This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json) Hash identifier: KJhlbRxHCVBkfyhDYP3+o+0IuWerJDnfSjvbt5LdC8c= Subject key identifier: B3:CE:B3:04:C3:65:BE:32:D1:CD:A8:BA:AB:36:91:0D:03:14:4F:4B Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Certificate serial: 019B2C663788215076555892EFB0092F2CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft Manifest number: 0E16 Signing time: Wed 17 Dec 2025 13:00:54 +0000 Manifest this update: Wed 17 Dec 2025 13:00:54 +0000 Manifest next update: Thu 18 Dec 2025 13:00:54 +0000 Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: rE7kAs57BN5YGmWicFaSZMI7fqFdEmxZ34PK5bB/AhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:37:88:21:50:76:55:58:92:ef:b0:09:2f:2c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c Validity Not Before: Dec 17 13:00:54 2025 GMT Not After : Dec 18 13:00:54 2025 GMT Subject: CN=b3ceb304c365be32d1cda8baab36910d03144f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:cd:58:8e:e2:b7:18:f8:4c:e2:5a:fc:2f: 46:f9:63:28:d4:3b:85:77:71:c6:d2:b5:db:cc:34: d7:53:cf:41:0e:3c:a2:7e:95:e3:25:a2:28:4a:29: 4f:30:0e:f0:de:31:f8:c5:22:6a:ba:ce:b5:13:9d: d1:1c:94:5e:90:b3:18:4c:0b:76:1e:37:bd:e0:e0: 3b:2f:6a:c2:e7:20:f2:be:d5:15:8e:46:21:c3:b4: a3:4d:ec:fe:d2:61:67:56:9f:e8:a3:48:a2:86:1b: fe:52:c9:ca:b9:a1:f0:88:30:78:cb:d9:98:ba:74: 6e:8d:e6:b9:87:5e:10:b8:1a:7c:06:eb:ef:d1:1e: 14:87:f8:de:45:ff:c5:02:5d:e4:cd:9e:e2:82:77: cc:3f:41:16:9b:d0:7e:70:1d:8c:db:62:be:cd:66: a1:9c:a6:86:4d:70:97:43:31:6c:a1:b4:c0:98:20: 07:24:99:07:7e:64:2b:c7:65:a4:11:9f:b7:0a:20: a1:b4:d9:51:59:de:24:d5:fc:58:d3:f4:48:a0:dc: 15:d2:6c:29:c9:18:5b:28:76:50:85:ce:54:d8:10: 3d:9d:ad:24:bd:4a:4b:2e:df:f2:70:30:cf:05:33: 45:e5:e7:ad:d7:03:8c:c3:8a:42:69:b4:5c:0a:4d: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CE:B3:04:C3:65:BE:32:D1:CD:A8:BA:AB:36:91:0D:03:14:4F:4B X509v3 Authority Key Identifier: keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:74:55:e6:47:c4:be:56:78:19:7d:9b:21:51:be:84:40:c3: b7:b9:99:63:97:2d:85:6d:06:d9:c9:b0:99:d8:59:85:54:ed: 75:6b:10:53:ad:7a:6a:f1:fd:aa:04:53:2d:9e:31:f6:e9:7b: 9f:cb:f9:cc:f7:3f:e1:f0:14:7d:8c:c0:a6:2d:de:cb:a1:c8: 48:fa:df:20:12:35:7c:71:7d:d2:81:75:d8:9a:59:17:21:32: 47:25:99:1d:7e:4f:6c:e3:b9:ee:74:9d:03:90:3f:81:24:25: e0:ab:68:31:fb:c3:c7:1b:77:e5:22:63:f3:cb:a1:bb:a2:e5: 7b:1d:25:21:08:e8:12:0f:72:df:e6:49:8c:1b:a0:45:e6:ec: a2:46:f7:90:81:ee:03:13:b8:89:63:3d:12:e0:43:fa:d5:f6: a4:9e:08:f6:18:87:d4:61:27:c8:93:92:ba:1b:96:8b:f2:3c: 3e:1d:0d:33:2b:f4:13:cf:14:f9:fb:9b:58:bd:96:aa:e8:55: cc:b0:df:62:ea:13:6c:f8:c5:f2:a0:0c:f6:39:e2:fd:d2:31: 83:ec:64:2c:4b:7a:7e:45:18:67:f7:bb:68:9f:77:13:6e:d1: 3d:13:e3:6a:9e:52:44:c9:5e:7a:12:8b:09:11:1f:de:1b:31: 4f:ab:e6:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZjeIIVB2VViS77AJLyytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjFlYWE1YzMzMWJlY2YzMjc3MDFhMmViZGNmMWExYmI1 ZjA3MGMwHhcNMjUxMjE3MTMwMDU0WhcNMjUxMjE4MTMwMDU0WjAzMTEwLwYDVQQD EyhiM2NlYjMwNGMzNjViZTMyZDFjZGE4YmFhYjM2OTEwZDAzMTQ0ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3G3NWI7itxj4TOJa/C9G+WMo1DuF d3HG0rXbzDTXU89BDjyifpXjJaIoSilPMA7w3jH4xSJqus61E53RHJRekLMYTAt2 Hje94OA7L2rC5yDyvtUVjkYhw7SjTez+0mFnVp/oo0iihhv+UsnKuaHwiDB4y9mY unRujea5h14QuBp8Buvv0R4Uh/jeRf/FAl3kzZ7ignfMP0EWm9B+cB2M22K+zWah nKaGTXCXQzFsobTAmCAHJJkHfmQrx2WkEZ+3CiChtNlRWd4k1fxY0/RIoNwV0mwp yRhbKHZQhc5U2BA9na0kvUpLLt/ycDDPBTNF5eet1wOMw4pCabRcCk3bXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPOswTDZb4y0c2ouqs2kQ0DFE9LMB8GA1UdIwQY MBaAFGvx6qXDMb7PMncBouvc8aG7XwcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQt OTYxZWNjM2E2Y2QwLzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQtOTYxZWNjM2E2Y2Qw LzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnRV5kfE vlZ4GX2bIVG+hEDDt7mZY5cthW0G2cmwmdhZhVTtdWsQU616avH9qgRTLZ4x9ul7 n8v5zPc/4fAUfYzApi3ey6HISPrfIBI1fHF90oF12JpZFyEyRyWZHX5PbOO57nSd A5A/gSQl4KtoMfvDxxt35SJj88uhu6Llex0lIQjoEg9y3+ZJjBugRebsokb3kIHu AxO4iWM9EuBD+tX2pJ4I9hiH1GEnyJOSuhuWi/I8Ph0NMyv0E88U+fubWL2WquhV zLDfYuoTbPjF8qAM9jni/dIxg+xkLEt6fkUYZ/e7aJ93E27RPRPjap5SRMleehKL CREf3hsxT6vmxQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:10:43 2025 by rpki-client