This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json) Hash identifier: 6atKzX78Xqt7Mv5rlbxKMT1VyaxrtdzbCCwbOjhumpU= Subject key identifier: 1B:A9:7F:7E:F3:0E:92:13:D4:23:78:83:2F:7F:51:4C:B5:D2:CD:AF Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac Certificate serial: 019B3E6D4DFA0F401632A69086645E480719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft Manifest number: 0ABB Signing time: Sun 21 Dec 2025 01:01:49 +0000 Manifest this update: Sun 21 Dec 2025 01:01:49 +0000 Manifest next update: Mon 22 Dec 2025 01:01:49 +0000 Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: sIzF7/SaIDT9DpaYRN9FRFARPbYrelKyWHn/Gf8vxcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:4d:fa:0f:40:16:32:a6:90:86:64:5e:48:07:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac Validity Not Before: Dec 21 01:01:49 2025 GMT Not After : Dec 22 01:01:49 2025 GMT Subject: CN=1ba97f7ef30e9213d42378832f7f514cb5d2cdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:d1:ad:2b:9b:24:c5:e6:ae:84:35:37:bd: 15:6e:43:09:9b:f3:61:12:c3:ae:09:0e:e1:3e:b3: c9:db:c1:9a:81:47:c9:9d:db:32:b4:56:34:ac:4e: 79:28:0a:fc:d2:fa:ee:21:ec:a5:91:d7:59:5c:f6: a3:c7:fe:d9:84:3c:da:ba:db:e6:97:78:f4:51:0a: f4:26:56:3f:a3:32:48:f4:5f:ca:18:9f:51:73:8d: ae:82:be:34:9d:cf:de:4f:db:ac:50:9a:c3:7b:74: a2:a3:bc:b3:0e:18:89:85:8c:eb:a6:fd:33:df:ae: 83:cd:09:36:db:65:56:16:5d:59:3c:3a:5c:38:61: 85:08:ea:19:ed:18:66:46:76:04:51:81:d0:8d:de: b6:34:44:f7:8e:ec:6f:ff:b3:77:2a:3d:ef:68:36: 85:71:1a:4e:6a:6e:b8:c0:70:07:50:ee:e3:67:c7: 6f:e2:9f:97:77:8d:4b:b4:4e:06:17:69:f6:95:14: 1a:a6:b6:88:c5:03:4b:fa:aa:94:92:aa:ac:38:8f: f1:b9:43:53:ce:75:de:a5:53:67:83:e3:a4:1e:62: 9c:e5:0b:24:b0:7a:4f:14:20:49:d3:c6:35:5c:70: 61:47:b1:8a:08:ee:87:2f:26:6f:00:d0:7e:02:99: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A9:7F:7E:F3:0E:92:13:D4:23:78:83:2F:7F:51:4C:B5:D2:CD:AF X509v3 Authority Key Identifier: keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:87:cc:e1:32:a7:12:0c:56:a6:4e:e8:d6:d8:fd:1a:04:80: 58:fd:84:e6:50:9a:c5:a7:d7:59:48:0a:3b:3f:45:fd:3c:20: e4:57:67:00:1a:23:90:13:8f:5e:cf:4e:39:05:84:cd:d6:f7: c9:b3:9d:5e:2b:73:6f:64:ba:f8:a7:cf:f9:e3:c8:e2:94:e4: 22:37:2e:4a:80:39:1d:82:e0:95:b9:e4:f2:6c:8a:61:43:2c: d3:c5:be:0f:ba:5f:0d:77:05:ff:30:60:f5:b0:4e:45:e4:79: 94:5e:ca:fa:21:39:4d:9d:59:fd:6e:7a:29:a4:59:fa:4a:c2: 9a:06:37:09:8a:da:d1:74:2e:7c:2d:6c:7b:c2:da:02:d6:96: 28:c5:a5:f8:ec:0b:f9:8c:6b:69:c9:38:2a:89:52:44:0b:dc: 65:40:5e:ba:a8:9c:29:55:d5:4c:0e:ac:54:99:b7:2f:cd:74: e3:60:fc:52:fe:1b:8c:0e:7e:da:20:04:19:d1:83:50:12:29: 6c:a0:5e:28:a2:b1:96:a6:c0:67:7c:97:5a:7b:c9:dd:1a:e8: 94:81:f2:7d:3e:cf:a8:19:e7:40:dc:99:5c:77:35:b0:9e:a9: 35:26:6f:85:bf:e4:0e:57:86:42:aa:82:9b:2d:cb:0e:a0:30: 76:a9:b2:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bU36D0AWMqaQhmReSAcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5 MGI1YWMwHhcNMjUxMjIxMDEwMTQ5WhcNMjUxMjIyMDEwMTQ5WjAzMTEwLwYDVQQD EygxYmE5N2Y3ZWYzMGU5MjEzZDQyMzc4ODMyZjdmNTE0Y2I1ZDJjZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzTRrSubJMXmroQ1N70VbkMJm/Nh EsOuCQ7hPrPJ28GagUfJndsytFY0rE55KAr80vruIeylkddZXPajx/7ZhDzautvm l3j0UQr0JlY/ozJI9F/KGJ9Rc42ugr40nc/eT9usUJrDe3Sio7yzDhiJhYzrpv0z 366DzQk222VWFl1ZPDpcOGGFCOoZ7RhmRnYEUYHQjd62NET3juxv/7N3Kj3vaDaF cRpOam64wHAHUO7jZ8dv4p+Xd41LtE4GF2n2lRQapraIxQNL+qqUkqqsOI/xuUNT znXepVNng+OkHmKc5QsksHpPFCBJ08Y1XHBhR7GKCO6HLyZvANB+AplrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBupf37zDpIT1CN4gy9/UUy10s2vMB8GA1UdIwQY MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIfM4TKn EgxWpk7o1tj9GgSAWP2E5lCaxafXWUgKOz9F/Twg5FdnABojkBOPXs9OOQWEzdb3 ybOdXitzb2S6+KfP+ePI4pTkIjcuSoA5HYLglbnk8myKYUMs08W+D7pfDXcF/zBg 9bBOReR5lF7K+iE5TZ1Z/W56KaRZ+krCmgY3CYra0XQufC1se8LaAtaWKMWl+OwL +Yxrack4KolSRAvcZUBeuqicKVXVTA6sVJm3L81042D8Uv4bjA5+2iAEGdGDUBIp bKBeKKKxlqbAZ3yXWnvJ3RrolIHyfT7PqBnnQNyZXHc1sJ6pNSZvhb/kDleGQqqC my3LDqAwdqmyPg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:23 2025 by rpki-client