This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json) Hash identifier: XsnI+gFnd+i2sDqwEG+qHW69CHCXRKgs21jfVam85FI= Subject key identifier: 68:B4:6A:D4:45:83:94:9A:E9:3F:36:DB:4B:47:10:02:64:41:34:2E Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f Certificate serial: 019B2C2EF73DE8F80A8DD7328BA755BE0CCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft Manifest number: 0406 Signing time: Wed 17 Dec 2025 12:00:33 +0000 Manifest this update: Wed 17 Dec 2025 12:00:33 +0000 Manifest next update: Thu 18 Dec 2025 12:00:33 +0000 Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: AfGekTptZUnmcbMc1VrO924/1XN4tTEaA5J8iCzbG/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2e:f7:3d:e8:f8:0a:8d:d7:32:8b:a7:55:be:0c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f Validity Not Before: Dec 17 12:00:33 2025 GMT Not After : Dec 18 12:00:33 2025 GMT Subject: CN=68b46ad44583949ae93f36db4b4710026441342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:cb:ad:02:6e:23:b4:6c:05:0b:3f:cd:3c: 03:5b:ad:50:48:48:51:d3:3d:bc:d3:fe:99:5e:da: fe:02:0b:7f:51:1f:fb:2c:c7:13:11:ba:47:72:d9: 7f:a6:66:f0:02:0c:87:54:89:a7:aa:af:44:ed:55: bd:07:a3:f8:8b:a9:b7:85:7b:df:ea:3d:a7:bc:7b: 6a:41:8d:e8:fd:a5:85:a9:27:dc:40:ce:a3:bd:ff: e5:a2:31:e8:7e:c3:c1:d4:a7:4f:57:5a:e5:ad:ee: 66:c4:46:4e:61:8b:c7:26:84:12:8b:76:0a:e7:41: 2b:84:ff:74:c7:a3:af:da:5a:3f:b6:29:da:e4:cb: 45:d4:07:ce:25:b3:0c:06:00:fb:61:78:fe:71:c0: d2:be:39:70:bc:87:8f:d9:41:be:19:b4:fc:9a:4f: a4:5c:0d:13:2f:29:eb:a3:93:08:ca:ce:bb:f2:58: 0a:69:bd:90:65:02:e9:b6:47:c0:51:03:7d:fd:b6: 31:9b:f2:65:8c:a9:2d:8a:19:34:6d:ee:7a:92:a2: f8:18:03:c7:18:98:e2:1c:88:f1:e2:c9:41:dc:ba: 5f:9e:f2:75:a5:87:15:4b:59:92:82:45:44:87:5a: f1:db:a9:b5:25:8e:0f:0d:22:25:71:c9:e3:67:49: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B4:6A:D4:45:83:94:9A:E9:3F:36:DB:4B:47:10:02:64:41:34:2E X509v3 Authority Key Identifier: keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b0:7c:b9:13:cc:38:37:1a:8e:ef:55:f4:f4:50:8d:ce:7a: 4b:d2:a2:0d:e7:fc:da:a4:e4:19:b8:c9:49:3f:a9:6e:0b:0e: 63:9f:01:1d:be:1c:c7:5b:d8:fb:a1:27:9b:e3:dd:97:8b:0a: 5c:20:fc:90:81:1b:da:ba:d7:0f:01:02:65:29:8a:7c:83:72: 25:aa:68:78:1d:8a:4f:af:95:e3:c7:9b:28:23:62:f8:7f:d1: 46:4c:7d:a4:aa:ca:4c:88:a0:91:77:70:2a:20:eb:9b:1f:f1: b2:50:fb:57:ba:7b:1b:e8:78:c1:12:67:d7:e8:97:8e:e8:9c: 43:67:70:67:05:38:ab:be:f6:47:34:12:d6:7a:53:ae:1c:ca: 51:80:43:21:81:dc:e4:48:c6:96:7e:10:df:78:6d:e0:16:10: 4b:5c:b3:7c:d4:d9:c2:61:0e:b8:da:81:68:35:17:74:9c:af: d4:2d:95:33:52:31:a2:3f:9c:bf:4a:41:b7:f5:89:9c:d9:19: 55:c7:b0:e6:d4:1d:29:b1:52:40:b9:4f:88:93:da:fe:4d:9d: 89:ff:2d:8e:9d:cc:e6:32:15:cd:9e:32:4a:db:44:2f:81:aa: 93:24:07:13:1b:74:f0:09:ef:77:8c:6a:3a:e2:95:5e:fd:16: b4:df:bc:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLvc96PgKjdcyi6dVvgzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNTAwZWViNDdjMmYxMzU3MTg3NmExOTY2MzUzN2Y4YjYz NmE4MGYwHhcNMjUxMjE3MTIwMDMzWhcNMjUxMjE4MTIwMDMzWjAzMTEwLwYDVQQD Eyg2OGI0NmFkNDQ1ODM5NDlhZTkzZjM2ZGI0YjQ3MTAwMjY0NDEzNDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G/LrQJuI7RsBQs/zTwDW61QSEhR 0z280/6ZXtr+Agt/UR/7LMcTEbpHctl/pmbwAgyHVImnqq9E7VW9B6P4i6m3hXvf 6j2nvHtqQY3o/aWFqSfcQM6jvf/lojHofsPB1KdPV1rlre5mxEZOYYvHJoQSi3YK 50ErhP90x6Ov2lo/tina5MtF1AfOJbMMBgD7YXj+ccDSvjlwvIeP2UG+GbT8mk+k XA0TLynro5MIys678lgKab2QZQLptkfAUQN9/bYxm/JljKktihk0be56kqL4GAPH GJjiHIjx4slB3LpfnvJ1pYcVS1mSgkVEh1rx26m1JY4PDSIlccnjZ0kJfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi0atRFg5Sa6T8220tHEAJkQTQuMB8GA1UdIwQY MBaAFHNQDutHwvE1cYdqGWY1N/i2NqgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAt YzA3ODFjYTgwOTFjLzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAtYzA3ODFjYTgwOTFj LzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLB8uRPM ODcaju9V9PRQjc56S9KiDef82qTkGbjJST+pbgsOY58BHb4cx1vY+6Enm+Pdl4sK XCD8kIEb2rrXDwECZSmKfINyJapoeB2KT6+V48ebKCNi+H/RRkx9pKrKTIigkXdw KiDrmx/xslD7V7p7G+h4wRJn1+iXjuicQ2dwZwU4q772RzQS1npTrhzKUYBDIYHc 5EjGln4Q33ht4BYQS1yzfNTZwmEOuNqBaDUXdJyv1C2VM1Ixoj+cv0pBt/WJnNkZ Vcew5tQdKbFSQLlPiJPa/k2dif8tjp3M5jIVzZ4ySttEL4GqkyQHExt08Anvd4xq OuKVXv0WtN+88Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:19:39 2025 by rpki-client