This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json) Hash identifier: nw2MPGIEvi3DhMHb97cHJ39bI98EwZYmff0DRDzdXtw= Subject key identifier: 01:CD:6A:2F:85:AA:08:46:56:F3:35:CB:B0:F7:29:8F:14:1A:64:3C Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Certificate serial: 019B3A913BC6F25EA21BA00B039CF41D616D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft Manifest number: 04B6 Signing time: Sat 20 Dec 2025 07:02:35 +0000 Manifest this update: Sat 20 Dec 2025 07:02:35 +0000 Manifest next update: Sun 21 Dec 2025 07:02:35 +0000 Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: +JFdsARdr8LIFuUgI2vvvn4xJgHVcfJdPc4H5RMju0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:3b:c6:f2:5e:a2:1b:a0:0b:03:9c:f4:1d:61:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4 Validity Not Before: Dec 20 07:02:35 2025 GMT Not After : Dec 21 07:02:35 2025 GMT Subject: CN=01cd6a2f85aa084656f335cbb0f7298f141a643c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:18:24:60:dc:da:a0:28:2f:1f:38:46:d7:d9: 8a:60:4e:0e:f0:1e:82:87:d1:06:e8:10:21:bf:51: 06:6b:f0:75:0e:00:3b:6f:4f:80:71:18:fc:9b:3c: 43:fe:ce:df:14:8c:3e:47:65:81:84:e0:02:44:bd: 05:56:b2:12:47:48:74:2b:a9:65:14:c2:fe:51:ec: 87:47:cc:89:c3:f3:0e:f8:66:53:10:c2:0d:ae:d3: ba:00:6b:03:da:b0:df:d2:72:d6:c3:36:d5:c3:9a: dd:c2:5f:6e:33:b7:3d:46:b9:31:99:f2:8f:fb:f1: 49:91:31:fc:67:28:31:2a:70:1d:4d:b1:b9:1b:53: 3e:2a:d9:20:15:79:1b:ab:cc:17:8b:e8:72:71:e1: 6b:90:41:9a:ff:32:c1:bb:75:d9:52:b0:d6:5a:69: f5:8f:af:b6:61:8e:08:73:88:f2:87:36:d1:96:12: ee:95:5b:05:fb:76:2b:22:ea:29:b4:5d:11:cb:19: 6d:1e:0d:2f:cc:b4:16:95:c2:31:05:77:f2:8a:26: b3:dc:5c:94:f0:95:12:25:5b:6d:ab:8d:ca:5d:a1: fb:65:c7:44:28:03:eb:a7:07:db:49:36:45:3d:d6: 9e:f4:96:d5:f3:52:cb:37:28:cb:87:e8:a2:31:43: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CD:6A:2F:85:AA:08:46:56:F3:35:CB:B0:F7:29:8F:14:1A:64:3C X509v3 Authority Key Identifier: keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:43:45:bf:2a:5d:ef:fc:05:74:1d:48:15:38:69:5d:df:96: 09:e0:2d:aa:b5:48:87:74:97:d1:11:21:e4:97:75:d8:bd:e4: 35:b0:28:5b:68:93:60:a6:9f:bf:af:5e:08:0a:83:46:7a:4a: d2:cc:f2:5e:a1:31:bf:cf:01:ec:5a:ed:3f:dc:28:48:2b:bb: e6:2e:70:1e:9c:02:0d:ef:d4:0d:4e:58:69:88:53:80:db:e8: 6f:60:c2:4f:4c:2b:81:93:07:d9:dc:fe:ff:25:ac:e5:3c:32: 10:5c:e2:58:a1:8d:27:84:06:d1:2f:9d:72:88:ed:9f:e7:2c: 50:0d:27:45:bf:8f:ef:ff:f3:e3:ff:ab:41:51:11:a7:c6:2e: 2b:fb:00:5f:18:8f:d9:47:7a:0a:82:cf:49:8e:7f:46:83:ff: c5:dd:d7:32:32:27:be:e1:5f:db:4e:e2:70:59:9d:9e:f6:b0: 41:7e:f9:a5:ee:29:91:9a:e9:7a:36:c1:bf:82:f5:91:c2:c2: 45:48:e9:05:15:37:7d:28:2c:a8:30:c9:fd:bf:06:be:c6:47: 51:ee:fd:50:8f:aa:26:6c:e1:05:d2:df:51:f5:56:ab:6a:06: c8:c9:3e:42:b9:c3:5a:7a:c8:cc:6b:26:8d:3d:e3:d9:9f:db: a4:13:ba:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kTvG8l6iG6ALA5z0HWFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDZjZTJiMWE5ODBmYmQxZWY5OWMzZjU2NTM2OGFkNjIx YmM0ZjQwHhcNMjUxMjIwMDcwMjM1WhcNMjUxMjIxMDcwMjM1WjAzMTEwLwYDVQQD EygwMWNkNmEyZjg1YWEwODQ2NTZmMzM1Y2JiMGY3Mjk4ZjE0MWE2NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hgkYNzaoCgvHzhG19mKYE4O8B6C h9EG6BAhv1EGa/B1DgA7b0+AcRj8mzxD/s7fFIw+R2WBhOACRL0FVrISR0h0K6ll FML+UeyHR8yJw/MO+GZTEMINrtO6AGsD2rDf0nLWwzbVw5rdwl9uM7c9RrkxmfKP +/FJkTH8ZygxKnAdTbG5G1M+KtkgFXkbq8wXi+hyceFrkEGa/zLBu3XZUrDWWmn1 j6+2YY4Ic4jyhzbRlhLulVsF+3YrIuoptF0RyxltHg0vzLQWlcIxBXfyiiaz3FyU 8JUSJVttq43KXaH7ZcdEKAPrpwfbSTZFPdae9JbV81LLNyjLh+iiMUNwZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHNai+FqghGVvM1y7D3KY8UGmQ8MB8GA1UdIwQY MBaAFJkGzisamA+9HvmcP1ZTaK1iG8T0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjIt YTJmZTQ5OTFhMDM3LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjItYTJmZTQ5OTFhMDM3 LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATENFvypd 7/wFdB1IFThpXd+WCeAtqrVIh3SX0REh5Jd12L3kNbAoW2iTYKafv69eCAqDRnpK 0szyXqExv88B7FrtP9woSCu75i5wHpwCDe/UDU5YaYhTgNvob2DCT0wrgZMH2dz+ /yWs5TwyEFziWKGNJ4QG0S+dcojtn+csUA0nRb+P7//z4/+rQVERp8YuK/sAXxiP 2Ud6CoLPSY5/RoP/xd3XMjInvuFf207icFmdnvawQX75pe4pkZrpejbBv4L1kcLC RUjpBRU3fSgsqDDJ/b8GvsZHUe79UI+qJmzhBdLfUfVWq2oGyMk+QrnDWnrIzGsm jT3j2Z/bpBO6AA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:04:48 2025 by rpki-client