This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft File: 0IpNevM5v1JVcjk3VdHPszzdta0.mft (raw, json) Hash identifier: gh4VuuC19QID3kLSGmMRbH98eqTHi7UJrOmkE7d0Nbo= Subject key identifier: B8:17:CA:4B:29:0F:5D:CD:1F:F6:48:C3:AD:01:85:94:B9:CF:80:17 Authority key identifier: D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD Certificate issuer: /CN=d08a4d7af339bf525572393755d1cfb33cddb5ad Certificate serial: 019B2C6695462EC79D6F38E68D547CCA58E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 13:01:18 +0000 Manifest this update: Wed 17 Dec 2025 13:01:18 +0000 Manifest next update: Thu 18 Dec 2025 13:01:18 +0000 Files and hashes: 1: 0IpNevM5v1JVcjk3VdHPszzdta0.crl (hash: 3LRopkybTiQbYETYQ+8FEgfnhXHJa4+h1zs3zDA3PYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:95:46:2e:c7:9d:6f:38:e6:8d:54:7c:ca:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08a4d7af339bf525572393755d1cfb33cddb5ad Validity Not Before: Dec 17 13:01:18 2025 GMT Not After : Dec 18 13:01:18 2025 GMT Subject: CN=b817ca4b290f5dcd1ff648c3ad018594b9cf8017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:4f:bf:03:22:9b:c1:9e:2b:58:4a:a6:73: 05:be:4e:87:40:8d:09:e0:13:ba:57:4b:22:0f:53: e1:b3:5a:96:c7:19:66:ec:f3:99:46:21:30:8a:55: a2:88:5f:f9:8d:dd:7d:18:1b:2f:62:4c:9c:34:c4: 98:c3:25:f4:96:46:ab:f9:2d:d2:e3:72:58:f9:5c: 9a:cb:a3:68:99:48:29:34:e6:06:d4:1b:c3:14:8e: 4e:7b:37:10:f2:23:46:59:be:a6:bc:8b:db:6b:ef: 1f:b9:ff:42:f2:5a:24:40:34:d5:3b:e5:ff:bc:13: d1:f0:d9:9f:74:cb:1a:d5:89:d0:05:ee:68:b1:6b: 7f:f9:08:5c:be:33:d8:32:c3:6a:9f:29:9b:60:cb: 2b:0a:27:94:1c:e6:93:ae:ea:dc:7f:62:c6:91:f8: ff:b1:76:29:19:80:02:c0:82:48:ea:93:d1:3c:ea: ed:21:17:35:77:3c:6f:e8:99:f7:62:b8:18:66:9f: 9b:75:09:8b:51:c5:b0:fc:c4:43:a4:0f:95:db:fe: de:dd:ee:88:95:e9:0c:57:b8:1a:36:fe:ba:b6:7e: 7b:41:65:4f:ec:80:ea:e9:b6:83:0b:2a:68:ed:b7: 45:1e:68:38:06:d0:43:6b:ea:d9:44:fe:8b:01:f1: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:CA:4B:29:0F:5D:CD:1F:F6:48:C3:AD:01:85:94:B9:CF:80:17 X509v3 Authority Key Identifier: keyid:D0:8A:4D:7A:F3:39:BF:52:55:72:39:37:55:D1:CF:B3:3C:DD:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IpNevM5v1JVcjk3VdHPszzdta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/15fb8a-9261-462d-a5ac-d5a1ea9edb08/1/0IpNevM5v1JVcjk3VdHPszzdta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:96:0c:9a:01:62:4b:11:bf:e6:04:5c:05:5e:ba:81:8a:20: 