This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft File: C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json) Hash identifier: mLqjNcuSxnl5XTeqvVLf2WmdWAZxpRp8ywCExlG0YWc= Subject key identifier: CF:B2:24:FF:58:71:45:D6:D6:86:B3:89:94:EF:74:2E:E2:38:A7:BF Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8 Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8 Certificate serial: 019AF3C091B77A7BA007F770A922BFA4A728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:01:14 +0000 Manifest this update: Sat 06 Dec 2025 13:01:14 +0000 Manifest next update: Sun 07 Dec 2025 13:01:14 +0000 Files and hashes: 1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: igfIocS0kSoHpoFgGzswpMoMJO68ugEyhPHPjvBMN30=) 2: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (hash: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:91:b7:7a:7b:a0:07:f7:70:a9:22:bf:a4:a7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8 Validity Not Before: Dec 6 13:01:14 2025 GMT Not After : Dec 7 13:01:14 2025 GMT Subject: CN=cfb224ff587145d6d686b38994ef742ee238a7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:72:e0:fd:45:4e:13:4a:e3:69:b2:c9:d1: 5d:db:6f:a5:6a:d3:0b:b9:59:f9:47:51:51:72:88: 81:83:87:91:cb:fe:e1:ec:6a:65:d4:82:a3:22:c0: 2b:b5:2f:dd:2d:8b:2c:de:3a:74:1a:62:60:4e:61: 70:09:20:ec:02:0a:a6:9e:73:56:69:d2:18:61:02: 16:bc:1d:81:7c:91:7b:30:42:10:80:26:2f:b1:36: 87:4b:90:a2:37:f6:e1:57:28:ce:96:5d:13:4e:9c: 1f:de:d3:80:40:8b:d0:05:5f:f1:a6:40:40:b6:94: 63:20:21:36:5f:16:a5:f1:57:0c:5b:6c:85:50:67: 74:b6:33:15:36:8f:2c:4f:d5:16:2b:9e:b6:8d:91: 2e:a9:1c:40:85:71:b5:7b:ee:63:97:90:49:33:c7: 98:af:1a:24:cb:55:22:7b:1f:38:58:e8:b8:f8:0c: b6:be:4b:1f:07:a2:01:70:4a:7a:97:5b:9b:6d:9d: 44:e1:30:79:b4:b3:22:3e:50:cc:04:4c:7f:9e:ad: 1c:b0:74:81:34:f5:14:0e:62:bd:37:b2:08:aa:39: 17:dc:20:b1:dc:0f:cc:6e:55:5b:59:fd:4a:be:f5: 5f:2a:f6:81:03:3b:12:ce:b6:37:df:2d:48:7f:28: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B2:24:FF:58:71:45:D6:D6:86:B3:89:94:EF:74:2E:E2:38:A7:BF X509v3 Authority Key Identifier: keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:de:68:06:af:3c:76:71:5e:b7:42:b7:ae:38:ef:4e:de:e6: 5c:f6:fb:c1:dd:39:32:bd:29:27:1b:49:51:a8:ad:e8:27:f2: fa:60:61:ad:38:21:44:7a:f7:15:5f:58:7e:0b:b9:b3:6f:98: 3c:4d:b3:d0:23:f6:ef:f8:d3:bd:e7:ca:8f:f4:1f:52:fe:1f: fe:4a:ec:6c:09:59:72:2d:27:88:98:ad:85:eb:63:e4:44:e5: c4:75:9e:14:d6:3b:49:10:fa:98:c5:0e:2d:7c:c1:60:b4:a1: a8:36:19:00:81:3e:d4:87:59:2f:4a:1f:c6:5a:d7:ce:15:5f: 2e:52:62:d6:c1:93:01:7a:f5:64:7d:12:43:da:2f:89:c9:6b: aa:84:af:cd:12:1e:7f:11:33:52:c4:12:b7:c3:b1:83:89:90: 61:05:f2:4c:4d:b3:50:bc:be:dc:18:b2:ad:ce:25:c5:61:ff: f4:f9:43:ae:96:e4:4b:56:14:31:93:b8:c7:42:4f:6f:89:10: 47:6d:30:6b:c0:bf:e4:0d:07:62:be:9e:ba:88:b6:36:1f:0f: 3b:65:55:2d:07:f3:5d:21:a3:51:64:19:e6:f7:72:66:85:cb: 21:1a:c1:f2:03:ae:94:ac:ba:c6:76:e7:a9:8a:23:1d:b0:3a: c2:3a:11:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwJG3enugB/dwqSK/pKcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZTc3OWViOTBiZTdkNWJlMGMxZGM0OGE2Y2QyM2RiZDQz Yjk3YzgwHhcNMjUxMjA2MTMwMTE0WhcNMjUxMjA3MTMwMTE0WjAzMTEwLwYDVQQD EyhjZmIyMjRmZjU4NzE0NWQ2ZDY4NmIzODk5NGVmNzQyZWUyMzhhN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dty4P1FThNK42myydFd22+latML uVn5R1FRcoiBg4eRy/7h7Gpl1IKjIsArtS/dLYss3jp0GmJgTmFwCSDsAgqmnnNW adIYYQIWvB2BfJF7MEIQgCYvsTaHS5CiN/bhVyjOll0TTpwf3tOAQIvQBV/xpkBA tpRjICE2Xxal8VcMW2yFUGd0tjMVNo8sT9UWK562jZEuqRxAhXG1e+5jl5BJM8eY rxoky1Uiex84WOi4+Ay2vksfB6IBcEp6l1ubbZ1E4TB5tLMiPlDMBEx/nq0csHSB NPUUDmK9N7IIqjkX3CCx3A/MblVbWf1KvvVfKvaBAzsSzrY33y1IfyjGmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+yJP9YcUXW1oaziZTvdC7iOKe/MB8GA1UdIwQY MBaAFAvneeuQvn1b4MHcSKbNI9vUO5fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUt Mzg3YThmYmIxMDQyLzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUtMzg3YThmYmIxMDQy LzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzt5oBq88 dnFet0K3rjjvTt7mXPb7wd05Mr0pJxtJUait6Cfy+mBhrTghRHr3FV9Yfgu5s2+Y PE2z0CP27/jTvefKj/QfUv4f/krsbAlZci0niJithetj5ETlxHWeFNY7SRD6mMUO LXzBYLShqDYZAIE+1IdZL0ofxlrXzhVfLlJi1sGTAXr1ZH0SQ9oviclrqoSvzRIe fxEzUsQSt8Oxg4mQYQXyTE2zULy+3Biyrc4lxWH/9PlDrpbkS1YUMZO4x0JPb4kQ R20wa8C/5A0HYr6euoi2Nh8PO2VVLQfzXSGjUWQZ5vdyZoXLIRrB8gOulKy6xnbn qYojHbA6wjoRhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:44 2025 by rpki-client