This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft File: 339euIF_Lal_ZlUHaDtcRadNDKA.mft (raw, json) Hash identifier: 1/SPjNenRT2W+jo5TG4V3dB3k79gZFS4lwfEMaXVfp0= Subject key identifier: 58:10:D8:FD:A6:B1:92:98:50:A7:1A:44:E3:91:9F:CD:50:2C:85:17 Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Certificate serial: 019B1E73CB7E96EA0557E581A138F0AED1BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft Manifest number: 1475 Signing time: Sun 14 Dec 2025 20:01:03 +0000 Manifest this update: Sun 14 Dec 2025 20:01:03 +0000 Manifest next update: Mon 15 Dec 2025 20:01:03 +0000 Files and hashes: 1: 339euIF_Lal_ZlUHaDtcRadNDKA.crl (hash: RKDx+w70tkGv6XzjkD8EfCx+Mcn3wegzJxACiX+CF4E=) 2: h8Gl2OsdLuWPWtrNcU8n0JlSjzU.roa (hash: evSWiyr6r/rxtz4+EcFa39VIdmSuUvtGUXcbAAeqm0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:cb:7e:96:ea:05:57:e5:81:a1:38:f0:ae:d1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Validity Not Before: Dec 14 20:01:03 2025 GMT Not After : Dec 15 20:01:03 2025 GMT Subject: CN=5810d8fda6b1929850a71a44e3919fcd502c8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:cf:f4:59:36:3f:e6:03:77:19:4c:2a:2f: bf:9e:ba:25:e4:fc:9f:68:e8:29:6a:2b:c6:b8:e3: 22:46:3c:4d:f9:ed:28:ce:a9:04:1e:e6:e8:db:9a: 24:b6:ac:5f:f0:ae:39:c8:fb:8b:02:de:42:60:e0: c5:5a:ab:60:eb:bb:e7:0b:8e:c9:cb:71:ad:c1:76: 5f:47:f1:f2:b8:0d:38:f9:ab:79:0a:c9:9b:72:9b: 69:f7:2a:38:25:77:be:7b:19:9c:77:ea:c1:08:57: ea:d3:9e:a5:e1:ce:45:2f:dd:b1:fe:bc:4c:ee:89: ad:70:3d:13:be:d7:d7:6c:b5:41:27:26:67:31:65: ea:27:5c:1f:51:8c:16:6b:fc:4e:20:8e:80:a3:0f: 6c:e3:87:f6:fe:b7:d4:18:5c:72:d9:e6:e4:14:26: af:d3:cb:bf:9b:97:bc:4b:e1:1a:7f:db:f1:c9:f3: 6f:ab:ec:a7:c2:c4:9e:50:a2:49:a3:03:04:0b:86: 39:8b:e6:4a:da:58:88:1a:43:24:fd:1a:9c:bd:a9: 17:86:ad:87:cb:c1:49:62:e3:aa:7a:0c:f4:15:34: 57:cf:65:ec:36:11:17:fc:7d:34:10:ad:ee:55:37: c4:d4:91:bf:22:87:e9:d3:be:7a:b6:74:cc:e2:af: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:D8:FD:A6:B1:92:98:50:A7:1A:44:E3:91:9F:CD:50:2C:85:17 X509v3 Authority Key Identifier: keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ec:6c:e8:1e:d4:59:f3:15:99:ed:04:17:cc:34:37:6e:87: 37:61:c5:a8:fb:30:24:61:ca:50:95:97:dc:44:c4:d9:5e:44: 5d:e1:a8:ae:2b:ab:82:86:ca:54:88:73:d8:98:9c:cb:d3:d1: 9f:ae:35:ed:22:0d:fa:8b:04:0a:13:92:2e:33:fe:83:a7:8b: 3c:31:46:60:35:90:a8:52:94:93:f8:25:3f:52:9b:70:47:43: 85:27:a0:01:48:fd:17:05:ba:b7:b2:36:b1:1e:78:09:6d:44: 9d:7f:f4:92:b3:e6:e1:0b:24:bd:51:96:c7:2e:31:84:c1:49: dd:2d:44:32:05:1b:5b:c3:7b:d7:74:91:a2:73:5f:31:7b:14: d1:5a:c8:f9:05:bd:8b:83:23:f2:00:df:7e:f2:b0:54:75:b0: 18:b2:05:7f:4c:7e:02:8f:11:f1:f0:f7:e6:ec:c9:35:c4:40: d6:07:56:05:13:18:35:dc:d2:10:5b:ef:33:a5:d7:8c:49:eb: 33:d7:00:2f:86:3a:dc:69:ee:a8:81:1f:4e:b5:9e:39:b8:89: 9c:a4:12:9d:3e:75:93:ba:ad:98:09:b5:c1:d3:28:58:cd:50: ec:aa:de:9f:bf:c7:df:5a:1a:85:b3:de:cd:e1:be:ab:0e:35: 05:58:d7:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec8t+luoFV+WBoTjwrtG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0 ZDBjYTAwHhcNMjUxMjE0MjAwMTAzWhcNMjUxMjE1MjAwMTAzWjAzMTEwLwYDVQQD Eyg1ODEwZDhmZGE2YjE5Mjk4NTBhNzFhNDRlMzkxOWZjZDUwMmM4NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQXP9Fk2P+YDdxlMKi+/nrol5Pyf aOgpaivGuOMiRjxN+e0ozqkEHubo25oktqxf8K45yPuLAt5CYODFWqtg67vnC47J y3GtwXZfR/HyuA04+at5Csmbcptp9yo4JXe+exmcd+rBCFfq056l4c5FL92x/rxM 7omtcD0TvtfXbLVBJyZnMWXqJ1wfUYwWa/xOII6Aow9s44f2/rfUGFxy2ebkFCav 08u/m5e8S+Eaf9vxyfNvq+ynwsSeUKJJowMEC4Y5i+ZK2liIGkMk/RqcvakXhq2H y8FJYuOqegz0FTRXz2XsNhEX/H00EK3uVTfE1JG/Iofp0756tnTM4q8rnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgQ2P2msZKYUKcaROORn81QLIUXMB8GA1UdIwQY MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt ZjkyMTI4YmU4Yjc5LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5 LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANexs6B7U WfMVme0EF8w0N26HN2HFqPswJGHKUJWX3ETE2V5EXeGoriurgobKVIhz2Jicy9PR n6417SIN+osEChOSLjP+g6eLPDFGYDWQqFKUk/glP1KbcEdDhSegAUj9FwW6t7I2 sR54CW1EnX/0krPm4QskvVGWxy4xhMFJ3S1EMgUbW8N713SRonNfMXsU0VrI+QW9 i4Mj8gDffvKwVHWwGLIFf0x+Ao8R8fD35uzJNcRA1gdWBRMYNdzSEFvvM6XXjEnr M9cAL4Y63GnuqIEfTrWeObiJnKQSnT51k7qtmAm1wdMoWM1Q7Kren7/H31oahbPe zeG+qw41BVjXFw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:32 2025 by rpki-client