This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json) Hash identifier: z12Qw8B4FJEI+ZwRM8SLQUv7rTyVVW/fN8NFtiB6FA0= Subject key identifier: 36:82:A2:52:3D:ED:24:4D:D7:B3:6C:DF:7E:D8:5C:C7:25:4B:45:CB Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d Certificate serial: 019B2D0BF4B08A88621663CA4F7DC4FE98C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft Manifest number: 1387 Signing time: Wed 17 Dec 2025 16:01:56 +0000 Manifest this update: Wed 17 Dec 2025 16:01:56 +0000 Manifest next update: Thu 18 Dec 2025 16:01:56 +0000 Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: bDywIsTqgsb+nh896KzAbVS/9WLYgw03nay4hktedTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:f4:b0:8a:88:62:16:63:ca:4f:7d:c4:fe:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d Validity Not Before: Dec 17 16:01:56 2025 GMT Not After : Dec 18 16:01:56 2025 GMT Subject: CN=3682a2523ded244dd7b36cdf7ed85cc7254b45cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:06:22:33:34:2b:e3:6c:0c:8b:f5:c2:c6:45: a8:0e:55:9b:64:54:4e:e3:e7:44:69:c5:8c:63:48: fc:39:4e:97:1f:0a:1c:40:23:1b:06:bc:fc:e4:b0: 5f:ad:3e:99:fd:c0:cc:ea:f0:8f:cd:8f:1a:99:db: d3:d5:3e:6e:9e:dd:8a:1e:98:27:27:8b:1f:e6:65: 3f:84:6c:6a:06:90:59:84:85:66:e8:05:bc:00:81: 52:94:1c:2a:fc:b0:cd:53:7f:42:92:fe:27:db:dc: 03:49:8b:7a:f1:a9:0f:11:90:3f:24:51:fc:a0:72: e2:81:27:f9:80:95:23:88:55:49:3e:79:11:68:8f: 65:60:d3:d4:85:99:34:e8:95:60:fc:d4:1a:65:01: 68:53:67:c2:60:c0:e1:55:b3:6b:e7:71:f1:68:86: b2:af:ae:61:06:0f:73:25:47:e2:ee:ce:5f:a3:87: 1a:04:6e:cd:37:e5:46:a9:90:ac:56:88:1b:ed:68: da:eb:8e:d7:8e:18:5f:95:0a:63:6c:68:e2:a2:f7: 03:91:22:d7:13:4e:35:8b:25:88:59:c3:00:53:57: 8c:d6:cd:1e:97:73:e3:0b:0c:d1:f5:1d:ec:46:28: d1:e6:dd:1e:a7:b4:14:c1:64:4d:8b:7c:a8:f9:b5: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:82:A2:52:3D:ED:24:4D:D7:B3:6C:DF:7E:D8:5C:C7:25:4B:45:CB X509v3 Authority Key Identifier: keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:20:11:47:08:72:10:ba:a8:d0:0b:9e:6c:3c:82:ad:a1:30: 91:ad:59:f1:1f:24:68:5b:3e:04:a5:5e:05:e7:08:16:30:09: 04:3a:01:45:16:b6:5e:4d:67:18:2d:ad:81:9b:00:c9:a1:0c: 0f:67:80:f6:cc:f8:5a:27:8c:c9:e3:da:39:31:9d:f6:2a:86: 5e:ff:94:b7:b4:c9:1f:47:8c:5a:cc:fa:cb:e1:7a:90:8e:3c: 2b:a2:da:20:7a:99:7c:5e:73:de:a0:2f:5f:95:b7:82:f9:56: 96:dc:f6:51:50:a2:79:84:23:cd:ab:49:fe:a0:01:de:68:bc: 01:63:96:f8:87:91:e7:55:5a:64:30:ef:c0:88:a2:8f:28:54: dd:60:23:c0:0c:27:20:48:a2:3b:1c:09:3a:8a:b1:40:ab:67: c3:01:c9:99:6e:df:e4:66:45:af:0a:fb:39:31:ef:68:08:00: b5:e8:ae:39:3c:31:e5:42:2c:f7:87:9f:2f:06:7a:78:fd:9e: ec:33:43:0b:22:ef:7e:fd:6d:d5:d0:c9:f2:5b:4b:c0:c1:60: 42:48:c0:fc:82:a6:d0:af:96:22:85:c9:bf:36:23:c0:98:88: 2a:1b:ce:6c:9f:f0:c6:97:d7:40:73:ec:3c:98:d0:16:2a:5d: 38:0c:6b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC/SwiohiFmPKT33E/pjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWViYjBiYjNiMzhhM2NmNDQwYzgxZmY3YjNlMTY5MzMy YWE2NmQwHhcNMjUxMjE3MTYwMTU2WhcNMjUxMjE4MTYwMTU2WjAzMTEwLwYDVQQD EygzNjgyYTI1MjNkZWQyNDRkZDdiMzZjZGY3ZWQ4NWNjNzI1NGI0NWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQYiMzQr42wMi/XCxkWoDlWbZFRO 4+dEacWMY0j8OU6XHwocQCMbBrz85LBfrT6Z/cDM6vCPzY8amdvT1T5unt2KHpgn J4sf5mU/hGxqBpBZhIVm6AW8AIFSlBwq/LDNU39Ckv4n29wDSYt68akPEZA/JFH8 oHLigSf5gJUjiFVJPnkRaI9lYNPUhZk06JVg/NQaZQFoU2fCYMDhVbNr53HxaIay r65hBg9zJUfi7s5fo4caBG7NN+VGqZCsVogb7Wja647XjhhflQpjbGjiovcDkSLX E041iyWIWcMAU1eM1s0el3PjCwzR9R3sRijR5t0ep7QUwWRNi3yo+bUI5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaColI97SRN17Ns337YXMclS0XLMB8GA1UdIwQY MBaAFKyuuwuzs4o89EDIH/ez4WkzKqZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgt ZDE0YmQzZDc3ODIyLzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MDdlMzUtODhmNy00MzViLTg0YTgtZDE0YmQzZDc3ODIy LzEvcks2N0M3T3ppanowUU1nZjk3UGhhVE1xcG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyARRwhy ELqo0AuebDyCraEwka1Z8R8kaFs+BKVeBecIFjAJBDoBRRa2Xk1nGC2tgZsAyaEM D2eA9sz4WieMyePaOTGd9iqGXv+Ut7TJH0eMWsz6y+F6kI48K6LaIHqZfF5z3qAv X5W3gvlWltz2UVCieYQjzatJ/qAB3mi8AWOW+IeR51VaZDDvwIiijyhU3WAjwAwn IEiiOxwJOoqxQKtnwwHJmW7f5GZFrwr7OTHvaAgAteiuOTwx5UIs94efLwZ6eP2e 7DNDCyLvfv1t1dDJ8ltLwMFgQkjA/IKm0K+WIoXJvzYjwJiIKhvObJ/wxpfXQHPs PJjQFipdOAxrNA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:53 2025 by rpki-client