This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json) Hash identifier: Yj/7FqXP3MABJXtPbVxQ27A4kiPCvi4G4mz24VdPa4M= Subject key identifier: A5:35:DC:2E:36:88:D6:61:34:FF:EC:F0:F7:8E:CC:52:68:DA:C1:10 Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9 Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9 Certificate serial: 019B698D935A0E6BE0A3BD13668316DCB805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft Manifest number: 06B6 Signing time: Mon 29 Dec 2025 10:00:44 +0000 Manifest this update: Mon 29 Dec 2025 10:00:44 +0000 Manifest next update: Tue 30 Dec 2025 10:00:44 +0000 Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: DnwWuUqVz/eJMKFFMOT6VK3kH7McWVI/JtRZMgc9qMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8d:93:5a:0e:6b:e0:a3:bd:13:66:83:16:dc:b8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9 Validity Not Before: Dec 29 10:00:44 2025 GMT Not After : Dec 30 10:00:44 2025 GMT Subject: CN=a535dc2e3688d66134ffecf0f78ecc5268dac110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:a2:fe:e6:50:fa:f6:58:a3:c3:18:03:37: 05:c8:8a:66:66:02:0f:29:6b:5e:89:98:56:0c:fa: f7:aa:1b:8c:1f:5d:38:71:62:2c:5d:32:03:0a:42: 24:13:92:51:f8:84:3d:bd:06:eb:10:fa:db:82:d7: d4:97:d2:b0:1f:64:a4:be:12:f7:30:ff:5f:d2:75: 69:56:1f:9f:15:95:85:67:69:db:da:a5:ba:5f:85: 9e:ea:04:58:30:f1:6f:52:45:31:c9:b4:ab:80:ff: b9:0d:e1:f8:5e:0e:64:f0:37:06:36:96:e8:8e:e5: 1b:8f:b7:06:25:4d:31:e4:2e:55:5d:33:6c:3e:b5: 67:ca:f4:9e:d2:3b:d4:63:ad:2b:05:b4:99:e4:8d: b8:4e:f9:8b:68:cf:3e:94:5a:d8:6e:4a:08:79:73: 8f:d4:b5:89:2d:39:b8:39:ee:f6:17:de:6e:9a:3d: 67:dd:da:64:04:2f:f4:be:5a:f9:a9:25:e1:5d:76: cd:d3:07:2e:fa:b3:35:83:5c:9a:ea:73:f2:ac:5a: 5c:e8:8f:34:53:fb:c2:77:42:3b:67:1d:e8:84:16: 64:43:0a:07:cf:ed:ff:b2:4b:9e:30:2a:7e:13:cc: a1:ff:ee:2d:0e:94:55:4e:cf:9a:a6:54:4e:50:12: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:35:DC:2E:36:88:D6:61:34:FF:EC:F0:F7:8E:CC:52:68:DA:C1:10 X509v3 Authority Key Identifier: keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:25:f6:ff:3c:7d:65:4e:46:a4:a5:ed:31:d0:9d:0b:1c:63: e4:ff:3f:b7:c4:a2:70:12:46:df:8c:2f:37:f1:8e:ce:4b:96: 92:55:88:35:c5:0c:b8:4f:34:7e:78:62:85:11:cd:c2:c0:be: 65:02:a1:fe:aa:d8:d0:1d:89:39:9a:3a:e4:17:79:6e:07:5c: 4d:f5:83:3f:9e:30:2f:f5:42:a9:96:02:3d:e5:6d:2b:07:1d: fe:36:2d:0d:84:91:56:8c:74:5c:e6:9c:9b:63:dd:22:a4:af: a6:0e:eb:ab:4d:1f:4d:ca:2d:4d:03:82:87:79:e6:95:61:18: 51:1a:db:83:a9:3e:63:32:09:82:e8:70:b7:de:b9:a9:44:ca: 2e:12:5f:3c:1c:c6:49:ce:5b:50:80:46:dd:c9:62:32:6e:f4: ce:c0:71:11:5b:85:8f:a4:a0:89:76:c8:96:56:00:46:f4:12: 9f:15:b8:47:9f:72:e0:37:b0:f3:bf:ed:f8:3d:77:61:9c:5b: 6d:92:a9:99:59:76:88:ae:18:85:2b:ae:ed:de:17:b0:74:34: d7:be:20:7b:25:da:e2:92:f0:b1:f7:54:71:29:fa:68:6b:b5: e5:d6:26:da:95:4b:ea:8b:62:73:af:f2:f8:24:f9:da:ed:90: eb:0e:65:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjZNaDmvgo70TZoMW3LgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODFlOTQ2Y2ZjOGUxOWMxNjY3YWYzNzVkMTBhMWU0MDQy ZjBlYjkwHhcNMjUxMjI5MTAwMDQ0WhcNMjUxMjMwMTAwMDQ0WjAzMTEwLwYDVQQD EyhhNTM1ZGMyZTM2ODhkNjYxMzRmZmVjZjBmNzhlY2M1MjY4ZGFjMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocei/uZQ+vZYo8MYAzcFyIpmZgIP KWteiZhWDPr3qhuMH104cWIsXTIDCkIkE5JR+IQ9vQbrEPrbgtfUl9KwH2SkvhL3 MP9f0nVpVh+fFZWFZ2nb2qW6X4We6gRYMPFvUkUxybSrgP+5DeH4Xg5k8DcGNpbo juUbj7cGJU0x5C5VXTNsPrVnyvSe0jvUY60rBbSZ5I24TvmLaM8+lFrYbkoIeXOP 1LWJLTm4Oe72F95umj1n3dpkBC/0vlr5qSXhXXbN0wcu+rM1g1ya6nPyrFpc6I80 U/vCd0I7Zx3ohBZkQwoHz+3/skueMCp+E8yh/+4tDpRVTs+aplROUBImjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU13C42iNZhNP/s8PeOzFJo2sEQMB8GA1UdIwQY MBaAFJSB6UbPyOGcFmevN10QoeQELw65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElIcFJzX0k0WndXWjY4M1hSQ2g1QVF2RHJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xM2MzM2EtYTQ2Zi00ODg5LWI4MDkt NTczMDNhYTQ1Y2JiLzEvbElIcFJzX0k0WndXWjY4M1hSQ2g1QVF2RHJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8xM2MzM2EtYTQ2Zi00ODg5LWI4MDktNTczMDNhYTQ1Y2Ji LzEvbElIcFJzX0k0WndXWjY4M1hSQ2g1QVF2RHJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCX2/zx9 ZU5GpKXtMdCdCxxj5P8/t8SicBJG34wvN/GOzkuWklWINcUMuE80fnhihRHNwsC+ ZQKh/qrY0B2JOZo65Bd5bgdcTfWDP54wL/VCqZYCPeVtKwcd/jYtDYSRVox0XOac m2PdIqSvpg7rq00fTcotTQOCh3nmlWEYURrbg6k+YzIJguhwt965qUTKLhJfPBzG Sc5bUIBG3cliMm70zsBxEVuFj6SgiXbIllYARvQSnxW4R59y4Dew87/t+D13YZxb bZKpmVl2iK4YhSuu7d4XsHQ0174geyXa4pLwsfdUcSn6aGu15dYm2pVL6otic6/y +CT52u2Q6w5llw== -----END CERTIFICATE-----Generated at Mon Dec 29 14:39:52 2025 by rpki-client