This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft (raw, json) Hash identifier: aJ4opZKJ3azEWGsyxnLUiYtc8n2HLJzYQTVDclcJOBw= Subject key identifier: 22:B5:72:9B:24:D4:91:E7:BA:3E:F2:47:3F:D1:3A:35:5E:A9:48:BB Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Certificate serial: 019AF164453ADFF53EB27923DE06B67C5773 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft Manifest number: 10C7 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: 6KWsm-ISjjNa3GCb69ojlbhUSE4.roa (hash: P1LdbF9uJ10tW+331stp5KKcZciYQiQ/KQwCd/ZEwrg=) 2: c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl (hash: +ZIcmRzY4Jof8BfrZ2DJ0Pz5NPbNNWVTK4+Wb5MccOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:45:3a:df:f5:3e:b2:79:23:de:06:b6:7c:57:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=22b5729b24d491e7ba3ef2473fd13a355ea948bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:61:b3:b4:a2:0a:f8:d8:5c:79:c8:07:c2:cb: 15:4d:85:17:9c:b9:97:c2:44:3d:41:5b:61:cd:eb: af:4d:62:41:ab:11:99:43:5d:03:76:b2:85:0c:97: 8d:e7:d6:9a:08:4e:2a:cc:4e:88:d7:26:ab:2e:5b: e4:a4:ae:a1:36:b2:f0:0d:85:85:67:05:84:b5:de: ec:2e:2e:69:60:0a:d2:a6:e1:6b:12:17:24:2e:aa: f5:15:91:2d:83:73:00:5f:fe:ad:7b:ef:2a:a1:e7: 03:bf:73:2d:45:08:93:ea:be:6a:c7:c8:59:ec:ab: ef:de:cf:48:31:bb:9f:95:eb:05:9f:23:3e:c3:3b: 30:4c:ce:b4:8f:64:e8:78:04:24:f6:c0:6c:72:c3: 35:85:dc:10:3d:b6:94:1d:31:30:4e:0b:ff:a4:31: e0:8a:fa:ef:ac:4d:ea:03:30:d7:9c:63:87:d5:c4: f6:c7:77:d3:49:e7:88:8d:cb:30:1a:be:19:b9:87: 16:b5:14:bf:6f:e6:51:82:5a:c3:ef:9d:ac:9c:a7: 8f:96:7e:d7:48:36:dd:bb:8c:5d:c8:dc:d2:c3:0c: 69:83:0a:e7:78:e1:77:e9:0d:77:6d:2f:b8:76:d0: a2:4f:96:3b:98:f9:b8:9e:eb:bc:62:09:eb:57:6f: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:72:9B:24:D4:91:E7:BA:3E:F2:47:3F:D1:3A:35:5E:A9:48:BB X509v3 Authority Key Identifier: keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dd:f4:b1:76:82:40:9d:c9:78:3d:8a:04:e6:0d:b8:a1:c9: db:4c:74:f3:70:e2:f5:8c:e9:2e:42:0e:4b:c3:76:96:7b:f0: fc:a8:0a:04:8e:31:d6:03:24:ce:06:1c:89:20:67:fe:10:e9: 32:90:d6:a7:26:42:44:91:17:e7:b1:08:55:5d:cb:c7:19:c7: 31:08:60:a1:7e:a5:c0:b6:53:ec:e6:27:60:3b:9f:41:55:b8: 5f:97:5c:64:b5:c8:7d:59:99:48:cb:9e:f1:f2:72:60:77:df: 2f:80:f3:ab:c3:8f:2b:7d:16:61:f7:dc:f3:74:4a:df:59:2f: 76:b0:a4:50:63:6e:fe:e2:09:14:24:c9:59:55:36:fc:01:4b: 2f:43:ae:cc:1c:91:cf:0f:d7:5d:21:bc:15:05:8c:7a:96:59: 96:83:ee:23:ee:7e:06:ba:86:d2:00:d8:54:f7:7b:75:e0:6e: 9b:af:28:23:25:83:6a:41:a2:35:8c:11:6e:c3:0b:6f:d8:95: 1d:8d:29:24:3f:58:ea:89:8f:62:b8:91:75:ee:a9:fe:76:f2: c7:17:f0:54:91:7f:54:92:be:11:79:ab:ed:21:0f:42:50:3f: 26:21:fa:81:e7:2a:08:fc:e4:45:a4:ce:a7:33:89:77:63:a1: ce:b9:3b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEU63/U+snkj3ga2fFdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzkwYWQxNTFkNDMyNmE2ZDYyZTEzMDQ2ZDc4OGY4NWJm ODJlOTQwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygyMmI1NzI5YjI0ZDQ5MWU3YmEzZWYyNDczZmQxM2EzNTVlYTk0OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmGztKIK+NhcecgHwssVTYUXnLmX wkQ9QVthzeuvTWJBqxGZQ10DdrKFDJeN59aaCE4qzE6I1yarLlvkpK6hNrLwDYWF ZwWEtd7sLi5pYArSpuFrEhckLqr1FZEtg3MAX/6te+8qoecDv3MtRQiT6r5qx8hZ 7Kvv3s9IMbuflesFnyM+wzswTM60j2ToeAQk9sBscsM1hdwQPbaUHTEwTgv/pDHg ivrvrE3qAzDXnGOH1cT2x3fTSeeIjcswGr4ZuYcWtRS/b+ZRglrD752snKePln7X SDbdu4xdyNzSwwxpgwrneOF36Q13bS+4dtCiT5Y7mPm4nuu8YgnrV28F6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK1cpsk1JHnuj7yRz/ROjVeqUi7MB8GA1UdIwQY MBaAFHPJCtFR1DJqbWLhMEbXiPhb+C6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTIt YmE2MjZkMzI1ZDU5LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi85YmUyYTAtMTA2MC00MWM3LWI4ZTItYmE2MjZkMzI1ZDU5 LzEvYzhrSzBWSFVNbXB0WXVFd1J0ZUktRnY0THBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl930sXaC QJ3JeD2KBOYNuKHJ20x083Di9YzpLkIOS8N2lnvw/KgKBI4x1gMkzgYciSBn/hDp MpDWpyZCRJEX57EIVV3LxxnHMQhgoX6lwLZT7OYnYDufQVW4X5dcZLXIfVmZSMue 8fJyYHffL4Dzq8OPK30WYffc83RK31kvdrCkUGNu/uIJFCTJWVU2/AFLL0OuzByR zw/XXSG8FQWMepZZloPuI+5+BrqG0gDYVPd7deBum68oIyWDakGiNYwRbsMLb9iV HY0pJD9Y6omPYriRde6p/nbyxxfwVJF/VJK+EXmr7SEPQlA/JiH6gecqCPzkRaTO pzOJd2Ohzrk78w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:59 2025 by rpki-client