This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json) Hash identifier: 0frFmG3t22kNdOwuAdmEXB9q8IcKvHc2CCgJRKrVJOU= Subject key identifier: A6:BC:4B:C0:7A:CE:A6:90:67:8C:8E:90:17:7A:31:FC:6E:DD:9C:1C Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Certificate serial: 019AF31B40A2F678C5D27323647D5689989B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: V/3MkzbOg+LYXt49gr4mMBMVZ+FUaW0a8mV2P3mdvFA=) 2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:40:a2:f6:78:c5:d2:73:23:64:7d:56:89:98:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=a6bc4bc07acea690678c8e90177a31fc6edd9c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:95:81:a6:fe:ce:1d:eb:ac:36:9d:72:80: 1e:50:eb:61:5f:65:25:a5:a2:b8:b5:8f:74:71:87: 8d:e7:ea:8b:f7:01:00:10:4f:c6:6f:dc:05:aa:b2: 98:a9:11:31:68:6b:a0:b8:bb:28:9f:b0:a6:b7:aa: 35:04:f4:6f:a5:48:b4:90:d6:04:87:3c:f8:21:5a: 0f:c1:96:93:3d:88:db:99:e3:69:75:1f:a4:cf:15: 85:b5:37:97:40:cc:5f:06:34:75:c2:64:81:00:f8: 0f:27:fb:69:aa:d3:04:9c:4a:8b:19:f6:d3:4f:11: 51:75:85:b5:da:5e:24:23:e4:88:24:59:35:f8:60: c3:5c:b6:35:0f:75:e2:12:01:bc:75:af:8a:df:bb: 4c:f3:e6:86:7e:a9:0e:75:91:31:15:ff:38:da:78: 48:f1:b0:ec:3b:9b:45:12:55:e4:fe:ee:81:2a:80: b9:54:33:81:06:13:16:ee:af:05:29:44:9c:3d:cb: 96:ce:a8:25:9d:10:ba:c5:01:47:80:89:26:50:27: e6:b7:fb:a4:1a:43:9a:5c:12:7c:64:36:25:4c:1d: 3f:bc:60:b9:35:ac:1b:ff:fa:94:40:e8:09:e7:2e: 5e:86:c2:f4:e8:f4:ab:e8:60:67:e0:74:11:e8:68: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:4B:C0:7A:CE:A6:90:67:8C:8E:90:17:7A:31:FC:6E:DD:9C:1C X509v3 Authority Key Identifier: keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0f:ed:f5:7f:94:8b:2b:01:22:61:3c:7e:ba:e1:d1:e8:b8: f3:2f:12:ce:47:32:b6:d5:fd:4c:bd:a8:16:a4:c0:95:c8:8f: 56:c3:df:d9:80:75:6a:04:d3:bf:dc:3d:8e:a7:5c:16:de:2e: 4a:00:7c:40:02:98:d0:a6:52:5b:cd:1e:5e:d4:4b:2c:10:6f: b0:5e:e4:e6:dd:9b:c2:0e:53:2d:9c:b4:11:17:2f:0c:01:6f: 6b:5c:7e:e3:6f:ea:58:2f:df:20:2a:8b:d4:e4:c9:81:0d:5b: 02:00:c1:5e:cc:75:ea:10:17:2b:2c:37:49:5a:6b:a4:04:32: 2c:80:f2:65:28:60:5e:7c:c7:3c:e2:2c:f6:de:fc:e8:da:f2: c7:7b:a5:53:f2:60:a4:9e:73:f1:17:1a:a3:ce:2c:ff:73:1f: 90:fe:16:bc:82:26:68:a0:c9:69:80:b0:ea:cc:f9:b6:8c:aa: fe:ee:59:5b:96:df:63:95:68:8c:1d:ba:9e:45:35:fe:6f:4b: 83:4a:79:13:24:8d:25:17:62:0e:21:31:02:fb:4b:94:7a:14: 18:bd:54:05:e6:d7:9a:90:c2:c7:64:f4:8e:82:0f:84:28:78: 10:2a:58:0d:e6:3b:d1:5e:e7:6c:9d:2d:97:e6:c2:69:5f:0f: 33:b2:7d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0Ci9njF0nMjZH1WiZibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0 ZDQ1ZTIwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EyhhNmJjNGJjMDdhY2VhNjkwNjc4YzhlOTAxNzdhMzFmYzZlZGQ5YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqaVgab+zh3rrDadcoAeUOthX2Ul paK4tY90cYeN5+qL9wEAEE/Gb9wFqrKYqRExaGuguLson7Cmt6o1BPRvpUi0kNYE hzz4IVoPwZaTPYjbmeNpdR+kzxWFtTeXQMxfBjR1wmSBAPgPJ/tpqtMEnEqLGfbT TxFRdYW12l4kI+SIJFk1+GDDXLY1D3XiEgG8da+K37tM8+aGfqkOdZExFf842nhI 8bDsO5tFElXk/u6BKoC5VDOBBhMW7q8FKUScPcuWzqglnRC6xQFHgIkmUCfmt/uk GkOaXBJ8ZDYlTB0/vGC5Nawb//qUQOgJ5y5ehsL06PSr6GBn4HQR6Gg7/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa8S8B6zqaQZ4yOkBd6Mfxu3ZwcMB8GA1UdIwQY MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA/t9X+U iysBImE8frrh0ei48y8SzkcyttX9TL2oFqTAlciPVsPf2YB1agTTv9w9jqdcFt4u SgB8QAKY0KZSW80eXtRLLBBvsF7k5t2bwg5TLZy0ERcvDAFva1x+42/qWC/fICqL 1OTJgQ1bAgDBXsx16hAXKyw3SVprpAQyLIDyZShgXnzHPOIs9t786Nryx3ulU/Jg pJ5z8Rcao84s/3MfkP4WvIImaKDJaYCw6sz5toyq/u5ZW5bfY5VojB26nkU1/m9L g0p5EySNJRdiDiExAvtLlHoUGL1UBebXmpDCx2T0joIPhCh4ECpYDeY70V7nbJ0t l+bCaV8PM7J94A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:14:25 2025 by rpki-client