This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json) Hash identifier: n0SBxOuu/cMvCUxKc0V9fNrOV/b/UKEzRDGTzxzNowg= Subject key identifier: 23:9C:99:57:2D:A1:C9:1B:38:8D:85:2F:7C:00:37:78:2E:FF:26:36 Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Certificate serial: 019B10EF92E770329131EFA30A63D39C362D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft Manifest number: 024F Signing time: Fri 12 Dec 2025 05:01:34 +0000 Manifest this update: Fri 12 Dec 2025 05:01:34 +0000 Manifest next update: Sat 13 Dec 2025 05:01:34 +0000 Files and hashes: 1: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: M/p0p1uXQPVIgZr0U0xbIjynvVp87j7AyUTF8CNoiI8=) 2: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (hash: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:92:e7:70:32:91:31:ef:a3:0a:63:d3:9c:36:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e Validity Not Before: Dec 12 05:01:34 2025 GMT Not After : Dec 13 05:01:34 2025 GMT Subject: CN=239c99572da1c91b388d852f7c0037782eff2636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:89:f8:bf:34:95:c4:fe:ac:a9:bf:b9:5f: ca:c8:b7:ec:04:5a:02:88:4c:d1:5f:3c:58:7c:d8: eb:08:ce:1b:23:da:34:01:09:8e:c4:21:a1:57:ef: 4c:08:7e:08:50:0a:b6:b1:df:0c:75:6e:e1:42:ff: c7:fc:24:f1:52:07:60:e4:7b:88:84:4a:17:c6:c7: c8:b0:16:39:d4:fb:ec:25:c5:40:5d:4d:91:ec:d6: 75:3e:36:33:5a:6c:06:62:07:4f:a3:a7:77:eb:51: a8:a4:48:19:e9:e1:1d:ee:64:b8:a5:d2:7a:46:74: 44:4f:6c:55:93:26:9d:e3:a4:63:e0:90:4d:44:1c: 33:c7:98:c2:c8:31:9b:7f:b8:a2:38:64:84:d0:07: 50:6f:dc:52:64:ce:46:6d:ae:82:b9:0d:65:8c:c4: e0:2c:30:71:84:11:f5:ee:6c:da:1b:c5:66:42:c3: 4f:53:a9:ba:58:48:59:78:72:a5:cb:aa:de:6e:66: 6d:1e:a5:f4:8f:85:8d:a7:bb:75:6c:15:a8:12:39: e8:02:96:a2:36:c8:b3:a9:61:12:eb:ed:fc:c0:3e: ad:09:8f:b2:a0:e1:62:78:9a:63:53:dd:37:b0:68: a8:f6:1f:c0:f4:56:d8:ae:fa:bb:3f:81:ef:41:bf: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9C:99:57:2D:A1:C9:1B:38:8D:85:2F:7C:00:37:78:2E:FF:26:36 X509v3 Authority Key Identifier: keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7f:e3:71:ec:41:d7:97:50:d6:8c:37:25:35:6f:75:fa:29: 68:84:c8:c6:87:03:dd:78:d9:b2:c7:ed:8d:b0:f0:94:60:e8: df:21:a3:ce:81:c5:f2:3c:87:04:e7:c7:7d:f5:16:ca:17:d4: db:fd:6c:67:db:be:0d:70:7b:f4:6c:cf:4e:a1:00:1f:92:1c: 38:89:77:ed:bc:f3:b6:53:09:38:1b:89:54:4c:42:a5:58:b8: 27:35:82:19:14:a0:97:e4:33:c4:2b:5a:e2:e1:0f:06:39:03: cb:75:6d:e3:4c:26:c1:b5:e4:0d:34:27:23:b0:ad:7a:40:94: 72:42:47:7a:e6:91:f0:d1:4b:7d:56:bf:30:bd:0d:95:ea:4c: 35:9b:c3:3b:05:e8:d2:56:62:84:56:9f:8f:15:76:a7:eb:e6: fd:b4:8e:46:6d:67:eb:3b:de:4e:ec:44:76:5f:2a:9a:34:f3: 21:d2:33:56:60:07:ea:b4:76:f9:09:19:5d:8d:cd:dc:91:eb: 65:c4:89:61:2b:c3:d7:20:48:6c:96:98:41:78:43:66:73:a3: e0:50:e7:7b:24:95:a1:4b:e2:3c:6d:88:52:31:50:c1:bf:28: 40:57:85:81:b2:a0:1c:b7:55:77:f1:0c:91:a7:92:7a:d7:34: 12:78:19:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ75LncDKRMe+jCmPTnDYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMDdiZGI5ZDU4NTUxZTE0OTJhYzQzYTIzYjliNjI5NjY5 Y2ViNmUwHhcNMjUxMjEyMDUwMTM0WhcNMjUxMjEzMDUwMTM0WjAzMTEwLwYDVQQD EygyMzljOTk1NzJkYTFjOTFiMzg4ZDg1MmY3YzAwMzc3ODJlZmYyNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IWJ+L80lcT+rKm/uV/KyLfsBFoC iEzRXzxYfNjrCM4bI9o0AQmOxCGhV+9MCH4IUAq2sd8MdW7hQv/H/CTxUgdg5HuI hEoXxsfIsBY51PvsJcVAXU2R7NZ1PjYzWmwGYgdPo6d361GopEgZ6eEd7mS4pdJ6 RnRET2xVkyad46Rj4JBNRBwzx5jCyDGbf7iiOGSE0AdQb9xSZM5Gba6CuQ1ljMTg LDBxhBH17mzaG8VmQsNPU6m6WEhZeHKly6rebmZtHqX0j4WNp7t1bBWoEjnoApai NsizqWES6+38wD6tCY+yoOFieJpjU903sGio9h/A9FbYrvq7P4HvQb/mxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOcmVctockbOI2FL3wAN3gu/yY2MB8GA1UdIwQY MBaAFDMHvbnVhVHhSSrEOiO5tilmnOtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAt MWIxYzgyNmU3YjhlLzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zODA4NjQtMjE1NC00N2Q5LWE4YjAtMWIxYzgyNmU3Yjhl LzEvTXdlOXVkV0ZVZUZKS3NRNkk3bTJLV2FjNjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgn/jcexB 15dQ1ow3JTVvdfopaITIxocD3XjZssftjbDwlGDo3yGjzoHF8jyHBOfHffUWyhfU 2/1sZ9u+DXB79GzPTqEAH5IcOIl37bzztlMJOBuJVExCpVi4JzWCGRSgl+QzxCta 4uEPBjkDy3Vt40wmwbXkDTQnI7CtekCUckJHeuaR8NFLfVa/ML0NlepMNZvDOwXo 0lZihFafjxV2p+vm/bSORm1n6zveTuxEdl8qmjTzIdIzVmAH6rR2+QkZXY3N3JHr ZcSJYSvD1yBIbJaYQXhDZnOj4FDneySVoUviPG2IUjFQwb8oQFeFgbKgHLdVd/EM kaeSetc0EngZig== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:18 2025 by rpki-client