This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json) Hash identifier: myVuHZlGLOhiupMM8HMMn5AsvPvl6Dnxge2yZspwVQE= Subject key identifier: D4:0F:7C:31:3C:64:1A:36:97:14:CB:E1:CE:7E:A9:CE:52:DD:D1:9E Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a Certificate serial: 019B6AD70AD18E88DDEEF9699690956E158A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft Manifest number: 179C Signing time: Mon 29 Dec 2025 16:00:36 +0000 Manifest this update: Mon 29 Dec 2025 16:00:36 +0000 Manifest next update: Tue 30 Dec 2025 16:00:36 +0000 Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: XTTr5dh8ozjmKCckt9kwyZTTl5jGRE4frIcqgA70akM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:0a:d1:8e:88:dd:ee:f9:69:96:90:95:6e:15:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a Validity Not Before: Dec 29 16:00:36 2025 GMT Not After : Dec 30 16:00:36 2025 GMT Subject: CN=d40f7c313c641a369714cbe1ce7ea9ce52ddd19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:3e:d4:0e:91:cc:cd:49:44:ae:a2:e1:45: 9e:54:8d:38:e1:0b:ce:50:0f:48:c9:94:b2:38:d2: 01:76:fd:44:d1:1a:9f:4d:15:30:74:46:97:61:bb: 8c:16:65:57:93:08:31:55:69:9b:2f:d3:9e:10:cb: fa:b1:da:d1:39:af:83:11:b7:d7:f2:b5:81:67:c1: fd:c1:cb:09:12:4b:91:a5:b7:b8:62:ec:88:1b:94: b1:46:91:d7:2a:3c:6f:1d:56:de:6e:30:ef:08:9a: fb:59:11:6e:67:ab:ed:ee:45:f9:19:a4:36:7f:57: 4f:87:3e:66:31:f4:2a:3e:90:11:8f:63:3c:7d:c6: d5:86:18:8c:5e:e8:ef:d5:17:43:78:1d:fa:36:ce: 0b:a7:7e:af:4c:b3:2d:84:dd:2d:df:59:26:7d:c6: 99:0e:b4:60:db:32:22:cf:69:0c:5a:fc:0a:9d:dc: c2:69:bc:55:be:3f:ee:cb:77:25:47:c8:6d:ca:6c: 6e:d8:38:7f:31:9c:65:3d:44:7b:d0:b3:79:58:3f: db:ec:f3:21:79:0a:f3:9a:91:d3:a9:db:4f:6f:b8: 60:c7:21:96:74:5e:ba:76:19:ba:e6:56:9f:63:dc: 75:f0:45:33:02:dc:7e:16:7c:9a:24:5f:e7:e5:b4: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:7C:31:3C:64:1A:36:97:14:CB:E1:CE:7E:A9:CE:52:DD:D1:9E X509v3 Authority Key Identifier: keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8b:b4:fa:a5:bf:43:c9:e1:ab:36:b6:b3:33:6c:c9:39:83: 1b:06:b8:b2:11:c9:a7:10:22:d5:13:00:0b:00:15:9f:1a:0a: ba:32:c1:c6:b0:5b:09:0c:33:e0:8a:f6:fc:c1:95:5c:a1:ed: 23:6e:09:45:e8:c6:c0:f1:f2:fd:7c:81:6f:27:4c:c7:7d:c2: fc:a8:85:37:75:73:ef:ae:f5:a4:aa:f6:77:30:85:ef:7f:1f: 5c:f2:d1:50:4c:37:41:db:e9:8e:62:ee:76:eb:c1:02:5b:11: 5c:27:97:8b:61:72:a4:c2:14:e4:7c:4a:df:77:6f:a2:4e:4d: c8:6e:34:bc:d3:02:39:e1:28:34:c2:c6:9b:48:0c:39:a7:cd: 84:47:44:a6:0c:bf:ae:55:ea:7b:13:c3:d3:eb:8e:69:25:20: 68:f2:60:78:e4:62:a8:2e:72:c7:a1:b5:98:cd:26:87:ad:24: 67:39:f8:19:30:e0:c8:ee:84:d7:8c:b9:f9:1d:76:b0:ce:49: 8c:98:f1:6c:93:4a:ff:b2:41:8a:47:ce:e2:5a:b3:4e:74:c2: 00:a1:e3:a3:71:57:c2:51:89:dc:3e:29:1c:d6:e1:42:b0:09: 0b:10:61:c7:c7:4e:91:d8:69:1f:86:70:90:10:f2:95:60:0f: 89:cf:b3:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1wrRjojd7vlplpCVbhWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2RjYjA4MWM3MzgwMmZjMTg5NWM2ZWI0YTI3MjY2NmJk NDI3OWEwHhcNMjUxMjI5MTYwMDM2WhcNMjUxMjMwMTYwMDM2WjAzMTEwLwYDVQQD EyhkNDBmN2MzMTNjNjQxYTM2OTcxNGNiZTFjZTdlYTljZTUyZGRkMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFg+1A6RzM1JRK6i4UWeVI044QvO UA9IyZSyONIBdv1E0RqfTRUwdEaXYbuMFmVXkwgxVWmbL9OeEMv6sdrROa+DEbfX 8rWBZ8H9wcsJEkuRpbe4YuyIG5SxRpHXKjxvHVbebjDvCJr7WRFuZ6vt7kX5GaQ2 f1dPhz5mMfQqPpARj2M8fcbVhhiMXujv1RdDeB36Ns4Lp36vTLMthN0t31kmfcaZ DrRg2zIiz2kMWvwKndzCabxVvj/uy3clR8htymxu2Dh/MZxlPUR70LN5WD/b7PMh eQrzmpHTqdtPb7hgxyGWdF66dhm65lafY9x18EUzAtx+FnyaJF/n5bTjvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQPfDE8ZBo2lxTL4c5+qc5S3dGeMB8GA1UdIwQY MBaAFNp9ywgcc4AvwYlcbrSicmZr1CeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUt NjhiNjhlNDk5YjRiLzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUtNjhiNjhlNDk5YjRi LzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIu0+qW/ Q8nhqza2szNsyTmDGwa4shHJpxAi1RMACwAVnxoKujLBxrBbCQwz4Ir2/MGVXKHt I24JRejGwPHy/XyBbydMx33C/KiFN3Vz7671pKr2dzCF738fXPLRUEw3QdvpjmLu duvBAlsRXCeXi2FypMIU5HxK33dvok5NyG40vNMCOeEoNMLGm0gMOafNhEdEpgy/ rlXqexPD0+uOaSUgaPJgeORiqC5yx6G1mM0mh60kZzn4GTDgyO6E14y5+R12sM5J jJjxbJNK/7JBikfO4lqzTnTCAKHjo3FXwlGJ3D4pHNbhQrAJCxBhx8dOkdhpH4Zw kBDylWAPic+zEw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:19 2025 by rpki-client