This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft File: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft (raw, json) Hash identifier: C2qHcXyq5lpkLfho4MIP5mG2DpdUxdyOHuG7CXPzq7E= Subject key identifier: 9B:8A:1F:05:F9:73:6E:75:23:13:C8:48:A8:93:F2:87:79:82:D1:2F Authority key identifier: 73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C Certificate issuer: /CN=735655dc6779d095fcb08b61abeb86b0cd99a78c Certificate serial: 019AF3F78EE3DFF43E2510602DAD304603CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft Manifest number: 0C17 Signing time: Sat 06 Dec 2025 14:01:18 +0000 Manifest this update: Sat 06 Dec 2025 14:01:18 +0000 Manifest next update: Sun 07 Dec 2025 14:01:18 +0000 Files and hashes: 1: c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl (hash: MV/AeSMk4qpX8zul/lSLeuOdy40AOxJkwSDXcjv7gKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:8e:e3:df:f4:3e:25:10:60:2d:ad:30:46:03:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=735655dc6779d095fcb08b61abeb86b0cd99a78c Validity Not Before: Dec 6 14:01:18 2025 GMT Not After : Dec 7 14:01:18 2025 GMT Subject: CN=9b8a1f05f9736e752313c848a893f2877982d12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:46:ef:fc:b4:67:d7:52:3a:0f:95:4d:11: fc:59:74:36:3c:cf:21:4c:58:82:6d:2b:21:71:79: e4:2c:99:4e:fd:e5:b3:43:21:24:4b:8d:e3:4c:3c: 0e:23:6b:c2:a8:45:a9:74:12:c6:c1:c8:7e:eb:90: b2:8f:a2:c4:5d:c0:e0:fd:4e:db:71:0c:e7:27:34: b0:25:04:4f:f9:24:2c:80:d2:fc:bc:27:e2:3f:21: f4:61:a1:f1:7e:74:92:da:ac:37:7d:34:2c:05:55: 18:dc:74:77:af:4a:f7:55:90:c3:44:3b:bc:26:0b: f1:8e:5c:44:1d:25:9f:26:4c:04:a8:92:56:a8:58: 0e:e3:e8:bd:25:de:4b:21:3d:f1:35:c3:a5:5a:82: e0:b1:6f:64:cb:d4:b2:f1:a9:ad:78:8a:c2:bf:f8: 6a:d5:22:a7:62:23:aa:a8:9d:9b:d1:f3:f2:45:5e: 61:b4:5c:bc:64:00:da:13:a6:25:36:da:33:52:ff: 04:2d:5a:fd:64:1a:4e:64:22:96:2a:09:7e:89:68: 17:49:af:70:ef:26:db:91:68:ee:e4:95:54:37:49: 1e:ce:99:5b:02:87:92:58:2f:8a:08:23:c4:00:10: 7e:74:1c:4d:ca:c1:fe:40:b7:c4:99:bb:eb:cf:32: 12:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:1F:05:F9:73:6E:75:23:13:C8:48:A8:93:F2:87:79:82:D1:2F X509v3 Authority Key Identifier: keyid:73:56:55:DC:67:79:D0:95:FC:B0:8B:61:AB:EB:86:B0:CD:99:A7:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cc8a53-02d9-4a1f-907e-3b86a3d00fe9/1/c1ZV3Gd50JX8sIthq-uGsM2Zp4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bc:13:4e:b1:62:62:0a:ef:a4:2e:70:1c:8c:35:33:b4:c5: f4:12:37:08:ad:82:23:1b:8e:17:56:6f:a9:2f:f2:a1:d2:e0: 56:89:23:f8:01:c3:d3:33:08:ed:7e:a5:eb:25:d7:52:4f:e8: f6:23:13:34:b3:02:d6:07:d3:9f:d5:3b:6d:ff:5c:ca:1d:d7: c8:b8:08:98:fe:5d:3b:f3:90:1d:59:5c:9e:b9:1c:ff:23:50: ff:07:2c:bb:ac:86:8e:14:c1:38:15:07:61:0d:d5:b2:c3:ad: 3d:63:06:d1:08:1b:6f:ab:35:cd:5d:cd:35:1c:95:34:ba:8a: 35:43:cd:7c:6a:ee:86:b7:af:c1:84:7f:49:d5:f2:3b:f1:8c: a4:84:88:8d:e2:ef:40:14:a5:1d:e1:60:81:ff:90:a8:8b:72: 8a:53:55:6a:cf:ab:1a:3f:cc:6d:68:ac:66:8d:fd:20:eb:49: 92:5d:15:16:7b:56:7e:a5:21:19:56:d1:bd:9b:de:e3:76:df: 16:5a:ef:71:90:8f:85:7c:d1:df:e5:e8:3b:ce:b1:d7:c7:04: 9f:f7:0f:5e:9f:e4:aa:bc:2b:67:1e:d6:e0:e4:35:10:c6:05: 5f:19:06:08:d5:4a:b2:4a:c3:fe:f0:f9:47:d4:10:33:61:dc: 06:43:db:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz947j3/Q+JRBgLa0wRgPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNTY1NWRjNjc3OWQwOTVmY2IwOGI2MWFiZWI4NmIwY2Q5 OWE3OGMwHhcNMjUxMjA2MTQwMTE4WhcNMjUxMjA3MTQwMTE4WjAzMTEwLwYDVQQD Eyg5YjhhMWYwNWY5NzM2ZTc1MjMxM2M4NDhhODkzZjI4Nzc5ODJkMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq9G7/y0Z9dSOg+VTRH8WXQ2PM8h TFiCbSshcXnkLJlO/eWzQyEkS43jTDwOI2vCqEWpdBLGwch+65Cyj6LEXcDg/U7b cQznJzSwJQRP+SQsgNL8vCfiPyH0YaHxfnSS2qw3fTQsBVUY3HR3r0r3VZDDRDu8 JgvxjlxEHSWfJkwEqJJWqFgO4+i9Jd5LIT3xNcOlWoLgsW9ky9Sy8amteIrCv/hq 1SKnYiOqqJ2b0fPyRV5htFy8ZADaE6YlNtozUv8ELVr9ZBpOZCKWKgl+iWgXSa9w 7ybbkWju5JVUN0kezplbAoeSWC+KCCPEABB+dBxNysH+QLfEmbvrzzISJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuKHwX5c251IxPISKiT8od5gtEvMB8GA1UdIwQY MBaAFHNWVdxnedCV/LCLYavrhrDNmaeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2Ut M2I4NmEzZDAwZmU5LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jYzhhNTMtMDJkOS00YTFmLTkwN2UtM2I4NmEzZDAwZmU5 LzEvYzFaVjNHZDUwSlg4c0l0aHEtdUdzTTJacDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbwTTrFi YgrvpC5wHIw1M7TF9BI3CK2CIxuOF1ZvqS/yodLgVokj+AHD0zMI7X6l6yXXUk/o 9iMTNLMC1gfTn9U7bf9cyh3XyLgImP5dO/OQHVlcnrkc/yNQ/wcsu6yGjhTBOBUH YQ3VssOtPWMG0Qgbb6s1zV3NNRyVNLqKNUPNfGruhrevwYR/SdXyO/GMpISIjeLv QBSlHeFggf+QqItyilNVas+rGj/MbWisZo39IOtJkl0VFntWfqUhGVbRvZve43bf FlrvcZCPhXzR3+XoO86x18cEn/cPXp/kqrwrZx7W4OQ1EMYFXxkGCNVKskrD/vD5 R9QQM2HcBkPb9g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:51 2025 by rpki-client