This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json) Hash identifier: FIZrFupuIYZ/YduNqbAnLe33r95oKgA1IytcAcQ5/Ew= Subject key identifier: 66:6A:99:6E:96:DD:9D:38:A5:E5:A1:37:FE:79:28:15:82:87:1E:CE Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836 Certificate serial: 019B4882E3EAA35A20E96C55E0031A627BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft Manifest number: 0880 Signing time: Tue 23 Dec 2025 00:01:36 +0000 Manifest this update: Tue 23 Dec 2025 00:01:36 +0000 Manifest next update: Wed 24 Dec 2025 00:01:36 +0000 Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: k/K8UVhjiMlrJqsJMWhlkt5S1ntfNGuS143y+TMerQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:e3:ea:a3:5a:20:e9:6c:55:e0:03:1a:62:7b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7d296d69059457be39c3c82466aceed02766836 Validity Not Before: Dec 23 00:01:36 2025 GMT Not After : Dec 24 00:01:36 2025 GMT Subject: CN=666a996e96dd9d38a5e5a137fe79281582871ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:a4:73:ed:eb:8d:74:06:ef:80:22:2f:01: 66:7a:88:bd:cf:c7:57:6e:41:db:7f:43:7b:c4:26: 4f:64:47:3a:16:c0:36:94:d3:0c:8b:d6:21:94:3d: cb:98:d9:db:a1:52:02:79:f1:2e:d3:dc:79:e0:0c: 7b:61:b6:20:24:e8:c8:5a:b9:67:be:90:8f:6e:f9: 8e:61:ed:6a:61:33:4d:5e:09:59:91:e1:29:a5:e1: c3:34:d7:4e:4d:04:71:11:ce:2a:b6:27:bc:61:fe: 23:3f:d3:ad:28:cf:39:5c:05:df:61:62:58:c8:c5: 4c:84:6d:02:3c:cf:1b:ef:e4:25:b9:1e:e0:12:31: f5:67:3f:5e:da:8c:98:a9:e8:50:4f:00:d5:12:34: 0e:a0:77:01:65:6b:64:87:e5:b8:8c:76:7a:96:3b: e0:7a:43:5c:e4:c9:1f:c7:a4:57:7e:fb:63:c7:ac: e7:56:de:2b:62:10:46:7a:ab:a9:73:a8:f1:eb:c3: 85:b0:47:25:cc:4e:00:5c:31:27:55:03:75:e6:cd: 35:8f:29:c2:31:5a:76:32:60:97:7c:9c:b4:54:e0: 88:74:32:fe:ab:1d:88:80:87:56:ec:88:68:7c:5e: 61:81:9b:2d:d5:28:c9:2f:24:1a:7e:f4:2b:fe:44: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6A:99:6E:96:DD:9D:38:A5:E5:A1:37:FE:79:28:15:82:87:1E:CE X509v3 Authority Key Identifier: keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5f:e7:00:76:97:95:41:f4:62:f2:8a:86:84:06:5b:e4:a2: 70:b6:44:65:4f:69:f0:e4:57:35:0d:a4:52:42:5f:8e:0f:7a: 6a:b6:21:a1:01:f3:5c:c3:d2:62:41:60:9b:f0:74:34:f8:42: a3:28:a3:60:ce:f6:4b:64:a0:a8:5d:a1:07:b5:1b:5f:a9:c5: 0f:c2:1a:29:7c:57:db:66:fb:63:7f:6c:57:7c:85:96:64:da: 5f:d0:72:4e:0d:92:61:d4:ba:1d:77:5a:ef:f3:1d:03:eb:6f: de:b6:db:57:4b:46:a7:77:7e:3f:26:61:0f:65:5e:60:32:3a: 91:50:17:f9:b8:f6:0a:fa:66:ff:06:30:20:47:01:e1:9f:d5: e5:d4:d7:b5:6e:d0:f4:67:cc:69:53:ed:69:4c:86:94:80:11: 0b:8a:4b:4a:c9:a3:be:37:61:9a:88:83:15:ee:4d:ae:3b:a8: 33:f7:f1:89:1b:a4:9f:d6:98:a5:9a:ec:a3:d0:25:70:7c:f7: 08:e9:12:7f:37:e9:4f:ff:b0:d1:a3:62:5f:03:3a:72:83:04: 4e:a6:41:3f:a2:cd:fc:33:b2:4d:f4:ad:79:c9:73:e8:7d:3b: e0:78:1a:11:3f:58:58:0c:ab:77:6c:c9:85:89:13:8e:ad:c4: 90:8d:70:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIguPqo1og6WxV4AMaYnunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZDI5NmQ2OTA1OTQ1N2JlMzljM2M4MjQ2NmFjZWVkMDI3 NjY4MzYwHhcNMjUxMjIzMDAwMTM2WhcNMjUxMjI0MDAwMTM2WjAzMTEwLwYDVQQD Eyg2NjZhOTk2ZTk2ZGQ5ZDM4YTVlNWExMzdmZTc5MjgxNTgyODcxZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cykc+3rjXQG74AiLwFmeoi9z8dX bkHbf0N7xCZPZEc6FsA2lNMMi9YhlD3LmNnboVICefEu09x54Ax7YbYgJOjIWrln vpCPbvmOYe1qYTNNXglZkeEppeHDNNdOTQRxEc4qtie8Yf4jP9OtKM85XAXfYWJY yMVMhG0CPM8b7+QluR7gEjH1Zz9e2oyYqehQTwDVEjQOoHcBZWtkh+W4jHZ6ljvg ekNc5Mkfx6RXfvtjx6znVt4rYhBGequpc6jx68OFsEclzE4AXDEnVQN15s01jynC MVp2MmCXfJy0VOCIdDL+qx2IgIdW7IhofF5hgZst1SjJLyQafvQr/kSyxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZqmW6W3Z04peWhN/55KBWChx7OMB8GA1UdIwQY MBaAFLfSltaQWUV745w8gkZqzu0Cdmg2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQt MTU5MjlkMDJmZDBjLzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQtMTU5MjlkMDJmZDBj LzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl/nAHaX lUH0YvKKhoQGW+SicLZEZU9p8ORXNQ2kUkJfjg96arYhoQHzXMPSYkFgm/B0NPhC oyijYM72S2SgqF2hB7UbX6nFD8IaKXxX22b7Y39sV3yFlmTaX9ByTg2SYdS6HXda 7/MdA+tv3rbbV0tGp3d+PyZhD2VeYDI6kVAX+bj2Cvpm/wYwIEcB4Z/V5dTXtW7Q 9GfMaVPtaUyGlIARC4pLSsmjvjdhmoiDFe5NrjuoM/fxiRukn9aYpZrso9AlcHz3 COkSfzfpT/+w0aNiXwM6coMETqZBP6LN/DOyTfSteclz6H074HgaET9YWAyrd2zJ hYkTjq3EkI1wGw== -----END CERTIFICATE-----Generated at Tue Dec 23 08:23:46 2025 by rpki-client