This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json) Hash identifier: NmJLeIXQijKNdQVfJLnMPezvIexQ6D5FtEpy9fBG6dE= Subject key identifier: 86:99:1C:99:F9:0A:79:60:AD:CE:3B:5B:F1:B7:FF:4C:29:30:4C:5A Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90 Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390 Certificate serial: 019AF19B1C420F8B28F063D0C3F11010FAEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft Manifest number: 078F Signing time: Sat 06 Dec 2025 03:01:05 +0000 Manifest this update: Sat 06 Dec 2025 03:01:05 +0000 Manifest next update: Sun 07 Dec 2025 03:01:05 +0000 Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: t0nvYttuEtoG5a+DzyFKyrGVST5Ynorqr2+ggMNlcaU=) 2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1c:42:0f:8b:28:f0:63:d0:c3:f1:10:10:fa:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390 Validity Not Before: Dec 6 03:01:05 2025 GMT Not After : Dec 7 03:01:05 2025 GMT Subject: CN=86991c99f90a7960adce3b5bf1b7ff4c29304c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:46:8f:d4:7f:15:2b:62:4f:e2:8d:e4:8b: ad:a4:3d:cf:5a:29:ad:e5:33:13:0f:de:0d:90:c8: f4:cf:af:67:43:92:bf:b7:9a:03:9c:de:07:63:a0: 58:36:6d:1e:f4:6f:d6:f9:05:f5:7b:79:8f:f8:7e: 51:fd:02:32:63:f2:64:56:75:3e:f6:c8:98:f9:a6: fd:68:b7:16:18:d7:a2:60:89:c5:e1:50:b0:ec:94: 94:60:ce:d3:ea:f1:60:0b:54:ca:3e:20:2d:43:14: e2:93:82:ab:0c:f8:69:bb:d5:14:42:98:f1:f3:74: 46:98:07:1d:68:8a:15:6c:08:e4:05:95:08:ea:34: fa:17:06:f7:c3:3f:15:2b:58:e8:13:d1:1f:32:9a: 83:35:2a:95:46:ef:23:1c:d2:22:65:b2:a5:d0:9a: 8d:e9:85:c7:cb:61:61:94:fb:6c:db:27:a3:22:ad: 0a:d7:23:ad:3b:b7:a4:53:30:fd:33:70:e0:d1:6b: c5:56:ca:6d:47:14:4d:4f:cc:c7:6c:ea:7c:10:55: 21:3e:05:3e:2d:b2:5e:57:ed:d4:bb:d3:93:a3:5a: 8a:49:c6:84:01:dc:c0:03:b7:aa:32:d3:f6:10:9c: 08:ae:96:de:bd:83:3b:98:4e:d5:fd:87:c7:7b:26: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:99:1C:99:F9:0A:79:60:AD:CE:3B:5B:F1:B7:FF:4C:29:30:4C:5A X509v3 Authority Key Identifier: keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e5:ef:5a:08:7c:d1:a7:82:98:72:e5:b7:b0:7f:ba:10:07: c1:5f:71:51:8f:5f:84:b8:a1:b9:13:95:52:2c:4f:c3:e6:41: 30:92:ad:d9:b8:a0:f9:f2:d1:74:b0:ba:59:9b:86:aa:7e:26: 92:9c:24:70:d1:85:b2:d8:9a:85:97:d2:24:66:2c:42:99:a8: 0b:63:5c:d1:03:d2:e0:c2:00:32:58:25:6c:47:18:d0:ad:25: 44:42:99:e1:83:fc:2b:c2:ae:1f:4a:55:85:7d:d6:54:1f:2b: 8f:cb:0f:8d:53:6f:89:9e:a8:eb:0f:08:01:5b:31:d7:1b:70: dc:00:c8:77:39:11:3d:25:a7:08:ff:ff:0d:4a:97:a2:14:eb: 0a:93:84:9c:29:2d:18:04:4b:fd:8c:50:87:0a:3a:f5:0a:f7: 8e:ef:ec:53:de:b2:ad:64:d3:9a:37:06:dd:98:53:2c:85:8f: 1b:bd:f8:7a:d3:a4:9a:51:56:bb:bc:a0:2b:42:06:d6:ee:35: 86:b7:7a:bb:0d:9e:62:32:a4:3d:b6:27:ac:33:94:6f:bb:7b: 43:cb:f6:77:78:b2:3d:bf:55:b7:a6:4c:48:ca:3f:c4:36:f8: d7:38:53:c9:c7:bc:9a:c7:81:9e:9e:fb:82:9e:fe:eb:1d:67: 59:b0:88:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxxCD4so8GPQw/EQEPrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNThjOTIxY2IzZTljODFkZGMzMTZmZjAzOWNiOWMzNmQy YTQzOTAwHhcNMjUxMjA2MDMwMTA1WhcNMjUxMjA3MDMwMTA1WjAzMTEwLwYDVQQD Eyg4Njk5MWM5OWY5MGE3OTYwYWRjZTNiNWJmMWI3ZmY0YzI5MzA0YzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43tGj9R/FStiT+KN5IutpD3PWimt 5TMTD94NkMj0z69nQ5K/t5oDnN4HY6BYNm0e9G/W+QX1e3mP+H5R/QIyY/JkVnU+ 9siY+ab9aLcWGNeiYInF4VCw7JSUYM7T6vFgC1TKPiAtQxTik4KrDPhpu9UUQpjx 83RGmAcdaIoVbAjkBZUI6jT6Fwb3wz8VK1joE9EfMpqDNSqVRu8jHNIiZbKl0JqN 6YXHy2FhlPts2yejIq0K1yOtO7ekUzD9M3Dg0WvFVsptRxRNT8zHbOp8EFUhPgU+ LbJeV+3Uu9OTo1qKScaEAdzAA7eqMtP2EJwIrpbevYM7mE7V/YfHeyZlUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaZHJn5Cnlgrc47W/G3/0wpMExaMB8GA1UdIwQY MBaAFAtYySHLPpyB3cMW/wOcucNtKkOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMt NDkxNzgyOTZkZTg2LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMtNDkxNzgyOTZkZTg2 LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuXvWgh8 0aeCmHLlt7B/uhAHwV9xUY9fhLihuROVUixPw+ZBMJKt2big+fLRdLC6WZuGqn4m kpwkcNGFstiahZfSJGYsQpmoC2Nc0QPS4MIAMlglbEcY0K0lREKZ4YP8K8KuH0pV hX3WVB8rj8sPjVNviZ6o6w8IAVsx1xtw3ADIdzkRPSWnCP//DUqXohTrCpOEnCkt GARL/YxQhwo69Qr3ju/sU96yrWTTmjcG3ZhTLIWPG734etOkmlFWu7ygK0IG1u41 hrd6uw2eYjKkPbYnrDOUb7t7Q8v2d3iyPb9Vt6ZMSMo/xDb41zhTyce8mseBnp77 gp7+6x1nWbCIJA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:02 2025 by rpki-client