This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json) Hash identifier: f/uS7FL+f0iLG8M3Lhrz8qWJgl5vXl+x/zvckmeyRNQ= Subject key identifier: 8D:F4:F5:67:23:6F:69:90:D5:70:3E:D1:96:EA:B2:D8:AA:15:82:B0 Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e Certificate serial: 019AF19ADCECB564C16E709B01E9E81E1FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: EBvakGooordnoy2vx/Zvwb0BJ09xACmyTqZLDxKcDWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dc:ec:b5:64:c1:6e:70:9b:01:e9:e8:1e:1f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=8df4f567236f6990d5703ed196eab2d8aa1582b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:62:bc:97:b5:cf:7b:69:7b:5a:b4:a6:3f: 4b:0b:e5:15:c8:1e:89:5f:eb:fe:b3:ce:74:16:05: 4e:25:4c:20:8b:f6:22:fe:72:ab:39:66:6b:2c:43: 8f:d1:64:7c:da:5f:97:98:b4:44:63:05:11:73:dd: 63:74:44:c7:e4:2e:cc:cc:a7:ff:1c:8b:98:83:fd: b2:81:cf:3b:81:93:83:32:5c:f7:88:d3:2c:ad:62: dd:e3:33:68:97:65:09:c1:28:04:b5:9d:54:41:0a: 06:da:89:9d:96:f2:77:3e:a2:65:e7:35:eb:12:f6: 09:b0:2c:b1:13:f9:52:48:3e:76:8c:d5:91:a2:56: a9:32:c3:53:a1:f7:25:32:05:27:12:f6:96:c3:96: 28:43:7b:22:b9:48:f0:1b:f3:ed:77:4e:07:1b:dd: c3:4d:e6:40:8a:de:b5:f8:b4:5c:17:d0:32:5f:80: 53:03:00:64:00:52:43:81:84:d3:41:2d:83:56:59: 3d:da:69:54:d2:71:f1:9e:d4:ca:1b:be:c1:99:33: ee:8a:55:94:0b:4e:66:e6:f9:fe:73:10:85:28:fa: 82:39:ac:82:d2:20:37:7f:15:03:76:65:d7:8b:42: 3a:5c:a7:05:99:aa:e8:09:97:a1:68:77:57:df:02: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F4:F5:67:23:6F:69:90:D5:70:3E:D1:96:EA:B2:D8:AA:15:82:B0 X509v3 Authority Key Identifier: keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fe:42:8e:70:96:ba:8c:6b:21:3c:72:9e:bc:bf:96:05:3c: 64:8a:69:8d:79:38:80:1b:3c:77:09:de:2b:13:79:d2:8c:5b: a0:8f:c6:c2:77:5d:88:31:d0:0d:64:02:ee:7d:95:8d:e1:a6: 48:6b:3d:fe:2f:69:db:10:2f:10:53:2c:13:2b:53:30:77:e2: 69:32:de:ed:60:f0:21:1c:4c:3f:11:dc:c0:de:fb:be:5a:06: 84:c9:10:28:5c:33:23:ef:fd:aa:1d:10:c6:83:8a:06:fa:a4: 7a:5b:2f:e6:83:f1:7b:50:67:9a:7b:76:9d:e8:0e:2f:92:5f: 06:52:d2:57:b6:a2:1a:ef:90:af:79:80:f8:ac:d6:a1:e4:06: e2:d1:31:aa:99:82:0a:8d:29:01:01:10:75:ee:20:ef:81:89: 58:e0:c4:e0:6c:c8:cf:f6:3c:1e:89:ca:68:5c:25:bd:b4:d0: 4e:27:dc:40:3c:2b:62:ae:80:f9:5d:a3:ca:82:bf:5c:1d:19: 38:ec:78:58:bc:7c:c0:dc:77:eb:b5:90:63:8a:79:15:12:10: a7:7f:e6:c5:3c:32:23:36:86:27:ef:2c:b4:b3:ba:b4:1d:e2: cc:96:88:d1:67:66:a4:38:58:8c:47:4e:b0:0b:b9:16:97:97: 75:5e:75:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtzstWTBbnCbAenoHh+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDBiNjhiM2VjMTc5YjM1ZGNmZjVjNDY1ZGMyZDA0NjE5 OTI3NmUwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD Eyg4ZGY0ZjU2NzIzNmY2OTkwZDU3MDNlZDE5NmVhYjJkOGFhMTU4MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI1ivJe1z3tpe1q0pj9LC+UVyB6J X+v+s850FgVOJUwgi/Yi/nKrOWZrLEOP0WR82l+XmLREYwURc91jdETH5C7MzKf/ HIuYg/2ygc87gZODMlz3iNMsrWLd4zNol2UJwSgEtZ1UQQoG2omdlvJ3PqJl5zXr EvYJsCyxE/lSSD52jNWRolapMsNTofclMgUnEvaWw5YoQ3siuUjwG/Ptd04HG93D TeZAit61+LRcF9AyX4BTAwBkAFJDgYTTQS2DVlk92mlU0nHxntTKG77BmTPuilWU C05m5vn+cxCFKPqCOayC0iA3fxUDdmXXi0I6XKcFmaroCZehaHdX3wKblwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI309Wcjb2mQ1XA+0ZbqstiqFYKwMB8GA1UdIwQY MBaAFETQtos+wXmzXc/1xGXcLQRhmSduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82NWQ2YTItYTIyYy00ZTllLWFjZGYt OGUwYzZmZjAwYjc4LzEvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82NWQ2YTItYTIyYy00ZTllLWFjZGYtOGUwYzZmZjAwYjc4 LzEvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/5CjnCW uoxrITxynry/lgU8ZIppjXk4gBs8dwneKxN50oxboI/GwnddiDHQDWQC7n2VjeGm SGs9/i9p2xAvEFMsEytTMHfiaTLe7WDwIRxMPxHcwN77vloGhMkQKFwzI+/9qh0Q xoOKBvqkelsv5oPxe1Bnmnt2negOL5JfBlLSV7aiGu+Qr3mA+KzWoeQG4tExqpmC Co0pAQEQde4g74GJWODE4GzIz/Y8HonKaFwlvbTQTifcQDwrYq6A+V2jyoK/XB0Z OOx4WLx8wNx367WQY4p5FRIQp3/mxTwyIzaGJ+8stLO6tB3izJaI0WdmpDhYjEdO sAu5FpeXdV51XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:52 2025 by rpki-client