This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json) Hash identifier: FfkSQK6irHH/zHuBBu5FhEjhIl2GqbXeP28UHDDr4P0= Subject key identifier: 44:57:BD:39:EB:C4:9F:B6:2A:DC:84:87:ED:90:7C:01:64:C4:B7:0C Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d Certificate serial: 019AF23FD4C0266441A45E404BECE9DC07B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft Manifest number: 07B0 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: nUm/ZFQM2Hy9vMCaUVl4ZyxAoWaNj2WOr+IWEYPzRqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:c0:26:64:41:a4:5e:40:4b:ec:e9:dc:07:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=4457bd39ebc49fb62adc8487ed907c0164c4b70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:52:f2:bb:c8:73:4d:64:9f:19:e3:89:af: 03:c5:1a:85:d6:fb:c7:ee:e1:81:4d:30:4a:06:58: 47:e9:78:a4:94:d7:be:ac:9f:7e:5d:a5:6c:0b:c6: 2f:49:2f:ef:dc:fd:9d:cd:fd:55:e4:55:65:a4:aa: 6e:79:23:44:a5:96:db:9b:d4:27:d8:83:4c:5b:a1: e5:f8:36:6c:24:f6:c1:03:f8:4d:0b:1d:6f:d0:a3: a3:b1:af:ea:d0:b1:28:d8:f1:82:ab:e2:ef:70:c0: 75:43:06:7b:82:a7:8d:89:80:d1:ec:22:51:32:b4: e8:f3:95:ce:44:e1:64:58:30:ef:bc:67:0e:75:be: 64:47:85:1b:d6:45:95:47:1c:24:58:8c:63:9d:5f: bd:32:ed:d2:ec:1f:5e:37:ae:e5:f9:fa:77:fd:c6: 39:27:be:a9:9b:7e:e0:84:ea:f1:37:66:0e:f6:25: ab:c5:f1:4b:8a:c6:c4:7b:d2:e3:ef:42:70:bb:a7: 54:e2:37:b4:04:b8:4f:49:c1:02:7e:ec:21:5c:9a: 4e:fd:6c:95:29:be:00:8e:9d:7b:65:94:b8:4f:cc: 2b:94:8e:f3:2f:5b:9e:c2:19:29:03:9b:2a:6a:da: 2a:75:f1:f8:ef:52:b6:dc:4a:c1:38:80:20:5a:d3: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:BD:39:EB:C4:9F:B6:2A:DC:84:87:ED:90:7C:01:64:C4:B7:0C X509v3 Authority Key Identifier: keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0d:ae:51:14:32:18:d3:27:dc:20:00:2d:1d:b4:4b:cc:95: da:68:a2:03:5d:a6:aa:2a:60:ab:f6:83:a1:69:6f:6f:68:1b: b2:40:f9:67:fe:9f:6a:d0:43:0c:d2:8a:b7:51:1c:41:e3:37: 5b:fd:a3:ca:6e:5a:a7:66:18:36:4e:29:47:1d:bb:47:17:05: b2:90:91:33:bd:94:d8:74:a2:da:88:f1:7d:40:85:f9:9b:ae: b1:96:09:27:e9:c5:29:ad:7d:21:2a:6d:b3:b0:95:c8:8e:5d: 27:56:0f:ae:0d:33:8e:82:eb:5d:f5:9d:1b:55:84:80:10:d8: 0f:73:be:51:9a:0f:41:f7:a1:12:de:5d:26:d1:c3:20:b2:3d: f6:80:6b:52:bd:70:31:3b:2f:cd:44:c1:aa:4e:b6:10:82:98: f7:f0:e2:9b:0a:0b:b2:1a:9e:d7:82:f2:9f:ff:8f:5e:8c:2a: 23:d5:2b:7b:9b:a5:00:c7:11:eb:bf:ca:b5:a3:50:7e:98:e1: a2:ca:2c:49:a1:a1:2f:38:cf:b1:0d:8f:ec:c8:57:1d:58:0b: 4c:91:20:6b:46:02:03:10:7c:ae:53:b9:bc:87:1f:3c:93:d3: 7b:b8:58:33:0c:c5:36:9e:c4:82:0b:78:e2:05:ca:f7:eb:bf: 83:d8:93:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9TAJmRBpF5AS+zp3AezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNTBiM2I3Y2Q0Y2UzYjE0NWI3NTNiZjcxNzlhOTU1Y2Nk MjkyNWQwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD Eyg0NDU3YmQzOWViYzQ5ZmI2MmFkYzg0ODdlZDkwN2MwMTY0YzRiNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAZS8rvIc01knxnjia8DxRqF1vvH 7uGBTTBKBlhH6XiklNe+rJ9+XaVsC8YvSS/v3P2dzf1V5FVlpKpueSNEpZbbm9Qn 2INMW6Hl+DZsJPbBA/hNCx1v0KOjsa/q0LEo2PGCq+LvcMB1QwZ7gqeNiYDR7CJR MrTo85XOROFkWDDvvGcOdb5kR4Ub1kWVRxwkWIxjnV+9Mu3S7B9eN67l+fp3/cY5 J76pm37ghOrxN2YO9iWrxfFLisbEe9Lj70Jwu6dU4je0BLhPScECfuwhXJpO/WyV Kb4Ajp17ZZS4T8wrlI7zL1uewhkpA5sqatoqdfH471K23ErBOIAgWtMheQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERXvTnrxJ+2KtyEh+2QfAFkxLcMMB8GA1UdIwQY MBaAFApQs7fNTOOxRbdTv3F5qVXM0pJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2Mt MTcwZWQyMzBkNWY4LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2MtMTcwZWQyMzBkNWY4 LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA2uURQy GNMn3CAALR20S8yV2miiA12mqipgq/aDoWlvb2gbskD5Z/6fatBDDNKKt1EcQeM3 W/2jym5ap2YYNk4pRx27RxcFspCRM72U2HSi2ojxfUCF+ZuusZYJJ+nFKa19ISpt s7CVyI5dJ1YPrg0zjoLrXfWdG1WEgBDYD3O+UZoPQfehEt5dJtHDILI99oBrUr1w MTsvzUTBqk62EIKY9/DimwoLshqe14Lyn/+PXowqI9Ure5ulAMcR67/KtaNQfpjh ososSaGhLzjPsQ2P7MhXHVgLTJEga0YCAxB8rlO5vIcfPJPTe7hYMwzFNp7Eggt4 4gXK9+u/g9iTmw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:35 2025 by rpki-client