This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json) Hash identifier: OConXr7sRwMYcr6YhExivWY5XBaz4rQ63X9tuu3Tcfc= Subject key identifier: 02:49:91:DE:90:66:02:A6:04:FF:E6:D3:EE:73:B9:B0:99:A4:82:34 Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d Certificate serial: 019AF12E14FFA0A967E3C5E6FCAD1DDB0D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft Manifest number: 1368 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: LlFGenxTIQ7BPxHFoYxvBkb8qswnYVf47Gs2xpvR8X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:14:ff:a0:a9:67:e3:c5:e6:fc:ad:1d:db:0d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=024991de906602a604ffe6d3ee73b9b099a48234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:05:98:47:db:01:9f:23:6e:26:4f:fb:d4: 74:f7:1b:89:d2:3f:4b:6a:cb:6f:1e:7c:7b:c2:73: 5a:05:5d:6a:5e:02:53:6c:5b:80:d2:48:55:53:06: f9:25:2a:20:ff:5f:c7:08:4a:c1:1c:56:09:8f:52: 5a:08:7a:99:4f:46:d3:ab:4b:f6:4b:17:b5:55:96: 90:73:90:88:a7:73:5e:23:06:ea:5d:00:46:c2:da: 67:e9:13:38:93:10:59:15:54:21:25:12:e0:20:6f: cc:16:ff:db:13:5b:58:d1:b1:ad:86:81:5c:ae:d5: e3:ba:56:c2:8f:24:bb:21:01:1e:33:d3:16:12:37: 41:1a:6d:b9:6c:51:4f:c2:b5:d8:f9:59:c4:73:6b: 42:ed:1e:b1:37:2e:37:02:95:ff:ef:a8:bf:6e:eb: 69:29:8e:55:17:51:42:35:7e:3a:76:2b:4a:11:45: 55:8b:c8:6e:34:20:0c:4b:52:70:55:8e:5a:bb:41: 0a:ad:77:18:9d:7a:9d:38:fd:cf:28:26:db:e2:65: 51:e7:bd:27:73:3e:35:04:82:d8:da:2a:2c:98:7f: b2:55:2a:55:47:6b:1b:d3:00:2e:7f:60:f7:cc:4c: 48:3c:65:23:9c:7e:b9:3e:1a:81:b6:ed:92:82:9d: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:49:91:DE:90:66:02:A6:04:FF:E6:D3:EE:73:B9:B0:99:A4:82:34 X509v3 Authority Key Identifier: keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ad:ce:04:91:2a:f3:52:3b:40:6e:f3:86:e4:19:53:d6:5e: c3:93:4d:b2:d6:c2:f2:fe:1c:e6:3c:c4:21:cf:66:93:b4:ae: d7:62:02:e6:05:57:1a:d2:e2:8f:29:d2:e8:e9:c8:c3:12:36: 4e:19:44:a8:52:66:46:26:1f:12:15:de:3a:2a:98:38:0b:7a: eb:7d:7c:50:ea:d1:44:db:5f:20:d0:d7:68:30:7f:3f:b5:29: 5b:2c:a7:70:e2:e6:64:45:ce:b7:8c:cc:2f:e5:45:30:68:62: 7d:86:29:dc:bb:0a:ed:8e:1c:64:72:47:03:f0:ee:93:9c:19: 54:8d:99:9c:1d:7f:ee:29:38:27:79:64:47:cb:a1:9f:20:b1: e8:67:5b:2c:d1:ea:4b:75:65:e5:2a:62:90:de:6a:2b:64:63: cc:66:12:16:90:9f:30:c3:9a:a8:fa:32:8b:29:99:d2:b2:93: be:ac:c1:cb:66:4e:61:69:06:c9:65:b5:84:03:ab:80:f7:97: e2:f6:ba:a0:5d:6b:a6:15:42:af:69:11:c9:d8:c0:15:bb:09: 18:15:bf:a1:dc:a8:82:ff:e1:03:ed:6b:62:27:47:6d:f6:fd: 7c:b6:d0:37:92:a6:db:07:89:0f:89:c5:38:c4:d2:5f:9b:8f: 15:55:16:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhT/oKln48Xm/K0d2w0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWViYjBiYjNiMzhhM2NmNDQwYzgxZmY3YjNlMTY5MzMy YWE2NmQwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD EygwMjQ5OTFkZTkwNjYwMmE2MDRmZmU2ZDNlZTczYjliMDk5YTQ4MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYUFmEfbAZ8jbiZP+9R09xuJ0j9L astvHnx7wnNaBV1qXgJTbFuA0khVUwb5JSog/1/HCErBHFYJj1JaCHqZT0bTq0v2 Sxe1VZaQc5CIp3NeIwbqXQBGwtpn6RM4kxBZFVQhJRLgIG/MFv/bE1tY0bGthoFc rtXjulbCjyS7IQEeM9MWEjdBGm25bFFPwrXY+VnEc2tC7R6xNy43ApX/76i/butp KY5VF1FCNX46ditKEUVVi8huNCAMS1JwVY5au0EKrXcYnXqdOP3PKCbb4mVR570n cz41BILY2iosmH+yVSpVR2sb0wAuf2D3zExIPGUjnH65PhqBtu2Sgp12cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJJkd6QZgKmBP/m0+5zubCZpII0MB8GA1UdIwQY MBaAFKyuuwuzs4o89EDIH/ez4WkzKqZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgt ZDE0YmQzZDc3ODIyLzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgtZDE0YmQzZDc3ODIy LzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmK3OBJEq 81I7QG7zhuQZU9Zew5NNstbC8v4c5jzEIc9mk7Su12IC5gVXGtLijynS6OnIwxI2 ThlEqFJmRiYfEhXeOiqYOAt66318UOrRRNtfINDXaDB/P7UpWyyncOLmZEXOt4zM L+VFMGhifYYp3LsK7Y4cZHJHA/Duk5wZVI2ZnB1/7ik4J3lkR8uhnyCx6GdbLNHq S3Vl5SpikN5qK2RjzGYSFpCfMMOaqPoyiymZ0rKTvqzBy2ZOYWkGyWW1hAOrgPeX 4va6oF1rphVCr2kRydjAFbsJGBW/odyogv/hA+1rYidHbfb9fLbQN5Km2weJD4nF OMTSX5uPFVUWFw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:17 2025 by rpki-client