtWJBZ0C4wqPaOfaC6ATTFXx/IcQ w8dA84KTnB0n3c6JiQUqF8/L421DeMNBBdDfY3pvY8IXqZRC+BynEgoDbhFmrQGa wSFdsruETfiwlAxyWPkbY+qLBQhBuJVsqQrPvgbxAI93oZHZrzqxC7hUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlRfYpQEJk+Qd1r4nXZV1O8G0ZuMB8GA1UdIwQY MBaAFDCFWWpt4cy+pmW0VsTSzNCWSZsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYt OGNjYjY3NGEzODc1LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYtOGNjYjY3NGEzODc1 LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdi+TTpy ocwbOqc9Gu6U9JVpag30jL0L85ueR3rYYcZ91xgRp4ORJO7k9cll1IsudppQsGtl 8bI300T0bZznt0R5I08VAC+pea0Xm6PdkXXaPPp+YuJPWIv9/veBKp5e1hGJ0HEK T8N5JxLvIRwrDQB2i6UuT4RnnBgk1aGbt/VWtDRGvznmJyQXG33iI2rSRJGtquN8 sN7sFtulay3f3bjz0noQ694OWTqBE1RTVgyPhgjlXlrS3dW44k3qbyf78ZL0b+nh +A04Xx7qu2jcJdvgb5qQVIkesX9S1Yhnry2uG9KJsUyzLR6N+0/Si7G8nAlF74ka 1gH3/KBXLJqF8A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:37 2025 by rpki-client