This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft File: rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json) Hash identifier: 0zYkY2OCe2G5D3hg2SCHYTfL0E3zAAwvQLWOU1SzZWc= Subject key identifier: BC:84:D8:F7:7A:28:F7:1E:09:21:9C:68:3B:CE:C2:48:08:D1:D9:5F Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21 Certificate issuer: /CN=ad56104c289d71fd83ba887bef8091914f366e21 Certificate serial: 019B34C59A924BC4D34CDAA0D068B0A198F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft Manifest number: 0F8D Signing time: Fri 19 Dec 2025 04:02:03 +0000 Manifest this update: Fri 19 Dec 2025 04:02:03 +0000 Manifest next update: Sat 20 Dec 2025 04:02:03 +0000 Files and hashes: 1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: 20PN5K5l3H4i12UWYbDg+dHz4GfCwod7EluuORLkcJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:9a:92:4b:c4:d3:4c:da:a0:d0:68:b0:a1:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21 Validity Not Before: Dec 19 04:02:03 2025 GMT Not After : Dec 20 04:02:03 2025 GMT Subject: CN=bc84d8f77a28f71e09219c683bcec24808d1d95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:62:d2:fb:c6:5c:78:c4:d6:42:57:e1:f5: 7c:0c:03:b2:69:cf:62:cb:83:ee:1d:cb:41:19:b9: fa:16:de:e7:47:51:e0:ae:31:63:8b:7f:cf:d6:57: 84:1d:99:95:f8:61:0c:e9:0b:43:8f:10:44:44:fc: 76:39:7b:21:0f:45:71:0a:ed:f3:0e:aa:1d:83:c1: 2a:5e:7a:96:bf:b1:dd:70:c0:11:68:df:66:e6:0f: c1:02:f0:91:65:d6:02:ba:6b:1f:a7:68:59:f8:e9: ab:4b:b9:11:22:0d:dc:ed:68:9b:34:f8:b7:6a:47: a0:2c:c0:d1:88:f6:e3:08:fd:f0:d7:7d:c5:33:6e: 2d:f6:d5:16:2a:25:43:11:d4:6e:91:d4:31:7c:af: 94:bf:ba:45:09:1c:43:b9:9c:e7:78:e9:26:63:07: 4d:a7:ad:e1:12:bc:f1:08:7e:89:0b:f7:f9:5b:1f: 41:22:5e:2c:ae:f4:a8:b5:b3:99:83:d3:89:ac:2f: 6d:91:dd:c7:72:6c:93:e2:d8:a1:31:56:ef:b1:3c: 81:00:7b:6b:d8:1d:59:63:a7:8a:4c:73:08:07:31: 50:f0:a9:ab:34:b5:54:fe:dd:18:44:75:67:56:03: 71:19:c4:12:55:74:ec:1f:6b:2b:25:e5:81:5b:df: 8b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:D8:F7:7A:28:F7:1E:09:21:9C:68:3B:CE:C2:48:08:D1:D9:5F X509v3 Authority Key Identifier: keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ac:12:e8:ef:2a:3b:da:18:99:cd:48:05:b3:e9:c0:a0:a0: c4:63:12:ac:5b:0b:00:33:40:3b:55:3a:e9:72:ca:b7:42:0c: 0b:04:fa:96:4f:19:6c:df:59:bd:48:25:c7:1f:d7:44:03:b6: b0:ee:44:48:5d:bb:41:83:e6:d1:e5:ff:79:09:ab:8e:30:7a: 8c:d9:c6:d9:19:7f:16:44:c3:f9:7a:5a:c0:43:1d:33:fc:fd: 0a:59:0a:a9:d8:38:e5:64:f8:68:77:cd:83:af:e4:a8:e3:ed: 23:83:5c:4f:00:a3:da:10:a8:dc:c1:6a:84:d4:ca:4e:77:fc: fd:7a:ae:6e:4c:92:e3:25:50:3c:a3:1e:a3:b5:73:02:c4:fb: ca:b0:83:6c:55:aa:e0:b0:9a:95:5f:4a:1c:eb:90:44:6d:23: e6:aa:9c:b7:c8:eb:a8:cc:2f:08:25:f3:c3:05:7a:61:43:b8: 39:73:f1:4c:70:be:cc:67:53:51:37:7c:5b:a6:10:0d:8e:04: a8:5a:71:87:bc:e0:f1:5b:21:d2:5b:49:df:27:4d:38:db:47: 6d:bc:05:10:e6:05:7d:03:64:80:7a:c9:1a:6c:a3:a2:3f:72: ab:0e:b9:a4:37:9f:1f:a7:f5:24:f1:f0:ef:66:8b:39:7e:cb: 61:23:d9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZqSS8TTTNqg0GiwoZjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNTYxMDRjMjg5ZDcxZmQ4M2JhODg3YmVmODA5MTkxNGYz NjZlMjEwHhcNMjUxMjE5MDQwMjAzWhcNMjUxMjIwMDQwMjAzWjAzMTEwLwYDVQQD EyhiYzg0ZDhmNzdhMjhmNzFlMDkyMTljNjgzYmNlYzI0ODA4ZDFkOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Bi0vvGXHjE1kJX4fV8DAOyac9i y4PuHctBGbn6Ft7nR1HgrjFji3/P1leEHZmV+GEM6QtDjxBERPx2OXshD0VxCu3z Dqodg8EqXnqWv7HdcMARaN9m5g/BAvCRZdYCumsfp2hZ+OmrS7kRIg3c7WibNPi3 akegLMDRiPbjCP3w133FM24t9tUWKiVDEdRukdQxfK+Uv7pFCRxDuZzneOkmYwdN p63hErzxCH6JC/f5Wx9BIl4srvSotbOZg9OJrC9tkd3HcmyT4tihMVbvsTyBAHtr 2B1ZY6eKTHMIBzFQ8KmrNLVU/t0YRHVnVgNxGcQSVXTsH2srJeWBW9+LswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyE2Pd6KPceCSGcaDvOwkgI0dlfMB8GA1UdIwQY MBaAFK1WEEwonXH9g7qIe++AkZFPNm4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNDYyMmQtMzU3Yi00Zjg2LTg1ODkt Y2RhMDQ5YjE5MTQzLzEvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9lNDYyMmQtMzU3Yi00Zjg2LTg1ODktY2RhMDQ5YjE5MTQz LzEvclZZUVRDaWRjZjJEdW9oNzc0Q1JrVTgyYmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6wS6O8q O9oYmc1IBbPpwKCgxGMSrFsLADNAO1U66XLKt0IMCwT6lk8ZbN9ZvUglxx/XRAO2 sO5ESF27QYPm0eX/eQmrjjB6jNnG2Rl/FkTD+XpawEMdM/z9ClkKqdg45WT4aHfN g6/kqOPtI4NcTwCj2hCo3MFqhNTKTnf8/XqubkyS4yVQPKMeo7VzAsT7yrCDbFWq 4LCalV9KHOuQRG0j5qqct8jrqMwvCCXzwwV6YUO4OXPxTHC+zGdTUTd8W6YQDY4E qFpxh7zg8Vsh0ltJ3ydNONtHbbwFEOYFfQNkgHrJGmyjoj9yqw65pDefH6f1JPHw 72aLOX7LYSPZ4w== -----END CERTIFICATE-----Generated at Fri Dec 19 06:43:02 2025 by rpki-client