This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json) Hash identifier: uD3+AnMzcpXkTv1VUG2Y10KpalISbYpy8pj388Cpx+0= Subject key identifier: 52:CF:6B:D1:68:6A:A0:CB:E4:BC:09:4B:9A:87:FD:96:78:AA:64:C5 Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71 Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71 Certificate serial: 019AF3C0B9F4BFAB15683604EB2ADFFE6733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft Manifest number: 120A Signing time: Sat 06 Dec 2025 13:01:25 +0000 Manifest this update: Sat 06 Dec 2025 13:01:25 +0000 Manifest next update: Sun 07 Dec 2025 13:01:25 +0000 Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: ASPDkZtZJxtg7lbfzFAzokS+sAqA5QBq2FXH3kgFJxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b9:f4:bf:ab:15:68:36:04:eb:2a:df:fe:67:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71 Validity Not Before: Dec 6 13:01:25 2025 GMT Not After : Dec 7 13:01:25 2025 GMT Subject: CN=52cf6bd1686aa0cbe4bc094b9a87fd9678aa64c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:e0:6d:57:48:d4:d9:a2:69:2b:70:e2:00: cd:67:de:99:94:a7:4b:c4:d1:b0:35:9a:6c:10:b6: 50:78:04:d4:6d:1a:d0:c6:70:d7:e3:81:94:bb:1c: 79:c1:d5:85:b2:5d:17:68:0b:7e:67:dc:5e:c2:d4: 68:72:eb:de:f5:8f:b3:2d:0a:e2:6c:7b:73:2a:bf: fa:5e:b8:2e:e1:7d:30:2d:be:32:ae:9d:41:f1:4d: 55:b3:3e:d4:f6:4e:38:63:8c:89:22:ae:a5:a5:08: 0c:0e:59:0f:83:ec:51:6c:fe:ec:2f:a0:af:d7:4b: 42:87:4d:25:c0:23:c2:95:4c:f4:54:f3:c7:3c:d2: 4e:06:be:92:b5:d2:0b:71:5c:a6:dd:e2:88:f3:ce: 8b:91:fb:e3:4c:94:37:50:95:a1:3e:32:34:35:93: 8c:65:67:20:4e:a4:e6:e1:66:fe:f0:bb:49:d0:36: af:bc:26:cc:6e:f1:13:ca:f0:51:7c:ec:1e:28:b5: b5:90:1f:b0:c3:6b:d6:55:9e:08:cf:5b:86:8e:db: da:ed:29:83:c2:7e:8f:db:1f:dd:55:bb:25:45:88: ba:af:b2:58:0f:4d:85:86:13:e3:20:0f:21:e2:45: 5a:b9:35:dc:cc:06:a5:48:de:7f:7e:25:28:73:d5: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CF:6B:D1:68:6A:A0:CB:E4:BC:09:4B:9A:87:FD:96:78:AA:64:C5 X509v3 Authority Key Identifier: keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ea:36:ce:0d:a9:39:3e:36:74:6c:48:31:38:b4:24:dc:6d: 34:31:c0:c6:1e:6a:98:17:99:a6:e8:7b:fe:9e:44:6b:4e:1f: 4b:b8:94:ee:33:23:e4:70:6f:9d:b9:34:5a:43:08:1e:5b:02: 18:0e:3e:a4:85:bb:6a:50:b0:f5:1b:ef:b8:84:2b:a8:c2:a1: f9:e1:0a:45:8c:15:67:a7:d6:72:39:df:3f:6e:ab:4a:60:f0: e9:fb:a9:4a:b7:c1:8d:1b:74:c8:86:8c:7f:72:8c:2b:51:18: 75:90:cb:4d:7f:f1:a1:20:5c:8b:ce:71:12:b9:33:58:f9:3d: 58:c9:36:10:17:c8:0b:6f:62:15:79:79:4d:16:3d:95:08:89: 34:66:ed:fe:96:45:2b:23:90:9a:55:08:22:f2:4f:4d:4b:5b: 48:59:ac:b1:69:14:a3:b6:6b:36:8d:92:85:19:f2:02:23:38: 58:7a:a7:18:66:93:15:ca:80:c2:8e:80:fc:ed:22:95:4d:90: d0:9c:e0:fb:65:de:59:d6:ec:2f:a6:e0:1b:a5:c7:ff:d0:df: 5c:9f:6e:c1:08:bd:a6:8a:75:c6:90:59:bb:04:4e:76:5f:b6: 52:2e:0c:8c:08:6d:c7:f8:bc:ac:c7:b7:5b:ad:0d:d9:27:e9: ae:b2:c1:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLn0v6sVaDYE6yrf/mczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMWZkMzI4ZWI3ZTdhNWFjZGU1MTk4ZjBkN2U5YmUyNjg0 NzZkNzEwHhcNMjUxMjA2MTMwMTI1WhcNMjUxMjA3MTMwMTI1WjAzMTEwLwYDVQQD Eyg1MmNmNmJkMTY4NmFhMGNiZTRiYzA5NGI5YTg3ZmQ5Njc4YWE2NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00XgbVdI1NmiaStw4gDNZ96ZlKdL xNGwNZpsELZQeATUbRrQxnDX44GUuxx5wdWFsl0XaAt+Z9xewtRocuve9Y+zLQri bHtzKr/6Xrgu4X0wLb4yrp1B8U1Vsz7U9k44Y4yJIq6lpQgMDlkPg+xRbP7sL6Cv 10tCh00lwCPClUz0VPPHPNJOBr6StdILcVym3eKI886LkfvjTJQ3UJWhPjI0NZOM ZWcgTqTm4Wb+8LtJ0DavvCbMbvETyvBRfOweKLW1kB+ww2vWVZ4Iz1uGjtva7SmD wn6P2x/dVbslRYi6r7JYD02FhhPjIA8h4kVauTXczAalSN5/fiUoc9VjswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLPa9FoaqDL5LwJS5qH/ZZ4qmTFMB8GA1UdIwQY MBaAFJ0f0yjrfnpazeUZjw1+m+JoR21xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYzNkMWItZmMyMy00MWZiLWFmOWMt YTE2M2Y1NzNiNmQ5LzEvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wYzNkMWItZmMyMy00MWZiLWFmOWMtYTE2M2Y1NzNiNmQ5 LzEvblJfVEtPdC1lbHJONVJtUERYNmI0bWhIYlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROo2zg2p OT42dGxIMTi0JNxtNDHAxh5qmBeZpuh7/p5Ea04fS7iU7jMj5HBvnbk0WkMIHlsC GA4+pIW7alCw9RvvuIQrqMKh+eEKRYwVZ6fWcjnfP26rSmDw6fupSrfBjRt0yIaM f3KMK1EYdZDLTX/xoSBci85xErkzWPk9WMk2EBfIC29iFXl5TRY9lQiJNGbt/pZF KyOQmlUIIvJPTUtbSFmssWkUo7ZrNo2ShRnyAiM4WHqnGGaTFcqAwo6A/O0ilU2Q 0Jzg+2XeWdbsL6bgG6XH/9DfXJ9uwQi9pop1xpBZuwROdl+2Ui4MjAhtx/i8rMe3 W60N2SfprrLBnA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:49 2025 by rpki-client