This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json) Hash identifier: vKxVmNnq4Cc5s36U+bPCtL0XbcFokImhaRAOXAWnvT0= Subject key identifier: C8:86:05:85:17:83:6B:24:B6:C2:65:BF:24:03:18:DF:A9:60:AC:76 Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3 Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3 Certificate serial: 019AF12CD6D5B9F3C2BD319272BC2FD28DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft Manifest number: 1031 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: FuK5I+X7+3f3vY0cjp9vypZNhU/f+XKTmLKPWAhQPq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d6:d5:b9:f3:c2:bd:31:92:72:bc:2f:d2:8d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3 Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=c886058517836b24b6c265bf240318dfa960ac76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:e3:60:99:19:2c:01:55:f2:3c:18:6b:82: 30:f1:42:5d:b7:85:11:a1:3c:3f:72:cf:77:70:4e: 08:34:af:b6:7c:af:7d:0f:6b:88:7c:af:4b:de:a8: af:b1:fa:82:2d:34:08:77:85:38:67:46:a2:af:e5: 6f:a6:30:ca:69:32:e7:59:a2:4e:79:04:e5:c3:98: 8f:8a:35:bd:34:b1:0a:73:ce:5c:76:5f:f0:f9:3c: 32:91:e4:4e:36:70:13:d2:f1:22:f8:ca:64:3a:26: 68:5d:d5:e1:46:49:50:78:27:59:40:6c:b4:57:bb: a3:e2:e5:d1:c9:ea:cd:38:6a:85:74:7a:f9:b9:37: d6:e5:e3:48:58:1f:f0:34:18:a8:27:f1:af:c1:22: be:d9:64:b6:70:3d:ec:16:ca:0c:59:3b:b5:4d:d1: 24:24:2c:33:6c:01:5e:c9:57:13:79:05:a3:b1:c4: 47:16:c0:10:64:13:f7:fa:5e:a7:03:d7:d7:f3:7d: 94:96:48:98:f9:8d:5b:4a:1c:38:94:be:42:41:da: 35:50:a3:22:d1:f4:94:6d:b4:3a:14:fd:53:a0:c9: f2:2c:ac:4d:32:86:e5:a5:f2:88:22:f1:f8:27:a0: fb:a6:15:24:3c:42:fc:fd:c9:b7:b3:92:e5:a9:3c: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:86:05:85:17:83:6B:24:B6:C2:65:BF:24:03:18:DF:A9:60:AC:76 X509v3 Authority Key Identifier: keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d9:8a:a3:dc:1a:53:cb:96:4d:95:31:35:80:4d:2f:a3:75: f3:8b:ba:2f:67:ff:71:2c:5e:b9:06:ee:b5:f9:7b:40:95:b5: 0e:13:8d:15:cc:37:25:a7:8c:09:d7:b4:b9:31:44:7a:79:11: 43:ec:db:a1:a1:8e:1b:63:ae:4c:64:da:14:10:72:1a:ce:96: 96:a7:99:f0:3f:95:1a:98:b4:a7:b8:b7:98:e0:06:e4:67:63: cf:42:fb:d4:57:fb:4d:b0:87:ad:3b:85:9b:55:48:84:d4:b7: ca:0d:1a:bd:86:c8:21:86:1b:61:6e:95:6d:57:cc:49:de:00: 78:c3:47:20:ad:9c:44:c0:51:b6:70:79:d2:c8:04:39:73:72: 1b:40:72:47:62:83:6b:92:1b:7b:53:2e:3c:fe:9e:25:01:52: 1a:13:f0:32:cb:c2:55:d0:ca:29:6c:68:d1:f1:a6:71:d2:62: 1c:b5:87:8c:4d:2b:ed:73:c0:17:4d:e1:7d:f3:b5:e0:f7:03: c3:a3:11:c4:5d:87:65:97:fe:17:79:5a:49:3b:e3:83:c4:5a: f6:8f:82:60:b0:20:1a:a9:b3:4e:53:a6:8e:de:15:ca:79:64: 7b:0a:dc:93:16:76:58:41:10:d3:7f:df:c8:0c:d8:5c:8d:0f: 54:24:0f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNbVufPCvTGScrwv0o3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MjU2NmEyNjcyMzliYTVhNTNlNjQ0N2VjNmFkZDE2MjMz N2YwZDMwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD EyhjODg2MDU4NTE3ODM2YjI0YjZjMjY1YmYyNDAzMThkZmE5NjBhYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ynjYJkZLAFV8jwYa4Iw8UJdt4UR oTw/cs93cE4INK+2fK99D2uIfK9L3qivsfqCLTQId4U4Z0air+VvpjDKaTLnWaJO eQTlw5iPijW9NLEKc85cdl/w+TwykeRONnAT0vEi+MpkOiZoXdXhRklQeCdZQGy0 V7uj4uXRyerNOGqFdHr5uTfW5eNIWB/wNBioJ/GvwSK+2WS2cD3sFsoMWTu1TdEk JCwzbAFeyVcTeQWjscRHFsAQZBP3+l6nA9fX832UlkiY+Y1bShw4lL5CQdo1UKMi 0fSUbbQ6FP1ToMnyLKxNMoblpfKIIvH4J6D7phUkPEL8/cm3s5LlqTxuAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiGBYUXg2sktsJlvyQDGN+pYKx2MB8GA1UdIwQY MBaAFIQlZqJnI5ulpT5kR+xq3RYjN/DTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAt NmIxZWQ2YjA4YzU4LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAtNmIxZWQ2YjA4YzU4 LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntmKo9wa U8uWTZUxNYBNL6N184u6L2f/cSxeuQbutfl7QJW1DhONFcw3JaeMCde0uTFEenkR Q+zboaGOG2OuTGTaFBByGs6WlqeZ8D+VGpi0p7i3mOAG5Gdjz0L71Ff7TbCHrTuF m1VIhNS3yg0avYbIIYYbYW6VbVfMSd4AeMNHIK2cRMBRtnB50sgEOXNyG0ByR2KD a5Ibe1MuPP6eJQFSGhPwMsvCVdDKKWxo0fGmcdJiHLWHjE0r7XPAF03hffO14PcD w6MRxF2HZZf+F3laSTvjg8Ra9o+CYLAgGqmzTlOmjt4VynlkewrckxZ2WEEQ03/f yAzYXI0PVCQPuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:56 2025 by rpki-client