This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft File: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft (raw, json) Hash identifier: XVQB1UDF6kGgkfJvloSCjQ3ZUDEoSWlfuhh4wpPWDnQ= Subject key identifier: 2E:5C:FC:62:0D:CF:9D:47:A9:50:F7:AD:70:57:99:18:8B:0F:CF:4A Authority key identifier: 44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74 Certificate issuer: /CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974 Certificate serial: 019B631E0355AD0B5FA02478AA2E6093025F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft Manifest number: 1799 Signing time: Sun 28 Dec 2025 04:01:09 +0000 Manifest this update: Sun 28 Dec 2025 04:01:09 +0000 Manifest next update: Mon 29 Dec 2025 04:01:09 +0000 Files and hashes: 1: REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl (hash: DtM0y5u1uAYD7T8wuiWkJDaAvG7lwSKj+bDO38wiI9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:03:55:ad:0b:5f:a0:24:78:aa:2e:60:93:02:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=444b3ab99f8644acd5e69a9a5f38546cdcc6e974 Validity Not Before: Dec 28 04:01:09 2025 GMT Not After : Dec 29 04:01:09 2025 GMT Subject: CN=2e5cfc620dcf9d47a950f7ad705799188b0fcf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:a3:07:21:80:37:4d:45:cc:d9:4c:6f:b5: 23:4b:ce:de:ea:ab:80:ad:a8:91:7b:43:26:af:fe: 12:3e:b0:7e:8b:49:15:e7:7e:f4:eb:46:7b:8f:ef: 26:79:ac:30:b4:2f:fd:a5:14:58:23:38:14:b4:c1: c5:d4:4b:ac:38:f9:69:09:93:ef:8a:bc:30:90:0a: 42:a7:e2:8f:a7:f5:12:2f:1e:88:40:f6:be:dc:b1: 3e:ef:b2:81:f4:71:73:8a:f3:dd:94:5c:af:8e:05: 14:6a:82:02:41:2b:da:2d:96:5d:d4:8c:33:c3:9e: 7b:9b:80:4a:ed:3a:1b:c6:74:d4:5c:d0:97:b1:8f: 1d:3f:6d:16:b5:7a:b4:1f:a9:c3:f3:d3:4e:ed:26: f2:82:ed:b3:1e:3e:71:10:75:36:45:36:35:cb:ad: c8:66:e3:e9:88:97:de:7a:1a:3f:84:26:ea:06:d3: 1b:e6:9b:26:33:1e:be:7e:74:7f:2e:f3:ed:a9:e7: e7:4a:60:d9:31:09:52:63:a2:98:e1:ae:f7:52:9a: ae:49:f0:c9:f8:f5:67:53:64:f9:42:f0:2f:63:d5: fd:96:17:a4:18:b2:bc:1c:e4:0a:da:96:45:ed:8e: cd:10:5e:c4:68:66:7d:f3:56:82:97:f4:f5:55:eb: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:FC:62:0D:CF:9D:47:A9:50:F7:AD:70:57:99:18:8B:0F:CF:4A X509v3 Authority Key Identifier: keyid:44:4B:3A:B9:9F:86:44:AC:D5:E6:9A:9A:5F:38:54:6C:DC:C6:E9:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/28849e-3c23-4b7a-b6fc-d914bb79eedc/1/REs6uZ-GRKzV5pqaXzhUbNzG6XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:60:c6:71:9d:82:45:aa:10:15:20:94:ef:ff:3a:ad:c4:81: c3:dc:90:1e:b3:ed:48:0b:ec:b5:69:92:aa:ff:b4:1c:51:9d: da:bb:b3:25:e2:1e:72:41:70:2e:ed:e9:2d:d9:c9:7b:f6:35: d0:77:19:37:23:80:56:88:7b:0a:21:f8:0f:0e:8b:91:d3:4f: 84:32:c2:c8:0d:73:8f:2b:29:79:94:3e:b5:5c:0d:d9:01:31: 74:45:30:d4:28:65:69:4e:73:8f:47:cd:7a:56:68:9f:a7:ec: 2b:f9:e3:32:e9:97:11:0b:7a:3b:3d:dc:b2:1c:1d:49:9a:a7: f2:99:60:c0:bf:86:5a:c8:7a:d2:f1:05:41:2c:a6:0d:63:f1: 8e:19:86:b6:80:e4:7b:9a:63:8f:9b:19:cb:d4:a9:cb:b5:0e: 66:ad:72:6f:73:61:bf:64:3b:b6:ef:ef:31:1c:55:7b:20:aa: b8:61:74:72:10:c7:a3:26:af:c6:fe:95:9e:65:18:82:55:fb: 30:0f:eb:4d:b4:d0:46:af:17:d7:ee:ec:19:1c:ed:dc:e8:18: b8:b7:e4:10:4d:32:fa:dd:db:2f:6b:d4:56:66:4e:b2:8a:c3: f4:a5:dc:ef:e8:92:ed:8b:b8:11:24:a7:b4:59:cf:8c:e7:0d: 0e:cd:92:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHgNVrQtfoCR4qi5gkwJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NGIzYWI5OWY4NjQ0YWNkNWU2OWE5YTVmMzg1NDZjZGNj NmU5NzQwHhcNMjUxMjI4MDQwMTA5WhcNMjUxMjI5MDQwMTA5WjAzMTEwLwYDVQQD EygyZTVjZmM2MjBkY2Y5ZDQ3YTk1MGY3YWQ3MDU3OTkxODhiMGZjZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfqjByGAN01FzNlMb7UjS87e6quA raiRe0Mmr/4SPrB+i0kV537060Z7j+8meawwtC/9pRRYIzgUtMHF1EusOPlpCZPv irwwkApCp+KPp/USLx6IQPa+3LE+77KB9HFzivPdlFyvjgUUaoICQSvaLZZd1Iwz w557m4BK7TobxnTUXNCXsY8dP20WtXq0H6nD89NO7Sbygu2zHj5xEHU2RTY1y63I ZuPpiJfeeho/hCbqBtMb5psmMx6+fnR/LvPtqefnSmDZMQlSY6KY4a73UpquSfDJ +PVnU2T5QvAvY9X9lhekGLK8HOQK2pZF7Y7NEF7EaGZ981aCl/T1VetuvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5c/GINz51HqVD3rXBXmRiLD89KMB8GA1UdIwQY MBaAFERLOrmfhkSs1eaaml84VGzcxul0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMt ZDkxNGJiNzllZWRjLzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yODg0OWUtM2MyMy00YjdhLWI2ZmMtZDkxNGJiNzllZWRj LzEvUkVzNnVaLUdSS3pWNXBxYVh6aFViTnpHNlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimDGcZ2C RaoQFSCU7/86rcSBw9yQHrPtSAvstWmSqv+0HFGd2ruzJeIeckFwLu3pLdnJe/Y1 0HcZNyOAVoh7CiH4Dw6LkdNPhDLCyA1zjyspeZQ+tVwN2QExdEUw1ChlaU5zj0fN elZon6fsK/njMumXEQt6Oz3cshwdSZqn8plgwL+GWsh60vEFQSymDWPxjhmGtoDk e5pjj5sZy9Spy7UOZq1yb3Nhv2Q7tu/vMRxVeyCquGF0chDHoyavxv6VnmUYglX7 MA/rTbTQRq8X1+7sGRzt3OgYuLfkEE0y+t3bL2vUVmZOsorD9KXc7+iS7Yu4ESSn tFnPjOcNDs2SWw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:25:56 2025 by rpki-client