This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json) Hash identifier: a7yeJwLwjw0dpsPjfM0FQos2qiRTX4APogL1GXbadIM= Subject key identifier: 7A:3E:EF:AC:0A:E4:5A:CB:F5:72:E7:54:7B:BA:B8:30:2D:BB:F7:63 Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Certificate serial: 019B217498EF5F39931DDE8B205FB2F2B4B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft Manifest number: 1278 Signing time: Mon 15 Dec 2025 10:00:48 +0000 Manifest this update: Mon 15 Dec 2025 10:00:48 +0000 Manifest next update: Tue 16 Dec 2025 10:00:48 +0000 Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: moiYVnGKzoGY7mU2YAtsa6UhHQ4K07VMg/nbIda8BQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:98:ef:5f:39:93:1d:de:8b:20:5f:b2:f2:b4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Validity Not Before: Dec 15 10:00:48 2025 GMT Not After : Dec 16 10:00:48 2025 GMT Subject: CN=7a3eefac0ae45acbf572e7547bbab8302dbbf763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:59:51:7b:f5:6c:fa:92:c8:df:d7:32:5a: 8f:05:0f:65:a6:07:b5:78:44:c0:2c:b5:c9:dd:1c: e0:f1:d8:31:6d:1e:dd:7d:0f:ee:4d:fa:d1:04:f2: df:14:1d:1e:17:70:fe:7a:14:9b:7a:2f:e4:06:4c: ed:5c:db:2b:43:4b:80:be:06:13:3d:d1:5b:69:51: eb:d8:f6:3c:a6:c9:97:66:ca:f7:d1:4b:08:07:e3: 7f:2b:68:50:ad:12:47:16:21:9b:b4:c5:f8:e1:31: a4:de:5c:d2:4c:bf:11:35:9b:de:81:bb:fe:cc:f4: 5d:41:4c:70:d7:b1:bb:62:5f:e4:25:ec:61:28:e6: ac:06:69:c4:0c:61:0e:28:bd:80:1a:67:5e:b1:18: 17:29:13:5b:21:74:f7:6a:45:29:1e:2d:82:23:0a: 6e:c8:e1:b9:07:a9:b5:2f:77:17:6e:9d:46:ae:55: fd:c9:87:0c:97:59:2a:4f:5b:4d:a7:43:ba:ff:78: f0:f0:98:81:71:d4:99:95:a9:cc:df:cf:95:8e:19: 84:4c:04:80:b7:eb:20:60:80:76:36:30:15:bf:bb: 1e:32:9b:e9:4e:06:f2:35:28:c3:87:25:66:d0:87: 5d:a3:0b:9e:dc:7d:0f:e0:f5:02:3b:7b:dd:ca:91: b4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3E:EF:AC:0A:E4:5A:CB:F5:72:E7:54:7B:BA:B8:30:2D:BB:F7:63 X509v3 Authority Key Identifier: keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:98:45:16:17:26:c4:16:22:75:90:64:b2:0c:5d:bc:a2:6d: f7:f0:2d:bb:22:f5:31:f9:21:20:20:aa:a6:77:7e:19:de:63: 07:b6:f4:ae:d9:b1:85:f8:04:ea:72:a4:3c:e7:85:ab:0c:12: 79:7d:ed:a8:d1:ba:d7:58:3e:c8:eb:e0:32:b8:a1:33:08:5e: 16:c9:0e:47:8a:2c:88:59:2d:7a:b0:15:37:c6:89:96:51:8f: be:3e:ae:08:f9:b4:fa:1b:c3:2e:60:47:fd:b8:14:f9:ed:0d: 34:af:8a:98:77:e7:89:a0:13:fa:3a:4f:fc:ae:c2:b5:26:7e: 41:b8:22:52:b6:3f:c7:d3:54:22:94:44:f8:0f:ec:9d:63:02: 59:61:5d:9f:5c:5d:75:15:4b:87:b5:54:18:f4:9d:8a:ff:b0: b4:8b:5b:50:26:aa:c7:8c:b7:b8:16:5c:8b:fa:cc:e9:12:12: c9:2a:7f:fb:02:45:44:5a:75:be:f9:24:8c:44:1c:30:83:3f: 14:70:97:5b:1c:2d:09:e6:83:c2:95:44:3f:99:f8:db:c0:fb: 76:bf:9b:c9:97:d5:af:97:cc:2b:25:5f:ea:4a:bd:cd:71:f5: c4:d7:b3:59:45:d3:f9:4c:c0:ce:d6:d4:48:10:e5:2f:c7:cf: 3a:e9:24:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdJjvXzmTHd6LIF+y8rS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3 MWQ5NzYwHhcNMjUxMjE1MTAwMDQ4WhcNMjUxMjE2MTAwMDQ4WjAzMTEwLwYDVQQD Eyg3YTNlZWZhYzBhZTQ1YWNiZjU3MmU3NTQ3YmJhYjgzMDJkYmJmNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmZZUXv1bPqSyN/XMlqPBQ9lpge1 eETALLXJ3Rzg8dgxbR7dfQ/uTfrRBPLfFB0eF3D+ehSbei/kBkztXNsrQ0uAvgYT PdFbaVHr2PY8psmXZsr30UsIB+N/K2hQrRJHFiGbtMX44TGk3lzSTL8RNZvegbv+ zPRdQUxw17G7Yl/kJexhKOasBmnEDGEOKL2AGmdesRgXKRNbIXT3akUpHi2CIwpu yOG5B6m1L3cXbp1GrlX9yYcMl1kqT1tNp0O6/3jw8JiBcdSZlanM38+VjhmETASA t+sgYIB2NjAVv7seMpvpTgbyNSjDhyVm0Iddowue3H0P4PUCO3vdypG06wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo+76wK5FrL9XLnVHu6uDAtu/djMB8GA1UdIwQY MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJhFFhcm xBYidZBksgxdvKJt9/AtuyL1MfkhICCqpnd+Gd5jB7b0rtmxhfgE6nKkPOeFqwwS eX3tqNG611g+yOvgMrihMwheFskOR4osiFkterAVN8aJllGPvj6uCPm0+hvDLmBH /bgU+e0NNK+KmHfniaAT+jpP/K7CtSZ+QbgiUrY/x9NUIpRE+A/snWMCWWFdn1xd dRVLh7VUGPSdiv+wtItbUCaqx4y3uBZci/rM6RISySp/+wJFRFp1vvkkjEQcMIM/ FHCXWxwtCeaDwpVEP5n428D7dr+byZfVr5fMKyVf6kq9zXH1xNezWUXT+UzAztbU SBDlL8fPOukktQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:04:29 2025 by rpki-client