This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json) Hash identifier: NZ7Vkbj1zILDjGLn+AkE7vBvvdnlG3YtH7HgT6q5iNM= Subject key identifier: F4:18:64:CD:DF:1F:39:72:E5:B1:CD:1E:DE:28:37:95:1F:E5:F7:DD Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e Certificate serial: 019AF1D1E30C18A377B40FBC8EAFBEF077F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft Manifest number: 011D Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: VHqrHR3KAxyQVs5XqkuJUlTCqyQ.roa (hash: hg67UBoyW97yawl4BR0CcyZRfHg2HHLQE7gv+QJb6ws=) 2: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: v7zoSAT3cb7wOTBWjrDhcjL341OOHZLziUoTQajDOVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e3:0c:18:a3:77:b4:0f:bc:8e:af:be:f0:77:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=f41864cddf1f3972e5b1cd1ede2837951fe5f7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:43:8b:61:72:b4:ff:4f:36:09:d6:b3:bd: 7a:9d:b8:d4:24:a7:f5:72:02:ae:51:f2:c2:4e:ab: ed:ba:75:10:c5:74:15:3b:9d:39:4c:89:f0:7e:70: 3b:49:7e:1b:ff:10:38:75:0d:58:c0:0a:32:71:0f: 69:2f:38:ae:2b:a4:83:54:67:78:b8:93:a0:a7:5f: d1:38:c1:64:81:54:c5:e9:55:9a:0f:6d:89:c2:f1: f9:d2:f5:ef:07:5a:e5:b5:96:4b:8b:fb:5b:08:fe: 6e:e7:d4:ff:cc:2a:25:46:b2:f4:8a:58:55:e1:41: d2:f3:8c:16:1c:56:1b:94:06:98:94:ad:f6:3e:f1: 65:b9:3e:1c:1a:c5:1e:05:54:5f:d4:b5:98:54:7e: 52:3a:e0:3a:75:54:c5:63:c7:dc:e1:dd:76:54:66: 2d:f3:09:16:32:65:02:93:9c:d8:f1:9f:2c:4d:4f: 62:1e:1b:75:1e:bc:83:06:be:1f:55:ba:2c:87:11: c3:96:34:ef:ca:b9:01:24:03:55:8e:df:be:39:ad: 0d:4a:93:02:57:82:1d:2b:ba:bf:2c:a8:b7:ce:a5: 4f:33:a9:05:4a:32:4b:24:33:71:1b:cb:13:29:0d: db:78:bf:d3:14:56:2f:c7:8d:5f:5a:22:a3:4b:8b: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:18:64:CD:DF:1F:39:72:E5:B1:CD:1E:DE:28:37:95:1F:E5:F7:DD X509v3 Authority Key Identifier: keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:52:02:e8:ff:23:97:bd:16:b2:07:e4:61:ac:a0:ae:a9:fb: ec:a0:07:d8:a4:11:5c:2e:3d:ba:c5:7d:28:7b:90:2d:6a:37: ff:83:6b:d2:dc:8a:57:5e:1d:11:d6:bf:11:31:2c:3c:4a:50: ab:d3:ed:d2:8d:92:9e:eb:40:e8:2e:9b:0a:54:2d:5a:6a:b1: 65:43:a1:a1:b1:4d:f4:06:3a:ea:75:5e:9b:5f:68:30:e5:da: 7c:b8:b7:17:f9:83:e2:69:ec:33:8a:a6:78:e8:4a:c8:d9:e9: ba:30:85:00:08:c0:fe:15:cc:ee:59:dc:82:39:27:81:de:04: bb:59:b4:1e:19:9f:fa:3e:b8:94:37:81:9d:d4:3a:12:45:8f: 6e:5e:08:96:64:bb:2f:89:cc:f6:e6:06:df:61:03:fd:19:fe: 75:f8:58:13:1e:64:e3:f0:f1:43:26:3c:43:6a:fd:94:60:e5: 1b:43:e0:0a:03:86:3e:3e:16:2a:ae:f7:11:61:80:b6:19:34: 05:4c:fd:9e:8a:6f:1a:e9:24:a5:74:4a:fa:35:a0:64:13:68: 91:0f:e5:e4:57:fc:c9:97:4a:f9:5e:d4:dd:79:92:06:d7:93: af:fb:1d:4f:8f:5b:aa:0c:19:26:59:a6:3d:51:08:4c:c1:78: 34:cf:02:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eMMGKN3tA+8jq++8Hf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzgyNmY2ZGRhNTQwMzQ5MWU0ODdjYTRlZWI3ZDdjZDc2 ZmExM2UwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhmNDE4NjRjZGRmMWYzOTcyZTViMWNkMWVkZTI4Mzc5NTFmZTVmN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLNDi2FytP9PNgnWs716nbjUJKf1 cgKuUfLCTqvtunUQxXQVO505TInwfnA7SX4b/xA4dQ1YwAoycQ9pLziuK6SDVGd4 uJOgp1/ROMFkgVTF6VWaD22JwvH50vXvB1rltZZLi/tbCP5u59T/zColRrL0ilhV 4UHS84wWHFYblAaYlK32PvFluT4cGsUeBVRf1LWYVH5SOuA6dVTFY8fc4d12VGYt 8wkWMmUCk5zY8Z8sTU9iHht1HryDBr4fVboshxHDljTvyrkBJANVjt++Oa0NSpMC V4IdK7q/LKi3zqVPM6kFSjJLJDNxG8sTKQ3beL/TFFYvx41fWiKjS4tPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQYZM3fHzly5bHNHt4oN5Uf5ffdMB8GA1UdIwQY MBaAFHN4JvbdpUA0keSHyk7rfXzXb6E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODkt MTNmYTQxMmExN2NmLzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODktMTNmYTQxMmExN2Nm LzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFIC6P8j l70WsgfkYaygrqn77KAH2KQRXC49usV9KHuQLWo3/4Nr0tyKV14dEda/ETEsPEpQ q9Pt0o2SnutA6C6bClQtWmqxZUOhobFN9AY66nVem19oMOXafLi3F/mD4mnsM4qm eOhKyNnpujCFAAjA/hXM7lncgjkngd4Eu1m0Hhmf+j64lDeBndQ6EkWPbl4IlmS7 L4nM9uYG32ED/Rn+dfhYEx5k4/DxQyY8Q2r9lGDlG0PgCgOGPj4WKq73EWGAthk0 BUz9nopvGukkpXRK+jWgZBNokQ/l5Ff8yZdK+V7U3XmSBteTr/sdT49bqgwZJlmm PVEITMF4NM8Ctw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:11 2025 by rpki-client