This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json) Hash identifier: 16bDATIvAqVq6RE7k58kPTxhMTbc8GR2edv6tQ+gXss= Subject key identifier: 62:D0:26:C2:82:AE:26:8D:85:20:0E:A8:2D:E7:43:21:75:21:EB:B4 Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8 Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8 Certificate serial: 019AF23FB3716B22946C4C2F89991FBA65D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft Manifest number: 0B76 Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: 8HAdBA6joQ+FsNrlRhbB6QJZhI8P7ijhdEt7yNHCqo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b3:71:6b:22:94:6c:4c:2f:89:99:1f:ba:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8 Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=62d026c282ae268d85200ea82de743217521ebb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:29:c8:f7:dd:0f:41:49:7c:c4:3b:90:e9: b7:ac:86:1d:e4:91:7e:77:8a:ec:2a:72:df:29:c9: 19:7b:3b:b8:ef:4b:a1:24:3c:b9:34:98:0d:46:ca: 8b:4f:db:0d:2a:8d:b8:59:f3:e0:7f:2a:68:ba:71: 19:77:4c:c5:15:d2:a5:c9:79:ab:d6:13:65:d4:4b: db:40:dc:4f:94:a4:88:6f:e4:47:5c:0d:f8:03:65: c8:1b:74:32:4f:ce:09:7f:c6:34:fc:21:28:63:ec: a1:e7:98:93:51:22:04:4a:a6:4b:1a:57:7d:15:8b: 54:a5:96:af:d8:59:06:d8:a8:3f:f9:92:5f:3c:d6: 67:d5:2c:f5:42:f3:a0:85:25:e5:e4:dd:67:35:a8: 4c:b3:ea:b0:69:8e:34:90:bd:5b:9c:e2:6f:5f:5c: 43:9d:ca:3a:98:2a:2a:8d:e5:5c:a1:c3:d9:30:34: c1:82:2c:7c:ce:f2:16:67:4b:23:80:1e:78:5e:6b: 0a:cb:83:4e:7a:59:c7:c5:2e:cd:89:c3:e0:86:3a: b2:eb:f0:90:3c:f0:eb:c8:72:50:82:e2:e6:8a:a3: 78:59:3b:a5:4d:e3:f6:d7:d3:21:1b:02:8b:69:99: 03:42:c3:48:df:fa:e8:60:a8:15:08:06:e4:a1:26: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D0:26:C2:82:AE:26:8D:85:20:0E:A8:2D:E7:43:21:75:21:EB:B4 X509v3 Authority Key Identifier: keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f0:e0:a9:7b:39:af:c7:05:f0:b9:29:20:f9:a9:88:43:54: 48:5d:84:e3:dc:0c:f4:e8:d8:0a:87:73:c9:43:93:95:14:66: 45:ee:57:fe:b7:18:1c:fc:3c:5d:73:21:22:09:cf:d9:f6:e3: 84:e9:29:3c:e4:40:cd:85:dd:c8:05:7d:4c:19:c1:76:8c:ab: 56:cf:55:50:c3:ec:63:69:30:b3:b2:1a:5d:49:64:b5:7a:c3: 83:b5:e5:90:e2:b7:17:66:fb:0a:0e:02:45:97:f0:c0:52:41: 96:2f:1f:22:94:e3:54:30:5d:a7:ca:76:f9:cf:91:2a:2d:6b: b8:7b:a0:d9:ec:78:3b:9f:da:49:28:5d:9f:f7:97:4b:5f:cf: 5f:3d:66:72:a3:ad:68:86:86:9c:6e:56:24:6b:6e:bf:fb:98: 00:84:a1:4d:b9:83:04:ae:46:fa:ce:41:92:6d:07:ef:76:35: 56:52:64:96:b4:ab:99:15:e7:0e:9d:35:e7:7e:73:13:41:53: 03:d4:eb:6f:82:43:01:36:e5:91:e1:9c:5a:81:48:1e:b3:4c: 97:5d:3b:2e:8a:c0:d8:76:e9:70:41:46:f3:01:b1:c9:84:60: 9c:bb:45:31:fe:a5:a3:91:91:d8:0e:22:5d:2f:63:34:70:73: 9b:63:a4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7NxayKUbEwviZkfumXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl YTI5YzgwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD Eyg2MmQwMjZjMjgyYWUyNjhkODUyMDBlYTgyZGU3NDMyMTc1MjFlYmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyUpyPfdD0FJfMQ7kOm3rIYd5JF+ d4rsKnLfKckZezu470uhJDy5NJgNRsqLT9sNKo24WfPgfypounEZd0zFFdKlyXmr 1hNl1EvbQNxPlKSIb+RHXA34A2XIG3QyT84Jf8Y0/CEoY+yh55iTUSIESqZLGld9 FYtUpZav2FkG2Kg/+ZJfPNZn1Sz1QvOghSXl5N1nNahMs+qwaY40kL1bnOJvX1xD nco6mCoqjeVcocPZMDTBgix8zvIWZ0sjgB54XmsKy4NOelnHxS7NicPghjqy6/CQ PPDryHJQguLmiqN4WTulTeP219MhGwKLaZkDQsNI3/roYKgVCAbkoSar6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLQJsKCriaNhSAOqC3nQyF1Ieu0MB8GA1UdIwQY MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/DgqXs5 r8cF8LkpIPmpiENUSF2E49wM9OjYCodzyUOTlRRmRe5X/rcYHPw8XXMhIgnP2fbj hOkpPORAzYXdyAV9TBnBdoyrVs9VUMPsY2kws7IaXUlktXrDg7XlkOK3F2b7Cg4C RZfwwFJBli8fIpTjVDBdp8p2+c+RKi1ruHug2ex4O5/aSShdn/eXS1/PXz1mcqOt aIaGnG5WJGtuv/uYAIShTbmDBK5G+s5Bkm0H73Y1VlJklrSrmRXnDp01535zE0FT A9Trb4JDATblkeGcWoFIHrNMl107LorA2HbpcEFG8wGxyYRgnLtFMf6lo5GR2A4i XS9jNHBzm2Ok/A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:52 2025 by rpki-client