This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft File: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft (raw, json) Hash identifier: 6OkSBCb3TuV98NV/ZK/jJqT4Z7fvIYUs395yKa8mN/E= Subject key identifier: 13:85:A9:2C:61:85:64:5D:0B:86:C0:98:73:0D:92:46:7B:05:C1:8B Authority key identifier: 46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4 Certificate issuer: /CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4 Certificate serial: 019B5B65A1E54E87132A837E6A6A50AFF2C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft Manifest number: 06F2 Signing time: Fri 26 Dec 2025 16:02:25 +0000 Manifest this update: Fri 26 Dec 2025 16:02:25 +0000 Manifest next update: Sat 27 Dec 2025 16:02:25 +0000 Files and hashes: 1: Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl (hash: qIoxHdYB5Is6X/6YHTDr6MrEQYoNffYX/U4iZBAtgV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:a1:e5:4e:87:13:2a:83:7e:6a:6a:50:af:f2:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467f0d6762fe96f049e6ec332d042e8b9d5cdee4 Validity Not Before: Dec 26 16:02:25 2025 GMT Not After : Dec 27 16:02:25 2025 GMT Subject: CN=1385a92c6185645d0b86c098730d92467b05c18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a5:fd:b7:cf:2d:36:d9:ee:d0:5c:89:c5:e8: 0a:a3:bf:85:38:61:34:42:f6:16:ff:67:b1:e0:56: 18:73:c2:23:5b:6c:6d:ad:a0:13:c0:5f:03:66:ce: ae:b2:4d:90:bf:f1:25:e3:43:35:cc:5b:ea:c3:9a: 13:90:64:6a:ac:10:4a:20:e8:04:f4:24:3a:ed:7f: cf:43:ac:f6:7b:9a:a9:48:8a:b8:e0:56:e9:02:97: 96:83:43:15:83:57:07:5e:7a:45:6f:c3:74:03:b9: 39:8a:24:6b:79:08:98:09:7c:50:c4:bc:1d:e3:df: 27:10:81:b9:05:9e:73:90:f1:6f:0b:5b:48:f4:2d: 68:57:19:8a:05:c0:5e:e9:fb:48:02:8a:5e:b8:0e: 3e:18:ed:9f:39:74:6e:5b:95:32:c1:aa:a3:c9:11: 3e:d0:fd:a2:c6:69:f7:aa:40:e9:2d:cb:2a:ea:14: 24:73:71:bf:ac:96:4c:73:4f:3e:2c:d9:d8:a0:32: 37:a4:e9:6d:95:7e:41:be:3a:69:09:73:0e:46:b5: fb:7f:98:cb:b0:3c:2c:af:63:09:d7:83:97:00:ba: f8:ec:c4:ca:b1:f5:62:74:70:aa:c0:2f:2c:c7:0a: c8:f4:29:ee:f3:55:40:a1:a8:32:eb:8e:eb:15:60: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:85:A9:2C:61:85:64:5D:0B:86:C0:98:73:0D:92:46:7B:05:C1:8B X509v3 Authority Key Identifier: keyid:46:7F:0D:67:62:FE:96:F0:49:E6:EC:33:2D:04:2E:8B:9D:5C:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2d1747-301d-4f72-84c8-65b99afb50d4/1/Rn8NZ2L-lvBJ5uwzLQQui51c3uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0e:12:2a:2d:6c:37:59:8a:0b:61:04:4f:83:e3:14:a6:b7: 