This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json) Hash identifier: mMLDj1eyKxAurSxcassz2GcHRIQtznY6Rbg5PwceT+8= Subject key identifier: C2:AA:12:AF:11:C7:E8:17:67:A1:A4:4C:99:25:27:40:6C:BB:BA:09 Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4 Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4 Certificate serial: 019B360E3DB1532A6FBB89C955C92305FED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 10:01:01 +0000 Manifest this update: Fri 19 Dec 2025 10:01:01 +0000 Manifest next update: Sat 20 Dec 2025 10:01:01 +0000 Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: sroDPpPTGxab9u9oKDwQlIrA9r8oXBj8MddYx4GqCfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:3d:b1:53:2a:6f:bb:89:c9:55:c9:23:05:fe:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4 Validity Not Before: Dec 19 10:01:01 2025 GMT Not After : Dec 20 10:01:01 2025 GMT Subject: CN=c2aa12af11c7e81767a1a44c992527406cbbba09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:5b:e6:77:66:98:ec:01:d1:63:5b:00:3e: db:92:41:d2:7a:b7:74:bb:ee:30:57:82:32:2d:c2: 43:63:d9:98:a2:3f:70:9a:74:8d:25:81:f5:33:40: c2:e9:4e:f9:53:42:78:25:e4:f7:85:35:26:b5:8c: 01:d2:cb:73:ae:97:77:38:78:c3:cb:87:96:d5:12: f6:b9:21:36:d7:20:2c:7e:d5:2c:05:eb:bd:e0:72: 89:18:aa:9f:0f:67:07:c8:66:a5:da:bd:a2:ed:e3: 44:c5:31:59:c0:e1:05:89:bd:66:01:4e:97:06:b0: 8a:d9:b1:8e:86:60:56:21:57:cf:12:28:bc:a0:3d: 8d:e4:4c:0e:f0:e7:fc:26:d6:66:13:4b:be:f4:07: 82:76:44:6e:bf:85:81:d2:4b:ef:a2:6d:72:f6:10: 36:ef:da:d0:89:01:f4:57:8b:8f:aa:89:b3:01:3c: 19:55:02:00:24:3a:99:61:40:92:70:ea:48:53:1a: fb:22:43:03:85:26:e6:f3:ef:e6:60:68:57:a0:94: ff:94:cd:ba:c3:3c:60:54:a7:eb:f4:2d:ef:3b:66: a0:79:e4:9b:0d:a0:ff:fc:71:be:57:66:a4:c9:c4: b0:b9:45:ea:e4:89:e3:a5:94:e8:58:84:59:61:25: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AA:12:AF:11:C7:E8:17:67:A1:A4:4C:99:25:27:40:6C:BB:BA:09 X509v3 Authority Key Identifier: keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:36:ba:45:fb:bb:63:cf:35:50:f4:a8:a1:d1:99:d7:8a:a9: 0b:0a:4b:df:d3:c1:12:50:d5:e7:b8:db:b1:bc:d4:57:0f:77: 4b:ba:29:98:bd:0e:82:88:f4:7b:ce:68:29:6b:ff:2e:ee:cb: 3f:6c:90:26:b3:f2:12:f3:e0:2b:48:b1:4d:a7:27:bd:84:e3: b0:d2:e2:35:84:b7:10:f8:cc:e6:cd:87:f1:98:bc:6c:58:ae: af:db:bb:dd:8f:ae:bf:ae:3d:f9:60:11:20:80:2d:d7:2b:b8: 33:48:33:19:a3:94:1a:0d:62:03:62:4c:d6:ce:33:31:7f:79: ee:1e:2f:12:c3:f4:d6:7f:0f:33:68:05:5e:14:f8:19:09:aa: d6:d4:a2:da:b2:46:0e:51:e2:39:fd:ef:04:8b:6e:54:24:2f: 0b:e0:3e:a8:2d:aa:e0:eb:57:51:0b:14:64:8e:f4:2f:24:61: b0:fe:24:58:3c:3f:c1:7d:96:00:b3:93:93:73:96:68:f9:97: 00:a3:ef:6b:c1:5c:27:e6:5c:63:92:82:19:6b:b2:8d:4c:58: be:93:ce:64:51:e0:b9:1f:a3:5d:a6:3d:5c:57:d5:28:d9:af: 5d:eb:a4:7f:0a:56:9e:c9:d7:b9:63:81:2b:37:66:6d:43:83: c2:b2:3a:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dj2xUypvu4nJVckjBf7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGQ5ZmU3OTNiMThlZWY5MWRjNzZmYmNiYTJiMmNmYzUy ZTBiYzQwHhcNMjUxMjE5MTAwMTAxWhcNMjUxMjIwMTAwMTAxWjAzMTEwLwYDVQQD EyhjMmFhMTJhZjExYzdlODE3NjdhMWE0NGM5OTI1Mjc0MDZjYmJiYTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh9b5ndmmOwB0WNbAD7bkkHSerd0 u+4wV4IyLcJDY9mYoj9wmnSNJYH1M0DC6U75U0J4JeT3hTUmtYwB0stzrpd3OHjD y4eW1RL2uSE21yAsftUsBeu94HKJGKqfD2cHyGal2r2i7eNExTFZwOEFib1mAU6X BrCK2bGOhmBWIVfPEii8oD2N5EwO8Of8JtZmE0u+9AeCdkRuv4WB0kvvom1y9hA2 79rQiQH0V4uPqomzATwZVQIAJDqZYUCScOpIUxr7IkMDhSbm8+/mYGhXoJT/lM26 wzxgVKfr9C3vO2ageeSbDaD//HG+V2akycSwuUXq5InjpZToWIRZYSUFRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKqEq8Rx+gXZ6GkTJklJ0Bsu7oJMB8GA1UdIwQY MBaAFJkNn+eTsY7vkdx2+8uiss/FLgvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjFhYWUtYzVmOS00MmM3LWE3ZmYt ZTI5NmY4MThhZGU5LzEvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hZjFhYWUtYzVmOS00MmM3LWE3ZmYtZTI5NmY4MThhZGU5 LzEvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADza6Rfu7 Y881UPSoodGZ14qpCwpL39PBElDV57jbsbzUVw93S7opmL0Ogoj0e85oKWv/Lu7L P2yQJrPyEvPgK0ixTacnvYTjsNLiNYS3EPjM5s2H8Zi8bFiur9u73Y+uv649+WAR IIAt1yu4M0gzGaOUGg1iA2JM1s4zMX957h4vEsP01n8PM2gFXhT4GQmq1tSi2rJG DlHiOf3vBItuVCQvC+A+qC2q4OtXUQsUZI70LyRhsP4kWDw/wX2WALOTk3OWaPmX AKPva8FcJ+ZcY5KCGWuyjUxYvpPOZFHguR+jXaY9XFfVKNmvXeukfwpWnsnXuWOB KzdmbUODwrI6ww== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:14 2025 by rpki-client