This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json) Hash identifier: H6K8JhXwt70TVJpFyjouf9dao/Wxi4Ptq3nDXyODFm8= Subject key identifier: A5:7C:2E:3F:97:D5:E3:6A:69:26:F1:47:5A:CB:05:12:9A:D8:78:ED Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c Certificate serial: 019B397D032D4FB5FA6FC0E8C8CAD743DE97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 02:00:52 +0000 Manifest this update: Sat 20 Dec 2025 02:00:52 +0000 Manifest next update: Sun 21 Dec 2025 02:00:52 +0000 Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: Hq95c6iGZ6aNMkJbBhwTUAd6ua7yD97ZU6B0nzD7xlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:03:2d:4f:b5:fa:6f:c0:e8:c8:ca:d7:43:de:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c Validity Not Before: Dec 20 02:00:52 2025 GMT Not After : Dec 21 02:00:52 2025 GMT Subject: CN=a57c2e3f97d5e36a6926f1475acb05129ad878ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:af:c2:da:a5:f4:cc:81:a0:a4:c1:ba:5e: 0b:fd:c8:52:c1:fa:37:a4:02:bc:e2:37:04:6e:a1: 6a:0e:d0:c1:de:77:c9:95:47:c0:90:c3:b6:a2:4b: f9:99:29:c2:7e:1d:ff:12:51:b9:7a:a5:7b:a3:e2: d6:62:ad:72:d1:3f:8d:42:82:0c:8e:fb:05:ea:3d: 32:cc:6c:e7:ab:3c:a1:34:17:77:08:32:76:ca:74: d5:3b:97:f9:b8:1d:0a:96:e7:0f:42:20:d2:96:da: 47:6e:53:ba:87:8b:00:74:a0:db:4c:81:34:08:ae: cf:04:89:93:a2:66:d2:0f:26:33:26:24:bf:a8:61: 53:ad:8b:2b:ff:7d:ab:1b:86:fe:c9:e2:68:08:ad: f9:34:83:f0:4a:e9:ad:54:6b:cc:1c:22:43:60:0b: bd:3d:60:bd:d3:c9:72:86:ef:af:78:9d:e8:78:b4: e7:cf:f6:a7:8f:3d:81:16:4b:66:29:cc:dd:d4:9c: 58:b5:91:f6:5b:1f:c3:0a:e3:09:4e:1b:d2:46:14: d1:a3:b3:22:4d:f6:89:d1:6d:6e:a5:22:41:c0:6e: 91:9c:b2:a3:38:9c:68:de:84:d8:d5:20:19:89:cb: 85:43:94:92:60:84:8a:5e:c7:27:b4:df:66:26:bc: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7C:2E:3F:97:D5:E3:6A:69:26:F1:47:5A:CB:05:12:9A:D8:78:ED X509v3 Authority Key Identifier: keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b9:ba:6a:70:94:71:b0:94:17:0c:1b:5b:39:00:fd:31:88: 59:15:28:2d:67:7e:8e:92:01:54:b0:00:9c:3d:e1:a8:36:3c: d1:1c:c8:fe:a9:9f:13:69:60:22:7f:1e:a0:18:42:82:34:db: c6:df:85:e4:b9:64:43:c3:f1:e4:79:8e:c5:f5:40:1c:5b:9b: f6:b8:1e:6c:75:e6:d5:04:a4:1d:62:7c:18:e0:ff:99:7d:9a: ac:77:53:18:2e:ce:1c:a4:c8:fd:47:a2:3e:03:ad:cb:62:34: 2c:a5:af:d2:27:a2:ea:14:50:0f:9f:26:6f:0e:6a:23:0d:47: 9a:dd:23:ab:1b:f9:f3:d7:c2:88:89:59:bd:a5:f7:8f:0a:e7: 7f:02:be:aa:2d:7c:1e:ec:71:53:91:ad:42:49:db:11:af:4d: 9c:8e:22:ed:7b:5a:fd:f2:ed:2e:dd:9d:b0:b5:e2:10:e9:ab: 73:f6:02:77:d4:3e:2e:72:fd:a5:4c:48:82:5c:dc:bf:a5:ff: f9:b6:3d:24:ec:b5:6e:c8:bf:5c:c4:ed:bc:1a:bd:06:bc:57: ae:45:6f:42:8f:21:64:77:8d:8b:5e:43:f9:69:86:37:da:d3: bc:20:b0:42:98:69:9e:69:4a:76:cb:f8:e2:e0:96:02:3c:79: 94:87:a1:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQMtT7X6b8DoyMrXQ96XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2MwZDQxNjIxZTlkMzgwODhiOGRkM2U2ZGUxNTU0MWJl ZTFjOGMwHhcNMjUxMjIwMDIwMDUyWhcNMjUxMjIxMDIwMDUyWjAzMTEwLwYDVQQD EyhhNTdjMmUzZjk3ZDVlMzZhNjkyNmYxNDc1YWNiMDUxMjlhZDg3OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoWvwtql9MyBoKTBul4L/chSwfo3 pAK84jcEbqFqDtDB3nfJlUfAkMO2okv5mSnCfh3/ElG5eqV7o+LWYq1y0T+NQoIM jvsF6j0yzGznqzyhNBd3CDJ2ynTVO5f5uB0KlucPQiDSltpHblO6h4sAdKDbTIE0 CK7PBImTombSDyYzJiS/qGFTrYsr/32rG4b+yeJoCK35NIPwSumtVGvMHCJDYAu9 PWC908lyhu+veJ3oeLTnz/anjz2BFktmKczd1JxYtZH2Wx/DCuMJThvSRhTRo7Mi TfaJ0W1upSJBwG6RnLKjOJxo3oTY1SAZicuFQ5SSYISKXscntN9mJrx0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKV8Lj+X1eNqaSbxR1rLBRKa2HjtMB8GA1UdIwQY MBaAFIp8DUFiHp04CIuN0+beFVQb7hyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kZDMyYTMtZGZlOS00MTYwLTg1ZGYt YTFiMjcwM2IwYTllLzEvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kZDMyYTMtZGZlOS00MTYwLTg1ZGYtYTFiMjcwM2IwYTll LzEvaW53TlFXSWVuVGdJaTQzVDV0NFZWQnZ1SEl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7m6anCU cbCUFwwbWzkA/TGIWRUoLWd+jpIBVLAAnD3hqDY80RzI/qmfE2lgIn8eoBhCgjTb xt+F5LlkQ8Px5HmOxfVAHFub9rgebHXm1QSkHWJ8GOD/mX2arHdTGC7OHKTI/Uei PgOty2I0LKWv0iei6hRQD58mbw5qIw1Hmt0jqxv589fCiIlZvaX3jwrnfwK+qi18 HuxxU5GtQknbEa9NnI4i7Xta/fLtLt2dsLXiEOmrc/YCd9Q+LnL9pUxIglzcv6X/ +bY9JOy1bsi/XMTtvBq9BrxXrkVvQo8hZHeNi15D+WmGN9rTvCCwQphpnmlKdsv4 4uCWAjx5lIeh2Q== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:00 2025 by rpki-client