This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json) Hash identifier: INOfReXYrWwLV1LH3uZnc/nqC6KJhHp9wnGXF/cZCI4= Subject key identifier: 77:F7:65:18:1C:F2:01:83:3A:96:05:40:3B:1F:8B:8D:16:84:5F:9E Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af Certificate serial: 019B59E3CE276E38D5FC500E3C60BFB9205C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 09:01:00 +0000 Manifest this update: Fri 26 Dec 2025 09:01:00 +0000 Manifest next update: Sat 27 Dec 2025 09:01:00 +0000 Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: 3pviqHp8EITZ+Md0y2eaAbfh+oObY1RUDeCOu61kCpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ce:27:6e:38:d5:fc:50:0e:3c:60:bf:b9:20:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af Validity Not Before: Dec 26 09:01:00 2025 GMT Not After : Dec 27 09:01:00 2025 GMT Subject: CN=77f765181cf201833a9605403b1f8b8d16845f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:a2:88:83:30:35:5c:15:c3:3f:3f:35:44: ac:ea:80:07:a1:5e:84:d0:7e:d7:50:5e:ae:89:51: f4:85:f7:9f:fc:da:e6:1e:5d:c1:8d:38:b3:ad:fa: ea:70:f6:fd:2a:2d:a3:da:79:77:0a:29:5d:5f:60: d9:d5:e0:f1:a4:c4:63:ed:77:8e:ba:01:f6:dc:42: 1f:61:4c:28:62:37:d3:75:ef:c5:35:65:ec:7f:66: f9:ce:2b:a0:06:cd:04:ae:45:b2:15:4b:a2:b5:6f: 57:ac:6b:48:f9:aa:b0:dc:b6:4c:0f:9f:74:3e:db: 82:3a:e9:8f:c1:37:41:d2:35:f0:35:5e:31:13:50: 74:ec:a7:f2:5a:1a:6f:fc:77:c3:61:8f:0c:a9:b0: 00:52:26:61:fa:48:e4:3a:43:f2:48:a4:90:01:f0: 2c:ca:f9:90:63:0d:11:1f:2d:4d:7a:5d:7a:dc:b8: 72:e0:a3:a1:4b:8c:a0:5b:9e:88:4c:7d:54:8f:7b: be:06:a3:91:87:4a:58:8f:fe:d1:dd:6d:e5:74:49: 1d:ce:b9:e1:08:a3:31:9d:c8:73:52:57:b8:5f:81: 9b:9a:74:08:a1:91:4a:08:12:d2:35:49:fd:26:25: ed:79:16:f9:11:4e:92:6e:02:91:63:a0:ed:dd:5c: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F7:65:18:1C:F2:01:83:3A:96:05:40:3B:1F:8B:8D:16:84:5F:9E X509v3 Authority Key Identifier: keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:fd:3f:43:d5:c6:d3:6e:11:06:e6:d6:db:d7:0b:f4:86:bb: 08:7f:96:92:5a:e5:1e:fd:df:7e:89:c6:62:28:5b:19:62:7a: b0:9a:4b:b1:93:98:cd:ec:95:3c:a7:13:54:ea:3d:e1:92:e5: 41:11:e2:2a:d3:ba:60:03:39:d3:4e:15:73:82:13:80:fc:72: 5d:a9:16:45:f8:c8:53:07:aa:c1:00:7e:e3:f6:d3:77:92:6b: 9f:9f:3e:5f:42:fd:6b:b4:f2:47:f8:06:58:74:56:b8:31:e1: c5:23:20:db:f3:38:73:d1:8a:f2:18:5d:fe:a2:34:32:57:c7: dd:0a:23:9d:1b:6d:c4:1a:1d:61:32:a1:43:90:6f:e8:6a:73: 7a:74:87:54:8a:e7:7d:41:4b:7c:7b:5b:c4:83:9c:27:f1:a3: f6:8c:b3:c3:07:5a:cd:8f:50:f3:71:82:1e:ae:dc:51:63:18: ce:86:64:67:e9:68:60:b0:58:17:31:fd:e4:2d:d1:93:37:1e: f2:90:80:05:7c:5b:bd:9a:1c:ec:27:fb:41:3e:d3:05:4d:df: 63:6a:8d:44:94:9c:aa:36:ca:d4:bf:de:04:fb:66:bb:28:4b: dd:1e:92:f2:05:72:a0:79:7c:04:ce:99:7a:11:ec:46:d1:e1: 13:8b:26:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ484nbjjV/FAOPGC/uSBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZDU2NjdjNDEyODE0MTEzOWNjYTdjNTA0N2ZjMTcyNTBi ZjYzYWYwHhcNMjUxMjI2MDkwMTAwWhcNMjUxMjI3MDkwMTAwWjAzMTEwLwYDVQQD Eyg3N2Y3NjUxODFjZjIwMTgzM2E5NjA1NDAzYjFmOGI4ZDE2ODQ1ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCiiIMwNVwVwz8/NUSs6oAHoV6E 0H7XUF6uiVH0hfef/NrmHl3BjTizrfrqcPb9Ki2j2nl3CildX2DZ1eDxpMRj7XeO ugH23EIfYUwoYjfTde/FNWXsf2b5ziugBs0ErkWyFUuitW9XrGtI+aqw3LZMD590 PtuCOumPwTdB0jXwNV4xE1B07KfyWhpv/HfDYY8MqbAAUiZh+kjkOkPySKSQAfAs yvmQYw0RHy1Nel163Lhy4KOhS4ygW56ITH1Uj3u+BqORh0pYj/7R3W3ldEkdzrnh CKMxnchzUle4X4GbmnQIoZFKCBLSNUn9JiXteRb5EU6SbgKRY6Dt3VzqCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf3ZRgc8gGDOpYFQDsfi40WhF+eMB8GA1UdIwQY MBaAFJrVZnxBKBQROcynxQR/wXJQv2OvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXRWbWZFRW9GQkU1ektmRkJIX0JjbENfWTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NzlmMGYtMDcwZS00NDNkLThlY2Qt Njg3MjM1NTgzOGEyLzEvbXRWbWZFRW9GQkU1ektmRkJIX0JjbENfWTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NzlmMGYtMDcwZS00NDNkLThlY2QtNjg3MjM1NTgzOGEy LzEvbXRWbWZFRW9GQkU1ektmRkJIX0JjbENfWTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzf0/Q9XG 024RBubW29cL9Ia7CH+WklrlHv3ffonGYihbGWJ6sJpLsZOYzeyVPKcTVOo94ZLl QRHiKtO6YAM5004Vc4ITgPxyXakWRfjIUweqwQB+4/bTd5Jrn58+X0L9a7TyR/gG WHRWuDHhxSMg2/M4c9GK8hhd/qI0MlfH3QojnRttxBodYTKhQ5Bv6GpzenSHVIrn fUFLfHtbxIOcJ/Gj9oyzwwdazY9Q83GCHq7cUWMYzoZkZ+loYLBYFzH95C3Rkzce 8pCABXxbvZoc7Cf7QT7TBU3fY2qNRJScqjbK1L/eBPtmuyhL3R6S8gVyoHl8BM6Z ehHsRtHhE4smcQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client