This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft File: i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json) Hash identifier: yPfgu0qvCSa3x7Yem9QOXCEV+lTWqhCMy5sVsI+yNjo= Subject key identifier: 0A:DD:0A:4C:5F:55:CB:FC:43:B1:7C:1E:89:6D:2C:8C:80:0F:C4:22 Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A Certificate issuer: /CN=8bdd074bdebf45154a26bebfdce5538291534b0a Certificate serial: 019B4E16218BFF1FD24C6203C90154A5FB59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft Manifest number: 0BB8 Signing time: Wed 24 Dec 2025 02:00:31 +0000 Manifest this update: Wed 24 Dec 2025 02:00:31 +0000 Manifest next update: Thu 25 Dec 2025 02:00:31 +0000 Files and hashes: 1: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: hF1FzbKP43ME9nUK2fZzX1aYwO0OnWzSBbdiumPI9Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:21:8b:ff:1f:d2:4c:62:03:c9:01:54:a5:fb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a Validity Not Before: Dec 24 02:00:31 2025 GMT Not After : Dec 25 02:00:31 2025 GMT Subject: CN=0add0a4c5f55cbfc43b17c1e896d2c8c800fc422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:8a:e8:84:d1:28:74:7c:20:35:c6:3c:3b: 5b:5a:14:41:4b:01:81:7b:a2:9f:29:b2:4a:3d:3a: 41:78:af:54:8c:5e:07:85:a1:e5:2d:e9:34:ca:38: 5d:7d:b2:2a:ef:88:ae:a0:f1:9c:8a:bc:c4:cf:3f: 79:9e:69:f1:87:13:23:32:c6:b4:19:fe:7c:0e:64: 7b:c7:8b:44:83:93:f8:a3:e3:2a:5e:af:49:88:e9: f8:46:91:37:c0:9a:95:3b:7e:6b:36:36:62:a1:a3: df:21:90:3d:dd:ed:68:ae:ed:ef:94:6b:f2:07:55: d5:ff:fe:2d:ec:1d:f8:f6:63:3a:88:3b:00:27:e7: ab:67:d7:40:54:61:95:d0:9c:84:68:ac:a1:94:56: d2:cf:7b:aa:4e:87:be:b0:25:b8:00:3e:36:b6:97: 93:df:3c:f1:d4:e0:38:cf:51:b0:cf:ea:12:78:9e: ed:b7:92:01:10:5b:d8:cb:d5:07:1d:8b:ee:92:83: 5c:50:52:cf:02:57:9f:0e:34:b8:4c:02:cb:b4:e1: b7:c1:18:7f:70:10:4d:ef:df:a4:7c:ef:c7:d9:43: a0:51:fb:5e:b7:36:aa:74:12:34:85:3b:90:fe:57: 2d:bc:1e:92:af:18:a8:c2:8a:bf:da:11:cd:7c:d9: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:0A:4C:5F:55:CB:FC:43:B1:7C:1E:89:6D:2C:8C:80:0F:C4:22 X509v3 Authority Key Identifier: keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b8:e0:e9:e0:e3:53:4f:7d:c8:89:19:4b:1a:21:5d:30:dd: ff:fc:d6:31:ab:c2:6c:a1:94:35:5f:9a:6e:cb:b4:35:8c:d3: e1:04:31:95:00:cc:5e:68:5c:c1:1d:ec:85:6d:e9:60:0a:d4: 0a:02:fb:c5:f3:61:9e:6a:cf:ec:f5:55:a9:9a:5d:66:b6:1f: 34:5d:e0:90:5c:db:8c:86:44:f1:2e:17:1d:fb:d3:7d:23:64: a7:2f:e3:61:7c:fe:48:fb:62:f6:f3:43:ac:f0:a2:c5:72:0b: dc:da:55:6c:e6:54:c7:de:f1:d6:64:38:c5:fc:20:f7:f0:d8: 04:b0:25:22:5f:c9:a6:da:f3:cf:bc:ea:5b:79:ca:1a:b8:91: 2b:8d:65:04:52:a5:14:56:ce:18:5d:4b:ab:44:19:5e:f8:84: 6b:9a:02:c3:09:0c:c3:d1:92:6a:b7:68:1e:0c:3c:a8:61:35: c0:92:0c:b2:2e:87:a3:d3:15:52:76:35:04:c8:76:78:79:e6: 4d:89:71:46:f6:56:5b:d3:0b:36:40:28:20:2e:7c:b5:4d:cf: d5:e3:c4:ac:81:fc:cb:45:1b:8c:d5:92:de:1a:29:bf:ca:7a: 09:fb:7b:44:83:85:e3:cf:60:7e:fa:cc:b0:0c:4e:4e:81:8d: 3a:ad:fd:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFiGL/x/STGIDyQFUpftZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGQwNzRiZGViZjQ1MTU0YTI2YmViZmRjZTU1MzgyOTE1 MzRiMGEwHhcNMjUxMjI0MDIwMDMxWhcNMjUxMjI1MDIwMDMxWjAzMTEwLwYDVQQD EygwYWRkMGE0YzVmNTVjYmZjNDNiMTdjMWU4OTZkMmM4YzgwMGZjNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH6K6ITRKHR8IDXGPDtbWhRBSwGB e6KfKbJKPTpBeK9UjF4HhaHlLek0yjhdfbIq74iuoPGcirzEzz95nmnxhxMjMsa0 Gf58DmR7x4tEg5P4o+MqXq9JiOn4RpE3wJqVO35rNjZioaPfIZA93e1oru3vlGvy B1XV//4t7B349mM6iDsAJ+erZ9dAVGGV0JyEaKyhlFbSz3uqToe+sCW4AD42tpeT 3zzx1OA4z1Gwz+oSeJ7tt5IBEFvYy9UHHYvukoNcUFLPAlefDjS4TALLtOG3wRh/ cBBN79+kfO/H2UOgUftetzaqdBI0hTuQ/lctvB6Srxiowoq/2hHNfNlILwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArdCkxfVcv8Q7F8HoltLIyAD8QiMB8GA1UdIwQY MBaAFIvdB0vev0UVSia+v9zlU4KRU0sKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTkt NTBmYmY3ZTk1MDQyLzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hZjcxZDAtZGY4MC00ODNlLWIwNTktNTBmYmY3ZTk1MDQy LzEvaTkwSFM5Nl9SUlZLSnI2XzNPVlRncEZUU3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLjg6eDj U099yIkZSxohXTDd//zWMavCbKGUNV+absu0NYzT4QQxlQDMXmhcwR3shW3pYArU CgL7xfNhnmrP7PVVqZpdZrYfNF3gkFzbjIZE8S4XHfvTfSNkpy/jYXz+SPti9vND rPCixXIL3NpVbOZUx97x1mQ4xfwg9/DYBLAlIl/Jptrzz7zqW3nKGriRK41lBFKl FFbOGF1Lq0QZXviEa5oCwwkMw9GSardoHgw8qGE1wJIMsi6Ho9MVUnY1BMh2eHnm TYlxRvZWW9MLNkAoIC58tU3P1ePErIH8y0UbjNWS3hopv8p6Cft7RIOF489gfvrM sAxOToGNOq39TA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:41:22 2025 by rpki-client