This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json) Hash identifier: 5eXvto+spUBvFO2tiGt7E7G4yO3foBj1XiGyK4WR3AA= Subject key identifier: F7:12:6F:71:46:CE:74:E8:13:3E:16:4D:FC:B5:A7:40:00:CB:63:FB Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d Certificate serial: 019B2B1DB994F83B869715CB6665C0A7D593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft Manifest number: 0853 Signing time: Wed 17 Dec 2025 07:02:06 +0000 Manifest this update: Wed 17 Dec 2025 07:02:06 +0000 Manifest next update: Thu 18 Dec 2025 07:02:06 +0000 Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: PTMHsGRVKkmDfP+TSSGyQ0UKuYEvw966m9myOkSGDHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:b9:94:f8:3b:86:97:15:cb:66:65:c0:a7:d5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d Validity Not Before: Dec 17 07:02:06 2025 GMT Not After : Dec 18 07:02:06 2025 GMT Subject: CN=f7126f7146ce74e8133e164dfcb5a74000cb63fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:b9:b2:36:2d:c7:6c:63:ac:ca:e3:c5:3e: 51:db:43:a5:1f:75:48:f3:72:4d:46:cb:fa:5d:73: 27:77:7e:17:ba:1b:9b:3a:7e:16:f9:56:0d:60:1f: 99:c7:e1:52:fa:39:34:ac:3c:a1:23:13:2c:62:9f: bf:cf:14:57:91:6a:5f:b9:18:9d:45:16:57:23:02: 72:65:c8:1a:1a:e7:de:91:10:5c:92:ad:54:52:00: 1c:47:ab:95:f8:bc:43:47:0f:92:94:cd:ae:5a:3b: 71:8e:c2:2e:f1:ae:d0:f4:fc:84:d3:ed:16:02:0f: da:b8:16:c5:a7:63:05:7f:d1:e0:09:a3:4c:9c:21: 07:2a:17:dc:1f:06:46:d3:8b:bc:1a:79:f0:4c:d2: 0c:0e:b4:89:f6:14:94:3d:06:53:59:cd:d8:35:01: e6:9d:6a:93:5d:a7:b2:a7:05:1a:c0:b0:19:8a:a8: 6c:5a:9c:31:7b:ef:6d:cb:2f:45:16:b8:49:71:e8: 0f:7d:22:45:5b:71:11:f5:7c:7a:23:57:00:6f:20: 7a:9b:bc:50:ae:e1:df:9b:19:8c:9d:52:8d:f7:2a: 9c:9b:6a:35:09:b0:94:b1:62:10:5c:56:80:b0:55: f9:bc:75:f2:60:fe:45:f8:d6:6c:e1:8b:cb:c3:30: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:12:6F:71:46:CE:74:E8:13:3E:16:4D:FC:B5:A7:40:00:CB:63:FB X509v3 Authority Key Identifier: keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:28:2b:37:a9:f4:4a:65:38:cd:ba:02:30:64:29:18:f1:71: 12:74:79:7b:e1:e1:a3:b5:8e:c2:c0:2b:38:05:b6:44:3f:8e: d3:88:02:28:2a:78:90:17:75:d8:f2:15:66:63:55:ef:62:8a: 32:c8:1c:e5:88:d7:21:25:fa:3a:32:8a:86:c5:72:81:ab:3f: bd:cc:6c:bb:13:66:bc:ff:34:bf:38:f7:49:cc:fe:be:3f:d0: e7:d8:45:38:9b:85:c1:91:0e:6c:a9:0c:45:02:ba:cf:3b:d5: eb:75:1d:20:51:c1:62:19:14:f4:9c:24:dc:94:95:72:ed:fe: ca:66:22:a5:0d:b5:2c:bb:3c:dd:54:18:2f:85:66:7f:1d:c0: a5:91:3f:5b:6e:54:7c:b8:79:d7:70:c4:83:26:4c:ae:11:6d: 3d:26:35:a1:23:40:eb:be:cb:f9:3e:83:0b:23:ec:e0:6c:14: 0d:61:4b:3c:f5:6e:c5:d2:54:60:1d:c9:0c:15:45:d7:fb:29: ae:c2:db:27:59:54:65:70:e9:29:5e:9f:be:9d:40:05:20:62: cf:f8:f8:1a:e5:9e:f7:c9:5b:6f:5b:5a:3a:af:68:af:b3:05: 26:45:27:94:7f:e3:16:c8:18:e4:60:27:75:cf:30:7e:12:ba: bb:1c:c3:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHbmU+DuGlxXLZmXAp9WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3 MjAzOGQwHhcNMjUxMjE3MDcwMjA2WhcNMjUxMjE4MDcwMjA2WjAzMTEwLwYDVQQD EyhmNzEyNmY3MTQ2Y2U3NGU4MTMzZTE2NGRmY2I1YTc0MDAwY2I2M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvG5sjYtx2xjrMrjxT5R20OlH3VI 83JNRsv6XXMnd34XuhubOn4W+VYNYB+Zx+FS+jk0rDyhIxMsYp+/zxRXkWpfuRid RRZXIwJyZcgaGufekRBckq1UUgAcR6uV+LxDRw+SlM2uWjtxjsIu8a7Q9PyE0+0W Ag/auBbFp2MFf9HgCaNMnCEHKhfcHwZG04u8GnnwTNIMDrSJ9hSUPQZTWc3YNQHm nWqTXaeypwUawLAZiqhsWpwxe+9tyy9FFrhJcegPfSJFW3ER9Xx6I1cAbyB6m7xQ ruHfmxmMnVKN9yqcm2o1CbCUsWIQXFaAsFX5vHXyYP5F+NZs4YvLwzBdQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcSb3FGznToEz4WTfy1p0AAy2P7MB8GA1UdIwQY MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSgrN6n0 SmU4zboCMGQpGPFxEnR5e+Hho7WOwsArOAW2RD+O04gCKCp4kBd12PIVZmNV72KK Msgc5YjXISX6OjKKhsVygas/vcxsuxNmvP80vzj3Scz+vj/Q59hFOJuFwZEObKkM RQK6zzvV63UdIFHBYhkU9Jwk3JSVcu3+ymYipQ21LLs83VQYL4Vmfx3ApZE/W25U fLh513DEgyZMrhFtPSY1oSNA677L+T6DCyPs4GwUDWFLPPVuxdJUYB3JDBVF1/sp rsLbJ1lUZXDpKV6fvp1ABSBiz/j4GuWe98lbb1taOq9or7MFJkUnlH/jFsgY5GAn dc8wfhK6uxzDfg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:07:36 2025 by rpki-client