22:d7:b2:4e:bb:c6:19:e3:20:43:b4:bb:76:b9:9a:04:7b:f8: ff:3c:6d:b8:22:9e:25:c6:7f:ce:2c:09:d6:cb:7a:b5:41:b1: 5d:7f:4d:b1:38:70:61:26:37:42:37:e8:d6:6d:6d:b6:49:76: 66:eb:16:d6:f8:b1:6a:82:0f:41:c4:49:1c:5a:92:1b:e5:4a: 2e:cb:04:c6:9e:26:f6:f8:b8:cf:84:2f:1e:64:6d:aa:c2:eb: 7b:0a:c2:cd:5b:c3:74:2c:be:0b:b8:1e:1f:2f:66:65:74:d6: 36:1d:db:a0:4e:96:0c:64:72:85:a5:fc:30:08:b6:ca:54:cb: 5d:5b:ca:4c:7a:71:26:14:82:01:e7:47:6c:d2:94:b3:30:e3: 20:74:d0:77:74:6b:74:43:80:9c:85:f9:10:e3:65:80:cd:68: 1f:88:5a:e2:14:ae:ab:62:04:7a:1a:80:51:fa:78:38:65:20: 64:1e:b1:e9:97:1a:8c:8e:2d:90:fe:b7:fc:99:e0:65:d7:cd: f4:af:f8:f4:5c:f9:6f:df:19:14:97:7a:f4:90:c5:17:e6:37: 50:b8:b3:54:0d:77:d9:3e:11:fc:2e:05:90:e0:8b:1f:87:4d: a4:e2:7d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZaHlTocTKoN+ampQr/LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2N2YwZDY3NjJmZTk2ZjA0OWU2ZWMzMzJkMDQyZThiOWQ1 Y2RlZTQwHhcNMjUxMjI2MTYwMjI1WhcNMjUxMjI3MTYwMjI1WjAzMTEwLwYDVQQD EygxMzg1YTkyYzYxODU2NDVkMGI4NmMwOTg3MzBkOTI0NjdiMDVjMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KX9t88tNtnu0FyJxegKo7+FOGE0 QvYW/2ex4FYYc8IjW2xtraATwF8DZs6usk2Qv/El40M1zFvqw5oTkGRqrBBKIOgE 9CQ67X/PQ6z2e5qpSIq44FbpApeWg0MVg1cHXnpFb8N0A7k5iiRreQiYCXxQxLwd 498nEIG5BZ5zkPFvC1tI9C1oVxmKBcBe6ftIAopeuA4+GO2fOXRuW5UywaqjyRE+ 0P2ixmn3qkDpLcsq6hQkc3G/rJZMc08+LNnYoDI3pOltlX5BvjppCXMORrX7f5jL sDwsr2MJ14OXALr47MTKsfVidHCqwC8sxwrI9Cnu81VAoagy647rFWDGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOFqSxhhWRdC4bAmHMNkkZ7BcGLMB8GA1UdIwQY MBaAFEZ/DWdi/pbwSebsMy0ELoudXN7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm44TloyTC1sdkJKNXV3ekxRUXVpNTFjM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yZDE3NDctMzAxZC00ZjcyLTg0Yzgt NjViOTlhZmI1MGQ0LzEvUm44TloyTC1sdkJKNXV3ekxRUXVpNTFjM3VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yZDE3NDctMzAxZC00ZjcyLTg0YzgtNjViOTlhZmI1MGQ0 LzEvUm44TloyTC1sdkJKNXV3ekxRUXVpNTFjM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ4SKi1s N1mKC2EET4PjFKa3IteyTrvGGeMgQ7S7drmaBHv4/zxtuCKeJcZ/ziwJ1st6tUGx XX9NsThwYSY3Qjfo1m1ttkl2ZusW1vixaoIPQcRJHFqSG+VKLssExp4m9vi4z4Qv HmRtqsLrewrCzVvDdCy+C7geHy9mZXTWNh3boE6WDGRyhaX8MAi2ylTLXVvKTHpx JhSCAedHbNKUszDjIHTQd3RrdEOAnIX5EONlgM1oH4ha4hSuq2IEehqAUfp4OGUg ZB6x6ZcajI4tkP63/JngZdfN9K/49Fz5b98ZFJd69JDFF+Y3ULizVA132T4R/C4F kOCLH4dNpOJ9aQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:25 2025 by rpki-client