This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json) Hash identifier: Lf7azMMYedKKCNcNAtH7EgPXX2y6UzwriFBNP45DfY0= Subject key identifier: 25:9C:F8:90:36:D2:5D:65:61:59:03:3D:F0:AC:94:F3:93:C0:8C:C0 Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76 Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76 Certificate serial: 019AF1D1AF33D0635A50645A6E030CC38460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft Manifest number: 095A Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: fGfk0drSIim9Ukt3+3MjVP/feCk6avPrkUwZosyJIrQ=) 2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:af:33:d0:63:5a:50:64:5a:6e:03:0c:c3:84:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=259cf89036d25d656159033df0ac94f393c08cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:c1:e7:9c:d4:e5:e1:39:0c:36:22:ad:8f: 2c:86:36:15:39:00:a5:df:c5:29:43:f3:0b:e4:14: 14:2b:69:a9:5e:94:fe:27:9e:d0:b9:d6:bf:ea:ea: 8a:4b:1b:14:11:0d:5f:c2:3e:09:54:bb:cd:c8:37: 59:fd:2c:78:a8:7f:b2:59:ba:e9:dd:e2:f8:5a:b5: 4e:53:f7:b4:af:15:66:b5:96:87:bb:b2:83:07:c8: a4:ce:71:59:88:a0:dc:70:97:c7:ae:3e:19:67:51: ae:20:77:d3:cd:7e:54:a7:7a:6e:50:26:1d:93:1c: c6:66:29:49:51:05:2d:b2:f7:7a:6f:a3:ab:ac:93: 30:67:3e:ba:6f:bd:70:12:53:85:68:19:ec:0c:6d: 56:39:f6:6f:e0:4d:19:ab:5e:b6:21:2f:90:3f:a2: a4:3b:2f:6e:33:60:f3:1d:e1:7f:77:10:b8:37:39: 08:04:73:38:ee:21:45:80:a3:37:92:24:be:c2:f0: 5f:b3:92:85:6e:dc:db:0f:db:e1:86:d3:8e:54:1f: aa:27:e7:fa:69:ca:9c:6d:f6:24:f3:4f:17:87:c9: 8f:73:bf:82:1b:41:9a:0c:29:29:84:cf:8d:cd:08: 02:95:67:ca:07:67:f4:fc:02:3f:cd:91:89:2a:78: 6f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9C:F8:90:36:D2:5D:65:61:59:03:3D:F0:AC:94:F3:93:C0:8C:C0 X509v3 Authority Key Identifier: keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9b:af:8a:71:e1:2b:5b:cc:1c:97:09:47:1e:da:f1:86:48: c9:ce:b8:58:1e:1c:87:0d:77:df:97:7b:68:df:28:90:1a:6f: 64:7b:09:33:bf:f2:b1:6d:38:ef:b7:10:38:ea:f0:90:af:84: bb:fe:88:e7:43:e4:2b:d0:0f:4e:0b:55:c0:3a:f0:85:b8:a5: 7a:f6:0f:7a:ab:e7:18:b6:33:c0:1c:14:e9:99:93:9b:1f:0b: 6d:b2:cd:10:e3:dc:fa:78:1b:fe:34:be:d7:3f:89:c1:d8:1d: c8:9e:1d:e1:ff:fe:80:36:00:19:d4:14:e8:78:54:4b:4e:a3: 82:e3:1f:a5:fa:51:23:0b:e4:2b:c1:84:0c:37:2a:a7:5f:81: 65:ad:a9:2c:40:bb:36:1e:a4:f2:71:b3:e6:bc:05:25:e1:a1: db:b6:32:a7:6b:4d:88:dd:24:2b:42:9b:8c:9c:42:b8:dc:fa: b9:ee:fd:0c:83:30:89:9d:56:43:6f:66:76:66:ea:09:98:dc: 89:be:d5:6a:1b:61:d9:5c:b1:8c:66:22:f0:c9:1a:da:2c:e8: d2:42:7b:46:1a:01:e9:cb:d3:a8:ce:0b:b1:b5:80:93:79:77: 11:df:54:42:38:7a:d8:05:f0:bf:5e:5d:5e:c0:4c:98:e4:a8: df:8e:cb:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0a8z0GNaUGRabgMMw4RgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjdjNDkwNDQ3ZjUwNDVjMDIzNjdkYjhkMjFiNGUwODc0 OWZhNzYwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygyNTljZjg5MDM2ZDI1ZDY1NjE1OTAzM2RmMGFjOTRmMzkzYzA4Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7DB55zU5eE5DDYirY8shjYVOQCl 38UpQ/ML5BQUK2mpXpT+J57Quda/6uqKSxsUEQ1fwj4JVLvNyDdZ/Sx4qH+yWbrp 3eL4WrVOU/e0rxVmtZaHu7KDB8ikznFZiKDccJfHrj4ZZ1GuIHfTzX5Up3puUCYd kxzGZilJUQUtsvd6b6OrrJMwZz66b71wElOFaBnsDG1WOfZv4E0Zq162IS+QP6Kk Oy9uM2DzHeF/dxC4NzkIBHM47iFFgKM3kiS+wvBfs5KFbtzbD9vhhtOOVB+qJ+f6 acqcbfYk808Xh8mPc7+CG0GaDCkphM+NzQgClWfKB2f0/AI/zZGJKnhvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWc+JA20l1lYVkDPfCslPOTwIzAMB8GA1UdIwQY MBaAFHNnxJBEf1BFwCNn240htOCHSfp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTIt NWJhNzU2ZTc4ODY5LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82MjU4NGEtNDdjZS00YWE4LTg5OTItNWJhNzU2ZTc4ODY5 LzEvYzJmRWtFUl9VRVhBSTJmYmpTRzA0SWRKLW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpuvinHh K1vMHJcJRx7a8YZIyc64WB4chw1335d7aN8okBpvZHsJM7/ysW0477cQOOrwkK+E u/6I50PkK9APTgtVwDrwhbilevYPeqvnGLYzwBwU6ZmTmx8LbbLNEOPc+ngb/jS+ 1z+JwdgdyJ4d4f/+gDYAGdQU6HhUS06jguMfpfpRIwvkK8GEDDcqp1+BZa2pLEC7 Nh6k8nGz5rwFJeGh27Yyp2tNiN0kK0KbjJxCuNz6ue79DIMwiZ1WQ29mdmbqCZjc ib7Vahth2VyxjGYi8Mka2izo0kJ7RhoB6cvTqM4LsbWAk3l3Ed9UQjh62AXwv15d XsBMmOSo347LHw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:20 2025 by rpki-client