This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft File: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json) Hash identifier: sru8lW9XOZiHfpayNF08l4hJaF0Jgidft2xfSzVK2z8= Subject key identifier: 64:25:A6:16:9B:F8:6F:A7:7D:1D:9D:CD:BE:AB:43:67:5F:0A:8E:7D Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92 Certificate issuer: /CN=b91f8db02e2e971d54f90eef107090398fcc3d92 Certificate serial: 019B51BBF0F84CF06C31437691112F949790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft Manifest number: 09D5 Signing time: Wed 24 Dec 2025 19:00:29 +0000 Manifest this update: Wed 24 Dec 2025 19:00:29 +0000 Manifest next update: Thu 25 Dec 2025 19:00:29 +0000 Files and hashes: 1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: 7wAcEFHsJu9UQNfrV8pyuboj7jSkontjwSyuL0AHIMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bb:f0:f8:4c:f0:6c:31:43:76:91:11:2f:94:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92 Validity Not Before: Dec 24 19:00:29 2025 GMT Not After : Dec 25 19:00:29 2025 GMT Subject: CN=6425a6169bf86fa77d1d9dcdbeab43675f0a8e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:87:68:27:6f:8d:2e:7b:18:f0:6b:70:f2: ef:a5:b3:39:85:66:7f:81:1a:14:cf:27:30:0a:09: b4:8a:f4:3a:16:31:f7:ce:38:45:24:15:b7:36:1d: 3f:de:b8:04:9b:c4:84:79:50:a0:dd:80:3c:b4:7c: 72:19:fb:93:30:94:d6:8b:2b:6e:99:b3:af:a7:74: 9a:74:57:25:a0:ec:52:f1:29:9f:c3:6e:93:ed:0b: 42:7e:de:15:2e:da:d9:14:d1:c4:f7:2d:ba:72:dc: ff:61:a0:a5:4a:e0:26:24:3e:e4:f6:0e:01:58:d1: d3:9b:88:e7:21:5e:67:a0:7d:56:11:61:5e:5a:88: c8:5f:9e:c8:a9:fc:47:12:39:e3:82:f2:95:d9:67: f3:1e:5c:db:98:47:a4:35:63:c6:c7:b5:ac:58:78: 0a:11:e0:0a:d0:c2:e8:93:f8:a5:6e:2e:b6:36:44: 79:8a:ad:31:5e:f6:fd:b9:78:cc:6f:5a:b6:59:50: a8:be:ed:2a:5d:7b:20:04:aa:f4:d5:c1:c3:a2:ca: bc:1f:9c:55:c5:9a:fb:0a:a6:73:11:bc:6e:85:34: bc:0e:74:b2:93:fd:54:4c:b6:1d:3d:71:95:68:e5: 56:7f:84:27:9c:11:18:4c:bb:73:25:a9:73:c2:6d: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:25:A6:16:9B:F8:6F:A7:7D:1D:9D:CD:BE:AB:43:67:5F:0A:8E:7D X509v3 Authority Key Identifier: keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2c:e6:6e:58:5d:55:45:2f:bf:ec:3d:db:d1:2e:a8:a3:0f: 05:7d:56:12:c3:ac:ce:7b:b7:a6:0a:ec:b6:8a:36:1c:81:c7: 60:1f:24:f8:ef:7c:89:3b:6c:03:e0:a8:b2:de:25:e2:7e:24: d5:dc:50:1e:df:3a:16:08:60:e1:e4:a7:49:99:90:e0:3e:3f: 00:bf:04:c9:7c:91:c2:94:ef:20:08:83:b0:61:e0:25:79:14: 5b:6f:d9:f4:da:2d:4e:c8:ae:8b:35:b6:67:94:16:94:8a:38: 1e:52:69:9c:e5:0c:0c:e3:fa:3c:55:3b:10:23:02:02:1a:59: e9:dd:68:fe:1e:8f:50:11:2b:28:46:04:97:67:a5:0b:32:1e: 7a:4f:52:2d:ed:eb:43:52:97:3e:02:a3:66:c0:8a:d5:a3:7e: 66:67:b0:3f:77:9a:bd:00:be:f8:58:52:22:42:c2:f7:70:f8: 30:82:ff:7c:3a:f7:ac:61:67:e5:77:3f:ff:e1:0c:d1:3c:cd: a7:3c:38:c1:7b:c2:32:5b:8f:a0:b8:d6:aa:27:92:b2:bf:50: 99:40:e1:84:9c:a4:45:c9:e2:f4:c0:e7:e2:c8:74:44:0f:68: 6e:b5:f9:e8:ae:58:6a:ce:2c:18:65:31:bb:38:86:07:92:42: 23:34:1c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRu/D4TPBsMUN2kREvlJeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWY4ZGIwMmUyZTk3MWQ1NGY5MGVlZjEwNzA5MDM5OGZj YzNkOTIwHhcNMjUxMjI0MTkwMDI5WhcNMjUxMjI1MTkwMDI5WjAzMTEwLwYDVQQD Eyg2NDI1YTYxNjliZjg2ZmE3N2QxZDlkY2RiZWFiNDM2NzVmMGE4ZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsmHaCdvjS57GPBrcPLvpbM5hWZ/ gRoUzycwCgm0ivQ6FjH3zjhFJBW3Nh0/3rgEm8SEeVCg3YA8tHxyGfuTMJTWiytu mbOvp3SadFcloOxS8Smfw26T7QtCft4VLtrZFNHE9y26ctz/YaClSuAmJD7k9g4B WNHTm4jnIV5noH1WEWFeWojIX57IqfxHEjnjgvKV2WfzHlzbmEekNWPGx7WsWHgK EeAK0MLok/ilbi62NkR5iq0xXvb9uXjMb1q2WVCovu0qXXsgBKr01cHDosq8H5xV xZr7CqZzEbxuhTS8DnSyk/1UTLYdPXGVaOVWf4QnnBEYTLtzJalzwm2FWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQlphab+G+nfR2dzb6rQ2dfCo59MB8GA1UdIwQY MBaAFLkfjbAuLpcdVPkO7xBwkDmPzD2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjkt NjJlMTllZjk2MGE0LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjktNjJlMTllZjk2MGE0 LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCzmblhd VUUvv+w929EuqKMPBX1WEsOsznu3pgrstoo2HIHHYB8k+O98iTtsA+Cost4l4n4k 1dxQHt86Fghg4eSnSZmQ4D4/AL8EyXyRwpTvIAiDsGHgJXkUW2/Z9NotTsiuizW2 Z5QWlIo4HlJpnOUMDOP6PFU7ECMCAhpZ6d1o/h6PUBErKEYEl2elCzIeek9SLe3r Q1KXPgKjZsCK1aN+ZmewP3eavQC++FhSIkLC93D4MIL/fDr3rGFn5Xc//+EM0TzN pzw4wXvCMluPoLjWqieSsr9QmUDhhJykRcni9MDn4sh0RA9obrX56K5Yas4sGGUx uziGB5JCIzQczQ== -----END CERTIFICATE-----Generated at Thu Dec 25 02:41:28 2025 by rpki-client