This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json) Hash identifier: LoSMUNltK9CS4ZbttFJEGy26flUn01zMlkXf3BaY0NY= Subject key identifier: 9B:18:A8:5B:BD:5B:CB:F9:5E:12:07:F0:0B:B4:7B:77:4B:A8:DB:E0 Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d Certificate serial: 019AF209ADFD6336AD705FB187524ABD0B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft Manifest number: 03B0 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: /lUB+PWXWHIljf3dwdwam3OTOPRhiv0uqlamkQzInhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ad:fd:63:36:ad:70:5f:b1:87:52:4a:bd:0b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=9b18a85bbd5bcbf95e1207f00bb47b774ba8dbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:59:ef:b5:74:87:77:b0:50:65:c8:83:34: 34:5d:06:3e:75:c4:f3:8f:6a:32:8e:e9:d2:56:d0: 8b:ae:c2:4c:7c:a2:bc:e3:85:0a:13:cc:33:3f:33: c0:ba:62:14:fa:81:ba:5b:47:b4:0b:ac:fc:7e:30: 99:5a:66:71:0f:27:23:74:9d:8c:fc:b0:40:cd:dd: 75:12:f9:96:64:56:6c:6f:00:29:09:4a:55:a7:f3: b1:ff:dc:29:1e:95:89:cb:d7:67:91:03:f1:cd:c4: a0:1b:26:f0:02:10:f7:1b:aa:0e:cc:69:d6:e6:c3: 2d:66:d8:3a:52:36:30:de:f7:25:a1:53:9e:40:04: f5:6d:9c:c8:40:fc:6b:7e:92:b0:43:5e:28:30:84: eb:c0:49:6f:69:da:6e:b3:74:e3:d3:57:b8:0d:7d: 54:f6:92:b0:01:42:d5:db:28:c8:47:20:3d:cf:e6: c9:48:44:13:92:d0:09:90:75:10:6c:e2:2e:2b:fb: 99:f9:40:2d:75:ed:3a:19:06:94:8c:b9:b7:d9:25: 23:66:f8:41:77:db:3d:63:c2:74:f2:bd:0c:9c:da: 5f:d2:c0:f4:73:1f:4c:79:8a:5b:7a:0f:c0:71:8e: 32:35:c7:08:4d:c7:12:7b:e8:45:4b:87:33:2b:11: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:18:A8:5B:BD:5B:CB:F9:5E:12:07:F0:0B:B4:7B:77:4B:A8:DB:E0 X509v3 Authority Key Identifier: keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9f:38:43:70:94:5a:42:18:11:7d:49:18:4f:f1:30:e3:05: 74:f5:fe:ce:89:4d:e8:93:7b:ce:01:ae:2d:b3:e4:f3:84:41: 6b:c3:01:11:9d:ab:ba:b0:d8:d1:9e:a0:95:70:6a:d0:01:4b: 7b:3e:8a:86:10:31:37:2e:ad:28:af:3b:13:77:81:13:94:8c: e9:53:af:3d:d6:71:2f:13:12:da:f5:38:10:d5:5e:16:3e:79: 5e:0f:b6:a4:db:d2:18:bd:1f:3d:c5:fc:b2:c6:e7:34:6c:ec: f8:7f:98:9d:26:6e:d7:16:51:25:81:b9:b8:47:9f:cb:db:c8: c7:c7:88:6c:d4:0c:e5:65:7b:8c:8f:c2:78:bf:27:b6:af:e0: 71:25:b7:9f:e4:ee:a1:5d:3d:df:c1:e1:3b:d7:02:78:fb:0d: 22:00:bb:72:b1:fd:2a:86:95:66:ef:24:b2:95:ec:7f:0a:88: ae:34:39:74:05:cd:e7:d3:11:50:5e:9a:d5:74:1b:cd:5f:b0: a4:ac:93:b5:36:74:f5:69:1b:98:86:ea:36:7f:e4:7e:e5:fa: 9d:6a:38:6a:f5:2f:16:32:2b:74:50:89:a9:7f:92:2f:c6:0e: 46:9e:9d:9b:bb:74:67:1c:c1:cf:47:34:85:6e:1f:b7:be:39: 74:73:ef:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa39YzatcF+xh1JKvQt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmIwMmM0NWM3NWViZjcyZDU2ZDMzYzI4MDI5N2MyYWU4 N2ViMmQwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD Eyg5YjE4YTg1YmJkNWJjYmY5NWUxMjA3ZjAwYmI0N2I3NzRiYThkYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0xZ77V0h3ewUGXIgzQ0XQY+dcTz j2oyjunSVtCLrsJMfKK844UKE8wzPzPAumIU+oG6W0e0C6z8fjCZWmZxDycjdJ2M /LBAzd11EvmWZFZsbwApCUpVp/Ox/9wpHpWJy9dnkQPxzcSgGybwAhD3G6oOzGnW 5sMtZtg6UjYw3vcloVOeQAT1bZzIQPxrfpKwQ14oMITrwElvadpus3Tj01e4DX1U 9pKwAULV2yjIRyA9z+bJSEQTktAJkHUQbOIuK/uZ+UAtde06GQaUjLm32SUjZvhB d9s9Y8J08r0MnNpf0sD0cx9MeYpbeg/AcY4yNccITccSe+hFS4czKxHPcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsYqFu9W8v5XhIH8Au0e3dLqNvgMB8GA1UdIwQY MBaAFHErAsRcdev3LVbTPCgCl8Kuh+stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgt MzUyNDczZGQ1MTc5LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgtMzUyNDczZGQ1MTc5 LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAap84Q3CU WkIYEX1JGE/xMOMFdPX+zolN6JN7zgGuLbPk84RBa8MBEZ2rurDY0Z6glXBq0AFL ez6KhhAxNy6tKK87E3eBE5SM6VOvPdZxLxMS2vU4ENVeFj55Xg+2pNvSGL0fPcX8 ssbnNGzs+H+YnSZu1xZRJYG5uEefy9vIx8eIbNQM5WV7jI/CeL8ntq/gcSW3n+Tu oV0938HhO9cCePsNIgC7crH9KoaVZu8kspXsfwqIrjQ5dAXN59MRUF6a1XQbzV+w pKyTtTZ09WkbmIbqNn/kfuX6nWo4avUvFjIrdFCJqX+SL8YORp6dm7t0ZxzBz0c0 hW4ft745dHPvQw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:37 2025 by rpki-client