This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft File: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json) Hash identifier: 8pihgQpj4yFvKQPloecZzi5WZXJVNrqjKXgfQWgmPAM= Subject key identifier: 0A:3D:70:03:72:63:50:D7:2A:18:53:F4:25:54:27:D2:6E:C1:E7:BC Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB Certificate issuer: /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb Certificate serial: 019B30E80E6A389ACAFB13A12B36AE66695C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft Manifest number: 0387 Signing time: Thu 18 Dec 2025 10:01:12 +0000 Manifest this update: Thu 18 Dec 2025 10:01:12 +0000 Manifest next update: Fri 19 Dec 2025 10:01:12 +0000 Files and hashes: 1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: 6+WRKgQcHRk9evNqbcOmUfS57VNQfeEi24TQiEhgxvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:0e:6a:38:9a:ca:fb:13:a1:2b:36:ae:66:69:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb Validity Not Before: Dec 18 10:01:12 2025 GMT Not After : Dec 19 10:01:12 2025 GMT Subject: CN=0a3d7003726350d72a1853f4255427d26ec1e7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:65:89:5d:17:e2:f8:a1:a6:94:36:79:54: b1:0e:bd:ab:da:c0:3a:e3:ee:bc:6a:b1:73:51:4e: 60:10:10:41:23:2f:79:db:ef:d7:62:6d:3e:ac:8f: d7:0b:a9:dd:c3:5b:b1:57:1a:ab:e4:32:e3:1c:32: e4:fc:c1:ac:ab:a7:7c:38:ed:93:9b:83:45:9d:f8: 94:bd:18:11:1a:17:1c:0d:75:98:68:64:05:77:0c: 8a:7e:ef:5f:61:ca:f1:aa:e5:c9:ab:0b:68:ef:6d: d4:e7:c4:4f:dd:84:c2:46:90:10:86:9d:2d:3c:75: 9b:01:8a:90:6d:27:48:de:ba:08:7a:1b:d6:1c:e6: 10:38:8c:03:79:85:a5:f1:79:30:f4:c2:80:a9:b9: 71:f8:be:3a:a7:0d:4d:26:86:62:cc:f2:69:9f:82: a6:5f:ca:65:c4:db:65:82:7a:87:5b:57:46:9c:55: 23:5a:b0:a8:03:f6:a4:30:0e:fe:af:9d:a9:44:21: a1:31:87:0b:49:dd:0a:5b:7e:b1:e9:78:ef:f7:09: 14:02:cd:64:81:d4:09:bc:c3:c6:6c:7d:7a:e2:9e: 72:67:48:7d:dd:9a:d5:5b:4d:45:e0:90:88:5b:15: 8e:c3:84:cd:b9:f4:4f:84:14:64:0c:8a:03:34:00: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3D:70:03:72:63:50:D7:2A:18:53:F4:25:54:27:D2:6E:C1:E7:BC X509v3 Authority Key Identifier: keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:65:9f:30:82:ba:70:d7:6f:6b:cb:04:7f:3a:e0:8b:69: ab:c3:03:a5:69:83:1c:86:40:3b:68:49:c2:a4:d4:55:ea:04: 50:1a:9c:ae:1f:1b:1a:af:1a:4d:79:1f:3a:9a:23:17:ee:e0: ad:8a:0b:ea:27:42:a3:3e:c7:90:48:5d:f2:f0:2a:19:46:5b: de:fc:f6:f7:2d:e2:4a:86:30:cc:38:c5:e0:21:ec:e6:b5:97: 6c:2b:37:07:0f:04:dd:0f:43:51:d7:ba:39:94:f3:7d:7b:41: 03:33:88:eb:4f:ed:11:91:81:99:23:84:a8:57:c7:4b:82:10: 6e:58:b1:3f:68:d1:69:ec:70:5d:db:24:74:eb:e4:f7:5a:d8: 69:e8:91:07:99:40:47:04:c0:a0:93:ac:a3:5e:81:5f:77:5b: 27:80:8d:41:d7:56:a1:44:1a:06:ee:8d:bc:fe:15:c1:5d:0d: 33:80:52:04:e9:95:c9:9d:9c:e6:dd:35:9d:d3:45:63:86:6c: 42:c4:91:39:aa:17:12:47:20:4f:97:0b:de:ed:8c:a5:48:f8: b1:90:e9:02:2e:a3:99:e6:52:d1:17:6c:1c:13:35:20:72:60: de:39:bc:d6:d5:88:6f:c2:11:c3:f3:81:c9:9f:a0:31:bd:86: 8d:41:53:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6A5qOJrK+xOhKzauZmlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNmEzNWNjMzBlYzMxMTY0MjBjMGZmMDRjNTllNDc5M2U5 MTkzZmIwHhcNMjUxMjE4MTAwMTEyWhcNMjUxMjE5MTAwMTEyWjAzMTEwLwYDVQQD EygwYTNkNzAwMzcyNjM1MGQ3MmExODUzZjQyNTU0MjdkMjZlYzFlN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIZliV0X4vihppQ2eVSxDr2r2sA6 4+68arFzUU5gEBBBIy952+/XYm0+rI/XC6ndw1uxVxqr5DLjHDLk/MGsq6d8OO2T m4NFnfiUvRgRGhccDXWYaGQFdwyKfu9fYcrxquXJqwto723U58RP3YTCRpAQhp0t PHWbAYqQbSdI3roIehvWHOYQOIwDeYWl8Xkw9MKAqblx+L46pw1NJoZizPJpn4Km X8plxNtlgnqHW1dGnFUjWrCoA/akMA7+r52pRCGhMYcLSd0KW36x6Xjv9wkUAs1k gdQJvMPGbH164p5yZ0h93ZrVW01F4JCIWxWOw4TNufRPhBRkDIoDNACIFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo9cANyY1DXKhhT9CVUJ9Juwee8MB8GA1UdIwQY MBaAFGtqNcww7DEWQgwP8ExZ5Hk+kZP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJvMXpERHNNUlpDREFfd1RGbmtlVDZSa19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84OTIyNmQtMWZlZS00NTcxLTgxMDYt NTFmYjgyZWZmM2Q2LzEvYTJvMXpERHNNUlpDREFfd1RGbmtlVDZSa19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84OTIyNmQtMWZlZS00NTcxLTgxMDYtNTFmYjgyZWZmM2Q2 LzEvYTJvMXpERHNNUlpDREFfd1RGbmtlVDZSa19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdRlnzCC unDXb2vLBH864Itpq8MDpWmDHIZAO2hJwqTUVeoEUBqcrh8bGq8aTXkfOpojF+7g rYoL6idCoz7HkEhd8vAqGUZb3vz29y3iSoYwzDjF4CHs5rWXbCs3Bw8E3Q9DUde6 OZTzfXtBAzOI60/tEZGBmSOEqFfHS4IQblixP2jRaexwXdskdOvk91rYaeiRB5lA RwTAoJOso16BX3dbJ4CNQddWoUQaBu6NvP4VwV0NM4BSBOmVyZ2c5t01ndNFY4Zs QsSROaoXEkcgT5cL3u2MpUj4sZDpAi6jmeZS0RdsHBM1IHJg3jm81tWIb8IRw/OB yZ+gMb2GjUFT+A== -----END CERTIFICATE-----Generated at Thu Dec 18 19:06:19 2025 by rpki-client