This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft File: f3NriKAkBNQwS92tX_VQSmgz57c.mft (raw, json) Hash identifier: 1GaBQRMNMpVsxajdJbexxLswWv0w85fdBO0ByAxLRiA= Subject key identifier: 26:86:20:3B:19:D4:F8:10:96:F4:7B:21:D7:60:BA:5A:D7:D2:88:70 Authority key identifier: 7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7 Certificate issuer: /CN=7f736b88a02404d4304bddad5ff5504a6833e7b7 Certificate serial: 019B5975C4CB8F5034408074675A46D32FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:00:48 +0000 Manifest this update: Fri 26 Dec 2025 07:00:48 +0000 Manifest next update: Sat 27 Dec 2025 07:00:48 +0000 Files and hashes: 1: f3NriKAkBNQwS92tX_VQSmgz57c.crl (hash: Jqy5wyI5jAMDtbKNt0pipgGvqyZNH4kHXqjXHj8Phc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c4:cb:8f:50:34:40:80:74:67:5a:46:d3:2f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f736b88a02404d4304bddad5ff5504a6833e7b7 Validity Not Before: Dec 26 07:00:48 2025 GMT Not After : Dec 27 07:00:48 2025 GMT Subject: CN=2686203b19d4f81096f47b21d760ba5ad7d28870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:20:2a:d6:5d:3f:7d:01:51:f1:2d:25:21: c9:16:c2:11:92:59:bc:27:79:ab:49:99:1f:96:1b: d9:71:50:ae:0a:2f:38:1e:cc:d1:98:9f:e0:6a:d7: 4b:c2:07:41:c6:31:4b:98:83:67:00:29:c2:62:31: 83:a9:57:3a:38:cf:ee:3b:bd:66:e1:0a:d1:07:b9: 18:eb:04:94:7b:2e:d1:99:72:e4:1f:df:ba:59:ae: 7e:5e:b7:fe:e0:65:13:1a:9a:48:f1:43:02:a5:51: 67:60:37:5a:db:05:38:84:e5:e5:10:88:72:61:3f: a0:f5:c2:ec:97:04:c0:bd:09:7d:ee:79:c8:08:e8: 0a:d6:cd:16:07:4c:f1:8b:ad:b7:19:85:28:80:76: c4:c0:a4:9d:9c:8f:b3:c3:87:72:82:2b:ac:e1:04: 97:ae:0c:8b:db:ad:90:14:02:1d:c2:b5:d4:60:22: dc:d2:bf:ac:00:89:b8:74:2c:cb:c3:13:4f:fe:ea: 8d:e4:7c:fe:02:08:9c:14:d3:eb:df:27:20:c8:b8: 26:3b:5b:b9:fd:a0:ff:bb:34:1e:e1:18:b5:72:72: d3:41:a0:69:15:0e:36:86:73:da:c4:86:d9:d3:e3: 07:fa:7d:0f:f6:9c:1a:14:92:73:fb:05:db:62:5d: 09:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:20:3B:19:D4:F8:10:96:F4:7B:21:D7:60:BA:5A:D7:D2:88:70 X509v3 Authority Key Identifier: keyid:7F:73:6B:88:A0:24:04:D4:30:4B:DD:AD:5F:F5:50:4A:68:33:E7:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3NriKAkBNQwS92tX_VQSmgz57c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0f25ce-b977-4853-9ec3-9e56cb54fef7/1/f3NriKAkBNQwS92tX_VQSmgz57c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:51:26:41:11:af:da:64:e2:29:1d:3c:af:15:90:7b:1a:59: 