This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft File: s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft (raw, json) Hash identifier: E+b3v4eZEv7H5fbyIrpD7OXZAfYlaE5k61lIN2oNceM= Subject key identifier: 62:BA:5C:E0:BE:AD:45:51:4F:7D:ED:99:9F:E2:23:C0:EC:01:0A:0D Authority key identifier: B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36 Certificate issuer: /CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036 Certificate serial: 019B3D23876AB18AA0F27DD5ED5ECB0D9774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft Manifest number: 0DA6 Signing time: Sat 20 Dec 2025 19:01:37 +0000 Manifest this update: Sat 20 Dec 2025 19:01:37 +0000 Manifest next update: Sun 21 Dec 2025 19:01:37 +0000 Files and hashes: 1: s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl (hash: FOPnxsefpFTBpfCvqnJH9lDl7esFIoxakMZmzUxbsLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:87:6a:b1:8a:a0:f2:7d:d5:ed:5e:cb:0d:97:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b39e5f388dc3491a4c9547bb5788e2fe4f50d036 Validity Not Before: Dec 20 19:01:37 2025 GMT Not After : Dec 21 19:01:37 2025 GMT Subject: CN=62ba5ce0bead45514f7ded999fe223c0ec010a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:13:78:bc:18:aa:90:8e:c0:a4:8a:69:95:b2: 07:e3:51:b5:b2:64:21:4a:a8:41:bf:65:21:af:95: 7b:36:97:e4:16:83:59:0b:10:24:40:d1:bb:cd:84: 2a:19:dd:55:57:f0:99:b0:a0:1e:67:1c:05:1e:89: 3a:c0:d6:a4:1e:1a:fd:d1:e5:ce:29:df:44:ec:b1: 80:77:f6:9d:08:1d:ca:5d:d1:8f:db:5e:01:4c:40: 2a:99:bf:fa:5d:64:ea:66:05:ff:da:3f:5c:d5:17: b6:03:0a:2c:3f:80:3b:81:2b:a7:17:02:47:4c:cb: 84:e1:fa:d6:86:f0:93:5e:bc:64:00:0c:ec:3c:69: 73:1d:4d:92:44:3a:a6:44:37:70:17:35:fc:ac:fc: 99:09:e8:9e:32:e9:39:82:3b:8d:bc:f0:f6:17:30: f4:aa:d6:6b:e2:e4:d2:a3:c8:08:3a:54:8f:f4:fd: 23:9d:dd:6d:46:c8:02:a9:22:46:ba:35:f8:4d:db: fe:dd:c6:f9:fe:90:fa:a7:87:ab:69:a5:96:81:3f: f4:85:ee:64:b2:7a:c7:61:eb:42:83:77:70:4a:53: 48:00:f7:6b:72:f2:85:1f:fd:59:b1:e9:f1:3b:31: 06:fc:10:38:cc:82:31:77:69:0c:bf:91:bc:66:d4: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:5C:E0:BE:AD:45:51:4F:7D:ED:99:9F:E2:23:C0:EC:01:0A:0D X509v3 Authority Key Identifier: keyid:B3:9E:5F:38:8D:C3:49:1A:4C:95:47:BB:57:88:E2:FE:4F:50:D0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s55fOI3DSRpMlUe7V4ji_k9Q0DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/00ce0b-4413-458b-b71f-5dceb9ecc2b7/1/s55fOI3DSRpMlUe7V4ji_k9Q0DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:20:46:17:62:1a:3b:7e:ba:6b:c6:04:4c:63:af:80:5a: 9e:0b:02:4a:f4:eb:db:3f:2c:ff:76:63:d1:c1:67:93:0d:f4: f9:af:af:72:53:29:54:27:43:ef:a1:a0:90:c5:5c:4a:93:9c: c8:0b:53:b7:46:8d:12:33:71:8c:25:4f:3d:ff:1e:ce:36:c2: e4:c6:e9:89:73:23:bd:68:85:fa:ea:a3:03:b0:86:be:5e:51: 61:d4:12:3e:8c:08:24:2e:c7:02:7c:b9:01:c4:a2:44:46:25: 84:e8:08:87:62:a1:be:0b:34:fc:32:2e:52:14:f0:62:c6:5f: 7a:64:9b:24:82:8e:58:ad:b3:89:f4:40:51:15:d7:93:e5:29: 9c:eb:82:de:9e:a2:64:57:b4:cb:5f:e2:3b:ee:df:48:79:1c: 55:0e:e4:75:9d:17:88:88:50:42:b2:be:a8:fb:5e:f5:84:3f: ce:b7:a2:89:f5:5d:38:9a:4a:42:af:e6:7e:af:a8:58:13:9c: a5:55:00:53:72:96:a9:07:5c:0d:68:92:99:4b:f4:d5:c7:1c: a3:2a:2a:40:ca:52:7b:ec:88:88:bf:5d:3b:b6:7d:9d:c7:6a: 68:78:16:71:5c:79:ba:82:b3:41:10:3a:31:5a:f4:75:9f:d6: 2d:c5:5d:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I4dqsYqg8n3V7V7LDZd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOWU1ZjM4OGRjMzQ5MWE0Yzk1NDdiYjU3ODhlMmZlNGY1 MGQwMzYwHhcNMjUxMjIwMTkwMTM3WhcNMjUxMjIxMTkwMTM3WjAzMTEwLwYDVQQD Eyg2MmJhNWNlMGJlYWQ0NTUxNGY3ZGVkOTk5ZmUyMjNjMGVjMDEwYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRN4vBiqkI7ApIpplbIH41G1smQh SqhBv2Uhr5V7NpfkFoNZCxAkQNG7zYQqGd1VV/CZsKAeZxwFHok6wNakHhr90eXO Kd9E7LGAd/adCB3KXdGP214BTEAqmb/6XWTqZgX/2j9c1Re2AwosP4A7gSunFwJH TMuE4frWhvCTXrxkAAzsPGlzHU2SRDqmRDdwFzX8rPyZCeieMuk5gjuNvPD2FzD0 qtZr4uTSo8gIOlSP9P0jnd1tRsgCqSJGujX4Tdv+3cb5/pD6p4eraaWWgT/0he5k snrHYetCg3dwSlNIAPdrcvKFH/1ZsenxOzEG/BA4zIIxd2kMv5G8ZtTa9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGK6XOC+rUVRT33tmZ/iI8DsAQoNMB8GA1UdIwQY MBaAFLOeXziNw0kaTJVHu1eI4v5PUNA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYt NWRjZWI5ZWNjMmI3LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8wMGNlMGItNDQxMy00NThiLWI3MWYtNWRjZWI5ZWNjMmI3 LzEvczU1Zk9JM0RTUnBNbFVlN1Y0amlfazlRMERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeQgRhdi Gjt+umvGBExjr4BangsCSvTr2z8s/3Zj0cFnkw30+a+vclMpVCdD76GgkMVcSpOc yAtTt0aNEjNxjCVPPf8ezjbC5MbpiXMjvWiF+uqjA7CGvl5RYdQSPowIJC7HAny5 AcSiREYlhOgIh2Khvgs0/DIuUhTwYsZfemSbJIKOWK2zifRAURXXk+UpnOuC3p6i ZFe0y1/iO+7fSHkcVQ7kdZ0XiIhQQrK+qPte9YQ/zreiifVdOJpKQq/mfq+oWBOc pVUAU3KWqQdcDWiSmUv01cccoyoqQMpSe+yIiL9dO7Z9ncdqaHgWcVx5uoKzQRA6 MVr0dZ/WLcVd6Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:36:31 2025 by rpki-client