This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json) Hash identifier: J0uS7Rad3h6hDAF83Wm3p08fjKxcRlFQ/XM2jJ3SjUU= Subject key identifier: 7A:81:C9:45:7F:D9:81:F9:D9:57:79:CF:68:7C:FA:FF:13:6C:81:19 Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d Certificate serial: 019AF4659EDDE3D585AEE6FB90966ED524BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft Manifest number: 14A0 Signing time: Sat 06 Dec 2025 16:01:31 +0000 Manifest this update: Sat 06 Dec 2025 16:01:31 +0000 Manifest next update: Sun 07 Dec 2025 16:01:31 +0000 Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: lPGMhWZ5w194/WG+3MtxogJ4lqXNMRW1OxWKDT3alno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:9e:dd:e3:d5:85:ae:e6:fb:90:96:6e:d5:24:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d Validity Not Before: Dec 6 16:01:31 2025 GMT Not After : Dec 7 16:01:31 2025 GMT Subject: CN=7a81c9457fd981f9d95779cf687cfaff136c8119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:88:c9:6a:b0:c9:74:fb:f8:41:22:ac:c1: b8:d0:f2:38:9d:a9:bd:de:0a:86:ee:4c:8f:af:6b: 64:9f:24:7d:1a:0d:ad:e9:9f:25:55:f4:ea:5b:07: 77:93:6b:48:62:f0:a7:8c:9a:fb:f6:00:32:7d:8a: 29:86:17:00:12:c7:1b:51:cf:1e:b7:a7:ed:d8:ab: 87:6a:75:c5:ab:38:3c:8b:3b:f5:35:69:06:d8:aa: b3:86:62:50:e4:f0:22:d2:b0:0c:5f:7b:3e:c9:0b: 39:79:d1:63:ac:02:54:f3:04:e5:2e:01:a2:c0:56: e6:be:e0:89:f7:c8:c2:cf:c9:29:79:c0:45:17:79: 01:48:35:7d:e4:b2:5c:0f:55:b8:c6:e3:8a:ef:2a: 89:55:50:bb:40:7e:28:68:90:58:b0:01:38:57:7a: 45:89:48:e6:7a:53:9d:c8:b9:4b:30:ac:89:54:6f: cb:af:3d:c7:6d:66:e1:03:11:43:ca:0f:f2:39:ba: 1f:58:eb:21:05:f9:21:21:cc:5d:21:dd:e0:90:5c: d3:3a:3f:8e:8a:23:13:09:a5:1f:9c:91:a3:3e:47: 25:b3:9e:9d:31:55:3f:6a:fe:3b:71:d3:b8:eb:52: 63:ea:0c:a3:73:c0:be:8e:fd:3e:32:c8:44:c6:cb: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:81:C9:45:7F:D9:81:F9:D9:57:79:CF:68:7C:FA:FF:13:6C:81:19 X509v3 Authority Key Identifier: keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:21:b3:b8:52:67:e8:09:c7:9a:91:96:df:74:d8:07:33: 65:b7:b9:4c:04:ab:8c:f0:02:51:6d:20:9d:d8:cf:b3:de:4d: e0:d8:1e:70:d8:3f:62:59:de:6d:4d:3e:5c:3a:05:ca:bf:88: 72:84:bc:10:3b:e3:8c:a8:f9:50:06:4e:aa:41:be:97:35:75: f3:6d:ae:c9:97:82:6f:d3:3b:ab:e4:5d:7d:70:8a:58:28:49: b8:af:97:80:91:9b:a4:57:22:ac:e2:0c:63:4e:4e:74:43:f4: 93:99:ef:9b:f8:45:72:cb:b5:51:c4:b6:85:6a:ec:0e:98:8a: c5:57:db:61:21:33:eb:20:43:38:48:e0:0b:3d:2e:9e:2f:39: 2f:02:58:20:9a:0b:f4:9b:fb:f2:6f:10:f9:7b:50:58:ca:09: be:10:67:70:6e:6e:76:bf:9b:81:0b:b2:ac:48:94:44:cf:a8: 0c:49:63:04:58:de:2c:9f:04:d3:e1:3f:22:99:63:2b:5e:f8: 79:4b:44:8a:bc:1a:f9:49:aa:4d:d0:b7:9a:d4:b4:12:6c:54: 4f:56:6d:df:b8:ba:19:e9:8f:0f:f4:83:72:0a:cd:ea:06:41: 05:e3:a1:5f:2d:a3:e7:a1:df:7b:e8:06:bf:12:bf:62:f9:7f: 66:49:4c:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZ7d49WFrub7kJZu1SS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjQ1NWIxYTg1OWJjNGQ2NjE4MTc1MDU1ZjBlYzg5NjA3 ZjA1MmQwHhcNMjUxMjA2MTYwMTMxWhcNMjUxMjA3MTYwMTMxWjAzMTEwLwYDVQQD Eyg3YTgxYzk0NTdmZDk4MWY5ZDk1Nzc5Y2Y2ODdjZmFmZjEzNmM4MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseyIyWqwyXT7+EEirMG40PI4nam9 3gqG7kyPr2tknyR9Gg2t6Z8lVfTqWwd3k2tIYvCnjJr79gAyfYophhcAEscbUc8e t6ft2KuHanXFqzg8izv1NWkG2KqzhmJQ5PAi0rAMX3s+yQs5edFjrAJU8wTlLgGi wFbmvuCJ98jCz8kpecBFF3kBSDV95LJcD1W4xuOK7yqJVVC7QH4oaJBYsAE4V3pF iUjmelOdyLlLMKyJVG/Lrz3HbWbhAxFDyg/yObofWOshBfkhIcxdId3gkFzTOj+O iiMTCaUfnJGjPkcls56dMVU/av47cdO461Jj6gyjc8C+jv0+MshExssJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqByUV/2YH52Vd5z2h8+v8TbIEZMB8GA1UdIwQY MBaAFKwkVbGoWbxNZhgXUFXw7IlgfwUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjct YzcxODM2MWQ0Mzc0LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjctYzcxODM2MWQ0Mzc0 LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6Uhs7hS Z+gJx5qRlt902AczZbe5TASrjPACUW0gndjPs95N4NgecNg/YlnebU0+XDoFyr+I coS8EDvjjKj5UAZOqkG+lzV1822uyZeCb9M7q+RdfXCKWChJuK+XgJGbpFcirOIM Y05OdEP0k5nvm/hFcsu1UcS2hWrsDpiKxVfbYSEz6yBDOEjgCz0uni85LwJYIJoL 9Jv78m8Q+XtQWMoJvhBncG5udr+bgQuyrEiURM+oDEljBFjeLJ8E0+E/IpljK174 eUtEirwa+UmqTdC3mtS0EmxUT1Zt37i6GemPD/SDcgrN6gZBBeOhXy2j56Hfe+gG vxK/Yvl/ZklMaA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:14 2025 by rpki-client