This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json) Hash identifier: E7socMz7EGPlVgOEBNsumVPoROtsR2RDdLFW2+yBh5g= Subject key identifier: 14:B8:94:14:29:93:94:16:BE:46:85:A9:E7:87:C2:76:68:88:77:C0 Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d Certificate serial: 019B4E4E0EDB06F3DCA488A2DE30C4087ECD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft Manifest number: 1722 Signing time: Wed 24 Dec 2025 03:01:36 +0000 Manifest this update: Wed 24 Dec 2025 03:01:36 +0000 Manifest next update: Thu 25 Dec 2025 03:01:36 +0000 Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=) 2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: zLv8gfyDdmoXRy8wMbMEjDUiItGKkyk6Km0DFWw6Ch0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:0e:db:06:f3:dc:a4:88:a2:de:30:c4:08:7e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d Validity Not Before: Dec 24 03:01:36 2025 GMT Not After : Dec 25 03:01:36 2025 GMT Subject: CN=14b8941429939416be4685a9e787c276688877c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6c:5d:3a:3c:b9:b9:3f:b5:0d:b2:3f:9e:f4: de:50:26:b1:ec:86:fc:fa:cb:15:d1:c9:47:35:5d: b9:c9:1e:09:06:cc:dc:2d:12:a6:43:95:f1:05:f5: 21:64:62:f5:7e:8a:8f:1a:e9:a7:f7:da:e9:80:de: fa:42:45:40:5a:69:a8:90:f6:27:e8:0a:38:07:6c: 89:25:da:97:df:38:7f:e1:2e:1a:8e:4e:26:5d:8b: 1d:57:3d:b3:eb:53:70:f5:a7:85:06:24:92:31:2e: 7a:35:e4:3f:11:0b:9e:58:5c:b6:25:f0:63:c8:d6: 45:52:33:7e:c1:c2:c1:2a:cb:5c:13:f1:64:bc:55: 07:18:8b:d7:15:57:3b:cd:ef:63:ff:85:80:a3:70: 2c:cd:69:95:f0:bb:18:2a:3d:23:62:03:40:32:b1: e8:d4:a9:76:0b:75:2f:35:63:bc:c9:47:8b:87:68: 7b:6e:de:e9:d4:9f:b6:c5:88:d7:16:1e:59:3b:af: 2b:c5:c6:dc:42:22:ca:02:7f:b5:c3:c7:30:3a:80: 7c:ca:03:43:15:41:b7:ac:da:c1:4d:db:65:36:a3: df:fd:de:da:d6:b6:ed:e3:ee:57:d6:39:0d:5a:fb: c7:e6:ef:c8:00:45:8e:98:d6:a7:fa:73:6e:b5:35: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B8:94:14:29:93:94:16:BE:46:85:A9:E7:87:C2:76:68:88:77:C0 X509v3 Authority Key Identifier: keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5f:c7:ca:60:36:d2:e7:d9:e9:93:fd:3e:9f:22:24:40:aa: fd:84:3d:a6:ad:d0:d7:7a:46:50:89:d0:9c:fa:f4:17:c2:73: ee:0c:80:d8:0d:70:5e:ed:e3:95:9e:60:fa:c7:f7:5b:ce:26: 44:0f:51:c4:8a:73:bf:cd:ba:c4:a8:4a:91:49:57:fb:11:cc: 92:19:d3:cd:83:72:2d:a3:12:07:a0:2a:67:a0:8f:fc:23:18: 55:90:b9:e6:09:89:c7:f2:74:61:cd:26:5b:f9:22:94:e7:a5: a1:bb:23:5d:9f:9e:f7:2b:bb:2c:46:13:f6:4f:42:1a:81:ab: cb:68:4a:4a:4b:c3:a7:7f:b5:aa:46:14:c2:5b:bb:01:42:86: 99:b8:05:05:e4:d8:65:2e:55:9e:0f:77:23:a0:b0:bd:20:f7: 5c:aa:28:2b:27:2f:0e:bc:f7:5e:dc:a4:53:f9:40:0e:85:4d: 85:9b:1f:83:00:2d:7e:c7:fd:71:ef:2d:18:b9:99:7c:87:10: bf:4e:af:f5:7b:35:62:5c:04:6a:ae:f4:03:68:85:05:6f:11: 25:00:68:e7:b1:89:6d:c7:2b:3d:58:4e:bd:a5:85:0b:62:f1: 49:ae:4f:93:16:1d:8d:a6:6c:5b:ec:e8:2d:12:21:88:6c:31: f9:40:f0:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTg7bBvPcpIii3jDECH7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjI1ZDg1OWZmMDZiZTFlYmM5N2FkZDVkZWMwNWQzNmZj ZGNhMmQwHhcNMjUxMjI0MDMwMTM2WhcNMjUxMjI1MDMwMTM2WjAzMTEwLwYDVQQD EygxNGI4OTQxNDI5OTM5NDE2YmU0Njg1YTllNzg3YzI3NjY4ODg3N2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGxdOjy5uT+1DbI/nvTeUCax7Ib8 +ssV0clHNV25yR4JBszcLRKmQ5XxBfUhZGL1foqPGumn99rpgN76QkVAWmmokPYn 6Ao4B2yJJdqX3zh/4S4ajk4mXYsdVz2z61Nw9aeFBiSSMS56NeQ/EQueWFy2JfBj yNZFUjN+wcLBKstcE/FkvFUHGIvXFVc7ze9j/4WAo3AszWmV8LsYKj0jYgNAMrHo 1Kl2C3UvNWO8yUeLh2h7bt7p1J+2xYjXFh5ZO68rxcbcQiLKAn+1w8cwOoB8ygND FUG3rNrBTdtlNqPf/d7a1rbt4+5X1jkNWvvH5u/IAEWOmNan+nNutTVNaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS4lBQpk5QWvkaFqeeHwnZoiHfAMB8GA1UdIwQY MBaAFHKyXYWf8Gvh68l63V3sBdNvzcotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMt MTIzZmEyYWI5NDA4LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yZjgzM2YtYTdlOC00ZjlkLWEzODMtMTIzZmEyYWI5NDA4 LzEvY3JKZGhaX3dhLUhyeVhyZFhld0YwMl9OeWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALF/HymA2 0ufZ6ZP9Pp8iJECq/YQ9pq3Q13pGUInQnPr0F8Jz7gyA2A1wXu3jlZ5g+sf3W84m RA9RxIpzv826xKhKkUlX+xHMkhnTzYNyLaMSB6AqZ6CP/CMYVZC55gmJx/J0Yc0m W/kilOelobsjXZ+e9yu7LEYT9k9CGoGry2hKSkvDp3+1qkYUwlu7AUKGmbgFBeTY ZS5Vng93I6CwvSD3XKooKycvDrz3XtykU/lADoVNhZsfgwAtfsf9ce8tGLmZfIcQ v06v9Xs1YlwEaq70A2iFBW8RJQBo57GJbccrPVhOvaWFC2LxSa5PkxYdjaZsW+zo LRIhiGwx+UDwzQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:59 2025 by rpki-client