This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json) Hash identifier: dBLDo81TW6YFCnfwR47EQ392QPl5iErksvDF2S7xJlc= Subject key identifier: 8D:ED:4C:4F:85:DE:95:6C:C0:BC:59:36:09:86:C3:1A:11:12:88:98 Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9 Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9 Certificate serial: 019B3C7E12FB6D745AC8EE90C7D88F201C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft Manifest number: 0D12 Signing time: Sat 20 Dec 2025 16:00:53 +0000 Manifest this update: Sat 20 Dec 2025 16:00:53 +0000 Manifest next update: Sun 21 Dec 2025 16:00:53 +0000 Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: UXKPn1uWSI+0//KByAmnLjiwBMDstuigtfByaGhxfx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:12:fb:6d:74:5a:c8:ee:90:c7:d8:8f:20:1c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9 Validity Not Before: Dec 20 16:00:53 2025 GMT Not After : Dec 21 16:00:53 2025 GMT Subject: CN=8ded4c4f85de956cc0bc59360986c31a11128898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:d0:5b:35:39:9c:66:d4:8f:44:c0:ac:bc: 03:27:c9:58:c0:bd:5b:de:16:bf:93:c3:90:f8:10: d3:0c:bc:47:85:25:51:32:35:5c:18:14:56:6e:89: d0:93:13:42:d0:c2:56:d8:20:f8:82:49:d9:aa:d5: 31:87:eb:c7:0a:e4:5a:d0:e4:bf:72:2c:ff:c7:7e: 59:5a:1f:a6:6c:f0:d3:32:4f:59:f1:51:ae:59:2d: 8c:43:0f:f3:df:d2:b3:09:c7:27:c7:da:17:43:5c: 74:20:1c:70:48:c9:16:17:9c:9d:20:aa:54:fa:82: 0d:53:65:8f:df:11:5b:fd:73:b7:9e:9e:f8:67:de: 1d:fc:e0:ea:e7:dd:90:b8:00:9a:f0:26:73:1b:90: f4:93:76:67:b6:0d:a6:6b:ba:7d:ae:9f:b4:bb:0d: a2:ae:4a:22:45:c5:91:61:17:e4:d6:e4:c9:42:4f: 28:f6:f8:65:2b:7a:48:5e:a4:5f:b1:a5:f2:b1:9f: 1f:6e:7e:5d:d6:5e:8a:bc:9c:67:0f:e7:aa:42:00: 7f:0a:93:43:ef:8f:4f:ea:24:66:35:05:57:f9:55: ec:0f:f8:7f:ca:bf:e0:82:1b:aa:ba:4d:9d:e5:90: 7e:89:d8:3f:38:3a:93:e5:c9:80:30:c6:f3:93:fd: 4f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:ED:4C:4F:85:DE:95:6C:C0:BC:59:36:09:86:C3:1A:11:12:88:98 X509v3 Authority Key Identifier: keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c5:39:48:7a:95:0f:fc:d6:07:3b:83:90:74:f4:29:df:17: 7a:9c:e1:1b:47:7e:75:c1:35:bc:11:d5:8f:94:1d:5b:29:f2: 90:73:fc:65:67:3d:6b:a4:46:8b:43:ea:96:4d:35:c7:84:03: 80:38:63:ac:59:fe:23:cc:84:06:50:29:36:21:bd:23:84:f3: e6:e1:bf:60:b3:a2:81:10:cc:c2:f6:6d:7b:14:9c:43:c7:83: 65:b0:ad:26:0d:8d:54:d5:90:33:bb:7c:ff:98:0f:79:2e:6a: d3:27:44:86:fc:c2:c8:9a:f0:2f:7c:9d:b1:29:69:e1:4a:11: 90:d4:eb:9c:3e:92:07:40:a1:e0:a8:aa:e2:bb:a4:60:3d:2a: d8:00:45:78:bf:eb:11:f3:bf:93:b5:ed:b9:e6:87:5c:d3:a9: 6f:d7:75:9f:5e:26:40:a6:fe:62:1c:82:b9:0b:b6:f5:8a:d6: ea:58:18:84:6d:3b:e0:ff:12:8b:fe:91:d9:a2:8f:b4:0c:92: b6:f9:2d:73:11:9d:d3:c8:dd:38:3c:49:19:85:57:c9:e3:9b: 18:29:d2:85:b5:73:7d:23:e1:0f:70:68:e6:83:b2:cc:7a:dc: f5:27:c8:d0:ff:d3:62:fb:6b:4d:0d:22:c9:d0:f7:30:be:b8: b4:a1:4f:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fhL7bXRayO6Qx9iPIBycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWQ1MjFmODM4ODc0ODNjOGM5YjBjNmYzZGU1ZmQ1ZWQ1 Njg1YzkwHhcNMjUxMjIwMTYwMDUzWhcNMjUxMjIxMTYwMDUzWjAzMTEwLwYDVQQD Eyg4ZGVkNGM0Zjg1ZGU5NTZjYzBiYzU5MzYwOTg2YzMxYTExMTI4ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn3QWzU5nGbUj0TArLwDJ8lYwL1b 3ha/k8OQ+BDTDLxHhSVRMjVcGBRWbonQkxNC0MJW2CD4gknZqtUxh+vHCuRa0OS/ ciz/x35ZWh+mbPDTMk9Z8VGuWS2MQw/z39KzCccnx9oXQ1x0IBxwSMkWF5ydIKpU +oINU2WP3xFb/XO3np74Z94d/ODq592QuACa8CZzG5D0k3Zntg2ma7p9rp+0uw2i rkoiRcWRYRfk1uTJQk8o9vhlK3pIXqRfsaXysZ8fbn5d1l6KvJxnD+eqQgB/CpND 749P6iRmNQVX+VXsD/h/yr/gghuquk2d5ZB+idg/ODqT5cmAMMbzk/1P2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3tTE+F3pVswLxZNgmGwxoREoiYMB8GA1UdIwQY MBaAFPOtUh+DiHSDyMmwxvPeX9XtVoXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODYxU0g0T0lkSVBJeWJERzg5NWYxZTFXaGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jZGQ5ODUtMzM0Yy00YTBkLWE3YTgt NzVjMGNjZWRmOTc2LzEvODYxU0g0T0lkSVBJeWJERzg5NWYxZTFXaGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jZGQ5ODUtMzM0Yy00YTBkLWE3YTgtNzVjMGNjZWRmOTc2 LzEvODYxU0g0T0lkSVBJeWJERzg5NWYxZTFXaGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcU5SHqV D/zWBzuDkHT0Kd8XepzhG0d+dcE1vBHVj5QdWynykHP8ZWc9a6RGi0Pqlk01x4QD gDhjrFn+I8yEBlApNiG9I4Tz5uG/YLOigRDMwvZtexScQ8eDZbCtJg2NVNWQM7t8 /5gPeS5q0ydEhvzCyJrwL3ydsSlp4UoRkNTrnD6SB0Ch4Kiq4rukYD0q2ABFeL/r EfO/k7XtueaHXNOpb9d1n14mQKb+YhyCuQu29YrW6lgYhG074P8Si/6R2aKPtAyS tvktcxGd08jdODxJGYVXyeObGCnShbVzfSPhD3Bo5oOyzHrc9SfI0P/TYvtrTQ0i ydD3ML64tKFPEg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:15 2025 by rpki-client