This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft File: d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json) Hash identifier: A7sl+WeVD6qbPKwDRMp4uOljDmibBFeTz/nibtMZ00o= Subject key identifier: 68:5C:0F:80:A3:91:EC:6A:CD:EA:7B:CB:DB:D5:97:94:27:F7:C2:87 Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7 Certificate issuer: /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7 Certificate serial: 019B66FAB16EF0B64932B49F631580806606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 22:01:03 +0000 Manifest this update: Sun 28 Dec 2025 22:01:03 +0000 Manifest next update: Mon 29 Dec 2025 22:01:03 +0000 Files and hashes: 1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: TRs43W2hv/w8czOAXSK9MgtnQcYupaulIV/dh6hsapE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:b1:6e:f0:b6:49:32:b4:9f:63:15:80:80:66:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7 Validity Not Before: Dec 28 22:01:03 2025 GMT Not After : Dec 29 22:01:03 2025 GMT Subject: CN=685c0f80a391ec6acdea7bcbdbd5979427f7c287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:dc:d7:5b:50:be:d5:83:b6:0c:93:2e:f5: 4a:eb:4c:45:b0:9c:22:a9:bc:49:2c:7c:ab:ea:28: fd:69:a3:77:d6:a0:45:2e:84:aa:ff:6a:81:6e:da: 60:2d:22:ca:e3:e2:33:d0:33:d5:8c:16:cd:53:48: b3:93:72:21:b5:8d:b0:99:0d:4a:4a:d6:62:41:08: 63:bb:32:86:5e:b9:35:d2:83:ab:1a:35:97:2d:ec: 04:f1:ff:68:7e:d5:26:b2:ea:2e:2e:bf:1d:8e:69: c9:f4:b9:cc:98:38:5c:88:fa:f1:cd:74:aa:4b:b6: ce:81:b8:8d:b2:8f:22:01:dd:a4:e4:3f:ef:57:30: 73:86:9e:c3:b9:2a:b8:38:52:f7:88:7d:70:9f:4b: 56:15:05:5f:5f:e8:af:d9:55:4e:a9:8a:a6:82:88: 0f:dc:26:bf:39:4e:e8:fa:2b:54:d9:43:a3:54:ac: 6f:ee:74:07:8f:40:65:1b:28:90:51:8e:94:5c:f3: 5a:04:96:07:fc:0b:e8:45:53:54:1e:c8:f7:6f:6e: e7:85:e8:2d:e1:ec:d8:a4:70:b7:a5:eb:e3:21:e3: e8:64:ab:69:9a:8b:96:bd:d9:6b:ab:e0:f5:da:ae: c9:8a:08:b3:71:40:0c:74:cb:bd:ce:ff:87:9d:69: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:0F:80:A3:91:EC:6A:CD:EA:7B:CB:DB:D5:97:94:27:F7:C2:87 X509v3 Authority Key Identifier: keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:0e:f3:a2:b6:26:47:5f:5b:77:6a:e8:02:8e:6f:74:26:c5: 7a:85:76:af:cc:94:e9:8c:b5:5e:0d:be:9f:6f:87:e8:f2:c3: 49:00:b7:7a:98:0e:4a:62:2f:05:ec:43:e0:06:8c:42:1f:7f: 0a:96:bd:ba:11:56:d0:b9:89:c1:1a:30:5d:dc:e6:28:19:d1: cf:bf:90:41:16:e7:eb:42:41:12:c8:48:ae:2f:73:7a:56:7f: 9c:23:77:73:91:c1:27:55:77:b1:8c:3a:a6:f8:b0:91:33:32: ba:ba:48:e8:f4:d1:25:de:80:4a:0d:0c:0b:6d:8f:2a:c2:37: 3e:c0:f0:92:f2:e3:74:f3:6f:18:d2:9b:e7:d3:fd:31:9f:b3: c1:ae:a4:fe:e5:99:51:ef:47:53:20:7b:b4:2a:9f:e7:df:5d: bc:d9:72:5b:84:b8:9b:d9:f8:18:4d:7a:a9:40:1e:e8:46:f8: f9:83:1e:3a:04:4c:38:84:f1:de:e0:c5:a4:52:81:e2:9c:9b: 63:fc:f0:91:92:d5:c1:5a:16:1c:1e:72:10:72:f5:5e:71:b8: e8:f7:8e:f3:d8:03:7f:2a:a3:18:92:0e:7d:95:c3:99:77:20: 8e:68:a0:64:1c:99:aa:97:79:43:70:07:73:70:19:38:c8:fc: 92:8b:88:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+rFu8LZJMrSfYxWAgGYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTViNzUzMWM3YWFkZWJhNDdkMWMyZmViOWI5ZTdiYWFi MWJiYjcwHhcNMjUxMjI4MjIwMTAzWhcNMjUxMjI5MjIwMTAzWjAzMTEwLwYDVQQD Eyg2ODVjMGY4MGEzOTFlYzZhY2RlYTdiY2JkYmQ1OTc5NDI3ZjdjMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbjc11tQvtWDtgyTLvVK60xFsJwi qbxJLHyr6ij9aaN31qBFLoSq/2qBbtpgLSLK4+Iz0DPVjBbNU0izk3IhtY2wmQ1K StZiQQhjuzKGXrk10oOrGjWXLewE8f9oftUmsuouLr8djmnJ9LnMmDhciPrxzXSq S7bOgbiNso8iAd2k5D/vVzBzhp7DuSq4OFL3iH1wn0tWFQVfX+iv2VVOqYqmgogP 3Ca/OU7o+itU2UOjVKxv7nQHj0BlGyiQUY6UXPNaBJYH/AvoRVNUHsj3b27nhegt 4ezYpHC3pevjIePoZKtpmouWvdlrq+D12q7JigizcUAMdMu9zv+HnWlVGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhcD4Cjkexqzep7y9vVl5Qn98KHMB8GA1UdIwQY MBaAFHelt1Mceq3rpH0cL+ubnnuqsbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zZGQzN2QtNmIwYi00ZjFmLWIwZmIt OTMyMzhmY2QxNjIyLzEvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zZGQzN2QtNmIwYi00ZjFmLWIwZmItOTMyMzhmY2QxNjIy LzEvZDZXM1V4eDZyZXVrZlJ3djY1dWVlNnF4dTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA7zorYm R19bd2roAo5vdCbFeoV2r8yU6Yy1Xg2+n2+H6PLDSQC3epgOSmIvBexD4AaMQh9/ Cpa9uhFW0LmJwRowXdzmKBnRz7+QQRbn60JBEshIri9zelZ/nCN3c5HBJ1V3sYw6 pviwkTMyurpI6PTRJd6ASg0MC22PKsI3PsDwkvLjdPNvGNKb59P9MZ+zwa6k/uWZ Ue9HUyB7tCqf599dvNlyW4S4m9n4GE16qUAe6Eb4+YMeOgRMOITx3uDFpFKB4pyb Y/zwkZLVwVoWHB5yEHL1XnG46PeO89gDfyqjGJIOfZXDmXcgjmigZByZqpd5Q3AH c3AZOMj8kouIoA== -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:44 2025 by rpki-client