This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft File: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json) Hash identifier: 81NfbdvEHMP4qM3DaAxRjAMt5QY1EQzBWDEzkwa3BD0= Subject key identifier: AF:7D:1A:4C:75:50:9A:60:69:2E:4A:E3:AA:55:A6:3B:3E:2C:38:F2 Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58 Certificate issuer: /CN=d0f793969a6c8483cc3667934450f6678fd19758 Certificate serial: 019AF3F7C0979B8DE9DE37AF5224FE3D6331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft Manifest number: 078E Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: jJ7/hrb7bypwfEd39Z+4EM+pHvipSztje6TUKHXuK9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c0:97:9b:8d:e9:de:37:af:52:24:fe:3d:63:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758 Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=af7d1a4c75509a60692e4ae3aa55a63b3e2c38f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:8f:65:b2:e4:ec:c8:7b:31:b7:7f:1e:fa: 60:c8:44:bd:f0:d9:c8:50:cc:21:65:91:66:1c:3b: 8d:38:88:be:4c:77:19:07:78:31:96:6f:2d:e2:19: d7:f9:ac:34:ed:bd:d8:ac:5c:24:86:17:3c:c8:55: 1c:37:3b:34:85:71:3b:1b:2c:47:5b:ab:3f:d4:5a: ae:aa:4a:87:9b:1c:46:f6:d5:d7:7e:54:18:75:06: 70:4d:67:7b:53:00:48:14:9d:09:6e:03:45:cb:36: 6f:63:83:67:5e:2d:61:f0:5e:12:9b:f2:2f:20:cb: ef:94:8c:5b:fd:df:7b:57:8e:60:5d:74:a3:7e:aa: 03:8f:35:dc:4d:e5:23:61:7e:2d:96:6d:bb:70:c1: d9:b5:3b:71:42:04:ee:45:6a:c3:3f:31:c8:e4:fb: 46:4e:4f:74:de:a2:e8:e5:20:fd:2b:d0:74:05:53: 05:c2:47:96:ce:8f:39:17:02:82:01:c4:0d:df:00: a0:1a:d1:66:69:f6:a5:f6:6e:f1:23:74:ba:2c:35: 73:d2:7f:7b:77:70:8a:15:49:b9:dc:41:4a:c2:2a: 04:10:c9:ae:0f:45:f8:be:7c:1f:8c:64:29:b1:33: 6e:91:62:34:8b:d7:44:57:f0:f3:18:9e:be:50:31: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7D:1A:4C:75:50:9A:60:69:2E:4A:E3:AA:55:A6:3B:3E:2C:38:F2 X509v3 Authority Key Identifier: keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4f:50:8c:30:4d:4f:06:38:62:e5:f9:b1:13:0f:00:ab:e6: 48:3e:ff:40:3d:eb:19:da:16:61:74:0b:c4:68:93:e3:64:5d: 03:02:55:71:70:6d:7c:50:b2:54:1a:38:f5:f6:0f:45:c3:9a: c1:e2:17:f2:33:6b:67:cb:33:06:ca:71:b7:1f:d0:2a:70:40: 31:68:c5:8d:6f:f2:60:2e:7f:48:4c:fc:e9:35:1c:45:f7:5b: 2a:b8:b3:65:cf:01:e4:71:47:24:12:fd:4f:7d:ef:d8:f5:13: a0:01:39:ac:4a:cb:11:5b:50:2e:06:29:49:88:9a:ee:ef:77: 88:03:dd:ee:f4:86:b9:aa:7a:6c:cc:c7:9e:aa:3b:e4:4e:24: 2c:dc:97:3d:04:8e:47:3e:16:c3:21:a7:93:79:62:e2:04:1a: 96:f3:cd:c6:93:41:38:85:eb:8d:b3:fb:1d:23:6d:87:ac:c2: 05:49:7f:24:b3:04:e2:1e:e8:3c:a1:8e:5c:2d:52:36:64:68: 14:2f:8d:fe:e4:79:e1:19:0c:76:f8:c4:c4:d8:04:25:6d:c9: 2a:60:05:c9:93:25:1f:19:1a:bb:83:d3:d1:63:d5:c1:11:eb: 7b:43:d6:02:b4:c8:8f:f3:db:8a:ab:64:d3:8c:63:c1:19:f0: 10:34:77:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98CXm43p3jevUiT+PWMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjc5Mzk2OWE2Yzg0ODNjYzM2Njc5MzQ0NTBmNjY3OGZk MTk3NTgwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD EyhhZjdkMWE0Yzc1NTA5YTYwNjkyZTRhZTNhYTU1YTYzYjNlMmMzOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgqPZbLk7Mh7Mbd/HvpgyES98NnI UMwhZZFmHDuNOIi+THcZB3gxlm8t4hnX+aw07b3YrFwkhhc8yFUcNzs0hXE7GyxH W6s/1FquqkqHmxxG9tXXflQYdQZwTWd7UwBIFJ0JbgNFyzZvY4NnXi1h8F4Sm/Iv IMvvlIxb/d97V45gXXSjfqoDjzXcTeUjYX4tlm27cMHZtTtxQgTuRWrDPzHI5PtG Tk903qLo5SD9K9B0BVMFwkeWzo85FwKCAcQN3wCgGtFmafal9m7xI3S6LDVz0n97 d3CKFUm53EFKwioEEMmuD0X4vnwfjGQpsTNukWI0i9dEV/DzGJ6+UDGscQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK99Gkx1UJpgaS5K46pVpjs+LDjyMB8GA1UdIwQY MBaAFND3k5aabISDzDZnk0RQ9meP0ZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2Et MGE3NTc0OWY3MTQ4LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hNmY2MDgtMzIwMy00N2Y3LWJiY2EtMGE3NTc0OWY3MTQ4 LzEvMFBlVGxwcHNoSVBNTm1lVFJGRDJaNF9SbDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtk9QjDBN TwY4YuX5sRMPAKvmSD7/QD3rGdoWYXQLxGiT42RdAwJVcXBtfFCyVBo49fYPRcOa weIX8jNrZ8szBspxtx/QKnBAMWjFjW/yYC5/SEz86TUcRfdbKrizZc8B5HFHJBL9 T33v2PUToAE5rErLEVtQLgYpSYia7u93iAPd7vSGuap6bMzHnqo75E4kLNyXPQSO Rz4WwyGnk3li4gQalvPNxpNBOIXrjbP7HSNth6zCBUl/JLME4h7oPKGOXC1SNmRo FC+N/uR54RkMdvjExNgEJW3JKmAFyZMlHxkau4PT0WPVwRHre0PWArTIj/Pbiqtk 04xjwRnwEDR3xg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:53:27 2025 by rpki-client