This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft File: lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json) Hash identifier: HBdAuRfGQTkBwKLZupbJeadKigHNKEXY0GZ6RSY9YSo= Subject key identifier: EC:22:C6:2D:80:CF:CB:1B:54:63:A9:F5:F9:37:99:79:54:61:95:46 Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D Certificate issuer: /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d Certificate serial: 019B1E066CB175179B68BD21CF98D67704AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 18:01:36 +0000 Manifest this update: Sun 14 Dec 2025 18:01:36 +0000 Manifest next update: Mon 15 Dec 2025 18:01:36 +0000 Files and hashes: 1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: Q9FiUGsw+0ywKMAyxeScH04FVbcWw3sa8zA8Nxt5fec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:6c:b1:75:17:9b:68:bd:21:cf:98:d6:77:04:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d Validity Not Before: Dec 14 18:01:36 2025 GMT Not After : Dec 15 18:01:36 2025 GMT Subject: CN=ec22c62d80cfcb1b5463a9f5f937997954619546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:1e:c8:2b:d5:33:36:ba:61:82:57:d5:ae: 3c:a9:2e:78:07:94:eb:1f:fe:8e:0a:ae:cc:bc:fe: 36:39:1a:eb:5e:27:7a:a2:27:ce:cd:24:66:0b:09: 85:50:e7:86:a2:10:fa:3a:8c:78:02:67:38:aa:41: 8f:53:b9:d7:7f:b1:cd:20:bf:4d:cb:77:b5:fe:1a: 2d:24:c5:02:a1:42:a8:32:16:bd:77:ca:72:bb:25: 10:0a:b8:ba:d9:ca:d3:cb:d7:ab:4b:3d:1e:a5:2d: e1:36:9c:12:d5:99:07:40:3b:44:ca:15:99:52:c9: 13:46:9f:02:bb:52:95:5c:97:ff:4f:a3:23:9c:c8: 11:d2:0a:6c:d1:3d:6a:9f:b3:9d:9c:08:b0:e8:01: 68:e2:09:f0:3d:65:cb:b3:29:64:48:b1:7f:c6:c5: df:88:75:da:7e:68:aa:78:ed:96:84:56:b5:f4:5e: d5:09:b7:2f:35:60:2a:af:87:ef:b7:1c:58:50:07: e6:fa:92:7e:42:32:54:2a:e7:61:50:b7:50:02:32: 75:74:ba:3e:91:4c:74:5e:f4:fd:62:ec:f4:ef:9b: a3:6f:a8:29:5b:ea:df:3b:24:59:85:d1:5c:67:31: ed:f8:61:d1:d4:66:35:0e:de:c6:28:d5:c0:22:98: bf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:22:C6:2D:80:CF:CB:1B:54:63:A9:F5:F9:37:99:79:54:61:95:46 X509v3 Authority Key Identifier: keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:34:50:20:a5:68:f7:b1:f3:04:fc:eb:f4:7f:7f:9d:23:61: 51:d2:c4:0b:82:a2:4f:e6:ad:44:01:c6:8e:9a:b9:50:3d:bb: 58:60:e8:88:e4:34:75:79:fc:ee:eb:d4:b8:2a:52:26:f2:66: f6:b2:da:ef:7f:75:da:1d:c2:27:8e:57:f5:a9:21:c7:2c:4f: cd:13:55:51:64:f7:f9:ee:a1:01:c4:44:49:b9:3f:59:bc:b0: d4:ba:70:87:df:42:c3:0b:57:f7:34:86:11:e3:53:e9:58:21: 05:0b:6b:0e:10:6e:fb:0d:bf:55:66:2f:51:f4:43:67:45:3d: b5:a4:29:fe:b8:cc:ae:5a:cc:4a:5a:e1:b4:28:e1:41:63:c6: 88:f8:5a:d4:fb:23:58:25:4f:b1:11:9b:56:26:e1:02:fb:91: 6c:75:a5:0a:89:19:6d:10:88:26:f1:64:e8:d8:cb:68:26:06: a4:07:37:dc:df:1f:e3:37:aa:ad:b7:20:43:e7:54:17:69:72: 89:b2:5a:78:a6:da:cb:a8:e4:67:10:db:31:fa:1d:61:bc:61: e3:45:c6:86:f4:90:b7:6b:78:7d:fe:34:d9:4a:79:54:ba:6a: d1:47:26:23:e9:45:6a:6a:a5:d8:14:04:8c:47:05:33:2e:27: 03:1c:01:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBmyxdRebaL0hz5jWdwStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2OGMyYzU1ZGM4ZWI5OTdiZjU5MTIxZDRjMmZmZDU0NDRh MjJlMmQwHhcNMjUxMjE0MTgwMTM2WhcNMjUxMjE1MTgwMTM2WjAzMTEwLwYDVQQD EyhlYzIyYzYyZDgwY2ZjYjFiNTQ2M2E5ZjVmOTM3OTk3OTU0NjE5NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP8eyCvVMza6YYJX1a48qS54B5Tr H/6OCq7MvP42ORrrXid6oifOzSRmCwmFUOeGohD6Oox4Amc4qkGPU7nXf7HNIL9N y3e1/hotJMUCoUKoMha9d8pyuyUQCri62crTy9erSz0epS3hNpwS1ZkHQDtEyhWZ UskTRp8Cu1KVXJf/T6MjnMgR0gps0T1qn7OdnAiw6AFo4gnwPWXLsylkSLF/xsXf iHXafmiqeO2WhFa19F7VCbcvNWAqr4fvtxxYUAfm+pJ+QjJUKudhULdQAjJ1dLo+ kUx0XvT9Yuz075ujb6gpW+rfOyRZhdFcZzHt+GHR1GY1Dt7GKNXAIpi/4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwixi2Az8sbVGOp9fk3mXlUYZVGMB8GA1UdIwQY MBaAFJaMLFXcjrmXv1kSHUwv/VREoi4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYt MTU0ZTU5OWZkMzVmLzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYtMTU0ZTU5OWZkMzVm LzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDRQIKVo 97HzBPzr9H9/nSNhUdLEC4KiT+atRAHGjpq5UD27WGDoiOQ0dXn87uvUuCpSJvJm 9rLa73912h3CJ45X9akhxyxPzRNVUWT3+e6hAcRESbk/Wbyw1Lpwh99CwwtX9zSG EeNT6VghBQtrDhBu+w2/VWYvUfRDZ0U9taQp/rjMrlrMSlrhtCjhQWPGiPha1Psj WCVPsRGbVibhAvuRbHWlCokZbRCIJvFk6NjLaCYGpAc33N8f4zeqrbcgQ+dUF2ly ibJaeKbay6jkZxDbMfodYbxh40XGhvSQt2t4ff402Up5VLpq0UcmI+lFamql2BQE jEcFMy4nAxwBIQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:23 2025 by rpki-client