This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json) Hash identifier: 65hOqIXUPIeqAgfFlFCe5LkpMSOu0/8mqxQX4khPdTs= Subject key identifier: CF:E3:26:C0:15:36:71:56:DA:81:9C:B5:E0:48:51:52:F7:44:C2:DD Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18 Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618 Certificate serial: 019B5A5163B3D218EAD03469D8D2F4832C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft Manifest number: 0446 Signing time: Fri 26 Dec 2025 11:00:41 +0000 Manifest this update: Fri 26 Dec 2025 11:00:41 +0000 Manifest next update: Sat 27 Dec 2025 11:00:41 +0000 Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: yYkudMvgxR++2W3zNXXYrEpBQ8Lv1qYxQDsnIadexiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:63:b3:d2:18:ea:d0:34:69:d8:d2:f4:83:2c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618 Validity Not Before: Dec 26 11:00:41 2025 GMT Not After : Dec 27 11:00:41 2025 GMT Subject: CN=cfe326c015367156da819cb5e0485152f744c2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:fa:7f:fa:95:65:9e:47:de:82:a5:0b:cf: d7:17:d3:e5:53:ca:a3:e2:87:84:f2:74:e6:9c:27: 27:ee:2f:39:dc:b4:46:a1:cd:10:08:65:73:fd:de: 7d:58:1c:ae:46:c9:89:c9:67:a9:53:d1:66:4e:bc: 1c:25:fa:da:70:fc:01:54:29:ae:4f:c8:b4:b7:51: 7e:3e:0c:91:86:8c:e4:9c:43:f4:00:94:b8:69:72: 87:ab:9c:24:a4:31:31:0d:1e:57:43:b6:6d:40:24: 2d:c8:7a:93:8a:d7:b9:2f:3b:64:9e:a2:e5:97:74: 94:42:49:1d:39:2a:81:15:68:29:04:74:6d:18:0e: d8:2b:21:ae:4d:b6:29:9d:8b:7d:16:c6:23:a5:a9: f7:36:0d:f4:33:18:f1:bd:bf:f9:d0:bf:a4:2d:1c: 15:55:fa:be:10:ce:07:fa:8a:d4:5c:84:1e:2c:65: 35:71:78:63:51:d9:71:90:a4:e1:d7:fe:7e:54:6c: 80:97:39:14:e3:34:40:3c:6a:8c:88:13:b2:4d:3e: cc:77:3e:bf:b8:98:8d:31:a1:e9:d6:2b:13:e4:f4: b9:8a:59:e4:35:94:1c:7e:81:91:ec:9f:58:7b:98: 9a:8c:0d:57:ff:21:c9:37:e3:1b:f1:7d:36:07:77: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E3:26:C0:15:36:71:56:DA:81:9C:B5:E0:48:51:52:F7:44:C2:DD X509v3 Authority Key Identifier: keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4f:52:cc:52:4d:30:13:71:6b:1e:90:a5:dd:d1:d9:04:a6: fb:dd:b3:c9:0f:cc:60:5c:50:96:1c:9b:b7:1d:ef:55:08:cd: 19:a4:b1:91:0a:ca:9b:3b:43:1f:c4:26:ec:84:70:2b:b5:2d: 36:4b:a5:8b:5b:66:31:f5:2c:c0:12:71:f9:99:b8:c2:43:a2: a7:44:11:6f:6f:27:4e:5c:82:01:41:0a:59:1a:88:08:ed:15: cc:78:97:6f:57:34:52:90:15:29:06:6d:d4:d2:83:69:eb:72: 8e:74:de:91:1c:4a:96:81:fb:23:d7:be:60:01:70:04:6b:aa: d7:7f:de:24:bc:cc:98:11:d3:74:4f:e0:9c:2d:a9:00:35:d9: 7c:65:44:6e:8d:19:31:1f:72:13:27:1f:2d:c2:3c:ee:73:77: fd:10:01:9e:48:83:f6:a2:1c:aa:c7:38:fb:8f:61:83:92:a1: 88:c6:26:1e:8f:d3:4c:a5:af:59:b7:9a:b9:1e:13:5f:13:44: ce:ff:9b:a8:25:19:48:b4:da:2c:9b:20:b9:f5:63:c5:42:8c: da:00:dd:93:86:23:c0:55:34:95:b3:7c:b8:bb:a5:f1:bc:cb: 84:2f:07:4e:64:f0:4c:90:94:eb:30:85:9d:13:88:9c:50:d2: 9a:d8:fa:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUWOz0hjq0DRp2NL0gyxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2Q3MzAxZTcxNTQ3N2QyNjgwOWJiYWJiNGNkMDMyYmQz YjU2MTgwHhcNMjUxMjI2MTEwMDQxWhcNMjUxMjI3MTEwMDQxWjAzMTEwLwYDVQQD EyhjZmUzMjZjMDE1MzY3MTU2ZGE4MTljYjVlMDQ4NTE1MmY3NDRjMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PX6f/qVZZ5H3oKlC8/XF9PlU8qj 4oeE8nTmnCcn7i853LRGoc0QCGVz/d59WByuRsmJyWepU9FmTrwcJfracPwBVCmu T8i0t1F+PgyRhozknEP0AJS4aXKHq5wkpDExDR5XQ7ZtQCQtyHqTite5LztknqLl l3SUQkkdOSqBFWgpBHRtGA7YKyGuTbYpnYt9FsYjpan3Ng30Mxjxvb/50L+kLRwV Vfq+EM4H+orUXIQeLGU1cXhjUdlxkKTh1/5+VGyAlzkU4zRAPGqMiBOyTT7Mdz6/ uJiNMaHp1isT5PS5ilnkNZQcfoGR7J9Ye5iajA1X/yHJN+Mb8X02B3cvFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/jJsAVNnFW2oGcteBIUVL3RMLdMB8GA1UdIwQY MBaAFIp9cwHnFUd9JoCburtM0DK9O1YYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iNjY5ODYtOGY2Yi00NmI5LWJjY2Qt ZjczNjlmOWRjYzljLzEvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iNjY5ODYtOGY2Yi00NmI5LWJjY2QtZjczNjlmOWRjYzlj LzEvaW4xekFlY1ZSMzBtZ0p1NnUwelFNcjA3VmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU9SzFJN MBNxax6Qpd3R2QSm+92zyQ/MYFxQlhybtx3vVQjNGaSxkQrKmztDH8Qm7IRwK7Ut Nkuli1tmMfUswBJx+Zm4wkOip0QRb28nTlyCAUEKWRqICO0VzHiXb1c0UpAVKQZt 1NKDaetyjnTekRxKloH7I9e+YAFwBGuq13/eJLzMmBHTdE/gnC2pADXZfGVEbo0Z MR9yEycfLcI87nN3/RABnkiD9qIcqsc4+49hg5KhiMYmHo/TTKWvWbeauR4TXxNE zv+bqCUZSLTaLJsgufVjxUKM2gDdk4YjwFU0lbN8uLul8bzLhC8HTmTwTJCU6zCF nROInFDSmtj6YA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:51 2025 by rpki-client