This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json) Hash identifier: 7nS6/KJ/DHRPRH2W2rmSa0ll0rJ7ihB/hxyjSTwY4kE= Subject key identifier: 57:57:A3:6A:D5:CB:86:77:C4:FE:AA:FA:62:83:6F:1A:23:F2:72:6A Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77 Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477 Certificate serial: 019B44A555A4CEEEF86D46DBC3D8093ADD18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft Manifest number: 171C Signing time: Mon 22 Dec 2025 06:00:44 +0000 Manifest this update: Mon 22 Dec 2025 06:00:44 +0000 Manifest next update: Tue 23 Dec 2025 06:00:44 +0000 Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: TSvvnXC5mXN85Bq1LS4YuzfYwhPdSIO/Bbll9UJarBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:55:a4:ce:ee:f8:6d:46:db:c3:d8:09:3a:dd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477 Validity Not Before: Dec 22 06:00:44 2025 GMT Not After : Dec 23 06:00:44 2025 GMT Subject: CN=5757a36ad5cb8677c4feaafa62836f1a23f2726a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:76:33:52:b1:32:db:cb:08:3c:5a:9d:f0: b3:bc:1b:3c:63:86:c0:5e:8b:13:fa:08:75:17:29: 7e:59:a3:d6:d5:31:b1:02:e7:a9:80:1d:b2:a6:ea: 05:e0:a5:85:da:a8:03:5f:e8:77:49:6c:91:53:de: 79:83:72:4b:34:6c:bd:31:82:a2:40:92:c7:b2:5f: 77:34:c7:d0:64:99:a1:51:8b:b5:43:2f:78:f6:b6: db:6e:b5:eb:b5:6e:3b:ca:7b:3b:6b:1a:60:79:94: bd:92:78:6d:d1:48:0d:ef:8e:b5:a1:4d:bb:1b:fd: fb:20:a7:83:d8:fa:40:05:ed:a2:58:b8:18:aa:e2: b6:4d:b1:31:59:10:f6:d2:37:f3:72:19:6a:36:02: 0f:16:54:d7:8b:62:20:ba:ff:5d:dc:1c:0a:24:f3: 5a:6f:0c:4f:4e:0c:1a:03:a1:5d:fb:92:67:64:9e: df:1b:86:bf:d7:56:a1:dc:2b:8d:93:22:60:51:30: c5:d4:18:c2:49:23:83:9a:56:27:e5:70:f7:d4:69: ce:cf:56:c6:7c:79:9f:af:b3:aa:25:8c:41:5a:01: 9e:ae:66:26:16:58:87:ea:c6:0b:08:05:d4:b8:f1: ce:82:d1:2c:b3:48:6c:8c:b3:04:4f:e1:5b:bf:e8: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:A3:6A:D5:CB:86:77:C4:FE:AA:FA:62:83:6F:1A:23:F2:72:6A X509v3 Authority Key Identifier: keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0e:31:8b:38:53:57:37:a0:88:b4:73:0c:96:b4:d1:dd:fc: 6a:f9:be:b6:28:ed:a9:79:c9:f0:62:51:c6:3c:b9:d7:8f:85: 0f:93:18:5b:4e:f6:da:1e:26:2d:e3:ed:0c:df:b6:d6:1d:a6: ab:cc:68:ed:01:0b:e8:aa:db:60:c2:24:c4:20:6b:80:b9:ba: 5d:28:cc:56:b7:67:a8:54:f8:5e:84:3c:c6:b0:d3:f8:0b:42: 19:c7:b6:f4:db:08:73:ac:82:57:7d:fc:93:cf:dd:0e:b9:8d: d5:18:83:ae:0e:29:24:fc:b4:30:73:1a:82:a7:5e:1d:64:f8: 65:9a:1b:0c:d1:a9:f2:b7:fc:46:60:db:3e:b2:8c:65:74:7c: ff:40:2e:12:0f:37:de:28:57:79:33:d1:32:3c:8e:87:e6:d7: 61:31:cf:91:87:2d:0f:f8:72:a1:08:0a:92:ac:58:e2:4a:5c: bc:7a:d9:09:72:79:04:de:d7:b0:cc:41:d4:71:dc:3d:bd:24: 9a:35:82:1c:4d:24:e1:40:9a:81:ac:cb:4c:d1:8b:08:3f:f8: 78:e6:ff:8d:01:03:7b:69:14:7d:5f:62:d6:a0:e0:1c:a2:69: 51:1d:ba:18:8e:17:3d:8a:7b:3e:83:67:cb:82:3b:2f:ad:38: 1d:07:92:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpVWkzu74bUbbw9gJOt0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzIzMTkzNzEwNGIyNjkwMDdhNmNhODNjN2ZkOTI5ZWIz OWY0NzcwHhcNMjUxMjIyMDYwMDQ0WhcNMjUxMjIzMDYwMDQ0WjAzMTEwLwYDVQQD Eyg1NzU3YTM2YWQ1Y2I4Njc3YzRmZWFhZmE2MjgzNmYxYTIzZjI3MjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPx2M1KxMtvLCDxanfCzvBs8Y4bA XosT+gh1Fyl+WaPW1TGxAuepgB2ypuoF4KWF2qgDX+h3SWyRU955g3JLNGy9MYKi QJLHsl93NMfQZJmhUYu1Qy949rbbbrXrtW47yns7axpgeZS9knht0UgN7461oU27 G/37IKeD2PpABe2iWLgYquK2TbExWRD20jfzchlqNgIPFlTXi2Iguv9d3BwKJPNa bwxPTgwaA6Fd+5JnZJ7fG4a/11ah3CuNkyJgUTDF1BjCSSODmlYn5XD31GnOz1bG fHmfr7OqJYxBWgGermYmFliH6sYLCAXUuPHOgtEss0hsjLMET+Fbv+heXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdXo2rVy4Z3xP6q+mKDbxoj8nJqMB8GA1UdIwQY MBaAFK5yMZNxBLJpAHpsqDx/2SnrOfR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMt ZjM1ZjBjNmM0NmE5LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMtZjM1ZjBjNmM0NmE5 LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlw4xizhT VzegiLRzDJa00d38avm+tijtqXnJ8GJRxjy514+FD5MYW0722h4mLePtDN+21h2m q8xo7QEL6KrbYMIkxCBrgLm6XSjMVrdnqFT4XoQ8xrDT+AtCGce29NsIc6yCV338 k8/dDrmN1RiDrg4pJPy0MHMagqdeHWT4ZZobDNGp8rf8RmDbPrKMZXR8/0AuEg83 3ihXeTPRMjyOh+bXYTHPkYctD/hyoQgKkqxY4kpcvHrZCXJ5BN7XsMxB1HHcPb0k mjWCHE0k4UCagazLTNGLCD/4eOb/jQEDe2kUfV9i1qDgHKJpUR26GI4XPYp7PoNn y4I7L604HQeSGQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:18 2025 by rpki-client