This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft File: E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json) Hash identifier: VHpvt8KFvmnVdSL6ATFxoILD6PRAdVLe+Pqe5erSCTU= Subject key identifier: 4F:10:CB:0B:77:A0:1C:B2:0C:3D:D3:FA:42:3B:87:F2:4A:0D:99:ED Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27 Certificate issuer: /CN=13dde69abccc65d08688ca83542633a219293227 Certificate serial: 019AF27668CA0D238A3F85A21AB22D02EE5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft Manifest number: 0D8E Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: RmCjuwYktzSAvRNX5ipi19m5DzrbCkc8itDMLQkE3MU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:68:ca:0d:23:8a:3f:85:a2:1a:b2:2d:02:ee:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dde69abccc65d08688ca83542633a219293227 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=4f10cb0b77a01cb20c3dd3fa423b87f24a0d99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:e3:40:25:ac:4a:97:f2:32:72:12:49:84: 2c:10:bf:86:48:4f:ff:35:fd:18:02:b6:bc:35:71: 95:b7:1d:ae:a9:b0:61:bf:a2:a9:1d:6b:aa:b2:e4: 28:65:41:ad:1f:4c:e6:23:06:4d:82:e4:61:17:65: 63:0c:cd:97:aa:1d:53:c6:68:87:27:e3:66:fd:b0: a9:0a:86:b2:cd:c6:dd:9c:60:10:ca:ca:03:40:41: 3f:e4:92:f9:56:a7:48:00:98:59:5c:26:3b:6d:1e: 7f:54:ec:37:69:d4:8a:cc:8a:54:fa:71:07:34:7d: 8b:71:9a:55:8a:ee:b5:36:ca:2a:23:8a:d5:d5:aa: cc:11:9d:6b:28:74:4d:40:bc:be:c7:8a:b3:a2:3d: 22:5e:1d:79:4e:ee:c4:ff:26:7b:d1:08:4b:80:45: 5d:d7:1c:f0:65:19:64:44:5a:4e:0a:d2:7b:f6:b6: 5e:10:a7:e0:56:bc:d6:ee:13:68:20:b2:bc:43:8c: 68:6a:03:3d:6f:73:36:b2:23:75:31:80:63:48:4c: e7:70:8e:78:fa:0a:27:ee:17:00:f9:8e:06:2e:68: 17:4a:42:e7:a9:bb:45:cc:78:fc:4c:bf:8d:3b:2a: 4c:7a:73:e6:f9:e6:57:6f:de:f6:4c:70:06:2e:bf: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:10:CB:0B:77:A0:1C:B2:0C:3D:D3:FA:42:3B:87:F2:4A:0D:99:ED X509v3 Authority Key Identifier: keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:be:28:f2:e9:29:27:05:a6:7e:c1:81:f5:9f:24:bd:95:67: 8a:2c:6e:89:c0:0d:03:0b:11:d9:88:44:99:08:22:4d:bc:8b: eb:85:5c:31:d0:f5:95:de:d9:92:26:9b:81:74:98:81:54:33: ef:97:08:f7:5c:dd:50:05:97:b5:41:14:91:8d:53:b4:4e:26: 57:7a:49:ff:0b:ca:da:05:bd:59:6b:8e:76:cc:21:6f:3e:95: de:0b:85:1f:fc:fb:05:fd:a7:00:07:12:95:08:eb:a2:c8:16: 5e:1e:12:34:69:a9:cd:43:33:4e:75:c7:5b:19:97:38:b7:6b: cc:f7:03:e3:91:69:ac:69:13:d3:8d:16:69:9d:d0:37:2e:57: 24:60:55:4e:38:9c:42:39:04:e1:10:7c:69:4a:fb:e9:05:06: 02:59:f9:5b:59:f1:f1:b5:cc:16:8a:c0:89:89:10:cc:c0:f6: 0d:24:94:0c:16:c1:47:06:7b:3b:b6:cb:9e:a7:10:90:8e:50: b6:ce:56:a4:3d:9d:9a:3c:b9:eb:bd:41:d9:f0:74:8f:24:bd: 4c:02:9f:db:fd:63:6b:b0:8a:a9:66:c2:fb:da:55:72:1e:4a: 6b:0e:74:a7:34:fe:93:c3:9a:bc:2b:96:62:a6:0f:4b:b4:c7: 02:dc:ed:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmjKDSOKP4WiGrItAu5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGRlNjlhYmNjYzY1ZDA4Njg4Y2E4MzU0MjYzM2EyMTky OTMyMjcwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD Eyg0ZjEwY2IwYjc3YTAxY2IyMGMzZGQzZmE0MjNiODdmMjRhMGQ5OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjHjQCWsSpfyMnISSYQsEL+GSE// Nf0YAra8NXGVtx2uqbBhv6KpHWuqsuQoZUGtH0zmIwZNguRhF2VjDM2Xqh1TxmiH J+Nm/bCpCoayzcbdnGAQysoDQEE/5JL5VqdIAJhZXCY7bR5/VOw3adSKzIpU+nEH NH2LcZpViu61NsoqI4rV1arMEZ1rKHRNQLy+x4qzoj0iXh15Tu7E/yZ70QhLgEVd 1xzwZRlkRFpOCtJ79rZeEKfgVrzW7hNoILK8Q4xoagM9b3M2siN1MYBjSEzncI54 +gon7hcA+Y4GLmgXSkLnqbtFzHj8TL+NOypMenPm+eZXb972THAGLr90/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8Qywt3oByyDD3T+kI7h/JKDZntMB8GA1UdIwQY MBaAFBPd5pq8zGXQhojKg1QmM6IZKTInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEt ODQzN2NjOTIyODJhLzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jNjM2Y2MtNDA1YS00ZjFlLTkzNmEtODQzN2NjOTIyODJh LzEvRTkzbW1yek1aZENHaU1xRFZDWXpvaGtwTWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj74o8ukp JwWmfsGB9Z8kvZVniixuicANAwsR2YhEmQgiTbyL64VcMdD1ld7ZkiabgXSYgVQz 75cI91zdUAWXtUEUkY1TtE4mV3pJ/wvK2gW9WWuOdswhbz6V3guFH/z7Bf2nAAcS lQjrosgWXh4SNGmpzUMzTnXHWxmXOLdrzPcD45FprGkT040WaZ3QNy5XJGBVTjic QjkE4RB8aUr76QUGAln5W1nx8bXMForAiYkQzMD2DSSUDBbBRwZ7O7bLnqcQkI5Q ts5WpD2dmjy5671B2fB0jyS9TAKf2/1ja7CKqWbC+9pVch5Kaw50pzT+k8OavCuW YqYPS7THAtztOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:15 2025 by rpki-client