This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft File: d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json) Hash identifier: +WaGmhqvjmfL1g6fjv4QAzP7pyOW1tAtUXk1z+JgLmw= Subject key identifier: D3:EA:68:33:06:67:91:9B:D5:8F:EC:7E:7D:76:E5:CA:13:F8:6E:9C Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B Certificate issuer: /CN=77ab2c1621799573099c402ae91ffc57969d6b9b Certificate serial: 019AF164380B209C859F8B2B34344C4A5F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: wkMeNojWHBUDaSc/q9SEoqcMiqE+ulQJ73GqRLpRX/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:38:0b:20:9c:85:9f:8b:2b:34:34:4c:4a:5f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=d3ea68330667919bd58fec7e7d76e5ca13f86e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:2c:97:1a:c6:13:24:47:6d:ed:91:cc:eb: 17:3d:69:32:cb:44:99:21:b0:e7:07:9d:fe:e7:50: 5e:a3:23:18:f8:2f:d2:09:c5:6a:1a:4f:97:6e:c2: 47:eb:78:4d:9c:9b:57:0e:ae:e5:a3:cd:d7:97:6c: 54:a3:5f:d9:c1:35:b7:ad:60:5d:dc:36:75:b0:5c: 10:96:01:f6:e8:9e:27:e4:58:69:96:01:a3:c4:3d: ca:f9:1b:bb:3b:c0:42:53:70:1e:c8:77:f6:3e:5e: 9c:85:24:1e:69:cc:a5:ef:58:a7:d8:e0:14:91:5a: 4b:82:64:72:db:b8:fa:ff:fe:a0:3b:91:4e:a0:e0: d3:d6:af:5e:19:0f:2a:38:cc:6f:e3:87:19:3e:ff: d4:d7:a0:7b:f7:eb:cd:99:bc:d6:57:94:8c:9e:bf: c9:08:2b:5e:3b:40:23:e5:cf:9e:f9:b3:83:1f:5f: 2b:30:8d:f5:ca:c5:7e:c7:90:9f:33:c9:b9:fd:12: 40:ad:df:0d:49:82:e7:9a:51:d4:20:05:f7:f3:53: 19:b5:d4:36:3e:c9:14:e3:7c:27:25:87:72:bd:9d: e4:70:33:79:0f:a1:a2:c7:b3:6b:2d:67:0d:6b:75: 0b:d8:d2:81:c9:ea:7c:aa:6a:9e:9c:70:8d:76:32: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EA:68:33:06:67:91:9B:D5:8F:EC:7E:7D:76:E5:CA:13:F8:6E:9C X509v3 Authority Key Identifier: keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d3:6e:7f:02:12:9d:5b:76:67:c7:12:a8:cc:16:d2:11:d3: 90:db:bb:2f:9e:93:05:2b:40:fa:b8:39:a0:eb:19:fa:03:cc: f6:2c:92:6e:d6:9f:6f:6e:db:02:20:f3:fd:4a:b1:6a:b7:f5: e0:8a:2b:0c:0f:cd:95:51:ac:bf:4e:6c:23:b8:09:4d:95:6b: bb:fa:69:09:07:6e:46:1c:27:a0:9d:36:06:05:3a:00:9b:59: d5:c0:1f:ea:82:35:74:49:a1:eb:b4:c8:65:80:bf:e3:ab:5b: 9b:cd:c0:7e:17:14:82:d6:4f:b7:92:da:c4:e0:ed:08:fb:67: 44:f2:51:6e:e0:e4:6a:a5:12:fc:52:d7:ba:28:e7:e9:ae:6b: a6:42:b2:a8:9f:a3:19:cd:7f:57:46:f8:b4:79:2a:95:07:06: 24:88:1c:72:a3:cb:d7:f3:e6:e6:7a:3c:e9:3e:c5:ba:69:6e: f9:96:a0:97:73:46:ea:4a:24:9b:d1:49:de:58:fe:69:2d:dc: 3b:8b:69:7f:aa:d2:5a:2e:83:29:1b:da:b7:27:52:ff:07:1e: a8:55:e5:b6:d0:2e:b5:4b:fc:72:cd:f0:c5:f3:59:f0:2a:b4: f6:82:47:b1:e5:a1:6d:20:fe:a7:0a:5e:c2:c6:2f:3e:b9:de: ee:14:f6:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDgLIJyFn4srNDRMSl8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YWIyYzE2MjE3OTk1NzMwOTljNDAyYWU5MWZmYzU3OTY5 ZDZiOWIwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD EyhkM2VhNjgzMzA2Njc5MTliZDU4ZmVjN2U3ZDc2ZTVjYTEzZjg2ZTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8gslxrGEyRHbe2RzOsXPWkyy0SZ IbDnB53+51BeoyMY+C/SCcVqGk+XbsJH63hNnJtXDq7lo83Xl2xUo1/ZwTW3rWBd 3DZ1sFwQlgH26J4n5FhplgGjxD3K+Ru7O8BCU3AeyHf2Pl6chSQeacyl71in2OAU kVpLgmRy27j6//6gO5FOoODT1q9eGQ8qOMxv44cZPv/U16B79+vNmbzWV5SMnr/J CCteO0Aj5c+e+bODH18rMI31ysV+x5CfM8m5/RJArd8NSYLnmlHUIAX381MZtdQ2 PskU43wnJYdyvZ3kcDN5D6Gix7NrLWcNa3UL2NKByep8qmqenHCNdjIknQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPqaDMGZ5Gb1Y/sfn125coT+G6cMB8GA1UdIwQY MBaAFHerLBYheZVzCZxAKukf/FeWnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zMDY1NWYtNTljMy00ZGM1LWFiMmMt Mzk3YmM0MDMxNTk0LzEvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zMDY1NWYtNTljMy00ZGM1LWFiMmMtMzk3YmM0MDMxNTk0 LzEvZDZzc0ZpRjVsWE1KbkVBcTZSXzhWNWFkYTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9NufwIS nVt2Z8cSqMwW0hHTkNu7L56TBStA+rg5oOsZ+gPM9iySbtafb27bAiDz/Uqxarf1 4IorDA/NlVGsv05sI7gJTZVru/ppCQduRhwnoJ02BgU6AJtZ1cAf6oI1dEmh67TI ZYC/46tbm83AfhcUgtZPt5LaxODtCPtnRPJRbuDkaqUS/FLXuijn6a5rpkKyqJ+j Gc1/V0b4tHkqlQcGJIgccqPL1/Pm5no86T7Fumlu+Zagl3NG6kokm9FJ3lj+aS3c O4tpf6rSWi6DKRvatydS/wceqFXlttAutUv8cs3wxfNZ8Cq09oJHseWhbSD+pwpe wsYvPrne7hT2QA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:07 2025 by rpki-client