This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json) Hash identifier: AG7u9VrYB5LTLE6vDwDxBI1lxC+j9WUwMXdlK/CMtJw= Subject key identifier: 7C:37:7A:CB:20:72:58:BC:0C:9D:82:65:23:E3:DE:9A:64:07:7A:CD Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4 Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4 Certificate serial: 019B5A88DF9D1462D6EC225AAB8740592CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft Manifest number: 0D2B Signing time: Fri 26 Dec 2025 12:01:18 +0000 Manifest this update: Fri 26 Dec 2025 12:01:18 +0000 Manifest next update: Sat 27 Dec 2025 12:01:18 +0000 Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: tiA9S+g04XJpCPMRdNF6e02WXeD0wdsu4VoWRXbW9LY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:df:9d:14:62:d6:ec:22:5a:ab:87:40:59:2c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4 Validity Not Before: Dec 26 12:01:18 2025 GMT Not After : Dec 27 12:01:18 2025 GMT Subject: CN=7c377acb207258bc0c9d826523e3de9a64077acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:a3:26:fa:5e:05:1c:b9:3f:ae:56:27:f3: 7e:ef:5b:48:f9:0c:f1:c5:98:38:c6:54:bd:db:aa: 4a:8f:88:05:e3:7c:bc:0d:86:15:9b:66:0b:25:c2: fd:c4:35:cc:03:fd:80:38:6a:ab:18:50:50:12:d2: 18:04:57:f9:09:6d:99:f9:98:32:64:24:9b:cc:c2: 82:bf:ea:fa:b2:b4:1c:ac:76:e3:f7:52:22:ca:84: 5e:77:35:f9:86:81:d9:c1:2e:85:2c:7f:44:18:7c: 01:38:7f:b0:fa:e3:d8:b9:c7:41:08:44:de:e2:3b: 93:91:32:a6:f2:11:c1:0e:5f:07:22:94:5c:65:3e: de:72:d9:bf:10:e2:41:e9:52:0f:86:55:2d:9c:59: 03:f3:42:eb:e8:96:dd:e8:52:94:a8:7f:f3:e9:1e: a2:a5:47:da:1d:00:c8:4a:fd:19:79:4c:5e:d9:53: 01:68:15:99:f4:f2:72:c8:ec:7d:67:13:5a:4c:33: 4b:af:41:c6:61:7d:b4:6c:a2:76:3b:46:b9:e4:4d: a9:e2:a1:b5:17:de:3d:c3:a3:a8:88:2b:a3:16:cc: 27:39:27:b0:ae:cb:de:80:ab:cd:7a:98:6a:27:c3: 34:ac:f6:43:ee:15:7f:bd:a7:d0:df:e4:03:7b:9d: 9e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:37:7A:CB:20:72:58:BC:0C:9D:82:65:23:E3:DE:9A:64:07:7A:CD X509v3 Authority Key Identifier: keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:68:52:c9:7d:1c:a2:36:05:cc:94:22:75:ae:3b:33:1a:59: 74:24:7f:66:a1:cb:4f:79:a2:05:22:84:04:0f:76:05:65:cf: c3:5b:92:8d:6f:28:d9:c5:3c:c9:bf:61:7e:00:b0:59:5d:c1: fd:e0:1b:04:aa:f2:d6:b8:ed:53:96:7f:01:87:17:5f:9d:3d: ac:ba:87:db:3f:d5:c1:23:86:07:98:6f:ff:fe:6e:33:f1:77: bb:33:b4:b7:a4:8c:88:92:27:4c:fd:86:cb:9c:4c:50:42:0a: 19:34:c6:6c:d2:98:fb:a0:7e:a2:8c:d4:05:f3:1b:d4:ad:f7: ca:c8:ae:85:a8:cd:f8:d6:c1:ee:dc:c4:8d:71:5b:c8:a4:8b: 02:89:94:95:4d:6b:b4:da:3f:28:fb:e9:9c:73:4b:9a:15:6b: ed:38:ce:aa:2f:7a:34:6a:b6:b7:a9:64:41:b2:20:ef:89:a6: 1f:59:55:86:ef:5b:70:26:0f:2e:36:7d:5c:91:a4:2e:3e:75: bf:aa:c8:4c:48:d5:a1:d2:79:e4:16:21:33:cb:47:4f:35:99: 11:6b:13:f7:25:91:54:1b:37:87:4f:0b:c7:48:1a:8f:c6:7f: f6:ec:6c:7d:65:d9:e7:d8:17:a7:ed:cb:3a:99:22:2e:da:92: 4e:00:c0:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiN+dFGLW7CJaq4dAWSytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTc5Nzg1ODZiZmYzYTY3NzdkNTVhOWE5NjM1ODQxNTE2 ZDQzYjQwHhcNMjUxMjI2MTIwMTE4WhcNMjUxMjI3MTIwMTE4WjAzMTEwLwYDVQQD Eyg3YzM3N2FjYjIwNzI1OGJjMGM5ZDgyNjUyM2UzZGU5YTY0MDc3YWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/CjJvpeBRy5P65WJ/N+71tI+Qzx xZg4xlS926pKj4gF43y8DYYVm2YLJcL9xDXMA/2AOGqrGFBQEtIYBFf5CW2Z+Zgy ZCSbzMKCv+r6srQcrHbj91IiyoRedzX5hoHZwS6FLH9EGHwBOH+w+uPYucdBCETe 4juTkTKm8hHBDl8HIpRcZT7ectm/EOJB6VIPhlUtnFkD80Lr6Jbd6FKUqH/z6R6i pUfaHQDISv0ZeUxe2VMBaBWZ9PJyyOx9ZxNaTDNLr0HGYX20bKJ2O0a55E2p4qG1 F949w6OoiCujFswnOSewrsvegKvNephqJ8M0rPZD7hV/vafQ3+QDe52ebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw3essgcli8DJ2CZSPj3ppkB3rNMB8GA1UdIwQY MBaAFNIXl4WGv/Omd31VqaljWEFRbUO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEt NGNlNGQzYjE5N2Q4LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEtNGNlNGQzYjE5N2Q4 LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2hSyX0c ojYFzJQida47MxpZdCR/ZqHLT3miBSKEBA92BWXPw1uSjW8o2cU8yb9hfgCwWV3B /eAbBKry1rjtU5Z/AYcXX509rLqH2z/VwSOGB5hv//5uM/F3uzO0t6SMiJInTP2G y5xMUEIKGTTGbNKY+6B+oozUBfMb1K33ysiuhajN+NbB7tzEjXFbyKSLAomUlU1r tNo/KPvpnHNLmhVr7TjOqi96NGq2t6lkQbIg74mmH1lVhu9bcCYPLjZ9XJGkLj51 v6rITEjVodJ55BYhM8tHTzWZEWsT9yWRVBs3h08Lx0gaj8Z/9uxsfWXZ59gXp+3L OpkiLtqSTgDAAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:38 2025 by rpki-client