This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft File: OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json) Hash identifier: G5haMCS1Zl8FlntJMXdq3g9t8Q9sf6m7H4rW9JJ1Wbc= Subject key identifier: 1F:06:80:0E:0D:BD:AA:2B:3D:1E:96:CA:7E:B7:61:AC:0C:E2:33:E2 Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF Certificate issuer: /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf Certificate serial: 019B31C3C53F12EC92C3CF9E8EB9944B19F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft Manifest number: 0707 Signing time: Thu 18 Dec 2025 14:01:12 +0000 Manifest this update: Thu 18 Dec 2025 14:01:12 +0000 Manifest next update: Fri 19 Dec 2025 14:01:12 +0000 Files and hashes: 1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: K5yTpH7HA2/xcsnavn8tYZb4+qUoRBfsJpD5k2rKBRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:c5:3f:12:ec:92:c3:cf:9e:8e:b9:94:4b:19:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf Validity Not Before: Dec 18 14:01:12 2025 GMT Not After : Dec 19 14:01:12 2025 GMT Subject: CN=1f06800e0dbdaa2b3d1e96ca7eb761ac0ce233e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:33:d5:b5:14:15:7e:aa:b9:77:a1:71:74: dc:93:8e:e4:32:1f:7c:46:d3:5e:25:2f:b1:16:9c: 8c:2e:34:f8:90:58:4e:90:75:70:cb:87:e8:28:92: 40:4b:2d:37:89:99:c4:6e:64:dc:e3:3e:1e:83:eb: 82:fd:d0:c9:8c:03:fc:0c:e9:87:48:66:c5:cb:49: ae:18:16:1c:77:7d:a6:ab:1e:9e:37:34:94:33:d3: 6d:a0:f8:04:d5:31:0e:ff:7f:17:30:42:a5:1d:b8: 42:ef:c4:35:e8:41:92:37:2f:30:94:d5:4c:55:b2: ef:4d:97:cb:47:17:e5:aa:f7:10:1f:d4:c2:c2:8e: 16:cd:51:b1:ff:00:ee:ff:19:17:10:b2:2f:c9:8f: 88:91:d6:2d:24:2c:8e:2c:27:4d:01:4e:c7:ec:ec: 7a:be:37:dc:f5:11:c0:3a:8b:a9:a5:38:7c:e1:89: e2:ff:a8:45:ca:84:ac:29:dd:19:ea:c0:4b:35:c3: 44:db:33:c6:b2:70:6c:02:be:f5:35:41:ff:9a:74: c9:b9:61:29:05:c7:fb:6f:23:80:65:98:a4:d3:7d: 56:0e:42:cc:9b:18:bb:00:25:7c:f0:4f:f7:c1:a8: 51:36:ae:3b:a3:b6:c8:13:3e:f5:d7:ac:4c:bb:30: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:06:80:0E:0D:BD:AA:2B:3D:1E:96:CA:7E:B7:61:AC:0C:E2:33:E2 X509v3 Authority Key Identifier: keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fe:89:a4:68:2b:97:a3:41:4d:a6:a2:e6:c6:d7:38:f5:68: 88:aa:82:d8:b4:f5:01:86:c3:95:93:d6:bb:11:fb:2c:bf:7d: d6:a5:38:8f:38:0a:c5:57:2f:11:ab:90:82:ce:21:7f:11:01: b9:fb:2d:9a:db:cc:28:92:cb:f9:7e:87:5e:9e:f3:33:fb:55: e1:a0:2c:b5:e3:e9:1a:bc:4a:8d:07:3c:68:dc:10:35:22:57: 5f:8c:8b:f9:df:73:17:6d:41:5c:1e:13:b8:d7:27:e2:27:58: 3e:8f:33:f4:fc:e9:21:5e:42:c0:df:78:47:0e:f0:0a:7c:e3: 9c:fd:c2:8b:9a:ad:1a:72:13:a1:83:9e:20:41:42:ab:3e:98: 6e:b7:98:e6:3e:90:1b:b0:07:e3:be:b6:39:f2:5a:e7:9f:83: b6:88:3e:0d:ea:e5:21:23:72:4f:98:62:bc:1f:e0:6f:8e:ef: bd:e5:47:a6:b2:72:c4:9c:f8:92:1d:5c:c9:56:5a:38:28:e6: 5d:5a:0f:4f:97:30:cc:13:b3:90:0a:1a:ea:e6:68:e1:37:bb: ef:fe:63:c8:b8:96:22:b3:73:5f:16:b2:1a:8a:0c:65:ea:ed: ec:a9:eb:2e:ea:d3:85:58:6b:c3:7e:30:91:e4:70:70:43:a4: 25:9a:16:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw8U/EuySw8+ejrmUSxnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NjM3OGRlMzNkMTBiOGNiMGY4MDg2MmI2NDkxYTRkZTlj ZmZjZGYwHhcNMjUxMjE4MTQwMTEyWhcNMjUxMjE5MTQwMTEyWjAzMTEwLwYDVQQD EygxZjA2ODAwZTBkYmRhYTJiM2QxZTk2Y2E3ZWI3NjFhYzBjZTIzM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtToz1bUUFX6quXehcXTck47kMh98 RtNeJS+xFpyMLjT4kFhOkHVwy4foKJJASy03iZnEbmTc4z4eg+uC/dDJjAP8DOmH SGbFy0muGBYcd32mqx6eNzSUM9NtoPgE1TEO/38XMEKlHbhC78Q16EGSNy8wlNVM VbLvTZfLRxflqvcQH9TCwo4WzVGx/wDu/xkXELIvyY+IkdYtJCyOLCdNAU7H7Ox6 vjfc9RHAOouppTh84Yni/6hFyoSsKd0Z6sBLNcNE2zPGsnBsAr71NUH/mnTJuWEp Bcf7byOAZZik031WDkLMmxi7ACV88E/3wahRNq47o7bIEz7116xMuzAHpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8GgA4NvaorPR6Wyn63YawM4jPiMB8GA1UdIwQY MBaAFDljeN4z0QuMsPgIYrZJGk3pz/zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTct YmJlMDczYmY2YTY0LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTctYmJlMDczYmY2YTY0 LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/6JpGgr l6NBTaai5sbXOPVoiKqC2LT1AYbDlZPWuxH7LL991qU4jzgKxVcvEauQgs4hfxEB ufstmtvMKJLL+X6HXp7zM/tV4aAstePpGrxKjQc8aNwQNSJXX4yL+d9zF21BXB4T uNcn4idYPo8z9PzpIV5CwN94Rw7wCnzjnP3Ci5qtGnIToYOeIEFCqz6YbreY5j6Q G7AH4762OfJa55+Dtog+DerlISNyT5hivB/gb47vveVHprJyxJz4kh1cyVZaOCjm XVoPT5cwzBOzkAoa6uZo4Te77/5jyLiWIrNzXxayGooMZert7KnrLurThVhrw34w keRwcEOkJZoW1w== -----END CERTIFICATE-----Generated at Thu Dec 18 20:36:23 2025 by rpki-client