This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json) Hash identifier: 3IFOkoGBvaF3oCrsOC3hpxvOMgdW9zFo2kNehDyQ4h4= Subject key identifier: A3:31:5B:AE:A7:35:70:7E:5C:12:AA:9A:1C:14:F6:0A:4D:F6:B9:E1 Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b Certificate serial: 019B673192EAB118C95E7983254A8F0DEA32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft Manifest number: 06C2 Signing time: Sun 28 Dec 2025 23:01:00 +0000 Manifest this update: Sun 28 Dec 2025 23:01:00 +0000 Manifest next update: Mon 29 Dec 2025 23:01:00 +0000 Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: kgdRi2blwwdFn0RHATJ9C23il9aQGllxQz9kL11q5L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:92:ea:b1:18:c9:5e:79:83:25:4a:8f:0d:ea:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b Validity Not Before: Dec 28 23:01:00 2025 GMT Not After : Dec 29 23:01:00 2025 GMT Subject: CN=a3315baea735707e5c12aa9a1c14f60a4df6b9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:6b:8e:fc:6c:21:fb:b6:15:66:e5:d4:f6: a1:c0:85:84:40:c7:51:8e:b8:7c:81:86:26:ac:9d: ac:49:d9:cd:77:3c:0c:25:52:fa:70:05:1a:4f:d6: 69:5c:0c:49:72:1f:2c:fc:c8:07:57:e7:71:d2:5c: d1:b8:28:af:10:6d:e0:8d:73:2c:38:f8:6c:b1:93: 01:c6:f1:b5:d7:2c:ba:ce:b5:e7:13:95:78:3a:99: db:4f:2e:45:48:86:d7:5c:41:eb:c1:0c:a0:50:61: e0:ab:e5:23:cb:85:80:33:0c:5b:5a:40:7c:a1:9d: fb:3d:16:7b:93:b2:e7:24:61:8e:7c:ad:de:32:b3: 17:0e:40:8c:b6:fb:71:7c:ea:16:df:8c:d3:d6:c7: 17:f8:9c:1d:02:7c:62:55:ae:e9:99:23:a9:a0:43: 41:05:3c:30:9f:97:1b:30:5f:84:24:86:c0:fe:b6: 5a:d4:55:8a:6d:77:7f:5f:c6:2c:5d:3b:d7:9b:b9: 87:e1:98:4f:a6:29:de:2d:7f:f7:ab:86:06:e7:e1: 35:04:54:4c:90:37:ba:c2:33:82:cd:4a:b2:aa:7d: bf:f5:93:fd:11:92:f2:3c:9b:1a:7f:2b:7a:50:38: 32:b7:b9:b8:59:1d:fa:ca:31:d2:1f:45:91:7a:88: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:5B:AE:A7:35:70:7E:5C:12:AA:9A:1C:14:F6:0A:4D:F6:B9:E1 X509v3 Authority Key Identifier: keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f5:48:0f:18:78:37:4f:67:da:48:7d:ed:02:2e:45:39:38: b3:8d:12:33:4c:d9:70:3d:a6:29:b2:9f:fe:b6:de:36:eb:da: 87:0e:81:62:01:32:a1:5c:9c:7a:a4:3f:d1:8c:7f:34:cf:90: 5e:a9:fb:60:32:36:98:c7:a2:fa:54:d1:f4:20:75:90:19:42: 39:50:a9:b1:8e:4f:e2:a9:9d:4e:54:29:cf:d6:25:9c:8b:62: 00:3f:42:85:b9:73:eb:41:bf:53:9e:78:c7:8f:8d:7d:c0:19: ca:21:69:65:42:cd:9c:64:48:1f:0b:7e:15:3b:87:6d:80:bf: 7e:36:8d:a6:91:55:d3:9a:18:1d:21:b5:37:eb:09:3b:f3:41: 91:62:fd:2d:e4:5f:18:e2:40:0a:00:cf:db:ae:24:de:4a:b8: d9:63:12:55:63:bc:da:d3:29:82:2f:06:b3:21:8b:73:91:8d: 8f:43:63:0a:65:98:6e:57:20:cd:af:b4:0b:eb:e6:0b:c6:c5: 00:a1:ce:57:c8:77:c7:cc:0a:ca:e9:e0:f5:c5:02:f4:1b:d8: e6:8a:1b:6e:ab:db:59:9e:6d:39:67:95:b4:5f:e3:4c:44:29: 3a:eb:ce:eb:a4:c9:dd:09:8c:2e:6b:fc:5e:a7:4f:1f:a9:19: c5:f1:d3:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMZLqsRjJXnmDJUqPDeoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw ZmEyNGIwHhcNMjUxMjI4MjMwMTAwWhcNMjUxMjI5MjMwMTAwWjAzMTEwLwYDVQQD EyhhMzMxNWJhZWE3MzU3MDdlNWMxMmFhOWExYzE0ZjYwYTRkZjZiOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ZrjvxsIfu2FWbl1PahwIWEQMdR jrh8gYYmrJ2sSdnNdzwMJVL6cAUaT9ZpXAxJch8s/MgHV+dx0lzRuCivEG3gjXMs OPhssZMBxvG11yy6zrXnE5V4OpnbTy5FSIbXXEHrwQygUGHgq+Ujy4WAMwxbWkB8 oZ37PRZ7k7LnJGGOfK3eMrMXDkCMtvtxfOoW34zT1scX+JwdAnxiVa7pmSOpoENB BTwwn5cbMF+EJIbA/rZa1FWKbXd/X8YsXTvXm7mH4ZhPpineLX/3q4YG5+E1BFRM kDe6wjOCzUqyqn2/9ZP9EZLyPJsafyt6UDgyt7m4WR36yjHSH0WReognkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMxW66nNXB+XBKqmhwU9gpN9rnhMB8GA1UdIwQY MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2 LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvVIDxh4 N09n2kh97QIuRTk4s40SM0zZcD2mKbKf/rbeNuvahw6BYgEyoVyceqQ/0Yx/NM+Q Xqn7YDI2mMei+lTR9CB1kBlCOVCpsY5P4qmdTlQpz9YlnItiAD9Chblz60G/U554 x4+NfcAZyiFpZULNnGRIHwt+FTuHbYC/fjaNppFV05oYHSG1N+sJO/NBkWL9LeRf GOJACgDP264k3kq42WMSVWO82tMpgi8GsyGLc5GNj0NjCmWYblcgza+0C+vmC8bF AKHOV8h3x8wKyung9cUC9BvY5oobbqvbWZ5tOWeVtF/jTEQpOuvO66TJ3QmMLmv8 XqdPH6kZxfHTXw== -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:54 2025 by rpki-client