This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft File: C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json) Hash identifier: t7POTxpcS0tDsEkO29bWJc159nZ+ryQYdRM6xemwDTo= Subject key identifier: 5B:2A:48:4B:84:89:CE:12:6D:97:D3:D7:27:4C:D2:D0:68:76:5F:5D Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E Certificate issuer: /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e Certificate serial: 019AF31D4953551043C644F6ECC0F6A88B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft Manifest number: 0B4D Signing time: Sat 06 Dec 2025 10:02:54 +0000 Manifest this update: Sat 06 Dec 2025 10:02:54 +0000 Manifest next update: Sun 07 Dec 2025 10:02:54 +0000 Files and hashes: 1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: FJjkN5h8TuS/bss+GhT0tcX3+3XoPXZf58sx6DhtHcs=) 2: tX_eiSv6b9gWuAzQ90obdliFuqM.roa (hash: ZiFHzPJvZH9N84EKs/55J2Q6VVzMS4porN9rlx3w+2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:49:53:55:10:43:c6:44:f6:ec:c0:f6:a8:8b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e Validity Not Before: Dec 6 10:02:54 2025 GMT Not After : Dec 7 10:02:54 2025 GMT Subject: CN=5b2a484b8489ce126d97d3d7274cd2d068765f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d6:a1:d4:73:0f:11:be:c1:dc:c2:cb:8f:27: cd:67:85:82:35:c0:72:22:db:f2:92:87:c0:85:f6: 23:2a:70:f4:5d:55:8e:07:16:c6:f5:de:5c:65:ad: 6b:5f:87:57:2f:8b:32:c7:20:c0:b9:8d:4d:47:01: 2c:c6:5a:6d:74:fd:e5:bd:98:e0:ae:7b:f6:2d:a5: 9e:49:8d:71:1d:ec:60:5a:90:24:a3:40:89:69:c9: a8:f8:a2:c6:b2:83:16:87:63:38:e5:f7:c3:80:dc: 7d:3e:52:7b:ae:c0:7d:1d:f7:b9:09:a9:c2:d9:6d: a8:43:a3:d2:52:42:e0:b2:80:6a:69:9b:c6:3d:2b: 80:c6:1a:33:5e:cc:3d:ee:b5:b0:84:79:75:ab:1e: 01:fb:1f:34:3f:b6:ac:fe:6c:5f:ac:99:f0:da:72: fa:52:c9:bf:4c:97:1e:18:7a:46:33:16:cb:be:b6: 78:d7:39:85:df:f7:f0:62:7f:3c:72:b8:8c:36:53: e8:2f:a8:2f:5c:a3:e3:28:7a:89:cb:0f:a0:9a:1c: da:21:db:65:69:6d:ac:f7:3d:1c:fc:03:e6:44:20: 56:72:28:ab:c9:67:a2:8d:f6:4f:c5:cb:9b:bb:b8: 68:b5:e4:c5:81:91:0a:f6:59:84:e7:f9:82:63:6e: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2A:48:4B:84:89:CE:12:6D:97:D3:D7:27:4C:D2:D0:68:76:5F:5D X509v3 Authority Key Identifier: keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a1:26:37:57:7a:83:83:82:71:15:b1:d6:02:50:e6:f5:d8: 08:a2:b9:b2:a5:2a:28:21:e7:d8:0f:27:61:cf:ff:35:ee:22: a0:fc:f9:9c:79:9c:65:87:c6:bd:46:25:44:86:0f:d1:e6:32: 9b:8d:91:d7:50:77:98:ec:5b:89:8b:f9:0b:be:04:79:a4:0f: 4b:75:d1:8b:ca:70:a5:fb:ed:be:e3:60:f5:cd:57:12:e4:cf: 85:43:cd:80:c9:04:5f:43:76:1d:8e:a1:a4:d0:65:8a:03:3a: ec:07:8d:f2:55:2e:69:40:66:ed:63:01:99:ae:42:4d:8f:b2: a8:61:09:09:87:06:4c:6b:b9:75:78:c5:47:21:c6:61:3e:a2: 31:1c:36:38:fd:fd:07:75:b7:58:98:cd:19:72:06:6c:cb:4a: d0:8a:60:fa:a4:ee:a5:41:be:47:73:c6:e4:a1:4b:a7:fd:64: 69:40:64:d0:c3:2f:c4:0c:26:6f:3f:ef:74:08:29:b1:49:43: 5e:ee:03:66:9b:ac:9a:25:1f:c1:d5:18:de:5d:73:7a:69:be: cb:f8:e6:b1:6d:ef:9c:11:65:28:f1:38:ce:e5:1f:eb:b1:7d: 3d:da:1e:6e:18:fd:55:40:88:78:47:bd:c2:02:d8:be:66:91: 45:0a:8c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUlTVRBDxkT27MD2qIuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNjJjZjhjZDkwYjY5ZjkzNmU4MmI1NzgwMWNkNzc5ZDcy ZTNmM2UwHhcNMjUxMjA2MTAwMjU0WhcNMjUxMjA3MTAwMjU0WjAzMTEwLwYDVQQD Eyg1YjJhNDg0Yjg0ODljZTEyNmQ5N2QzZDcyNzRjZDJkMDY4NzY1ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9ah1HMPEb7B3MLLjyfNZ4WCNcBy ItvykofAhfYjKnD0XVWOBxbG9d5cZa1rX4dXL4syxyDAuY1NRwEsxlptdP3lvZjg rnv2LaWeSY1xHexgWpAko0CJacmo+KLGsoMWh2M45ffDgNx9PlJ7rsB9Hfe5CanC 2W2oQ6PSUkLgsoBqaZvGPSuAxhozXsw97rWwhHl1qx4B+x80P7as/mxfrJnw2nL6 Usm/TJceGHpGMxbLvrZ41zmF3/fwYn88criMNlPoL6gvXKPjKHqJyw+gmhzaIdtl aW2s9z0c/APmRCBWciiryWeijfZPxcubu7hoteTFgZEK9lmE5/mCY26RLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsqSEuEic4SbZfT1ydM0tBodl9dMB8GA1UdIwQY MBaAFAtiz4zZC2n5NugrV4Ac13nXLj8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzJMUGpOa0xhZmsyNkN0WGdCelhlZGN1UHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84MmNjNWQtZDZhOC00NjY3LWIwNDkt OTY3YzU3ZDVhMzYxLzEvQzJMUGpOa0xhZmsyNkN0WGdCelhlZGN1UHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84MmNjNWQtZDZhOC00NjY3LWIwNDktOTY3YzU3ZDVhMzYx LzEvQzJMUGpOa0xhZmsyNkN0WGdCelhlZGN1UHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6EmN1d6 g4OCcRWx1gJQ5vXYCKK5sqUqKCHn2A8nYc//Ne4ioPz5nHmcZYfGvUYlRIYP0eYy m42R11B3mOxbiYv5C74EeaQPS3XRi8pwpfvtvuNg9c1XEuTPhUPNgMkEX0N2HY6h pNBligM67AeN8lUuaUBm7WMBma5CTY+yqGEJCYcGTGu5dXjFRyHGYT6iMRw2OP39 B3W3WJjNGXIGbMtK0Ipg+qTupUG+R3PG5KFLp/1kaUBk0MMvxAwmbz/vdAgpsUlD Xu4DZpusmiUfwdUY3l1zemm+y/jmsW3vnBFlKPE4zuUf67F9Pdoebhj9VUCIeEe9 wgLYvmaRRQqM6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:40 2025 by rpki-client