This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json) Hash identifier: Ti9qalSnV7eRI/BljIpeIwRlHSFYx90gzpBAe8yx+dY= Subject key identifier: C2:B0:C6:BC:50:C2:4A:1E:2C:3F:15:D8:EB:8C:A8:24:CF:6A:88:E3 Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e Certificate serial: 019B5976204E24465E70F4BB8B3480C58578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 07:01:12 +0000 Manifest this update: Fri 26 Dec 2025 07:01:12 +0000 Manifest next update: Sat 27 Dec 2025 07:01:12 +0000 Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: /LDyUm7ChRxsuZvRuzGPYa6H2i+Y7O9pzASKGkRWkCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:20:4e:24:46:5e:70:f4:bb:8b:34:80:c5:85:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e Validity Not Before: Dec 26 07:01:12 2025 GMT Not After : Dec 27 07:01:12 2025 GMT Subject: CN=c2b0c6bc50c24a1e2c3f15d8eb8ca824cf6a88e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:09:72:64:66:18:4f:59:38:c1:28:ae:89:c8: 01:57:ac:51:82:cc:31:2f:52:4a:e9:06:6d:48:df: 78:2d:a0:7e:0b:d4:d3:22:2d:01:49:0a:1c:af:54: 21:12:e3:50:34:21:b2:28:8a:ff:b6:ed:b0:1a:4e: 74:59:94:7a:3e:21:8c:76:ab:98:65:5d:1c:ad:c0: 00:0f:93:06:63:c1:bc:fb:68:0f:20:fe:cc:27:cf: 25:80:eb:bb:f3:b1:58:00:9e:05:69:c9:57:2c:7a: 42:15:01:e9:eb:58:ac:c4:da:68:a2:c3:1e:07:ad: 37:3a:46:2b:2c:86:62:3a:df:bc:50:3a:37:dd:20: 2f:95:01:02:1b:c2:c0:9b:74:81:79:60:de:5c:59: 54:fe:03:9c:3a:23:2d:fe:e0:d0:00:6d:74:06:14: 8a:3e:26:4b:18:66:63:38:a7:1b:0c:2f:6c:64:97: 51:bd:a8:14:c1:2c:b0:5f:7c:78:66:f9:9c:49:98: 3a:80:4c:ca:71:1a:6c:d5:cb:f3:5a:18:2d:e8:95: 0d:33:83:6a:23:df:17:23:5a:06:7f:3a:a3:c7:08: 31:17:22:80:66:67:6a:57:16:5d:38:6f:0f:37:04: 98:44:b4:a3:79:b7:e6:65:c2:b9:24:56:21:49:1d: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:C6:BC:50:C2:4A:1E:2C:3F:15:D8:EB:8C:A8:24:CF:6A:88:E3 X509v3 Authority Key Identifier: keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b8:d0:5a:a3:07:67:8c:3c:38:7b:d2:53:2b:4b:e8:eb:3b: e2:d4:5b:33:7d:35:2b:9d:d4:53:6b:61:b5:83:12:97:a9:8c: ab:90:0d:0e:3a:84:0b:e8:6e:a8:f7:00:87:69:be:20:90:85: af:7b:9d:f4:3c:96:ca:95:b1:76:7e:29:81:28:6b:d9:f4:15: a8:c9:f4:0c:69:79:13:8e:6b:b0:bb:de:54:64:ea:82:13:2c: 0f:77:84:70:af:2c:43:1e:49:53:af:57:d2:71:50:95:90:23: c6:79:3e:0f:aa:5b:45:d2:51:d0:ca:7d:3a:b0:30:3e:c4:98: 3b:f9:ef:4d:13:94:3a:e1:85:27:d0:ba:03:c9:d1:25:b2:57: f4:c7:3b:33:ab:5f:bc:ab:7e:2a:73:6f:f5:9b:f8:6b:51:55: 6c:0b:9f:0c:55:10:6d:dc:9d:95:d2:7b:b3:9b:79:b7:3a:30: 82:79:49:0c:5b:d0:64:99:77:6f:d7:c7:5e:7b:34:5f:2a:b8: fc:29:61:65:47:9f:00:b5:08:16:82:92:c9:60:3a:44:b0:8c: dd:24:f7:4a:f7:5e:6d:7e:ab:e1:4b:9a:38:94:7e:60:61:d0: e7:d3:e8:30:f6:f2:86:f5:3c:0a:10:a3:a3:1c:66:f7:17:a2: 71:69:6a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdiBOJEZecPS7izSAxYV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYjBjYjJhZTQ2ZDIzODI1ODFmZThiNzQ3ZTMzMWI0Njgy NGY0MWUwHhcNMjUxMjI2MDcwMTEyWhcNMjUxMjI3MDcwMTEyWjAzMTEwLwYDVQQD EyhjMmIwYzZiYzUwYzI0YTFlMmMzZjE1ZDhlYjhjYTgyNGNmNmE4OGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywlyZGYYT1k4wSiuicgBV6xRgswx L1JK6QZtSN94LaB+C9TTIi0BSQocr1QhEuNQNCGyKIr/tu2wGk50WZR6PiGMdquY ZV0crcAAD5MGY8G8+2gPIP7MJ88lgOu787FYAJ4FaclXLHpCFQHp61isxNpoosMe B603OkYrLIZiOt+8UDo33SAvlQECG8LAm3SBeWDeXFlU/gOcOiMt/uDQAG10BhSK PiZLGGZjOKcbDC9sZJdRvagUwSywX3x4ZvmcSZg6gEzKcRps1cvzWhgt6JUNM4Nq I98XI1oGfzqjxwgxFyKAZmdqVxZdOG8PNwSYRLSjebfmZcK5JFYhSR1lWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKwxrxQwkoeLD8V2OuMqCTPaojjMB8GA1UdIwQY MBaAFGuwyyrkbSOCWB/ot0fjMbRoJPQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZjZjNWYtZWFmOS00NmNlLTllMTYt ZjI5MGM1NjNmZjUwLzEvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wZjZjNWYtZWFmOS00NmNlLTllMTYtZjI5MGM1NjNmZjUw LzEvYTdETEt1UnRJNEpZSC1pM1ItTXh0R2drOUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrjQWqMH Z4w8OHvSUytL6Os74tRbM301K53UU2thtYMSl6mMq5ANDjqEC+huqPcAh2m+IJCF r3ud9DyWypWxdn4pgShr2fQVqMn0DGl5E45rsLveVGTqghMsD3eEcK8sQx5JU69X 0nFQlZAjxnk+D6pbRdJR0Mp9OrAwPsSYO/nvTROUOuGFJ9C6A8nRJbJX9Mc7M6tf vKt+KnNv9Zv4a1FVbAufDFUQbdydldJ7s5t5tzowgnlJDFvQZJl3b9fHXns0Xyq4 /ClhZUefALUIFoKSyWA6RLCM3ST3SvdebX6r4UuaOJR+YGHQ59PoMPbyhvU8ChCj oxxm9xeicWlqvQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:23 2025 by rpki-client