This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft File: nVXDPIsCBMRAwPl46lhSCAHixcc.mft (raw, json) Hash identifier: w8zWPDb6/4PuzmlQ1N4XjkqZJ1lZ1lF8gK7k/AXl+Dw= Subject key identifier: C6:A9:A5:74:B9:C6:2C:26:0A:64:9E:11:ED:DD:CF:05:92:60:4A:EE Authority key identifier: 9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7 Certificate issuer: /CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7 Certificate serial: 019B59AC9A438D90047598800F7980AE51AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft Manifest number: 3C Signing time: Fri 26 Dec 2025 08:00:42 +0000 Manifest this update: Fri 26 Dec 2025 08:00:42 +0000 Manifest next update: Sat 27 Dec 2025 08:00:42 +0000 Files and hashes: 1: nVXDPIsCBMRAwPl46lhSCAHixcc.crl (hash: ElPHoaCuXqF+a/CDs4hd0PXtZgz3xyOO1Zz6hP8PGXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:9a:43:8d:90:04:75:98:80:0f:79:80:ae:51:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7 Validity Not Before: Dec 26 08:00:42 2025 GMT Not After : Dec 27 08:00:42 2025 GMT Subject: CN=c6a9a574b9c62c260a649e11edddcf0592604aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:4c:37:4b:12:38:0f:ce:7b:0d:2b:f4:91: fe:a5:53:3d:5a:56:4b:18:b3:0f:82:33:1c:09:75: 6c:c7:f9:f6:58:16:2a:bc:3e:a7:69:6f:9f:9b:00: 44:9e:44:6f:49:e8:b6:d8:e1:3f:bd:d2:30:f5:54: 33:eb:db:54:9d:b9:6c:cb:f8:aa:11:90:a0:50:1a: 5f:bb:44:55:07:4f:fe:51:5a:73:8d:7e:6c:e9:60: d6:ae:0e:46:d6:4e:21:39:7d:3b:fe:d6:f4:ea:b3: c3:7e:77:4d:cb:18:20:91:6e:42:48:52:69:74:bf: 8f:6f:f6:46:9e:07:11:ca:23:d1:cf:f1:1f:23:a3: 2a:b2:b3:82:c6:62:ab:ee:bb:fc:0b:a4:77:2c:73: fe:9e:30:18:b4:60:be:f9:61:8f:2d:b8:27:75:e7: 33:c1:75:12:e4:bd:26:31:41:a7:4f:e1:0f:9f:1e: c0:fb:6e:90:49:2e:da:cf:a2:c5:3d:6a:01:4b:ee: 67:b0:e8:79:ce:89:77:61:92:fe:e2:0c:65:d3:db: 6f:98:1b:90:de:0f:da:d3:f5:31:b6:a4:84:fa:5e: 04:e7:03:0d:4f:13:ea:64:04:66:9d:2a:4c:44:69: 12:98:71:46:c2:e3:7a:62:be:29:95:73:4d:06:c3: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A9:A5:74:B9:C6:2C:26:0A:64:9E:11:ED:DD:CF:05:92:60:4A:EE X509v3 Authority Key Identifier: keyid:9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4f:0f:9f:29:cf:b9:a9:b9:19:53:84:0f:52:18:09:eb:b3: 9e:f2:80:d1:f3:fb:b1:06:8c:ed:28:ea:d9:13:89:02:b1:a1: bd:19:0e:5b:1a:46:f7:88:b8:bc:30:22:0f:06:44:87:dc:8f: 38:77:bd:d4:30:e1:c0:b5:a0:9a:c1:56:48:02:f2:40:b2:b6: e4:e8:b7:0e:a7:e4:ff:ed:61:13:ce:d6:cb:b5:e3:5b:23:0c: 22:25:7f:06:8c:7d:1b:ec:3a:46:b1:80:cc:59:b0:1f:b1:43: 29:3b:b3:b4:31:5a:fb:87:52:6b:ed:28:98:c9:10:db:38:48: 09:99:55:c8:14:47:2f:42:9d:e0:2b:c1:c0:2e:50:1a:b8:48: 78:42:28:86:6e:b1:05:0f:fd:ad:66:37:4a:52:f8:64:6a:24: ee:b2:8f:9a:7b:b4:fb:64:01:77:06:b9:b9:fb:81:b3:48:e5: f8:f9:37:f7:b6:2c:eb:80:58:99:37:2a:44:b6:ca:f0:f7:fe: 62:93:58:d4:a9:56:05:66:1c:22:98:77:4a:25:5f:d5:92:b5: 6a:06:ea:6a:ed:73:3c:26:26:ca:0b:5d:e0:66:0c:f0:0d:fe: 64:98:4f:9d:2f:62:99:2b:f8:7b:b1:4d:a3:f6:92:5e:c2:d2: ad:6d:46:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJpDjZAEdZiAD3mArlGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNTVjMzNjOGIwMjA0YzQ0MGMwZjk3OGVhNTg1MjA4MDFl MmM1YzcwHhcNMjUxMjI2MDgwMDQyWhcNMjUxMjI3MDgwMDQyWjAzMTEwLwYDVQQD EyhjNmE5YTU3NGI5YzYyYzI2MGE2NDllMTFlZGRkY2YwNTkyNjA0YWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6RMN0sSOA/Oew0r9JH+pVM9WlZL GLMPgjMcCXVsx/n2WBYqvD6naW+fmwBEnkRvSei22OE/vdIw9VQz69tUnblsy/iq EZCgUBpfu0RVB0/+UVpzjX5s6WDWrg5G1k4hOX07/tb06rPDfndNyxggkW5CSFJp dL+Pb/ZGngcRyiPRz/EfI6MqsrOCxmKr7rv8C6R3LHP+njAYtGC++WGPLbgndecz wXUS5L0mMUGnT+EPnx7A+26QSS7az6LFPWoBS+5nsOh5zol3YZL+4gxl09tvmBuQ 3g/a0/UxtqSE+l4E5wMNTxPqZARmnSpMRGkSmHFGwuN6Yr4plXNNBsOvmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMappXS5xiwmCmSeEe3dzwWSYEruMB8GA1UdIwQY MBaAFJ1VwzyLAgTEQMD5eOpYUggB4sXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEt YzNhYjg3NzM4ZmU3LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEtYzNhYjg3NzM4ZmU3 LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASU8PnynP uam5GVOED1IYCeuznvKA0fP7sQaM7Sjq2ROJArGhvRkOWxpG94i4vDAiDwZEh9yP OHe91DDhwLWgmsFWSALyQLK25Oi3Dqfk/+1hE87Wy7XjWyMMIiV/Box9G+w6RrGA zFmwH7FDKTuztDFa+4dSa+0omMkQ2zhICZlVyBRHL0Kd4CvBwC5QGrhIeEIohm6x BQ/9rWY3SlL4ZGok7rKPmnu0+2QBdwa5ufuBs0jl+Pk397Ys64BYmTcqRLbK8Pf+ YpNY1KlWBWYcIph3SiVf1ZK1agbqau1zPCYmygtd4GYM8A3+ZJhPnS9imSv4e7FN o/aSXsLSrW1GoQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:21 2025 by rpki-client