This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft File: Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft (raw, json) Hash identifier: lFmctJPJ5J+MpLeOfdOirxoq0lUuIR/Hil7bwpDKDic= Subject key identifier: B7:B8:4F:32:09:8D:E5:45:68:FF:C3:3C:7E:E8:7B:05:06:C9:65:DA Authority key identifier: 21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71 Certificate issuer: /CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671 Certificate serial: 019B5A882D8C5D95A9586BB779FF1A66BF2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft Manifest number: 0120 Signing time: Fri 26 Dec 2025 12:00:32 +0000 Manifest this update: Fri 26 Dec 2025 12:00:32 +0000 Manifest next update: Sat 27 Dec 2025 12:00:32 +0000 Files and hashes: 1: Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl (hash: oIz4eCb3TEfB931BN9C+r/2f4zsmvsUxU8Lvg60PrUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:2d:8c:5d:95:a9:58:6b:b7:79:ff:1a:66:bf:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dea5f92e929d6744d4c8da6a5dc92ea32bf671 Validity Not Before: Dec 26 12:00:32 2025 GMT Not After : Dec 27 12:00:32 2025 GMT Subject: CN=b7b84f32098de54568ffc33c7ee87b0506c965da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:63:a3:7a:43:e5:8b:77:36:eb:f3:81:0e: a6:f4:64:3c:57:51:d7:8a:a8:75:a3:19:f1:32:82: 8d:9a:e6:9e:b9:31:e5:fe:14:7e:44:80:b0:3b:7c: 7b:30:55:95:37:fa:f4:70:76:88:af:17:8f:a1:a8: 4d:f7:8a:57:22:30:8c:d5:bc:bd:e6:24:b2:16:44: 91:0a:e6:64:fe:f2:6c:b4:62:5d:22:d0:10:62:ce: 03:22:f1:59:76:a6:76:3b:86:d4:9b:b2:69:0c:1f: ec:68:77:29:e5:a8:b2:fc:71:63:67:8d:b3:a6:62: 9b:81:12:fb:69:9e:77:38:46:9a:11:31:05:2e:c0: 83:a4:52:22:d5:65:2c:a7:8c:c7:e8:5f:0e:bb:91: 68:11:cf:31:c8:27:3c:16:99:43:03:54:06:60:45: 29:df:84:4c:54:5d:e1:12:93:c4:4d:79:39:22:fb: 14:2c:0c:23:32:89:34:3b:78:35:f2:12:27:4f:8a: c8:f0:2a:f9:73:f5:8a:01:51:ac:12:aa:c6:5a:e8: 96:b9:18:9c:9b:62:5f:6a:4d:4c:58:dc:2e:95:17: db:b4:22:27:b1:a0:60:02:a1:88:de:a8:91:2d:2a: b5:fd:48:fa:90:88:69:1e:52:4e:7a:65:c0:5e:80: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B8:4F:32:09:8D:E5:45:68:FF:C3:3C:7E:E8:7B:05:06:C9:65:DA X509v3 Authority Key Identifier: keyid:21:DE:A5:F9:2E:92:9D:67:44:D4:C8:DA:6A:5D:C9:2E:A3:2B:F6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id6l-S6SnWdE1Mjaal3JLqMr9nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dc36a0-dd43-4557-9bc4-dd95ac61970f/1/Id6l-S6SnWdE1Mjaal3JLqMr9nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9c:39:9b:5c:6c:6c:e1:91:2f:c2:12:d0:99:cb:06:b5:1e: 