This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json) Hash identifier: q3dcmY/8mB4IV9ek1j0dOmkKFzU+cAYcYWfRclZ+npk= Subject key identifier: 21:BE:53:65:91:78:E0:B5:55:CE:67:88:69:87:CE:0B:B4:AD:06:38 Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4 Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4 Certificate serial: 019AF19B50A7936104680122F8FD5E484492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft Manifest number: 16A3 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: 1LVxVokD7fPDisi/dFXHH+Z6cPs5xOs+EKKd0+6lQ4I=) 2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:a7:93:61:04:68:01:22:f8:fd:5e:48:44:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=21be53659178e0b555ce67886987ce0bb4ad0638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:71:80:8d:4e:42:91:fc:24:38:5d:e7:d9:85: ff:55:9d:16:dd:de:7a:d5:f6:ff:83:06:d3:05:97: af:49:fc:80:5c:72:49:21:37:09:00:66:37:8b:19: 6f:e9:3d:b9:36:5e:71:32:33:ab:8f:da:d9:20:df: 8c:57:51:ca:6b:5a:90:d0:78:a9:6c:9f:62:47:9b: 34:c6:52:6d:91:f9:11:9d:f0:9b:6e:e0:d8:7a:01: 14:94:3f:fb:3c:4e:92:75:1a:54:e7:0c:20:86:44: 49:16:c7:e9:3f:da:c5:f3:76:0c:99:51:42:f9:9f: 7d:1f:9d:bb:a0:7b:27:a9:f1:17:02:9d:76:7e:16: cf:80:c7:97:7a:bd:fe:4f:97:47:b2:90:22:74:b4: cc:ed:2c:c3:f3:57:9a:a5:7a:cc:1c:fd:8a:35:1a: b0:59:47:51:43:18:f2:f0:47:07:01:2d:07:dd:51: a8:18:74:4b:28:0e:c0:53:13:99:76:62:2c:77:a3: e6:ba:95:4f:a8:9c:a8:2b:0b:0e:db:e8:00:db:d3: 2a:c7:1e:a6:96:2d:ed:6c:42:5d:1d:5e:cc:79:bf: d8:a4:5b:43:e7:c3:64:1b:56:99:d4:cd:b8:d0:e2: 21:d4:e7:f6:8a:54:a2:f5:68:a3:67:4c:b2:ac:b0: 17:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:53:65:91:78:E0:B5:55:CE:67:88:69:87:CE:0B:B4:AD:06:38 X509v3 Authority Key Identifier: keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:49:b8:3a:a8:e4:26:9e:02:52:aa:9c:b7:6b:fb:98:4a:03: c1:ea:2f:11:07:c2:73:12:38:d6:eb:f9:94:21:27:8b:69:34: 99:15:1e:e4:2f:ad:20:63:f2:ff:17:b3:4d:f3:b9:c3:e2:4c: cb:3f:9a:ee:50:81:7c:c5:ad:63:31:a6:84:8d:ba:23:72:72: 62:f1:1d:6e:71:92:29:02:f6:16:f8:5f:6a:6c:02:f8:4a:f8: 10:16:61:a7:36:a9:22:f7:13:93:8e:08:b7:e3:8b:1b:b9:2a: 17:2f:1c:52:c0:f5:c8:a6:83:51:80:85:7c:37:04:13:89:88: 69:17:87:56:68:51:54:20:f5:8a:7f:50:7f:cb:03:a4:01:14: 27:d9:62:e2:35:d5:6b:3e:f4:64:3e:66:f8:33:28:db:9c:0f: 52:26:a4:ac:18:e1:12:18:ad:4b:16:0c:b0:62:57:c4:79:fb: 3f:08:72:c7:63:b7:5f:98:1b:2d:64:0d:dd:4f:70:82:4f:b8: be:8b:84:b9:9e:dd:2f:7b:21:d5:d3:ec:3c:3c:e1:ee:25:5f: f2:39:15:34:d7:83:e8:06:87:34:5b:23:05:37:85:46:ea:0a: a9:51:f0:d2:74:92:14:4d:be:d5:32:d3:81:f8:2d:02:61:88: c5:5c:59:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1Cnk2EEaAEi+P1eSESSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5 MGYyYTQwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygyMWJlNTM2NTkxNzhlMGI1NTVjZTY3ODg2OTg3Y2UwYmI0YWQwNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXGAjU5CkfwkOF3n2YX/VZ0W3d56 1fb/gwbTBZevSfyAXHJJITcJAGY3ixlv6T25Nl5xMjOrj9rZIN+MV1HKa1qQ0Hip bJ9iR5s0xlJtkfkRnfCbbuDYegEUlD/7PE6SdRpU5wwghkRJFsfpP9rF83YMmVFC +Z99H527oHsnqfEXAp12fhbPgMeXer3+T5dHspAidLTM7SzD81eapXrMHP2KNRqw WUdRQxjy8EcHAS0H3VGoGHRLKA7AUxOZdmIsd6PmupVPqJyoKwsO2+gA29Mqxx6m li3tbEJdHV7Meb/YpFtD58NkG1aZ1M240OIh1Of2ilSi9WijZ0yyrLAXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG+U2WReOC1Vc5niGmHzgu0rQY4MB8GA1UdIwQY MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt Y2E1NDU4MzhhZmMwLzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkm4Oqjk Jp4CUqqct2v7mEoDweovEQfCcxI41uv5lCEni2k0mRUe5C+tIGPy/xezTfO5w+JM yz+a7lCBfMWtYzGmhI26I3JyYvEdbnGSKQL2FvhfamwC+Er4EBZhpzapIvcTk44I t+OLG7kqFy8cUsD1yKaDUYCFfDcEE4mIaReHVmhRVCD1in9Qf8sDpAEUJ9li4jXV az70ZD5m+DMo25wPUiakrBjhEhitSxYMsGJXxHn7Pwhyx2O3X5gbLWQN3U9wgk+4 vouEuZ7dL3sh1dPsPDzh7iVf8jkVNNeD6AaHNFsjBTeFRuoKqVHw0nSSFE2+1TLT gfgtAmGIxVxZ9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:44 2025 by rpki-client