This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft File: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json) Hash identifier: URARVRu695T+ICmtIEU/1zkh2qWB9WtKSGIvbCkfong= Subject key identifier: 02:07:FE:58:17:6D:AB:98:2F:61:68:4A:34:F3:20:76:BD:71:2B:89 Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3 Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3 Certificate serial: 019AF23FCD142DFAE8AB37A4FED76750FADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft Manifest number: 1732 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: 2ErtFrlVPeQoyPlJPeHTS18edxjy+4TDMr4pgsOYyNA=) 2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cd:14:2d:fa:e8:ab:37:a4:fe:d7:67:50:fa:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=0207fe58176dab982f61684a34f32076bd712b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:df:5b:e5:5a:4e:a0:b4:9a:95:7e:17:00: 88:3b:4b:13:9f:a3:20:48:62:c7:84:28:d9:af:97: 59:16:5a:50:0b:75:c1:ce:97:7b:07:7a:c0:06:fb: a9:e4:ae:4a:d7:6b:13:b0:35:25:72:5d:4c:ce:d7: 0b:9f:25:84:b5:e2:ad:ed:e8:10:3c:da:64:4d:6e: a7:1b:b6:a3:20:cf:e1:42:58:93:41:91:c0:17:0d: 23:ed:2c:26:9a:f8:9b:0c:1f:45:b6:35:3d:0f:60: 0b:4f:22:60:ba:96:b7:ec:01:96:72:f4:b3:e4:75: b8:bb:81:70:1f:b1:ce:a4:1d:e2:a4:e1:e8:b4:3e: f4:04:ac:52:a4:02:a2:0d:66:2b:e1:80:65:2c:a7: ce:f0:69:a7:0f:1a:6b:5f:bb:05:2c:f5:44:c4:54: 05:43:db:40:70:a3:05:e4:6b:83:62:59:9d:91:a4: 9b:57:ff:61:4d:fe:76:b8:64:44:6d:2f:b7:21:69: 80:bc:61:c7:e8:14:f6:0d:e3:f3:64:22:b0:af:fa: d9:d4:d5:5d:e9:55:17:b0:c5:23:c1:9b:a6:02:7e: f3:9f:69:3d:ed:d2:fb:5a:40:65:f2:30:e7:d2:e3: f5:e5:73:40:2a:ae:a7:9e:53:48:67:d0:13:01:c8: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:07:FE:58:17:6D:AB:98:2F:61:68:4A:34:F3:20:76:BD:71:2B:89 X509v3 Authority Key Identifier: keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3b:d4:a7:3f:e0:fb:d2:b1:a5:54:03:8e:97:31:10:7f:be: 71:22:db:0a:92:e0:dd:61:bf:dc:70:71:aa:18:ac:a1:0f:6b: 25:81:ac:fe:5e:50:a3:db:91:64:12:46:30:52:bb:aa:58:c6: eb:25:f2:15:e2:a3:27:bb:72:8a:69:c5:1e:29:9e:d9:60:ba: d4:9c:97:24:b8:28:d9:d9:78:49:9c:a5:e6:76:86:d7:9c:1b: 3e:1e:15:ec:2e:c4:69:af:f4:a5:71:81:e3:f9:29:f9:9b:85: ce:43:61:5d:a7:5a:65:72:9b:d0:fe:6e:2b:1e:ad:e7:56:1e: c4:f5:5f:dd:a9:74:e7:45:62:1f:9f:c7:a4:a1:a6:95:35:a9: a6:71:1c:f7:41:d9:61:5f:b0:78:3c:76:d9:e8:1d:25:00:60: 1d:2d:3f:ac:95:fc:bd:d5:63:4a:71:af:31:0e:77:36:84:54: ad:99:19:7f:24:ee:1a:3c:14:1f:c5:8b:4e:74:28:37:4f:6b: 85:a7:55:ad:87:92:15:f4:21:79:17:36:ac:8b:e4:24:00:fb: f2:ad:85:fa:42:ee:5e:69:72:cd:70:37:7d:b3:96:63:65:5a: 2e:18:9e:f1:e4:ed:54:7b:8a:ed:5c:bf:74:f2:d8:00:80:e9: 4e:d1:51:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP80ULfroqzek/tdnUPraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGUyMGM0OGU4OTczYzMzMWUzM2NlNTUxOTVhMzIxNzcz ZjBhYzMwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EygwMjA3ZmU1ODE3NmRhYjk4MmY2MTY4NGEzNGYzMjA3NmJkNzEyYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7PfW+VaTqC0mpV+FwCIO0sTn6Mg SGLHhCjZr5dZFlpQC3XBzpd7B3rABvup5K5K12sTsDUlcl1MztcLnyWEteKt7egQ PNpkTW6nG7ajIM/hQliTQZHAFw0j7SwmmvibDB9FtjU9D2ALTyJgupa37AGWcvSz 5HW4u4FwH7HOpB3ipOHotD70BKxSpAKiDWYr4YBlLKfO8GmnDxprX7sFLPVExFQF Q9tAcKMF5GuDYlmdkaSbV/9hTf52uGREbS+3IWmAvGHH6BT2DePzZCKwr/rZ1NVd 6VUXsMUjwZumAn7zn2k97dL7WkBl8jDn0uP15XNAKq6nnlNIZ9ATAcgdgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIH/lgXbauYL2FoSjTzIHa9cSuJMB8GA1UdIwQY MBaAFAuOIMSOiXPDMeM85VGVoyF3PwrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQt YTVhZjkzN2ZiYzA1LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQtYTVhZjkzN2ZiYzA1 LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzvUpz/g +9KxpVQDjpcxEH++cSLbCpLg3WG/3HBxqhisoQ9rJYGs/l5Qo9uRZBJGMFK7qljG 6yXyFeKjJ7tyimnFHime2WC61JyXJLgo2dl4SZyl5naG15wbPh4V7C7Eaa/0pXGB 4/kp+ZuFzkNhXadaZXKb0P5uKx6t51YexPVf3al050ViH5/HpKGmlTWppnEc90HZ YV+weDx22egdJQBgHS0/rJX8vdVjSnGvMQ53NoRUrZkZfyTuGjwUH8WLTnQoN09r hadVrYeSFfQheRc2rIvkJAD78q2F+kLuXmlyzXA3fbOWY2VaLhie8eTtVHuK7Vy/ dPLYAIDpTtFR0g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:22 2025 by rpki-client