This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft File: enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json) Hash identifier: qQDoxRxyt1Qr9/gt+gSADdEMqwZSYdeCMV1GQuC0xoE= Subject key identifier: A1:32:8D:7A:33:F9:DD:AD:2C:DC:7D:82:49:28:96:83:01:E4:4F:22 Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 Certificate issuer: /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Certificate serial: 019B2B8A7639BAB4748809766B6912615FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 09:00:52 +0000 Manifest this update: Wed 17 Dec 2025 09:00:52 +0000 Manifest next update: Thu 18 Dec 2025 09:00:52 +0000 Files and hashes: 1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: PsMxQvpop3b8ixE3G7qBz/BIU9HxdFzgZSvmtnw12oI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:76:39:ba:b4:74:88:09:76:6b:69:12:61:5f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8 Validity Not Before: Dec 17 09:00:52 2025 GMT Not After : Dec 18 09:00:52 2025 GMT Subject: CN=a1328d7a33f9ddad2cdc7d824928968301e44f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:a6:39:b5:ee:24:89:d0:80:c4:f3:6c:bf: c8:53:52:b1:68:2e:59:fb:21:0a:16:12:05:be:2b: 39:e5:c1:63:2c:e7:28:5c:af:67:28:eb:38:69:77: 1c:40:b2:4d:9a:15:83:7b:ff:ad:b1:2b:47:ef:5d: e2:c5:f7:8e:de:8d:9b:3c:e4:5c:f8:1b:4a:d1:23: 56:15:53:0d:1e:97:c3:a3:7f:85:cb:0c:4b:19:75: 6f:fa:97:60:70:c8:c5:51:44:49:d1:23:6b:4c:bf: 01:7b:35:e1:46:3e:dc:04:4d:86:1c:74:ba:2f:9c: c2:36:f0:17:9a:61:eb:2b:b8:8e:e6:31:e2:a5:6c: 23:bc:dc:1e:a5:d8:c5:06:9c:e3:2f:c3:2d:6a:00: 32:ed:c8:e5:ab:46:46:5e:23:63:8f:f0:9c:80:a5: ab:ad:42:4d:1c:90:43:d8:b5:f5:60:a0:d6:01:42: 72:ab:05:54:cb:10:99:f0:38:10:fd:d8:f8:6f:30: 0c:bf:3a:24:e8:66:0e:5a:ee:6f:2e:44:4f:79:96: c4:1a:0b:72:b3:70:b8:b0:4f:30:17:40:81:42:e2: 5e:98:21:2b:ac:c6:fe:72:63:10:8e:f8:af:7b:31: e4:9e:f3:7a:b9:85:e2:a5:21:4e:40:8a:52:ea:48: 54:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:32:8D:7A:33:F9:DD:AD:2C:DC:7D:82:49:28:96:83:01:E4:4F:22 X509v3 Authority Key Identifier: keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:39:49:5d:1c:92:2e:b9:bd:72:78:8a:99:e3:31:dd:2c:8b: 22:91:1d:b2:42:ba:2f:a4:bb:0f:59:99:1a:ea:44:31:43:80: 3f:c5:3c:04:fb:69:52:63:93:d9:e4:7f:a1:be:0b:2a:cf:1e: 0d:e6:cc:37:80:33:57:72:91:fe:14:9a:90:27:9c:0c:b8:a6: 9f:a1:6d:66:d9:46:c1:72:06:90:5e:67:e8:00:ba:21:bc:b9: fd:46:59:e1:60:7a:b8:1e:48:75:54:6f:59:6b:0c:f9:93:22: ef:e9:0d:35:7b:04:74:08:5b:a3:96:3b:2d:54:a0:a9:9e:64: 3e:6f:16:d0:da:00:4c:81:9a:50:0d:3d:ed:57:fc:0c:f9:4b: 76:9f:f0:16:d7:18:39:72:ec:c1:df:f7:35:29:a0:8d:80:66: 3d:7b:cc:5f:f2:c3:8c:ee:9f:96:c5:c4:09:50:aa:31:43:84: 82:64:f0:fd:00:d5:57:bc:5e:ee:ac:15:ea:c0:fb:87:59:90: 46:ce:56:72:2b:64:ed:9b:43:cd:1c:e5:4c:ef:d4:c7:ff:b1: d4:d2:3c:76:0a:f4:17:8d:8f:9c:3e:a2:ed:35:08:ab:7c:2a: 48:ab:4a:fa:b9:a2:1f:23:ca:a0:05:39:fe:2a:8f:63:21:ad: 47:27:66:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrinY5urR0iAl2a2kSYV+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNzUwZWI2ZDEyYzU3ZWE2NDMwYjlmMDIzOTVjYWYyYTgx YmVjZjgwHhcNMjUxMjE3MDkwMDUyWhcNMjUxMjE4MDkwMDUyWjAzMTEwLwYDVQQD EyhhMTMyOGQ3YTMzZjlkZGFkMmNkYzdkODI0OTI4OTY4MzAxZTQ0ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn2mObXuJInQgMTzbL/IU1KxaC5Z +yEKFhIFvis55cFjLOcoXK9nKOs4aXccQLJNmhWDe/+tsStH713ixfeO3o2bPORc +BtK0SNWFVMNHpfDo3+FywxLGXVv+pdgcMjFUURJ0SNrTL8BezXhRj7cBE2GHHS6 L5zCNvAXmmHrK7iO5jHipWwjvNwepdjFBpzjL8MtagAy7cjlq0ZGXiNjj/CcgKWr rUJNHJBD2LX1YKDWAUJyqwVUyxCZ8DgQ/dj4bzAMvzok6GYOWu5vLkRPeZbEGgty s3C4sE8wF0CBQuJemCErrMb+cmMQjvivezHknvN6uYXipSFOQIpS6khUlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEyjXoz+d2tLNx9gkkoloMB5E8iMB8GA1UdIwQY MBaAFHp1DrbRLFfqZDC58COVyvKoG+z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUt NTcyMjc5ODJhMDAwLzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85OGRjNmYtYmU1Ni00YzhkLWI5NGUtNTcyMjc5ODJhMDAw LzEvZW5VT3R0RXNWLXBrTUxud0k1WEs4cWdiN1BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjlJXRyS Lrm9cniKmeMx3SyLIpEdskK6L6S7D1mZGupEMUOAP8U8BPtpUmOT2eR/ob4LKs8e DebMN4AzV3KR/hSakCecDLimn6FtZtlGwXIGkF5n6AC6Iby5/UZZ4WB6uB5IdVRv WWsM+ZMi7+kNNXsEdAhbo5Y7LVSgqZ5kPm8W0NoATIGaUA097Vf8DPlLdp/wFtcY OXLswd/3NSmgjYBmPXvMX/LDjO6flsXECVCqMUOEgmTw/QDVV7xe7qwV6sD7h1mQ Rs5Wcitk7ZtDzRzlTO/Ux/+x1NI8dgr0F42PnD6i7TUIq3wqSKtK+rmiHyPKoAU5 /iqPYyGtRydmRg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:49:19 2025 by rpki-client