This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json) Hash identifier: kk0Zxtl9jVBWLkrfwgWugY+BOzC6yXM466KNXloI5fA= Subject key identifier: 44:C9:6F:F5:FD:9E:F8:18:60:5F:5A:29:49:8B:50:63:82:FD:89:08 Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42 Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842 Certificate serial: 019AF12DE4A94CEFE11C3D300B8158E3D807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft Manifest number: 1267 Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: tbuOrIWZZCCJBqCfznfP/pDMvtwEb9JlxwvpUp2L+T0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e4:a9:4c:ef:e1:1c:3d:30:0b:81:58:e3:d8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=44c96ff5fd9ef818605f5a29498b506382fd8908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dc:74:41:36:bd:6c:ce:08:b6:f2:17:fb:13: 03:8b:7f:2e:a8:f1:d1:8c:3f:82:92:1b:fc:77:09: ed:36:59:f3:44:c1:3b:1f:0d:11:bb:42:49:2c:81: 7e:46:c1:da:90:b2:89:55:90:0c:5f:ab:ac:b1:40: fc:e0:aa:41:72:e8:d7:ef:c2:77:2b:55:ea:ac:10: 24:74:02:8f:0c:62:5a:ce:e3:67:74:76:1a:06:49: 90:f5:ef:22:9d:aa:b1:23:58:fd:24:80:82:b9:fa: e3:07:12:c3:e5:1b:69:77:3f:31:9e:d7:85:f0:10: 43:0d:ce:60:d2:8c:60:db:d2:be:ac:12:98:7f:35: b4:82:c0:62:28:e3:09:14:cf:fb:5e:fd:75:bd:e3: 88:5f:a7:de:c0:36:a6:2c:30:b6:af:9e:c3:14:a2: 93:c5:8c:28:f5:ee:ad:11:e6:b3:ab:59:d3:f9:94: 31:cd:9c:2c:0f:14:44:26:84:8e:c9:78:29:6c:21: c7:c5:52:de:d2:95:59:19:66:fb:6a:e2:a0:30:dd: ab:6d:26:e7:88:05:90:ad:ee:c1:57:72:5d:6a:14: ca:9c:48:a1:69:8a:07:05:9a:c0:9a:3d:87:d9:79: 33:52:7a:89:bc:6a:b7:61:40:2b:c8:20:9e:49:ab: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:6F:F5:FD:9E:F8:18:60:5F:5A:29:49:8B:50:63:82:FD:89:08 X509v3 Authority Key Identifier: keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:14:62:28:3f:28:8d:cf:29:6a:86:76:f2:25:67:94:86:9e: e5:9d:b9:64:03:6b:b8:e6:31:ab:16:42:b7:02:10:47:bb:91: 60:ee:76:70:db:70:59:06:cc:d6:df:85:02:ba:5d:b4:3c:74: 57:b6:9a:bc:25:98:8c:72:b9:be:76:a6:72:c4:4a:9d:cf:03: 07:c3:35:74:13:e5:ad:b9:62:92:d8:44:42:3c:0f:b1:57:61: e0:ae:31:ef:6f:1a:83:90:45:a0:4a:62:1f:99:b6:df:35:73: f3:2f:a9:59:2f:7b:ca:ae:d5:c7:d5:65:c4:11:25:a8:b4:24: c5:07:b1:93:fc:c8:ca:a2:ad:be:50:44:db:13:55:13:59:ce: 87:cc:86:97:40:31:0c:42:6a:9d:f2:1d:67:b9:e5:a5:04:ee: c1:2b:4c:e4:e2:da:d6:35:61:a4:5f:b0:de:d1:fc:b5:b7:ed: b2:17:25:45:43:58:78:c3:9d:d5:bd:14:5e:66:ac:b3:df:bd: e7:98:e1:38:18:87:88:68:12:5e:71:3b:0c:b7:97:c3:d0:11: 44:e8:c1:67:67:31:04:fb:6a:0c:47:c9:9c:ce:2c:2f:06:fe: 1e:b3:27:24:0b:9b:56:b1:69:a8:d3:07:51:9a:6e:01:05:66: 71:df:08:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeSpTO/hHD0wC4FY49gHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZWY1YmQzNzYyZWY2MGZhNzhlZDU1ZjU0NGZhM2EwNTEz ZmQ4NDIwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD Eyg0NGM5NmZmNWZkOWVmODE4NjA1ZjVhMjk0OThiNTA2MzgyZmQ4OTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19x0QTa9bM4ItvIX+xMDi38uqPHR jD+Ckhv8dwntNlnzRME7Hw0Ru0JJLIF+RsHakLKJVZAMX6ussUD84KpBcujX78J3 K1XqrBAkdAKPDGJazuNndHYaBkmQ9e8inaqxI1j9JICCufrjBxLD5Rtpdz8xnteF 8BBDDc5g0oxg29K+rBKYfzW0gsBiKOMJFM/7Xv11veOIX6fewDamLDC2r57DFKKT xYwo9e6tEeazq1nT+ZQxzZwsDxREJoSOyXgpbCHHxVLe0pVZGWb7auKgMN2rbSbn iAWQre7BV3JdahTKnEihaYoHBZrAmj2H2XkzUnqJvGq3YUAryCCeSavJfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETJb/X9nvgYYF9aKUmLUGOC/YkIMB8GA1UdIwQY MBaAFHPvW9N2LvYPp47VX1RPo6BRP9hCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQt YjU0NmEyZDIwOGYyLzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQtYjU0NmEyZDIwOGYy LzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxRiKD8o jc8paoZ28iVnlIae5Z25ZANruOYxqxZCtwIQR7uRYO52cNtwWQbM1t+FArpdtDx0 V7aavCWYjHK5vnamcsRKnc8DB8M1dBPlrblikthEQjwPsVdh4K4x728ag5BFoEpi H5m23zVz8y+pWS97yq7Vx9VlxBElqLQkxQexk/zIyqKtvlBE2xNVE1nOh8yGl0Ax DEJqnfIdZ7nlpQTuwStM5OLa1jVhpF+w3tH8tbftshclRUNYeMOd1b0UXmass9+9 55jhOBiHiGgSXnE7DLeXw9ARROjBZ2cxBPtqDEfJnM4sLwb+HrMnJAubVrFpqNMH UZpuAQVmcd8I0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:40 2025 by rpki-client