This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json) Hash identifier: L3BNOqj81tfmAu1B98qbLWi2f2oJguphtNZieMN97gM= Subject key identifier: 40:E2:D1:56:A8:99:1D:3E:70:E5:5D:6A:09:52:67:83:2B:AE:FD:3A Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69 Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069 Certificate serial: 019B5ABF7AF0A976FD038439B309BA574541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft Manifest number: 07D7 Signing time: Fri 26 Dec 2025 13:00:56 +0000 Manifest this update: Fri 26 Dec 2025 13:00:56 +0000 Manifest next update: Sat 27 Dec 2025 13:00:56 +0000 Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: SB+lMLkhSlCbO8mRgKiXJWKHTs/LWynY4RNA5L5h740=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:7a:f0:a9:76:fd:03:84:39:b3:09:ba:57:45:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069 Validity Not Before: Dec 26 13:00:56 2025 GMT Not After : Dec 27 13:00:56 2025 GMT Subject: CN=40e2d156a8991d3e70e55d6a095267832baefd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:02:d3:0f:2f:49:5a:47:b0:75:b1:65:b7: 7a:78:ea:86:68:0c:75:3c:23:6b:f7:b3:13:be:4d: 87:d8:77:13:cc:00:ef:b4:9d:bd:81:88:a9:f7:a5: 7a:d6:5d:7d:54:3e:f8:60:6a:57:65:b0:ac:70:f3: 99:85:92:71:54:15:95:bf:e4:9c:f3:cb:58:bb:e2: 81:76:1f:24:6e:e3:af:cf:8a:ae:4d:74:af:0f:61: ef:40:35:c4:0f:75:19:3e:46:29:0c:d7:07:71:96: bc:c9:18:24:55:0c:6a:1d:81:51:22:d3:64:14:07: d6:e1:c7:e3:c1:f3:7d:23:05:2b:3b:66:10:95:d5: a0:d8:55:84:c0:ea:2f:5e:6c:ac:cf:e2:e6:fc:11: 7c:5b:81:1a:6e:f9:e7:50:1a:c8:10:f1:04:ff:cb: 70:a9:bb:ac:b0:0d:69:5c:3d:f8:65:8a:f1:30:19: 49:53:63:b8:e0:38:cf:60:e3:81:3e:60:ba:d5:4c: b9:5f:2c:47:52:51:7c:a9:f9:87:cb:c1:be:20:85: cb:b4:62:36:a9:00:bd:2b:46:04:57:9c:32:83:2a: a6:90:54:12:44:84:3a:ef:f7:f4:f2:a0:e3:94:d9: 17:14:05:d4:ea:b7:2c:86:fa:fa:94:c6:b8:03:05: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E2:D1:56:A8:99:1D:3E:70:E5:5D:6A:09:52:67:83:2B:AE:FD:3A X509v3 Authority Key Identifier: keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:22:7c:58:68:c3:44:fc:d7:61:ce:09:ef:13:6f:5f:90:28: d8:3b:a1:f0:1e:0e:6e:39:e7:1c:e7:e3:b1:a9:b3:bb:f0:63: 72:0c:3f:5d:56:ee:64:87:15:f8:5f:0a:90:af:bc:6f:9a:17: e1:41:2b:f1:d1:71:e2:d2:f5:50:ed:e2:5b:1a:2d:87:9b:c1: ce:de:17:36:33:32:4b:59:14:c4:58:22:5a:45:4b:65:50:8f: b8:e9:3d:9b:62:f8:7b:00:a2:3a:be:be:b4:a5:27:35:5b:01: cd:ec:41:53:1f:0d:1f:5a:49:f5:9e:13:22:a7:a0:3f:44:01: 41:b8:ef:22:87:3b:8f:22:b1:47:68:f8:9c:fe:27:5e:3c:91: b0:7a:34:68:cc:e1:d3:5f:bf:81:71:2f:a4:a5:5b:88:72:6e: 00:83:2f:24:33:c3:c0:c3:93:a3:0e:27:a5:27:9b:15:17:4f: f7:ea:34:e0:b0:15:39:98:05:4c:93:ad:ec:dc:43:15:64:be: a7:32:e4:34:38:72:ef:42:4b:72:22:27:45:39:70:2d:ed:1b: 05:e6:97:28:4d:5b:8b:de:a8:c7:7a:fd:7f:9a:e8:05:bc:e5: 84:71:2c:21:f9:f8:4b:54:89:ca:44:de:6a:89:c7:8d:f5:4e: 3f:ff:08:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav3rwqXb9A4Q5swm6V0VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYjAyNDAxNTBhYzBkOWRmM2JiOWM1NzJlMzFjODc1ODU4 ODIwNjkwHhcNMjUxMjI2MTMwMDU2WhcNMjUxMjI3MTMwMDU2WjAzMTEwLwYDVQQD Eyg0MGUyZDE1NmE4OTkxZDNlNzBlNTVkNmEwOTUyNjc4MzJiYWVmZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvocC0w8vSVpHsHWxZbd6eOqGaAx1 PCNr97MTvk2H2HcTzADvtJ29gYip96V61l19VD74YGpXZbCscPOZhZJxVBWVv+Sc 88tYu+KBdh8kbuOvz4quTXSvD2HvQDXED3UZPkYpDNcHcZa8yRgkVQxqHYFRItNk FAfW4cfjwfN9IwUrO2YQldWg2FWEwOovXmysz+Lm/BF8W4EabvnnUBrIEPEE/8tw qbussA1pXD34ZYrxMBlJU2O44DjPYOOBPmC61Uy5XyxHUlF8qfmHy8G+IIXLtGI2 qQC9K0YEV5wygyqmkFQSRIQ67/f08qDjlNkXFAXU6rcshvr6lMa4AwXX4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDi0VaomR0+cOVdaglSZ4Mrrv06MB8GA1UdIwQY MBaAFJqwJAFQrA2d87ucVy4xyHWFiCBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXJBa0FWQ3NEWjN6dTV4WExqSElkWVdJSUdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjllMWQtM2U4OC00NDhhLTgzNzEt YTIyNDBmMzg3NjFjLzEvbXJBa0FWQ3NEWjN6dTV4WExqSElkWVdJSUdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjllMWQtM2U4OC00NDhhLTgzNzEtYTIyNDBmMzg3NjFj LzEvbXJBa0FWQ3NEWjN6dTV4WExqSElkWVdJSUdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCJ8WGjD RPzXYc4J7xNvX5Ao2Duh8B4ObjnnHOfjsamzu/Bjcgw/XVbuZIcV+F8KkK+8b5oX 4UEr8dFx4tL1UO3iWxoth5vBzt4XNjMyS1kUxFgiWkVLZVCPuOk9m2L4ewCiOr6+ tKUnNVsBzexBUx8NH1pJ9Z4TIqegP0QBQbjvIoc7jyKxR2j4nP4nXjyRsHo0aMzh 01+/gXEvpKVbiHJuAIMvJDPDwMOTow4npSebFRdP9+o04LAVOZgFTJOt7NxDFWS+ pzLkNDhy70JLciInRTlwLe0bBeaXKE1bi96ox3r9f5roBbzlhHEsIfn4S1SJykTe aonHjfVOP/8I3g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:25 2025 by rpki-client