This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json) Hash identifier: VIDZKk49qr37zoXcwrL+5n7fn930SZl1PPTJ3/nAVLM= Subject key identifier: 67:A7:9D:2D:89:F4:0E:3D:C4:A0:6B:B8:7F:17:92:8D:8A:C9:08:EE Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e Certificate serial: 019B5976452279161C1DBF1ED2A19B3BF8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft Manifest number: 0A5D Signing time: Fri 26 Dec 2025 07:01:21 +0000 Manifest this update: Fri 26 Dec 2025 07:01:21 +0000 Manifest next update: Sat 27 Dec 2025 07:01:21 +0000 Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: 3DyxFvqXaU+SED/yY6NgVAWmTMAZENVGM3C+rME3Ee4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:45:22:79:16:1c:1d:bf:1e:d2:a1:9b:3b:f8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737787cf2a870d91b11369f9d74591957602814e Validity Not Before: Dec 26 07:01:21 2025 GMT Not After : Dec 27 07:01:21 2025 GMT Subject: CN=67a79d2d89f40e3dc4a06bb87f17928d8ac908ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:52:7c:7e:ec:34:7c:0b:54:a9:25:f0:a8: 04:26:d3:e7:d2:72:f5:15:68:b0:38:e4:76:48:b4: 9f:c7:dd:41:d2:a6:f8:b9:20:ed:de:28:f4:25:a9: ff:76:f6:1c:80:9a:89:fa:fc:a0:69:40:7f:9f:d2: db:fa:11:f6:74:f6:a8:54:cf:1c:ab:8f:ac:c8:96: 9a:c2:f0:15:3b:0b:af:e4:84:81:e1:fc:1c:d5:03: 17:45:25:68:13:2c:ff:7b:0b:03:e0:78:39:9d:ec: fa:6d:e9:b6:58:8b:7a:72:e3:13:3b:5a:81:00:f9: 89:02:88:b6:56:3e:64:eb:86:d9:5a:a9:fd:2c:3b: fd:93:30:37:f6:a9:ab:5e:20:54:a7:e7:c8:ef:93: 12:c0:a8:14:22:cb:a1:a9:2d:12:81:da:dc:e1:87: ba:8d:61:9c:90:05:c4:ed:11:90:60:39:ea:a2:f4: b2:d5:bf:1d:f3:62:88:f0:8a:b7:d1:15:36:bd:63: 69:20:38:7c:9b:84:db:85:c8:14:17:38:14:5c:84: 0b:ca:ea:e1:1f:55:ee:39:67:c6:53:42:21:f0:56: d9:e0:97:8a:e6:87:b0:6e:9f:c5:fa:0d:86:1f:74: 96:2f:fe:4a:d5:13:55:08:89:68:03:ef:d7:e9:47: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A7:9D:2D:89:F4:0E:3D:C4:A0:6B:B8:7F:17:92:8D:8A:C9:08:EE X509v3 Authority Key Identifier: keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:03:6b:16:1a:2d:00:65:0f:70:c1:7e:31:9a:05:95:63: 2a:55:28:e9:42:98:9a:51:23:d1:6a:57:1c:71:9f:aa:a9:44: 00:f3:ec:fe:db:36:df:55:af:4c:0b:43:42:2c:3a:26:47:70: cc:9b:31:56:21:36:0a:a5:4a:16:66:ca:49:04:d8:20:1c:7d: 39:14:72:b7:47:35:1b:f8:32:05:ab:53:62:9a:dc:0d:77:c2: ce:31:fe:17:14:33:4f:96:e6:e2:9c:39:65:ed:5b:bf:bf:18: 9d:09:a3:3b:65:86:57:32:d4:02:e9:0e:ec:08:c6:20:87:b6: ad:ee:fd:17:f2:1e:50:9e:d2:eb:36:2b:b5:81:9d:46:05:4b: e8:43:e5:3d:d7:10:0b:63:a2:7f:9c:b2:da:a3:e0:f4:42:be: c8:13:03:33:a5:1f:68:20:86:0b:9d:7e:2b:39:55:e9:d8:32: e6:62:23:d5:1f:fe:e9:4d:ec:0c:f6:fa:54:11:aa:fb:e6:35: b1:bc:16:ac:2f:a0:a2:36:97:e2:c6:1e:3d:55:10:1c:63:69: 39:bd:38:65:82:b2:6c:e1:14:3e:7b:0f:6c:47:df:ab:66:af: 0e:9d:81:9d:49:29:78:44:07:70:6c:c4:4f:8c:9c:5c:af:79: 5d:f6:93:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdkUieRYcHb8e0qGbO/j5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzc4N2NmMmE4NzBkOTFiMTEzNjlmOWQ3NDU5MTk1NzYw MjgxNGUwHhcNMjUxMjI2MDcwMTIxWhcNMjUxMjI3MDcwMTIxWjAzMTEwLwYDVQQD Eyg2N2E3OWQyZDg5ZjQwZTNkYzRhMDZiYjg3ZjE3OTI4ZDhhYzkwOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiONSfH7sNHwLVKkl8KgEJtPn0nL1 FWiwOOR2SLSfx91B0qb4uSDt3ij0Jan/dvYcgJqJ+vygaUB/n9Lb+hH2dPaoVM8c q4+syJaawvAVOwuv5ISB4fwc1QMXRSVoEyz/ewsD4Hg5nez6bem2WIt6cuMTO1qB APmJAoi2Vj5k64bZWqn9LDv9kzA39qmrXiBUp+fI75MSwKgUIsuhqS0Sgdrc4Ye6 jWGckAXE7RGQYDnqovSy1b8d82KI8Iq30RU2vWNpIDh8m4TbhcgUFzgUXIQLyurh H1XuOWfGU0Ih8FbZ4JeK5oewbp/F+g2GH3SWL/5K1RNVCIloA+/X6UeoPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGennS2J9A49xKBruH8Xko2KyQjuMB8GA1UdIwQY MBaAFHN3h88qhw2RsRNp+ddFkZV2AoFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMt NjJjMDg1ODM0NGU4LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMtNjJjMDg1ODM0NGU4 LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4QDaxYa LQBlD3DBfjGaBZVjKlUo6UKYmlEj0WpXHHGfqqlEAPPs/ts231WvTAtDQiw6Jkdw zJsxViE2CqVKFmbKSQTYIBx9ORRyt0c1G/gyBatTYprcDXfCzjH+FxQzT5bm4pw5 Ze1bv78YnQmjO2WGVzLUAukO7AjGIIe2re79F/IeUJ7S6zYrtYGdRgVL6EPlPdcQ C2Oif5yy2qPg9EK+yBMDM6UfaCCGC51+KzlV6dgy5mIj1R/+6U3sDPb6VBGq++Y1 sbwWrC+gojaX4sYePVUQHGNpOb04ZYKybOEUPnsPbEffq2avDp2BnUkpeEQHcGzE T4ycXK95XfaTFA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:18 2025 by rpki-client