This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json) Hash identifier: zwJ4zSY3gHu16KJVV7jMtiDBWIjXHzKw/d5qbo7TMOU= Subject key identifier: 12:C9:68:A8:8A:07:36:B0:F6:C9:B0:1E:EC:D2:FD:2E:93:A4:24:AE Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Certificate serial: 019AF19AC6DD67D8AD14E96391CFE328E60D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: Aju+/wptyY/xWHgJL6mqATk7SkooxeYhpKQ5JZXfwCk=) 2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=) 3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=) 4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c6:dd:67:d8:ad:14:e9:63:91:cf:e3:28:e6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=12c968a88a0736b0f6c9b01eecd2fd2e93a424ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:63:4e:95:3c:e0:ba:d4:54:9c:aa:be:68:06: 98:2e:23:08:c5:5f:2a:3a:75:e9:0d:20:78:ae:09: 2b:76:6f:54:fa:d4:2d:fe:e5:93:7e:88:90:8e:34: 8a:79:57:45:e8:69:45:fd:25:37:ca:10:dd:7b:13: 72:ac:0c:a7:27:74:68:5c:91:5e:dd:02:73:52:44: 3e:58:4c:75:8f:15:31:b4:fd:91:02:c1:42:72:20: c8:b5:46:21:27:1f:24:04:fa:f7:65:da:77:b5:43: d7:48:49:dc:8f:0a:a8:99:1e:59:14:e4:b3:92:84: 41:58:23:ab:81:cd:81:b0:ab:03:0a:c2:68:aa:29: 1f:52:cc:41:df:08:49:bc:a4:10:8f:ab:1a:f1:96: f8:80:8f:05:99:f6:51:90:49:24:46:b3:31:46:13: b9:57:f7:84:fe:e9:0d:65:71:6a:fa:69:cd:bc:70: 88:47:f9:14:e7:38:e9:08:ad:04:e0:db:ee:3b:ea: 0f:4f:c7:0e:39:d1:b0:e2:9c:6a:3f:26:9f:6f:fa: 0d:e1:48:a3:bb:ac:64:9b:2e:a3:34:02:cc:6a:c4: a1:b4:c8:2e:e8:89:a8:65:83:0f:59:4b:8e:27:05: fd:f1:03:2f:d4:87:11:28:e7:ec:86:53:1b:a7:40: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C9:68:A8:8A:07:36:B0:F6:C9:B0:1E:EC:D2:FD:2E:93:A4:24:AE X509v3 Authority Key Identifier: keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:99:22:da:73:88:e9:2e:b2:70:0e:0d:54:25:11:ed:22:6e: a8:66:a8:ea:0b:7c:c0:cb:4d:49:47:e1:f6:4f:3f:6d:67:2b: fb:df:1e:3a:26:21:6d:74:b7:f3:9a:fc:08:fa:7f:b5:f5:06: d3:55:89:58:aa:c1:9e:92:30:5c:e9:ee:2f:48:99:9c:ed:a1: 15:bd:20:64:d6:7b:86:f6:a7:8d:de:08:22:84:43:0c:24:6f: 44:fa:28:df:76:02:1c:65:f0:58:64:e2:a9:00:25:e4:6a:94: 2b:79:ff:13:e2:2e:48:02:dc:8f:a4:48:80:a6:68:ca:dd:bb: 95:0d:52:73:fd:06:ce:f0:22:b7:0e:47:5e:12:5b:d4:f5:b0: 3a:49:45:0b:04:87:b9:6e:6d:ae:10:59:9d:cf:fd:5f:35:4f: da:85:f5:db:12:39:cc:b4:78:d3:e8:19:d6:73:d1:c8:e4:2b: f2:14:3c:31:a9:ce:6e:52:15:e6:67:5b:c1:5c:5d:0b:a7:17: 58:16:06:f0:a4:10:0d:2f:6a:26:db:f3:b7:e6:47:b6:41:99: 55:d3:58:bb:5a:21:fc:ec:88:6c:44:1c:a4:59:55:81:71:17: 7f:57:86:5b:a2:60:90:a3:47:c3:be:c9:76:e6:8e:f8:64:6d: 4b:88:c5:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsbdZ9itFOljkc/jKOYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5 MTkzNjgwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EygxMmM5NjhhODhhMDczNmIwZjZjOWIwMWVlY2QyZmQyZTkzYTQyNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmNOlTzgutRUnKq+aAaYLiMIxV8q OnXpDSB4rgkrdm9U+tQt/uWTfoiQjjSKeVdF6GlF/SU3yhDdexNyrAynJ3RoXJFe 3QJzUkQ+WEx1jxUxtP2RAsFCciDItUYhJx8kBPr3Zdp3tUPXSEncjwqomR5ZFOSz koRBWCOrgc2BsKsDCsJoqikfUsxB3whJvKQQj6sa8Zb4gI8FmfZRkEkkRrMxRhO5 V/eE/ukNZXFq+mnNvHCIR/kU5zjpCK0E4NvuO+oPT8cOOdGw4pxqPyafb/oN4Uij u6xkmy6jNALMasShtMgu6ImoZYMPWUuOJwX98QMv1IcRKOfshlMbp0C/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLJaKiKBzaw9smwHuzS/S6TpCSuMB8GA1UdIwQY MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt MDI3OGM1ZGMxNDkxLzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpki2nOI 6S6ycA4NVCUR7SJuqGao6gt8wMtNSUfh9k8/bWcr+98eOiYhbXS385r8CPp/tfUG 01WJWKrBnpIwXOnuL0iZnO2hFb0gZNZ7hvanjd4IIoRDDCRvRPoo33YCHGXwWGTi qQAl5GqUK3n/E+IuSALcj6RIgKZoyt27lQ1Sc/0GzvAitw5HXhJb1PWwOklFCwSH uW5trhBZnc/9XzVP2oX12xI5zLR40+gZ1nPRyOQr8hQ8ManOblIV5mdbwVxdC6cX WBYG8KQQDS9qJtvzt+ZHtkGZVdNYu1oh/OyIbEQcpFlVgXEXf1eGW6JgkKNHw77J duaO+GRtS4jFZA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:26 2025 by rpki-client