This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft File: cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json) Hash identifier: 6/lYsqdhAGAIgCXiDvFXguYSRwVuvUvyb1phQz4TZbc= Subject key identifier: A0:7E:22:4D:D3:49:C2:FF:15:C7:1C:AC:54:C4:27:12:EF:3F:50:24 Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B Certificate issuer: /CN=713af8b790ac0923b24307ee008f261d10d9560b Certificate serial: 019B2B8A7BB442FCA214E16DD20530DAAB4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft Manifest number: 0E7B Signing time: Wed 17 Dec 2025 09:00:54 +0000 Manifest this update: Wed 17 Dec 2025 09:00:54 +0000 Manifest next update: Thu 18 Dec 2025 09:00:54 +0000 Files and hashes: 1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=) 2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: l7AlnTNhWEcwhIqy2v21ucxWvZhQiiJeiX80tJrg8xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:7b:b4:42:fc:a2:14:e1:6d:d2:05:30:da:ab:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b Validity Not Before: Dec 17 09:00:54 2025 GMT Not After : Dec 18 09:00:54 2025 GMT Subject: CN=a07e224dd349c2ff15c71cac54c42712ef3f5024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:6e:d1:76:48:07:ef:aa:40:59:13:dc:c4: b4:d6:da:a9:41:99:ef:09:4c:6d:17:01:b1:dc:e1: 24:c6:d6:d8:cc:f8:11:85:6c:97:5f:3b:9a:77:a6: c9:78:8d:9c:e2:05:d1:21:7e:87:a8:db:a5:1a:f3: 2b:a0:5a:29:2d:a0:d6:a9:a7:0b:68:07:8f:d8:fb: 5d:35:54:1b:a4:86:2c:c0:41:ad:58:45:45:41:b8: ef:e2:86:5d:bf:d4:06:8f:1c:43:a3:02:28:15:bd: b3:b0:cf:0b:bb:a0:b0:76:8d:8f:5e:09:a0:a1:57: 9b:aa:e8:d1:54:fa:a9:18:ed:f4:12:02:b9:57:e0: d2:4a:a6:e1:72:f4:3f:e3:3b:b3:2a:e7:85:59:07: 6c:a0:ae:83:12:ee:fc:35:73:0c:be:c2:26:33:50: 31:3a:e8:61:3c:b2:ed:03:36:72:07:79:e0:bc:9d: 37:4a:15:03:93:4b:e5:e9:b1:f7:29:71:cf:b8:51: a1:4b:3c:ac:e1:fc:77:4d:ad:8e:28:0e:9c:19:bf: 09:71:1d:42:8e:d9:76:bd:2b:01:47:5c:10:6b:55: 8c:15:15:b0:1d:44:b9:ca:fc:7c:82:b4:57:db:d6: b4:51:3d:df:0c:3b:e9:10:40:39:6e:6e:b7:72:56: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7E:22:4D:D3:49:C2:FF:15:C7:1C:AC:54:C4:27:12:EF:3F:50:24 X509v3 Authority Key Identifier: keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:19:29:27:c7:47:4d:e7:c8:ef:9c:81:5f:5b:09:95:60:ca: 9d:a5:82:45:1a:be:b7:08:38:df:b1:09:25:09:d5:28:cf:af: 67:81:e8:39:97:9c:4c:c8:c1:44:fe:f1:1f:08:8c:23:97:be: 26:3d:32:24:13:52:6b:a0:0f:0e:b8:08:db:f4:78:df:bd:60: 2d:35:c2:30:38:ce:77:16:d3:c1:d5:a8:0b:4b:00:4d:1f:55: 58:b3:74:c3:ca:0f:49:4b:45:3a:7b:37:d7:71:df:1b:12:a4: 87:b4:26:19:70:fd:57:88:46:5e:ea:49:c5:b9:6f:1c:7d:17: de:da:1f:26:d0:e2:27:1f:16:cc:22:0e:19:55:ad:c2:04:ff: ef:44:e2:e1:49:49:a2:7f:dc:23:e4:21:c0:e7:73:7d:36:3d: 60:66:c8:ba:1b:13:8c:44:59:8b:7b:8a:59:46:40:2c:f7:26: 96:61:d9:a8:0b:4d:1a:3f:4f:c7:4d:89:f7:10:37:ae:fb:36: 6a:70:33:1f:b8:b4:c6:f8:56:a0:88:e0:a5:df:a7:44:4d:65: 1e:f5:f4:86:04:a7:ca:3a:5f:12:46:bc:68:6b:0e:3c:4e:b2: 6e:34:e0:9e:23:49:c8:98:11:07:f8:b8:ad:fc:af:07:74:fd: 37:9b:7c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrinu0QvyiFOFt0gUw2qtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2FmOGI3OTBhYzA5MjNiMjQzMDdlZTAwOGYyNjFkMTBk OTU2MGIwHhcNMjUxMjE3MDkwMDU0WhcNMjUxMjE4MDkwMDU0WjAzMTEwLwYDVQQD EyhhMDdlMjI0ZGQzNDljMmZmMTVjNzFjYWM1NGM0MjcxMmVmM2Y1MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HRu0XZIB++qQFkT3MS01tqpQZnv CUxtFwGx3OEkxtbYzPgRhWyXXzuad6bJeI2c4gXRIX6HqNulGvMroFopLaDWqacL aAeP2PtdNVQbpIYswEGtWEVFQbjv4oZdv9QGjxxDowIoFb2zsM8Lu6Cwdo2PXgmg oVebqujRVPqpGO30EgK5V+DSSqbhcvQ/4zuzKueFWQdsoK6DEu78NXMMvsImM1Ax OuhhPLLtAzZyB3ngvJ03ShUDk0vl6bH3KXHPuFGhSzys4fx3Ta2OKA6cGb8JcR1C jtl2vSsBR1wQa1WMFRWwHUS5yvx8grRX29a0UT3fDDvpEEA5bm63clb/vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKB+Ik3TScL/FcccrFTEJxLvP1AkMB8GA1UdIwQY MBaAFHE6+LeQrAkjskMH7gCPJh0Q2VYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2Mt NDc0MTQ3NjZiNmJhLzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS82ZmQ1ZTMtY2I2YS00ZDY1LTk1N2MtNDc0MTQ3NjZiNmJh LzEvY1RyNHQ1Q3NDU095UXdmdUFJOG1IUkRaVmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBkpJ8dH TefI75yBX1sJlWDKnaWCRRq+twg437EJJQnVKM+vZ4HoOZecTMjBRP7xHwiMI5e+ Jj0yJBNSa6APDrgI2/R4371gLTXCMDjOdxbTwdWoC0sATR9VWLN0w8oPSUtFOns3 13HfGxKkh7QmGXD9V4hGXupJxblvHH0X3tofJtDiJx8WzCIOGVWtwgT/70Ti4UlJ on/cI+QhwOdzfTY9YGbIuhsTjERZi3uKWUZALPcmlmHZqAtNGj9Px02J9xA3rvs2 anAzH7i0xvhWoIjgpd+nRE1lHvX0hgSnyjpfEka8aGsOPE6ybjTgniNJyJgRB/i4 rfyvB3T9N5t8DQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:40:16 2025 by rpki-client