52:9b:50:6b:fc:1d:3e:0c:f2:95:d5:05:a8:dd:a0:ea:c6:22: 6e:63:dd:fc:aa:7f:a2:ff:dd:80:ed:79:37:43:f4:f3:6b:69: 4e:ef:ca:b8:4e:0a:d9:9b:94:2b:45:ab:6b:9e:87:69:c3:98: 93:36:27:96:2f:93:c5:72:53:e0:8b:2f:d4:9b:e4:71:c0:76: 47:b9:11:e8:ea:4a:6c:1e:e7:f4:73:dc:73:c6:0e:b6:e8:f0: f9:56:42:14:84:1b:89:6e:4a:79:54:9a:eb:c0:2a:90:4c:7f: 52:26:d6:c7:c3:19:e9:75:ac:3f:ea:36:5e:6c:e3:b9:57:5c: 2a:22:82:1f:51:65:58:9a:62:36:70:50:19:c0:62:a0:40:1b: 38:20:0e:3d:b8:b5:25:f4:fd:ab:43:b5:5d:d2:9c:84:61:d0: 2e:9d:a7:f6:8b:fe:fd:97:81:ae:21:57:d8:d4:d2:92:8a:4c: a1:71:81:5b:91:d5:ce:3b:35:ff:62:cc:00:15:d9:3b:2a:76: df:95:1b:be:c5:9b:89:00:a8:38:c5:95:a5:18:3c:3d:fd:1a: 9b:32:bd:3b:9e:4e:8f:82:99:59:b5:b1:69:06:f0:0e:47:c8: 7e:05:ce:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZpVGLsedbzjmjVR8yljlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGE0ZDdhZjMzOWJmNTI1NTcyMzkzNzU1ZDFjZmIzM2Nk ZGI1YWQwHhcNMjUxMjE3MTMwMTE4WhcNMjUxMjE4MTMwMTE4WjAzMTEwLwYDVQQD EyhiODE3Y2E0YjI5MGY1ZGNkMWZmNjQ4YzNhZDAxODU5NGI5Y2Y4MDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYlPvwMim8GeK1hKpnMFvk6HQI0J 4BO6V0siD1Phs1qWxxlm7POZRiEwilWiiF/5jd19GBsvYkycNMSYwyX0lkar+S3S 43JY+Vyay6NomUgpNOYG1BvDFI5OezcQ8iNGWb6mvIvba+8fuf9C8lokQDTVO+X/ vBPR8NmfdMsa1YnQBe5osWt/+QhcvjPYMsNqnymbYMsrCieUHOaTrurcf2LGkfj/ sXYpGYACwIJI6pPRPOrtIRc1dzxv6Jn3YrgYZp+bdQmLUcWw/MRDpA+V2/7e3e6I lekMV7gaNv66tn57QWVP7IDq6baDCypo7bdFHmg4BtBDa+rZRP6LAfEmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgXykspD13NH/ZIw60BhZS5z4AXMB8GA1UdIwQY MBaAFNCKTXrzOb9SVXI5N1XRz7M83bWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMt ZDVhMWVhOWVkYjA4LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8xNWZiOGEtOTI2MS00NjJkLWE1YWMtZDVhMWVhOWVkYjA4 LzEvMElwTmV2TTV2MUpWY2prM1ZkSFBzenpkdGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5YMmgFi SxG/5gRcBV66gYogUptQa/wdPgzyldUFqN2g6sYibmPd/Kp/ov/dgO15N0P082tp Tu/KuE4K2ZuUK0Wra56HacOYkzYnli+TxXJT4Isv1JvkccB2R7kR6OpKbB7n9HPc c8YOtujw+VZCFIQbiW5KeVSa68AqkEx/UibWx8MZ6XWsP+o2XmzjuVdcKiKCH1Fl WJpiNnBQGcBioEAbOCAOPbi1JfT9q0O1XdKchGHQLp2n9ov+/ZeBriFX2NTSkopM oXGBW5HVzjs1/2LMABXZOyp235UbvsWbiQCoOMWVpRg8Pf0amzK9O55Oj4KZWbWx aQbwDkfIfgXOGg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:14 2025 by rpki-client