This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json) Hash identifier: aTCptDf57ZMTATm9lCs8f2wg0g9r+qRWsTEM0YOHqqk= Subject key identifier: 0E:25:B9:83:B4:97:2D:D1:03:47:40:D9:FF:F5:59:DE:A0:EB:5D:FC Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Certificate serial: 019B4E4D1BFA4F4E735B5851AEF3856F4072 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft Manifest number: 0B24 Signing time: Wed 24 Dec 2025 03:00:34 +0000 Manifest this update: Wed 24 Dec 2025 03:00:34 +0000 Manifest next update: Thu 25 Dec 2025 03:00:34 +0000 Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: TW7We8ybi1k9QeEr//gGCoAI/JKQE7g4AaJ7BXVS7/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:1b:fa:4f:4e:73:5b:58:51:ae:f3:85:6f:40:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Validity Not Before: Dec 24 03:00:34 2025 GMT Not After : Dec 25 03:00:34 2025 GMT Subject: CN=0e25b983b4972dd1034740d9fff559dea0eb5dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:3f:ac:85:c8:34:24:26:53:e6:a7:b3:fd: 3d:11:70:2b:34:10:45:a6:7f:ad:64:b4:cb:68:56: 54:28:19:71:0c:9d:8c:61:f8:07:c4:3c:29:65:c1: 38:23:03:39:9a:ee:8c:31:df:ed:3e:b2:b1:12:67: 2f:a8:2b:39:4e:e1:76:6a:42:27:79:56:3d:5e:68: 3e:47:55:af:b9:6f:ad:fd:26:d1:78:b6:cb:5c:ed: 75:ed:11:eb:ae:23:26:d8:65:7e:87:01:b9:58:5f: ad:12:34:3b:34:d8:68:54:b2:aa:47:72:0c:00:2d: 16:48:bd:f5:d3:c6:56:b3:f6:a6:ec:6c:5d:1d:56: 59:70:8b:cf:a8:43:86:7a:42:44:f1:bf:10:b7:35: 4a:b9:28:90:5b:48:bf:3d:8c:c7:6d:39:08:31:14: 10:f5:e0:c4:c8:4c:20:e4:a6:df:25:2c:23:49:f7: e4:83:53:8d:1f:30:c5:cb:51:49:c4:73:20:67:eb: e7:5e:5a:c9:6f:2d:9c:3c:d2:17:bc:62:80:00:8d: 2f:d5:40:12:9d:14:5d:36:c7:da:47:ec:eb:bd:5b: a0:be:72:44:bd:2f:29:ef:b0:ce:46:7b:a5:b8:1f: f0:bc:06:14:40:a6:bb:5a:be:ef:e5:fb:02:ae:1b: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:25:B9:83:B4:97:2D:D1:03:47:40:D9:FF:F5:59:DE:A0:EB:5D:FC X509v3 Authority Key Identifier: keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:61:00:28:17:3b:3b:49:fe:c7:ff:1c:29:5a:e3:2d:fb:0d: 3c:b3:e1:e6:ef:f3:62:9c:bc:e6:cb:f7:56:70:7b:1a:67:a5: 8f:2a:46:31:52:2f:aa:a2:44:69:3d:e8:f1:af:11:3e:e3:6e: 72:6b:1b:29:76:23:3c:d6:a2:df:9e:af:0c:02:ea:9b:dd:8e: 16:a2:09:14:ed:d1:a3:d0:b1:bf:5f:94:bd:cf:0c:9c:59:2c: df:59:ce:b1:0e:2c:26:d4:bb:fc:92:56:ba:09:cc:24:e6:75: 0d:03:89:9e:27:84:c5:cf:1b:d1:f6:b0:13:2e:1c:0c:6f:81: 1f:ce:7e:2a:ea:ab:9f:a7:e3:54:4c:14:fd:56:cb:c6:f3:e4: c3:47:27:38:54:92:e5:14:96:59:1a:81:62:8c:bb:dc:7e:7e: 0d:bb:e7:52:b6:16:97:19:5b:0c:5a:b3:8b:1a:05:1b:12:e8: 93:97:63:9d:1b:b4:b4:61:94:35:b4:36:67:c6:5e:98:a7:c3: 8b:0d:0b:8c:7d:1e:3b:b3:4e:42:b8:91:28:20:89:c9:86:58: 12:f8:bc:0a:4f:42:2a:d0:d9:7e:25:32:54:3f:f0:dd:fb:f3: 0f:00:40:39:e3:46:ab:26:5d:ec:7d:e9:98:a1:05:82:25:ac: 14:ac:ce:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTRv6T05zW1hRrvOFb0ByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj OTRlMTMwHhcNMjUxMjI0MDMwMDM0WhcNMjUxMjI1MDMwMDM0WjAzMTEwLwYDVQQD EygwZTI1Yjk4M2I0OTcyZGQxMDM0NzQwZDlmZmY1NTlkZWEwZWI1ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFg/rIXINCQmU+ans/09EXArNBBF pn+tZLTLaFZUKBlxDJ2MYfgHxDwpZcE4IwM5mu6MMd/tPrKxEmcvqCs5TuF2akIn eVY9Xmg+R1WvuW+t/SbReLbLXO117RHrriMm2GV+hwG5WF+tEjQ7NNhoVLKqR3IM AC0WSL3108ZWs/am7GxdHVZZcIvPqEOGekJE8b8QtzVKuSiQW0i/PYzHbTkIMRQQ 9eDEyEwg5KbfJSwjSffkg1ONHzDFy1FJxHMgZ+vnXlrJby2cPNIXvGKAAI0v1UAS nRRdNsfaR+zrvVugvnJEvS8p77DORnuluB/wvAYUQKa7Wr7v5fsCrhvvkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4luYO0ly3RA0dA2f/1Wd6g6138MB8GA1UdIwQY MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmEAKBc7 O0n+x/8cKVrjLfsNPLPh5u/zYpy85sv3VnB7GmeljypGMVIvqqJEaT3o8a8RPuNu cmsbKXYjPNai356vDALqm92OFqIJFO3Ro9Cxv1+Uvc8MnFks31nOsQ4sJtS7/JJW ugnMJOZ1DQOJnieExc8b0fawEy4cDG+BH85+Kuqrn6fjVEwU/VbLxvPkw0cnOFSS 5RSWWRqBYoy73H5+DbvnUrYWlxlbDFqzixoFGxLok5djnRu0tGGUNbQ2Z8ZemKfD iw0LjH0eO7NOQriRKCCJyYZYEvi8Ck9CKtDZfiUyVD/w3fvzDwBAOeNGqyZd7H3p mKEFgiWsFKzO5w== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:21 2025 by rpki-client