5b:79:02:61:f2:6f:15:5d:1f:e0:31:21:66:35:60:bd:6a:0d: c7:98:e1:02:11:21:0f:87:c7:a5:5d:29:03:12:95:91:59:4a: 66:32:44:b4:e8:08:80:2f:12:17:f8:e4:9f:67:98:83:a6:5e: 89:8a:29:e7:53:d5:de:78:bc:a9:32:8b:b6:78:16:c3:43:3e: ea:30:fc:cc:a3:6e:61:9e:f7:16:fa:dc:a9:b9:9a:fe:8b:c5: 1b:d0:d0:1c:01:2b:80:24:a3:86:a0:59:b0:e0:60:88:a0:a1: c7:9b:5b:f1:53:68:23:23:12:13:c0:1c:b4:4e:60:a3:89:17: dc:fb:d6:bb:d5:29:fc:b5:f9:15:7b:29:cd:aa:e6:c9:2f:b9: 0e:01:76:73:5b:17:3a:b9:34:96:08:7d:b5:c7:4e:41:51:78: 0c:ae:89:28:be:03:4a:6e:93:00:97:e6:92:e0:34:08:83:ac: 55:78:86:df:fc:5b:c1:e7:38:59:2e:c0:40:16:ef:00:53:3c: 57:dd:d5:bc:6d:da:5b:b5:17:22:31:e4:2c:87:0e:8d:64:b2: 10:87:5d:f9:6e:db:8b:6f:20:98:47:cc:ad:cd:65:0f:5a:95: 91:9e:dd:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiC2MXZWpWGu3ef8aZr8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGVhNWY5MmU5MjlkNjc0NGQ0YzhkYTZhNWRjOTJlYTMy YmY2NzEwHhcNMjUxMjI2MTIwMDMyWhcNMjUxMjI3MTIwMDMyWjAzMTEwLwYDVQQD EyhiN2I4NGYzMjA5OGRlNTQ1NjhmZmMzM2M3ZWU4N2IwNTA2Yzk2NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJljo3pD5Yt3NuvzgQ6m9GQ8V1HX iqh1oxnxMoKNmuaeuTHl/hR+RICwO3x7MFWVN/r0cHaIrxePoahN94pXIjCM1by9 5iSyFkSRCuZk/vJstGJdItAQYs4DIvFZdqZ2O4bUm7JpDB/saHcp5aiy/HFjZ42z pmKbgRL7aZ53OEaaETEFLsCDpFIi1WUsp4zH6F8Ou5FoEc8xyCc8FplDA1QGYEUp 34RMVF3hEpPETXk5IvsULAwjMok0O3g18hInT4rI8Cr5c/WKAVGsEqrGWuiWuRic m2Jfak1MWNwulRfbtCInsaBgAqGI3qiRLSq1/Uj6kIhpHlJOemXAXoBceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe4TzIJjeVFaP/DPH7oewUGyWXaMB8GA1UdIwQY MBaAFCHepfkukp1nRNTI2mpdyS6jK/ZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ2bC1TNlNuV2RFMU1qYWFsM0pMcU1yOW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYzM2YTAtZGQ0My00NTU3LTliYzQt ZGQ5NWFjNjE5NzBmLzEvSWQ2bC1TNlNuV2RFMU1qYWFsM0pMcU1yOW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kYzM2YTAtZGQ0My00NTU3LTliYzQtZGQ5NWFjNjE5NzBm LzEvSWQ2bC1TNlNuV2RFMU1qYWFsM0pMcU1yOW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5w5m1xs bOGRL8IS0JnLBrUeW3kCYfJvFV0f4DEhZjVgvWoNx5jhAhEhD4fHpV0pAxKVkVlK ZjJEtOgIgC8SF/jkn2eYg6ZeiYop51PV3ni8qTKLtngWw0M+6jD8zKNuYZ73Fvrc qbma/ovFG9DQHAErgCSjhqBZsOBgiKChx5tb8VNoIyMSE8ActE5go4kX3PvWu9Up /LX5FXspzarmyS+5DgF2c1sXOrk0lgh9tcdOQVF4DK6JKL4DSm6TAJfmkuA0CIOs VXiG3/xbwec4WS7AQBbvAFM8V93VvG3aW7UXIjHkLIcOjWSyEIdd+W7bi28gmEfM rc1lD1qVkZ7dlg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:25 2025 by rpki-client