4c:96:46:d5:3c:c0:41:b9:bb:5e:ff:3f:18:a8:e9:16:f5:af: 86:ad:2a:48:4e:78:11:70:52:c3:95:e2:76:ce:49:a3:28:28: 28:2c:dc:d2:5a:2f:74:dd:5a:a1:cb:c9:5b:36:7f:99:50:14: 83:68:b7:6a:f5:f5:eb:3a:2e:c7:cc:5d:ed:5b:40:19:bb:27: ff:fd:a3:8b:8f:73:0a:67:d0:65:26:af:9b:9f:1b:56:b1:20: 40:d2:b8:81:f8:2c:c6:89:01:2b:01:5a:ae:0b:d8:90:30:f6: f8:c1:a8:46:a3:72:11:d0:cc:7f:6c:67:ca:cd:9a:d7:6c:62: b5:4f:be:5e:82:82:93:73:64:f3:6c:2d:80:1c:d6:22:91:84: 50:89:3a:96:a5:a3:15:e0:0a:6c:83:66:77:00:9d:93:cf:74: 90:5c:e8:c5:1d:5b:2f:00:b4:b8:10:0c:13:f2:0a:7f:a4:ad: de:1f:50:5a:ca:88:6e:7d:33:d2:9f:8d:8a:c7:b7:95:d8:c5: bb:80:c0:e1:bc:1c:3e:10:ef:10:d9:b6:4d:72:22:02:f9:38: 65:40:53:48:bc:5b:36:e8:01:95:0c:88:bc:8b:6f:f9:43:c1: 6e:5b:7f:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdcTLj1A0QIB0Z1pG0y+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNzM2Yjg4YTAyNDA0ZDQzMDRiZGRhZDVmZjU1MDRhNjgz M2U3YjcwHhcNMjUxMjI2MDcwMDQ4WhcNMjUxMjI3MDcwMDQ4WjAzMTEwLwYDVQQD EygyNjg2MjAzYjE5ZDRmODEwOTZmNDdiMjFkNzYwYmE1YWQ3ZDI4ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCcgKtZdP30BUfEtJSHJFsIRklm8 J3mrSZkflhvZcVCuCi84HszRmJ/gatdLwgdBxjFLmINnACnCYjGDqVc6OM/uO71m 4QrRB7kY6wSUey7RmXLkH9+6Wa5+Xrf+4GUTGppI8UMCpVFnYDda2wU4hOXlEIhy YT+g9cLslwTAvQl97nnICOgK1s0WB0zxi623GYUogHbEwKSdnI+zw4dygius4QSX rgyL262QFAIdwrXUYCLc0r+sAIm4dCzLwxNP/uqN5Hz+AgicFNPr3ycgyLgmO1u5 /aD/uzQe4Ri1cnLTQaBpFQ42hnPaxIbZ0+MH+n0P9pwaFJJz+wXbYl0JiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaGIDsZ1PgQlvR7IddgulrX0ohwMB8GA1UdIwQY MBaAFH9za4igJATUMEvdrV/1UEpoM+e3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjNOcmlLQWtCTlF3UzkydFhfVlFTbWd6NTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZjI1Y2UtYjk3Ny00ODUzLTllYzMt OWU1NmNiNTRmZWY3LzEvZjNOcmlLQWtCTlF3UzkydFhfVlFTbWd6NTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wZjI1Y2UtYjk3Ny00ODUzLTllYzMtOWU1NmNiNTRmZWY3 LzEvZjNOcmlLQWtCTlF3UzkydFhfVlFTbWd6NTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFEmQRGv 2mTiKR08rxWQexpZTJZG1TzAQbm7Xv8/GKjpFvWvhq0qSE54EXBSw5Xids5Joygo KCzc0lovdN1aocvJWzZ/mVAUg2i3avX16zoux8xd7VtAGbsn//2ji49zCmfQZSav m58bVrEgQNK4gfgsxokBKwFargvYkDD2+MGoRqNyEdDMf2xnys2a12xitU++XoKC k3Nk82wtgBzWIpGEUIk6lqWjFeAKbINmdwCdk890kFzoxR1bLwC0uBAME/IKf6St 3h9QWsqIbn0z0p+Nise3ldjFu4DA4bwcPhDvENm2TXIiAvk4ZUBTSLxbNugBlQyI vItv+UPBblt/RQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:18 2025 by rpki-client