This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json) Hash identifier: 41UjzNiut+7H/vF4kcSeTh6QHKvO8qZaJQyEH2FX6RY= Subject key identifier: C2:0F:73:CB:00:80:79:97:67:F1:AE:69:3A:75:C1:32:57:B3:16:88 Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2 Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2 Certificate serial: 019B38A2F9A779DB94DB0583829D0FCF7912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 22:02:43 +0000 Manifest this update: Fri 19 Dec 2025 22:02:43 +0000 Manifest next update: Sat 20 Dec 2025 22:02:43 +0000 Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: A9cs5FONuR683XszJDFaeLS6Feg2/sDv9M+Z/X3YTSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:f9:a7:79:db:94:db:05:83:82:9d:0f:cf:79:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2 Validity Not Before: Dec 19 22:02:43 2025 GMT Not After : Dec 20 22:02:43 2025 GMT Subject: CN=c20f73cb0080799767f1ae693a75c13257b31688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:80:66:23:e2:a4:46:ab:06:7c:2e:62:9e: bc:8a:87:19:c4:bb:8a:4e:39:5b:f8:2d:b8:b7:38: 65:52:c4:a9:58:d6:ac:6d:ac:7e:f9:8a:71:7e:83: 27:b8:53:d2:6b:a9:b8:2a:83:63:5e:c0:ec:e4:1d: fa:ba:a9:7b:ad:dc:b8:33:17:40:a7:2e:6d:12:ca: c6:d9:f1:c4:1c:34:98:14:1a:a1:76:e2:6f:f1:66: b9:85:b6:5b:43:b9:ad:44:37:a8:b3:79:bd:0e:10: dc:13:ef:ba:0a:5a:c4:db:4e:74:bd:8b:00:88:94: 39:f5:f9:85:69:4e:fe:28:f6:df:e6:38:88:2c:38: 05:85:57:05:7b:06:de:9d:b7:85:00:7c:50:26:15: 77:39:cb:c7:a1:9f:8a:9c:91:80:d6:eb:a5:9c:ee: 89:7e:7f:c2:14:cb:ab:7c:04:77:7a:77:9c:88:0b: 3a:50:0f:66:30:90:91:a1:51:52:80:94:91:73:ef: b9:34:7c:3b:d9:4a:93:4a:f2:1e:ad:43:8f:03:7b: 5c:9a:b4:e0:0a:6b:97:b5:7b:68:56:75:f3:55:06: ab:c1:8b:12:f1:dd:7a:98:82:fc:09:3a:61:a6:77: 87:7a:df:7f:64:a7:ef:af:35:8c:46:82:45:83:ad: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0F:73:CB:00:80:79:97:67:F1:AE:69:3A:75:C1:32:57:B3:16:88 X509v3 Authority Key Identifier: keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6e:ac:66:b8:1a:4c:2c:8a:4c:fd:a6:89:1f:a0:54:1b:7c: e0:49:50:d2:e7:b6:e1:29:f7:70:a8:61:dc:2d:af:a5:23:0f: 6f:f8:72:66:76:3e:3f:a6:38:c7:be:8c:08:b8:67:32:b5:32: 25:4c:ee:71:25:3c:eb:bc:38:5d:5b:5a:b3:06:81:6a:a6:20: ca:5b:f6:1f:01:55:bd:dd:08:ae:d6:5b:b1:98:a0:d9:b9:5b: a7:77:8f:31:78:11:c2:67:9a:cc:d0:2d:85:ca:c8:e6:6c:67: ac:53:ab:09:a4:c6:20:2b:2c:c3:e5:55:7f:7c:13:6b:9f:3e: 0c:51:f7:74:ef:be:c6:be:f8:46:98:09:84:cd:76:45:7c:aa: 65:8b:a4:42:13:6a:7c:72:a6:58:fe:76:85:de:40:0d:b6:7c: 66:b8:81:28:eb:13:0a:1e:a2:4d:72:1a:14:d8:4c:98:18:55: dc:8d:91:64:62:60:e1:15:ca:e2:e5:a3:dc:9d:20:53:9b:05: a4:8b:56:1b:5e:07:d1:1c:b8:05:1d:ce:ab:8d:18:34:7e:97: 2d:cd:50:8d:ee:d0:c1:20:40:10:17:2a:6b:89:3e:5b:e2:86: 58:45:b0:d0:ac:d3:0a:a0:30:b5:0e:f8:4f:14:2b:7b:6d:8b: 55:c0:08:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ovmneduU2wWDgp0Pz3kSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTcxZDVhNzZkM2JhYjkzNzJhY2NjOTI3M2ViYTdkZjFj NTljZjIwHhcNMjUxMjE5MjIwMjQzWhcNMjUxMjIwMjIwMjQzWjAzMTEwLwYDVQQD EyhjMjBmNzNjYjAwODA3OTk3NjdmMWFlNjkzYTc1YzEzMjU3YjMxNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv+AZiPipEarBnwuYp68iocZxLuK Tjlb+C24tzhlUsSpWNasbax++YpxfoMnuFPSa6m4KoNjXsDs5B36uql7rdy4MxdA py5tEsrG2fHEHDSYFBqhduJv8Wa5hbZbQ7mtRDeos3m9DhDcE++6ClrE2050vYsA iJQ59fmFaU7+KPbf5jiILDgFhVcFewbenbeFAHxQJhV3OcvHoZ+KnJGA1uulnO6J fn/CFMurfAR3eneciAs6UA9mMJCRoVFSgJSRc++5NHw72UqTSvIerUOPA3tcmrTg CmuXtXtoVnXzVQarwYsS8d16mIL8CTphpneHet9/ZKfvrzWMRoJFg62tpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIPc8sAgHmXZ/GuaTp1wTJXsxaIMB8GA1UdIwQY MBaAFHEXHVp207q5NyrMySc+un3xxZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEt ODA2OTk1MjljY2ViLzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEtODA2OTk1MjljY2Vi LzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANG6sZrga TCyKTP2miR+gVBt84ElQ0ue24Sn3cKhh3C2vpSMPb/hyZnY+P6Y4x76MCLhnMrUy JUzucSU867w4XVtaswaBaqYgylv2HwFVvd0IrtZbsZig2blbp3ePMXgRwmeazNAt hcrI5mxnrFOrCaTGICssw+VVf3wTa58+DFH3dO++xr74RpgJhM12RXyqZYukQhNq fHKmWP52hd5ADbZ8ZriBKOsTCh6iTXIaFNhMmBhV3I2RZGJg4RXK4uWj3J0gU5sF pItWG14H0Ry4BR3Oq40YNH6XLc1Qje7QwSBAEBcqa4k+W+KGWEWw0KzTCqAwtQ74 TxQre22LVcAIsQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:14:38 2025 by rpki-client