This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft File: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json) Hash identifier: R8uGu6/qc7JaebBdkpck208WdYORIu4DGGFptrMSNv8= Subject key identifier: A1:D6:48:FE:CD:EA:76:15:12:81:17:BB:66:FF:69:64:86:1C:D8:08 Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86 Certificate serial: 019AF2097AE4A5C6FB310CAF17A4F8E5DB53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: CWZT3akWg9qxxuhftsx9foKUD4p3b8QLN6qNk2KywM8=) 2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7a:e4:a5:c6:fb:31:0c:af:17:a4:f8:e5:db:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86 Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=a1d648fecdea7615128117bb66ff6964861cd808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:27:00:40:51:15:42:3e:57:87:65:a7:b6: 99:fa:02:95:4a:37:b4:02:6c:10:4c:f4:6a:18:4b: fd:04:d4:5f:35:17:df:35:90:aa:8d:7c:6c:4a:15: cc:d6:d1:58:8f:dd:3d:3c:63:5e:eb:24:f8:39:02: a0:8b:3e:e3:f5:c4:df:58:9d:df:13:be:68:b5:54: f4:22:3d:f5:aa:50:68:95:6d:98:18:0c:ad:11:27: d1:50:62:82:e6:bf:a3:53:11:78:37:49:02:6e:b7: 66:9d:ec:37:da:91:72:11:bc:9e:53:38:58:84:a6: 4b:5a:33:fc:71:12:67:af:e0:51:44:0e:63:31:1b: b7:24:98:70:61:8b:cb:42:bd:a3:0d:0e:79:1d:18: c2:bc:97:05:cc:fe:a3:05:c8:fc:aa:15:68:24:8b: e1:f4:c2:e2:a9:6c:6a:1f:51:27:64:e2:cb:65:63: c4:b1:b2:ed:46:27:d9:6e:6c:d5:9a:3e:ac:4b:58: f5:e7:09:4f:2d:15:6f:88:a4:06:70:b9:70:5f:af: 50:af:1c:d8:d9:61:b8:0e:33:b5:7d:9e:d4:48:39: f8:0e:a1:e4:e8:e9:c1:9b:12:19:e1:ba:3f:01:97: 7b:62:f6:bc:47:21:38:3f:3f:1f:36:30:33:a7:d6: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:48:FE:CD:EA:76:15:12:81:17:BB:66:FF:69:64:86:1C:D8:08 X509v3 Authority Key Identifier: keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:aa:6a:91:12:8f:55:dd:79:1c:a3:b5:12:b8:49:cc:e6: f4:97:6a:6f:90:93:db:07:8a:08:d3:11:d3:9a:e7:91:af:27: f6:1f:f3:0b:4d:d8:26:c8:3a:e9:77:00:d3:6b:30:52:d6:42: a8:76:5d:af:27:50:b9:13:40:30:90:c3:55:87:52:e6:2d:7b: 88:1c:3e:43:c0:15:04:19:aa:f4:29:f1:85:81:b1:1a:41:dc: 73:ca:cd:94:0b:0d:f2:6c:3a:2b:42:af:a2:de:8e:d9:fe:33: eb:43:77:3f:3d:95:75:d1:b5:ef:66:30:69:fe:7e:28:08:5b: b9:cb:5f:28:58:05:24:ff:a4:d9:e2:92:c9:e8:36:e7:47:c4: 00:ae:b5:06:c6:bc:e6:0e:8c:58:84:00:48:34:65:f9:95:b9: 57:f7:1e:ac:84:95:3f:62:11:83:89:60:5e:2c:30:29:a6:cb: 4a:1b:dc:24:58:81:08:02:c0:cb:fd:5a:24:0c:90:32:d3:8a: 7d:3d:70:46:c6:ef:b4:77:b6:ff:69:8e:fc:08:08:12:ec:80: 29:fd:b9:99:c6:84:18:45:68:8a:45:37:ee:5c:96:d3:29:6c: 06:10:f1:d0:56:e3:d0:df:66:b9:20:93:78:fe:7c:45:68:66: 68:b5:66:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXrkpcb7MQyvF6T45dtTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZGUyMWIwNjM2YzYxNGViZjQzNjY0Nzk4MDEyYWZkNTZj NWVlODYwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EyhhMWQ2NDhmZWNkZWE3NjE1MTI4MTE3YmI2NmZmNjk2NDg2MWNkODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C4nAEBRFUI+V4dlp7aZ+gKVSje0 AmwQTPRqGEv9BNRfNRffNZCqjXxsShXM1tFYj909PGNe6yT4OQKgiz7j9cTfWJ3f E75otVT0Ij31qlBolW2YGAytESfRUGKC5r+jUxF4N0kCbrdmnew32pFyEbyeUzhY hKZLWjP8cRJnr+BRRA5jMRu3JJhwYYvLQr2jDQ55HRjCvJcFzP6jBcj8qhVoJIvh 9MLiqWxqH1EnZOLLZWPEsbLtRifZbmzVmj6sS1j15wlPLRVviKQGcLlwX69QrxzY 2WG4DjO1fZ7USDn4DqHk6OnBmxIZ4bo/AZd7Yva8RyE4Pz8fNjAzp9ZfIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHWSP7N6nYVEoEXu2b/aWSGHNgIMB8GA1UdIwQY MBaAFOPeIbBjbGFOv0NmR5gBKv1Wxe6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYt YjgyNTk2N2E3NTdhLzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYtYjgyNTk2N2E3NTdh LzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaCqapES j1XdeRyjtRK4Sczm9Jdqb5CT2weKCNMR05rnka8n9h/zC03YJsg66XcA02swUtZC qHZdrydQuRNAMJDDVYdS5i17iBw+Q8AVBBmq9CnxhYGxGkHcc8rNlAsN8mw6K0Kv ot6O2f4z60N3Pz2VddG172Ywaf5+KAhbuctfKFgFJP+k2eKSyeg250fEAK61Bsa8 5g6MWIQASDRl+ZW5V/cerISVP2IRg4lgXiwwKabLShvcJFiBCALAy/1aJAyQMtOK fT1wRsbvtHe2/2mO/AgIEuyAKf25mcaEGEVoikU37lyW0ylsBhDx0Fbj0N9muSCT eP58RWhmaLVmuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:04 2025 by rpki-client