This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json) Hash identifier: wf6CfwK+5EbSvGF1WjLyriBOj81t87tJJMVt3H9T0aU= Subject key identifier: 16:59:5A:0D:FA:A2:88:78:15:25:73:6B:3A:66:A3:37:94:AB:D1:E9 Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Certificate serial: 019B4E844F92E96651AFD9C39274BEABF35F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 04:00:52 +0000 Manifest this update: Wed 24 Dec 2025 04:00:52 +0000 Manifest next update: Thu 25 Dec 2025 04:00:52 +0000 Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: aoSZSSKsHRal5QUtWXclPcNhg7sg2aLDxAUDeUBD7os=) 2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:4f:92:e9:66:51:af:d9:c3:92:74:be:ab:f3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Validity Not Before: Dec 24 04:00:52 2025 GMT Not After : Dec 25 04:00:52 2025 GMT Subject: CN=16595a0dfaa288781525736b3a66a33794abd1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:96:1f:fd:70:0d:8d:84:10:de:19:59:d2: 9c:3a:1d:37:5f:9b:6c:ae:8a:d3:9a:86:0e:da:f0: aa:3a:d0:fc:95:92:f0:92:e8:f9:a3:0b:3f:b7:88: f4:fc:a8:20:fa:80:e3:06:6d:8e:79:36:05:2e:75: 75:49:14:e8:34:74:8d:a2:cd:6e:84:3b:3c:69:10: 41:fd:d8:04:89:11:c5:af:37:57:e7:c0:60:14:3e: 3b:24:99:b8:d7:07:e4:1a:ec:4f:61:05:3b:72:a2: 1c:6f:b1:e9:c5:a5:14:0d:77:85:77:b0:db:76:91: 7c:4b:c6:38:14:43:ed:f1:60:39:4d:15:2a:36:fc: 0a:07:6a:ff:12:c9:ec:ab:60:62:9f:a1:44:88:e3: b5:49:66:31:de:ac:da:e8:27:11:9f:1c:8f:56:04: 19:61:88:4e:77:56:83:91:aa:60:ba:46:ff:9f:92: c7:1b:6a:a8:09:76:f8:3f:1d:7e:86:7e:af:d5:9a: 91:24:70:b6:18:1c:2a:ea:f4:05:83:a6:4c:ad:b4: 28:03:49:bc:f3:83:7a:24:a0:a7:dc:2c:94:55:ac: 52:79:a9:21:46:f3:50:fa:b3:a0:ac:8f:c8:ae:65: 32:7e:85:f8:b3:dc:95:b8:bb:72:95:8d:c2:52:fc: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:59:5A:0D:FA:A2:88:78:15:25:73:6B:3A:66:A3:37:94:AB:D1:E9 X509v3 Authority Key Identifier: keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:92:fd:9e:e5:f4:23:2c:d1:97:80:82:dd:8a:8e:18:8d:40: 56:d0:f6:42:bf:a4:80:2f:a8:49:63:22:9a:63:86:e1:09:d0: 86:f1:5b:24:69:d4:ec:73:da:7d:7a:3f:0a:17:bf:18:f4:bd: a8:32:2e:ae:09:3c:5e:d4:a1:96:84:bf:e6:2b:74:04:f4:8b: b7:bf:69:4d:e3:ba:8d:cd:67:74:39:27:ad:4b:22:45:ba:b9: b0:a0:3d:e5:a6:ad:46:bf:19:cc:52:a8:be:d2:59:6a:85:43: d7:ad:d9:f3:c8:b8:03:76:5c:30:f2:7f:5c:ec:b5:27:aa:bd: 9b:b8:0e:c5:09:48:b0:27:61:60:e5:e3:b3:0b:b6:90:73:a3: 88:d0:38:75:40:aa:98:69:fd:53:7e:0c:b2:7c:ac:6e:29:a6: 1f:71:8a:b1:53:5e:61:9f:75:03:e5:49:be:24:0f:88:06:7d: b1:53:8c:73:46:1a:02:11:95:4b:dd:1b:db:87:6d:69:d9:fb: 9e:c2:5c:40:b9:17:67:24:f7:82:4c:a0:0e:1c:f4:57:07:f9: 88:47:ac:f5:e5:22:ab:31:55:9b:a1:40:cc:0b:e2:8c:ec:ea: 20:31:57:8a:a7:bb:a1:53:e1:f7:2b:ce:9f:11:de:75:c6:a1: e3:38:5a:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhE+S6WZRr9nDknS+q/NfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGEwYTNkNmE0NGE1ODMwNGUxYjFkYmY2MmU1ZDdhMTZi Mzg4N2EwHhcNMjUxMjI0MDQwMDUyWhcNMjUxMjI1MDQwMDUyWjAzMTEwLwYDVQQD EygxNjU5NWEwZGZhYTI4ODc4MTUyNTczNmIzYTY2YTMzNzk0YWJkMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuCWH/1wDY2EEN4ZWdKcOh03X5ts rorTmoYO2vCqOtD8lZLwkuj5ows/t4j0/Kgg+oDjBm2OeTYFLnV1SRToNHSNos1u hDs8aRBB/dgEiRHFrzdX58BgFD47JJm41wfkGuxPYQU7cqIcb7HpxaUUDXeFd7Db dpF8S8Y4FEPt8WA5TRUqNvwKB2r/Esnsq2Bin6FEiOO1SWYx3qza6CcRnxyPVgQZ YYhOd1aDkapgukb/n5LHG2qoCXb4Px1+hn6v1ZqRJHC2GBwq6vQFg6ZMrbQoA0m8 84N6JKCn3CyUVaxSeakhRvNQ+rOgrI/IrmUyfoX4s9yVuLtylY3CUvzc4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZZWg36ooh4FSVzazpmozeUq9HpMB8GA1UdIwQY MBaAFNuKCj1qRKWDBOGx2/YuXXoWs4h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMt NTZjNmQ1NTFhOTMyLzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMtNTZjNmQ1NTFhOTMy LzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5L9nuX0 IyzRl4CC3YqOGI1AVtD2Qr+kgC+oSWMimmOG4QnQhvFbJGnU7HPafXo/Che/GPS9 qDIurgk8XtShloS/5it0BPSLt79pTeO6jc1ndDknrUsiRbq5sKA95aatRr8ZzFKo vtJZaoVD163Z88i4A3ZcMPJ/XOy1J6q9m7gOxQlIsCdhYOXjswu2kHOjiNA4dUCq mGn9U34MsnysbimmH3GKsVNeYZ91A+VJviQPiAZ9sVOMc0YaAhGVS90b24dtadn7 nsJcQLkXZyT3gkygDhz0Vwf5iEes9eUiqzFVm6FAzAvijOzqIDFXiqe7oVPh9yvO nxHedcah4zhauA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:48 2025 by rpki-client