This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json) Hash identifier: E+1J1R3lovwig/JE7CncFvYOvN2BxJ4yuLtP5g+j+yM= Subject key identifier: EA:AC:37:8B:01:4E:55:6C:EA:79:53:FA:CB:5E:03:EA:72:0A:86:34 Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Certificate serial: 019B31FA579551185753C61CF81FC0D92329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 15:00:48 +0000 Manifest this update: Thu 18 Dec 2025 15:00:48 +0000 Manifest next update: Fri 19 Dec 2025 15:00:48 +0000 Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: UEXCJtfTfRYJWQW9EE8z9Y5QmRG+Teqw5Bbe4hatcFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:57:95:51:18:57:53:c6:1c:f8:1f:c0:d9:23:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc Validity Not Before: Dec 18 15:00:48 2025 GMT Not After : Dec 19 15:00:48 2025 GMT Subject: CN=eaac378b014e556cea7953facb5e03ea720a8634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:4a:23:4d:f3:f2:a8:22:81:6c:38:9f:5c: 2d:73:3b:2a:7f:11:66:37:31:07:69:80:45:60:ce: d4:6f:94:7e:f8:38:56:9b:c1:52:93:9e:f9:07:ea: 91:2c:ed:37:21:3c:09:75:e2:50:4f:e8:29:f8:01: b4:1b:c2:3c:f9:ac:df:d7:94:8f:49:25:44:94:6d: 06:0b:30:a6:e1:ba:f1:e1:81:7f:aa:3a:c7:ea:40: 53:4c:7d:38:4e:0d:4f:11:5b:f4:8b:63:3b:81:e1: f4:1a:91:81:60:98:60:af:1f:68:ea:71:4e:c9:81: 22:1f:65:b5:6f:be:de:f6:c5:1c:b5:b3:30:c8:2f: b0:6a:64:8c:1a:87:64:36:de:c1:9a:5c:c3:3a:8e: 82:63:85:b8:90:de:b3:ac:ef:82:d6:9e:5e:45:11: e4:7b:8f:db:83:4a:64:42:1f:6e:13:4e:c4:04:bd: a0:58:77:95:cd:8d:3e:f6:73:18:12:ad:4a:41:71: 4d:e4:42:33:e4:ae:b9:84:47:18:08:de:85:a3:e8: 8b:34:fb:21:c6:ca:dd:2c:b4:1a:09:a9:48:e9:83: 4f:2f:70:2e:8b:85:c9:d1:7e:62:04:69:df:4d:a5: 5c:ee:93:5a:3f:95:9f:88:1b:c6:dd:58:21:1a:98: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AC:37:8B:01:4E:55:6C:EA:79:53:FA:CB:5E:03:EA:72:0A:86:34 X509v3 Authority Key Identifier: keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fa:e5:f9:a1:96:ad:d6:c2:84:76:55:59:5d:15:de:0b:19: cc:a3:da:bf:e3:e7:2c:e9:1d:f1:1f:e0:38:32:12:c3:e5:38: 0c:1e:86:31:b0:1e:1b:94:83:3b:62:b3:a5:7a:c1:bd:13:1f: e3:f5:b1:87:18:79:b4:91:54:47:3d:12:7a:24:2c:f6:dc:98: ef:1f:e1:b5:fa:67:e8:fa:74:50:ea:94:97:ba:4e:cb:b1:e2: e3:7f:6a:74:b0:88:a1:c8:c9:a1:0c:d7:d9:30:eb:f7:14:39: 92:7f:f1:3c:20:b6:f6:cf:34:cc:c1:41:96:7a:78:6d:77:fb: 5c:f9:69:af:25:79:17:8e:45:38:ea:de:63:92:ec:ea:38:08: f5:e1:04:91:b6:df:4f:33:85:85:90:39:84:7a:01:4d:9a:7a: e8:e7:a8:1a:36:de:ee:d4:8f:38:24:ca:93:8c:ab:b9:4f:df: 73:1d:5d:8f:3f:7e:35:8c:d8:be:26:f0:b8:a2:98:51:c8:93: 8b:a8:7a:8f:aa:98:33:4e:0c:1f:07:d1:69:62:8e:db:d2:ca: 46:7c:c2:8f:85:53:e7:4f:09:ff:e8:26:77:28:95:03:cb:59: 74:9f:be:f5:06:46:76:b4:7d:25:b2:54:e6:30:05:e9:53:3e: 03:91:1c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+leVURhXU8Yc+B/A2SMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NjUyYmFlNDdiMzAzYmJhYjEwM2ZmN2JhNDVhMGE5MDYw YzNkY2MwHhcNMjUxMjE4MTUwMDQ4WhcNMjUxMjE5MTUwMDQ4WjAzMTEwLwYDVQQD EyhlYWFjMzc4YjAxNGU1NTZjZWE3OTUzZmFjYjVlMDNlYTcyMGE4NjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI1KI03z8qgigWw4n1wtczsqfxFm NzEHaYBFYM7Ub5R++DhWm8FSk575B+qRLO03ITwJdeJQT+gp+AG0G8I8+azf15SP SSVElG0GCzCm4brx4YF/qjrH6kBTTH04Tg1PEVv0i2M7geH0GpGBYJhgrx9o6nFO yYEiH2W1b77e9sUctbMwyC+wamSMGodkNt7BmlzDOo6CY4W4kN6zrO+C1p5eRRHk e4/bg0pkQh9uE07EBL2gWHeVzY0+9nMYEq1KQXFN5EIz5K65hEcYCN6Fo+iLNPsh xsrdLLQaCalI6YNPL3Aui4XJ0X5iBGnfTaVc7pNaP5WfiBvG3VghGphnQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqsN4sBTlVs6nlT+steA+pyCoY0MB8GA1UdIwQY MBaAFNdlK65HswO7qxA/97pFoKkGDD3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWIt YWI3NmEwOThhZWJiLzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lZTAxMTMtODE2Mi00ZDBhLTg1ZWItYWI3NmEwOThhZWJi LzEvMTJVcnJrZXpBN3VyRURfM3VrV2dxUVlNUGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/rl+aGW rdbChHZVWV0V3gsZzKPav+PnLOkd8R/gODISw+U4DB6GMbAeG5SDO2KzpXrBvRMf 4/Wxhxh5tJFURz0SeiQs9tyY7x/htfpn6Pp0UOqUl7pOy7Hi439qdLCIocjJoQzX 2TDr9xQ5kn/xPCC29s80zMFBlnp4bXf7XPlpryV5F45FOOreY5Ls6jgI9eEEkbbf TzOFhZA5hHoBTZp66OeoGjbe7tSPOCTKk4yruU/fcx1djz9+NYzYvibwuKKYUciT i6h6j6qYM04MHwfRaWKO29LKRnzCj4VT508J/+gmdyiVA8tZdJ++9QZGdrR9JbJU 5jAF6VM+A5Echw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:09:51 2025 by rpki-client