This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json) Hash identifier: ZeWSAmj/6SZZoD2IO3NMbgI7Vd6yIx3DFW7mLDzOLio= Subject key identifier: 2E:4A:7B:DA:91:9F:56:90:FE:C3:36:98:12:69:0D:82:6B:2C:E1:EF Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26 Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26 Certificate serial: 019B476FBF518FE57FBE743D64C2563625FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft Manifest number: 0EC2 Signing time: Mon 22 Dec 2025 19:01:04 +0000 Manifest this update: Mon 22 Dec 2025 19:01:04 +0000 Manifest next update: Tue 23 Dec 2025 19:01:04 +0000 Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: Uab7WJdsO65eLdK8ZCQWTwGDK4W5Ty27UYRRPlf9MTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:bf:51:8f:e5:7f:be:74:3d:64:c2:56:36:25:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26 Validity Not Before: Dec 22 19:01:04 2025 GMT Not After : Dec 23 19:01:04 2025 GMT Subject: CN=2e4a7bda919f5690fec3369812690d826b2ce1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:85:28:78:d9:27:b3:03:98:9e:48:80:31: a5:0e:4b:2b:ed:7d:23:68:3b:01:4e:09:a6:09:90: 08:c0:7b:1a:c1:b3:12:93:8e:26:c3:0e:97:3d:5b: d3:cd:d5:d1:64:b0:fb:33:30:8a:90:2f:de:3f:b5: 34:2f:22:7c:5a:a6:33:b7:24:89:a9:79:f7:12:83: 36:61:a4:bc:05:99:56:a5:0e:b2:0c:dd:d3:c8:e8: 26:26:28:26:48:e8:71:80:98:b5:a8:95:30:93:33: 61:24:e1:e4:8f:03:ae:5f:c8:25:b4:f2:3a:91:3f: 26:53:b1:ca:06:c6:8f:38:7f:4d:0d:91:1f:2a:09: 94:b4:07:6c:01:d8:aa:3a:bf:c4:2d:8e:da:67:65: 6b:d3:7f:d8:fe:54:d3:04:54:ce:b4:3f:20:11:bb: dd:22:dc:d8:0c:94:98:0b:5d:04:e4:86:78:a9:3f: be:5a:71:ca:d1:fd:6b:c2:c4:38:f7:6d:f9:58:fc: 05:64:75:03:0c:db:ba:43:41:dc:e5:e3:1f:52:f4: 56:2f:b1:b1:c3:83:45:71:33:72:d4:3c:71:62:ae: c6:56:b0:c0:03:db:6c:0c:5a:b8:f9:30:9c:7e:5c: 5f:45:f7:90:05:81:68:b6:a6:a8:07:2a:dd:7e:5e: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4A:7B:DA:91:9F:56:90:FE:C3:36:98:12:69:0D:82:6B:2C:E1:EF X509v3 Authority Key Identifier: keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3b:d4:6b:a5:11:a9:22:c4:fd:29:4a:2c:0b:b8:73:36:13: fd:8e:83:a1:ac:a1:64:71:d7:bb:22:af:4c:67:5e:38:56:65: f5:0e:d9:9c:0d:1c:46:1a:c6:ff:10:ce:ec:0e:23:5a:f9:47: d9:a2:be:aa:72:c1:42:f9:a4:ed:f1:ea:f2:13:21:c2:a0:02: 05:ce:82:07:86:6c:35:d6:4c:92:ac:75:12:d1:2d:d0:47:50: 4d:03:c6:f9:88:c9:f2:c2:4e:8b:d7:04:40:24:c6:23:cd:8c: 46:96:bc:9a:42:8a:4b:29:65:4e:24:09:98:85:15:1d:06:e0: d9:95:da:9b:ea:f9:b6:30:94:2d:fe:30:8f:2e:d7:0b:88:a0: 35:2f:c1:6e:aa:76:0b:8d:de:b4:5a:94:f4:f8:67:25:21:4a: 64:67:69:77:11:08:b2:f4:f1:05:4f:8d:24:23:9a:3d:5a:fa: ed:67:a6:a1:85:7e:a6:7c:ab:d7:66:0f:1f:95:17:4f:73:43: aa:3b:79:04:0a:78:1b:4f:c6:3a:1a:b5:cf:16:f6:dd:9f:d6: fc:0b:2d:98:49:ae:0c:24:d2:b8:fd:89:9d:e6:46:eb:eb:c3: e3:5c:a9:c8:d9:de:ee:da:34:ca:95:dc:6a:e1:08:e3:f1:17: f7:8b:7f:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb79Rj+V/vnQ9ZMJWNiX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MjQxYWFjOWVkYTdiZWY2OTA4OWY2NDdiNWQ4Zjc3NGZm NDNhMjYwHhcNMjUxMjIyMTkwMTA0WhcNMjUxMjIzMTkwMTA0WjAzMTEwLwYDVQQD EygyZTRhN2JkYTkxOWY1NjkwZmVjMzM2OTgxMjY5MGQ4MjZiMmNlMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliCFKHjZJ7MDmJ5IgDGlDksr7X0j aDsBTgmmCZAIwHsawbMSk44mww6XPVvTzdXRZLD7MzCKkC/eP7U0LyJ8WqYztySJ qXn3EoM2YaS8BZlWpQ6yDN3TyOgmJigmSOhxgJi1qJUwkzNhJOHkjwOuX8gltPI6 kT8mU7HKBsaPOH9NDZEfKgmUtAdsAdiqOr/ELY7aZ2Vr03/Y/lTTBFTOtD8gEbvd ItzYDJSYC10E5IZ4qT++WnHK0f1rwsQ49235WPwFZHUDDNu6Q0Hc5eMfUvRWL7Gx w4NFcTNy1DxxYq7GVrDAA9tsDFq4+TCcflxfRfeQBYFotqaoByrdfl7jMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5Ke9qRn1aQ/sM2mBJpDYJrLOHvMB8GA1UdIwQY MBaAFJgkGqye2nvvaQifZHtdj3dP9DomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jZGE5NTgtM2NhYi00YjIzLTkxNmMt MzVkZTM4NGMwOTgyLzEvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jZGE5NTgtM2NhYi00YjIzLTkxNmMtMzVkZTM4NGMwOTgy LzEvbUNRYXJKN2FlLTlwQ0o5a2UxMlBkMF8wT2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDvUa6UR qSLE/SlKLAu4czYT/Y6DoayhZHHXuyKvTGdeOFZl9Q7ZnA0cRhrG/xDO7A4jWvlH 2aK+qnLBQvmk7fHq8hMhwqACBc6CB4ZsNdZMkqx1EtEt0EdQTQPG+YjJ8sJOi9cE QCTGI82MRpa8mkKKSyllTiQJmIUVHQbg2ZXam+r5tjCULf4wjy7XC4igNS/Bbqp2 C43etFqU9PhnJSFKZGdpdxEIsvTxBU+NJCOaPVr67WemoYV+pnyr12YPH5UXT3ND qjt5BAp4G0/GOhq1zxb23Z/W/AstmEmuDCTSuP2JneZG6+vD41ypyNne7to0ypXc auEI4/EX94t/BA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:55:36 2025 by rpki-client