This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json) Hash identifier: xLYwFUk8ngbyZVs2BeOBO/R3Y3IG3uXI3grzBE8tWb8= Subject key identifier: B9:6C:4F:7D:E6:D3:71:41:A8:44:5E:66:0E:85:89:9D:5E:3E:A2:2F Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40 Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440 Certificate serial: 019B4AA8058572795285C4D0324766E2392E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft Manifest number: 099C Signing time: Tue 23 Dec 2025 10:01:23 +0000 Manifest this update: Tue 23 Dec 2025 10:01:23 +0000 Manifest next update: Wed 24 Dec 2025 10:01:23 +0000 Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: x5GDA8dedgQABVTmQxUfJoFg6RBCHAdYA7Chdg20MDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:05:85:72:79:52:85:c4:d0:32:47:66:e2:39:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440 Validity Not Before: Dec 23 10:01:23 2025 GMT Not After : Dec 24 10:01:23 2025 GMT Subject: CN=b96c4f7de6d37141a8445e660e85899d5e3ea22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1e:9a:e1:53:09:d8:ee:00:39:e0:6a:ab:47: ff:be:dc:48:3c:06:cb:ac:6b:cf:4f:03:98:cc:20: 30:8a:5a:d3:a6:7b:ac:03:df:8c:18:2c:3f:00:3d: cf:2c:42:98:be:43:1e:93:16:78:45:9f:f4:b1:8f: ea:55:07:c2:30:8e:09:2a:c5:7d:98:93:c5:11:a0: 60:94:a1:98:80:29:2c:57:3f:11:61:38:6e:b2:9f: df:d9:2e:41:77:a3:85:cb:bd:02:da:e4:fb:9c:30: 00:34:be:0f:1c:74:90:55:9e:09:03:3d:1b:89:bf: 86:cb:fb:16:d4:e7:c0:6b:e6:54:7c:5c:ab:3e:08: 2a:36:16:38:b3:69:5b:35:85:f8:40:14:aa:fc:a0: 0c:17:79:0f:91:27:3e:ec:9f:22:18:0e:23:ea:1a: b7:71:4b:2b:ca:55:66:43:f0:61:a7:09:d5:0a:26: 16:43:24:af:c1:8b:f4:bf:f3:93:37:a6:4e:33:97: 88:a2:25:b5:18:53:73:42:44:35:2b:64:2b:e8:c3: 9f:72:33:fb:dd:59:02:08:b6:47:e3:e7:34:54:98: f0:1f:c8:8d:c6:3e:3a:5a:4f:8b:3b:b5:14:4e:aa: c9:40:d7:14:b4:76:40:49:6f:31:3a:f0:82:df:e1: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6C:4F:7D:E6:D3:71:41:A8:44:5E:66:0E:85:89:9D:5E:3E:A2:2F X509v3 Authority Key Identifier: keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:33:7f:7c:ef:3d:5c:4c:ea:ea:c5:f8:1c:a0:df:5d:fa:06: 38:21:0b:05:6c:d1:16:03:57:9d:3c:be:38:0a:43:d4:18:58: 87:98:83:04:36:7f:51:cb:6a:8d:e3:22:60:6d:81:cc:d8:89: 3a:71:2d:3c:73:2c:c1:b3:08:2a:a2:5a:5a:8e:1a:86:1b:b9: 11:ec:24:6e:76:b5:31:43:18:d5:a3:bc:14:62:7b:d5:63:40: e5:56:a1:a1:8d:12:81:d5:9a:48:fe:46:5f:c1:c3:25:88:e2: 72:b0:7d:a3:b2:f8:94:15:89:79:72:86:c5:06:9d:4d:cb:99: ff:25:3f:f4:b4:40:f2:be:d2:07:f5:3b:70:e9:1a:a1:eb:d6: 06:3b:c6:1b:03:36:54:4d:6a:a8:ba:d7:5a:8c:a4:3a:3d:f5: 05:8f:bd:7d:ed:12:59:8d:cd:e0:65:a8:a5:c5:19:9b:69:c7: bd:0e:6d:f6:c4:71:6a:6f:23:32:0f:93:57:8d:29:9d:25:2e: 09:75:f3:22:29:f2:35:ee:d6:d9:6c:66:c9:5d:33:d4:b6:66: c8:38:1c:98:6c:dc:27:c7:49:7b:5f:4d:2f:bb:55:84:49:46: 80:51:4c:2b:a5:e2:2e:a5:40:9a:98:e6:ac:5d:b6:f6:b9:00: aa:61:ae:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqAWFcnlShcTQMkdm4jkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2U0MmExNDZiOTBiYTdjZDMzMWFkNmExM2VlZjFkYTJm YmE0NDAwHhcNMjUxMjIzMTAwMTIzWhcNMjUxMjI0MTAwMTIzWjAzMTEwLwYDVQQD EyhiOTZjNGY3ZGU2ZDM3MTQxYTg0NDVlNjYwZTg1ODk5ZDVlM2VhMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h6a4VMJ2O4AOeBqq0f/vtxIPAbL rGvPTwOYzCAwilrTpnusA9+MGCw/AD3PLEKYvkMekxZ4RZ/0sY/qVQfCMI4JKsV9 mJPFEaBglKGYgCksVz8RYThusp/f2S5Bd6OFy70C2uT7nDAANL4PHHSQVZ4JAz0b ib+Gy/sW1OfAa+ZUfFyrPggqNhY4s2lbNYX4QBSq/KAMF3kPkSc+7J8iGA4j6hq3 cUsrylVmQ/BhpwnVCiYWQySvwYv0v/OTN6ZOM5eIoiW1GFNzQkQ1K2Qr6MOfcjP7 3VkCCLZH4+c0VJjwH8iNxj46Wk+LO7UUTqrJQNcUtHZASW8xOvCC3+FIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlsT33m03FBqEReZg6FiZ1ePqIvMB8GA1UdIwQY MBaAFON+QqFGuQunzTMa1qE+7x2i+6RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYt MDYzMjlmNmUwNDc1LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zZWNlNzYtMDU3NS00NmIxLTk0YmYtMDYzMjlmNmUwNDc1 LzEvNDM1Q29VYTVDNmZOTXhyV29UN3ZIYUw3cEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTN/fO89 XEzq6sX4HKDfXfoGOCELBWzRFgNXnTy+OApD1BhYh5iDBDZ/UctqjeMiYG2BzNiJ OnEtPHMswbMIKqJaWo4ahhu5Eewkbna1MUMY1aO8FGJ71WNA5VahoY0SgdWaSP5G X8HDJYjicrB9o7L4lBWJeXKGxQadTcuZ/yU/9LRA8r7SB/U7cOkaoevWBjvGGwM2 VE1qqLrXWoykOj31BY+9fe0SWY3N4GWopcUZm2nHvQ5t9sRxam8jMg+TV40pnSUu CXXzIinyNe7W2WxmyV0z1LZmyDgcmGzcJ8dJe19NL7tVhElGgFFMK6XiLqVAmpjm rF229rkAqmGu6w== -----END CERTIFICATE-----Generated at Tue Dec 23 14:52:56 2025 by rpki-client