This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json) Hash identifier: nyLGsHOA5iWJXRlRejt5M/3ViiiKsTwGZHS4j9I+TKc= Subject key identifier: 6E:A6:0A:91:E0:14:6A:FA:B6:9E:5D:5A:0E:B4:7B:3D:8E:A5:AC:4E Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e Certificate serial: 019B1A28F763E319F7A21F1948FA56C76604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft Manifest number: 1773 Signing time: Sun 14 Dec 2025 00:00:50 +0000 Manifest this update: Sun 14 Dec 2025 00:00:50 +0000 Manifest next update: Mon 15 Dec 2025 00:00:50 +0000 Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: E3g/6BC1L1Ls9wDkiZH1F5ND2jaLuIQ3nG5DDeOEyVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:f7:63:e3:19:f7:a2:1f:19:48:fa:56:c7:66:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e Validity Not Before: Dec 14 00:00:50 2025 GMT Not After : Dec 15 00:00:50 2025 GMT Subject: CN=6ea60a91e0146afab69e5d5a0eb47b3d8ea5ac4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:92:3a:97:2c:65:2f:01:f1:31:b1:09:b0:16: c6:23:de:df:d5:41:f2:ce:1a:4e:8c:52:d6:0f:a8: a9:42:86:93:c4:38:91:6c:74:9f:52:86:e2:ed:dd: 08:2e:f2:f6:80:1e:90:b0:0b:8d:90:65:8d:4e:8b: bf:54:8d:de:38:24:2e:65:6b:7b:37:83:9d:4d:74: 98:e1:27:e2:5c:c6:97:9d:2c:df:24:5e:ce:40:e7: d8:43:44:25:09:50:bd:91:d6:77:31:88:6f:31:29: ef:fa:57:c2:db:a1:42:77:6d:e7:46:11:80:fd:8f: 1a:01:05:ce:85:9b:0a:fc:90:40:bc:68:61:f1:1a: b7:76:f9:e3:41:27:4c:5d:72:ad:76:63:d0:d3:6e: 8b:9b:e2:4f:62:06:68:b3:fa:42:a0:57:fa:9c:69: 6b:79:c4:5f:cd:b9:32:94:bd:47:cb:cf:4d:d8:22: 33:db:62:73:79:a5:fe:05:58:b6:fb:cc:b8:09:bf: 9a:4d:ea:45:88:a0:cd:65:55:c6:59:cc:f8:b5:f1: 42:6d:b5:dd:32:67:51:c7:33:08:4f:6f:14:29:6f: c9:a3:aa:3b:c1:4b:f5:e2:b4:3f:3d:7a:87:a1:4f: 85:76:61:23:64:7e:f0:56:e0:ca:d1:67:b4:ab:7e: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A6:0A:91:E0:14:6A:FA:B6:9E:5D:5A:0E:B4:7B:3D:8E:A5:AC:4E X509v3 Authority Key Identifier: keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6d:93:6f:74:1f:92:ec:6e:18:cf:f1:e6:50:73:af:51:a0: 6f:f0:9a:71:29:7a:e2:25:29:76:04:cd:33:75:1e:22:71:b1: 6f:3a:5c:2a:0e:d1:81:d6:ac:ab:7b:d1:04:1d:4c:a1:b0:5f: bd:e2:38:41:80:7a:ea:13:5e:61:bc:75:db:3f:7f:0c:d1:eb: c4:89:43:af:20:69:5d:c0:73:94:08:7a:26:6a:65:9c:d3:f9: f4:93:ac:7a:0d:fb:b3:fc:25:9c:8b:0e:f6:df:35:4a:a8:38: 68:de:c5:e1:af:1b:dd:48:34:59:db:1d:6a:e2:48:3f:d3:52: b6:db:cd:92:72:8c:90:1e:b5:78:38:4f:16:be:e7:24:f5:f2: 95:a5:c2:da:fc:ea:c8:1c:2e:cc:ac:f1:4c:65:cc:ef:25:c4: a1:76:ba:ec:06:e6:ae:aa:32:05:33:2f:7b:e2:ad:1f:d3:df: ad:47:fe:6b:3c:33:4b:74:67:a9:b5:5b:50:47:d7:ca:d1:4b: c4:6f:9f:16:d6:a8:60:b8:cb:1f:b5:9f:ee:9f:cb:e6:d9:bb: 69:3d:6d:62:95:80:f2:05:ca:cd:fd:ab:d9:bd:e5:d0:ff:7b: 19:b5:5a:17:35:1c:00:86:49:30:9f:45:c4:67:9a:62:ee:1e: 69:65:3e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKPdj4xn3oh8ZSPpWx2YEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDBiNjhiM2VjMTc5YjM1ZGNmZjVjNDY1ZGMyZDA0NjE5 OTI3NmUwHhcNMjUxMjE0MDAwMDUwWhcNMjUxMjE1MDAwMDUwWjAzMTEwLwYDVQQD Eyg2ZWE2MGE5MWUwMTQ2YWZhYjY5ZTVkNWEwZWI0N2IzZDhlYTVhYzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZI6lyxlLwHxMbEJsBbGI97f1UHy zhpOjFLWD6ipQoaTxDiRbHSfUobi7d0ILvL2gB6QsAuNkGWNTou/VI3eOCQuZWt7 N4OdTXSY4SfiXMaXnSzfJF7OQOfYQ0QlCVC9kdZ3MYhvMSnv+lfC26FCd23nRhGA /Y8aAQXOhZsK/JBAvGhh8Rq3dvnjQSdMXXKtdmPQ026Lm+JPYgZos/pCoFf6nGlr ecRfzbkylL1Hy89N2CIz22JzeaX+BVi2+8y4Cb+aTepFiKDNZVXGWcz4tfFCbbXd MmdRxzMIT28UKW/Jo6o7wUv14rQ/PXqHoU+FdmEjZH7wVuDK0We0q35zGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6mCpHgFGr6tp5dWg60ez2OpaxOMB8GA1UdIwQY MBaAFETQtos+wXmzXc/1xGXcLQRhmSduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82NWQ2YTItYTIyYy00ZTllLWFjZGYt OGUwYzZmZjAwYjc4LzEvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82NWQ2YTItYTIyYy00ZTllLWFjZGYtOGUwYzZmZjAwYjc4 LzEvUk5DMml6N0JlYk5kel9YRVpkd3RCR0daSjI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm2Tb3Qf kuxuGM/x5lBzr1Ggb/CacSl64iUpdgTNM3UeInGxbzpcKg7Rgdasq3vRBB1MobBf veI4QYB66hNeYbx12z9/DNHrxIlDryBpXcBzlAh6JmplnNP59JOseg37s/wlnIsO 9t81Sqg4aN7F4a8b3Ug0WdsdauJIP9NSttvNknKMkB61eDhPFr7nJPXylaXC2vzq yBwuzKzxTGXM7yXEoXa67AbmrqoyBTMve+KtH9PfrUf+azwzS3RnqbVbUEfXytFL xG+fFtaoYLjLH7Wf7p/L5tm7aT1tYpWA8gXKzf2r2b3l0P97GbVaFzUcAIZJMJ9F xGeaYu4eaWU+3g== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:17 2025 by rpki-client