This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json) Hash identifier: vhmR8jBc6hmciZC8DrCcmqgsX6JfCeSzrov2WHQkxLc= Subject key identifier: 0F:CC:31:21:59:9E:AE:CF:0E:38:73:E6:EE:09:F4:F8:F5:66:92:E3 Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Certificate serial: 019B1F86AB2E08320E7B04CE35CE02531D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft Manifest number: 022D Signing time: Mon 15 Dec 2025 01:01:17 +0000 Manifest this update: Mon 15 Dec 2025 01:01:17 +0000 Manifest next update: Tue 16 Dec 2025 01:01:17 +0000 Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: zOlMWomYItOG6xA7DwAon8+fFFtsv/35szcnQ+GYN0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:ab:2e:08:32:0e:7b:04:ce:35:ce:02:53:1d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Validity Not Before: Dec 15 01:01:17 2025 GMT Not After : Dec 16 01:01:17 2025 GMT Subject: CN=0fcc3121599eaecf0e3873e6ee09f4f8f56692e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:07:9e:b9:55:58:b3:e3:be:5a:f8:b1:5e: e4:c0:34:e3:e3:71:cc:57:b8:c3:34:bd:9d:13:c4: 40:35:7e:78:62:0a:26:cc:12:99:21:2e:00:4f:46: f5:e8:bd:16:50:4f:1e:7e:a5:47:85:61:c6:b7:e0: bf:d2:73:3d:c3:c0:36:bf:ce:3b:9c:0b:41:a6:0e: 49:cd:28:b6:e2:75:58:ca:85:e6:ad:85:9c:94:98: df:dc:12:77:32:16:94:fc:62:af:ce:1b:ae:23:e8: e9:57:f3:00:11:bc:07:c6:c6:a2:c7:62:b1:35:41: 1c:d1:8c:ac:e7:f2:e5:e4:f7:38:1c:21:89:97:68: 1a:82:65:4d:6a:d7:6a:fa:a9:04:c6:93:4c:b9:ba: ae:6d:af:cb:9d:eb:4d:3b:0e:f4:1f:22:46:1e:b7: 49:5f:9b:97:77:15:de:84:9b:6f:8a:66:6f:33:42: 01:47:32:a5:fc:7f:9b:32:cd:19:dc:0e:dd:72:db: be:e1:86:07:b8:c6:ce:c3:a6:68:1c:81:44:74:e2: b0:bc:94:43:f1:a4:a5:66:80:0c:f2:60:95:db:81: 2d:da:36:b7:51:ae:f0:16:7c:4a:d2:78:7d:14:e4: 4f:39:17:83:19:2d:02:e4:0e:e7:05:04:7f:c9:a8: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CC:31:21:59:9E:AE:CF:0E:38:73:E6:EE:09:F4:F8:F5:66:92:E3 X509v3 Authority Key Identifier: keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:36:9d:4e:04:34:8d:ca:2e:0e:9b:38:c7:7f:d8:14:f6:69: 7c:35:be:83:d6:f4:1e:a9:0a:cc:1a:7a:18:53:b7:77:71:3f: 75:c6:19:c2:b4:31:64:29:83:e4:bb:57:1f:7e:dd:03:c0:4c: b8:6a:21:a5:65:63:4a:72:59:20:19:20:5b:6e:95:3e:a7:a7: e3:cf:cb:cf:e8:79:3b:a4:19:f1:b6:3f:6b:76:ff:97:05:a0: 1c:52:83:cd:f2:d8:9e:f7:a6:5c:50:f7:d7:de:84:e4:91:65: 71:dd:11:e1:46:f7:b2:58:e1:bd:c4:f8:4d:83:e6:46:c3:7d: 8b:8f:c3:6b:c4:d3:e5:95:4d:e0:b5:06:d2:01:49:bd:df:23: 92:11:87:2c:c5:6e:a8:1f:39:ad:2a:cc:8a:3e:75:71:21:01: 4c:85:39:3d:3e:2f:ac:33:24:a1:da:a2:7d:9c:00:7e:48:5f: a7:af:78:bc:16:8e:d0:8b:1f:83:74:16:54:19:88:e3:d8:f4: a1:1b:c2:29:95:ca:f8:da:1d:6e:01:f1:86:00:aa:00:d1:2a: c3:48:dd:19:b7:ba:6e:ce:df:f6:f7:ec:bb:0d:35:61:1f:5c: ee:47:77:19:4f:53:13:c3:14:4a:37:61:ff:c6:09:a6:8b:88: 27:62:1e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhqsuCDIOewTONc4CUx1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTFiZGE2Y2RjODk4ZjY3NDQ0MWZjZTVjNzQyMWI0NmY2 MTFkNTkwHhcNMjUxMjE1MDEwMTE3WhcNMjUxMjE2MDEwMTE3WjAzMTEwLwYDVQQD EygwZmNjMzEyMTU5OWVhZWNmMGUzODczZTZlZTA5ZjRmOGY1NjY5MmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeoHnrlVWLPjvlr4sV7kwDTj43HM V7jDNL2dE8RANX54YgomzBKZIS4AT0b16L0WUE8efqVHhWHGt+C/0nM9w8A2v847 nAtBpg5JzSi24nVYyoXmrYWclJjf3BJ3MhaU/GKvzhuuI+jpV/MAEbwHxsaix2Kx NUEc0Yys5/Ll5Pc4HCGJl2gagmVNatdq+qkExpNMubquba/LnetNOw70HyJGHrdJ X5uXdxXehJtvimZvM0IBRzKl/H+bMs0Z3A7dctu+4YYHuMbOw6ZoHIFEdOKwvJRD 8aSlZoAM8mCV24Et2ja3Ua7wFnxK0nh9FORPOReDGS0C5A7nBQR/yai+TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/MMSFZnq7PDjhz5u4J9Pj1ZpLjMB8GA1UdIwQY MBaAFP5RvabNyJj2dEQfzlx0IbRvYR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTct ZDRjMGM4OGMwNWRmLzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTctZDRjMGM4OGMwNWRm LzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzadTgQ0 jcouDps4x3/YFPZpfDW+g9b0HqkKzBp6GFO3d3E/dcYZwrQxZCmD5LtXH37dA8BM uGohpWVjSnJZIBkgW26VPqen48/Lz+h5O6QZ8bY/a3b/lwWgHFKDzfLYnvemXFD3 196E5JFlcd0R4Ub3sljhvcT4TYPmRsN9i4/Da8TT5ZVN4LUG0gFJvd8jkhGHLMVu qB85rSrMij51cSEBTIU5PT4vrDMkodqifZwAfkhfp694vBaO0Isfg3QWVBmI49j0 oRvCKZXK+NodbgHxhgCqANEqw0jdGbe6bs7f9vfsuw01YR9c7kd3GU9TE8MUSjdh /8YJpouIJ2Ie3g== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:35 2025 by rpki-client