This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json) Hash identifier: uHhZ2papRS7dnDp2D0QeuHJjULsvGVUNiX13Njh6IRc= Subject key identifier: C8:BB:14:D6:5C:20:54:0D:1C:4E:1C:F5:24:5D:38:A5:61:AF:17:68 Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Certificate serial: 019AF1D1F96ED3BC5D2B45ADB31DC3EFC640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft Manifest number: 0F14 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: Adh6Q6O5AFeEdF6/ZIOjvAkSlNPSQzoiEn0JdSRGA9M=) 2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=) 3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=) 4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f9:6e:d3:bc:5d:2b:45:ad:b3:1d:c3:ef:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=c8bb14d65c20540d1c4e1cf5245d38a561af1768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:b4:82:b9:a4:2c:bd:a0:bd:d3:a6:32:bf: 23:9f:f5:6f:e8:51:96:e3:0c:35:8a:ea:e9:4e:0f: 77:33:66:ad:05:82:23:de:88:87:30:47:0e:97:24: 0a:b5:b0:1f:66:87:ab:47:1a:e7:94:87:a1:40:4c: 6a:86:9f:f7:4f:5d:21:35:85:ca:ea:bc:52:22:dd: 13:75:8b:6b:dd:5e:95:da:01:12:ec:b3:58:bc:40: a0:a7:26:38:96:11:46:a0:40:5d:ca:80:41:ba:ad: 19:a3:ed:b5:8a:8b:d5:8d:ee:b0:fa:1c:a5:2a:71: 14:81:20:a1:c8:cf:1e:a1:80:66:f3:54:ca:db:14: 7c:f2:3b:fe:79:ae:0a:be:03:2e:91:68:41:4b:ad: 44:04:2b:a7:8b:72:3b:77:f4:fe:e1:7f:58:f0:0e: 2d:63:44:1f:b8:ba:b0:d9:e4:b1:9f:da:0b:4b:0d: 5f:87:2c:ae:dd:70:3a:36:21:6a:67:b9:26:0a:14: d0:71:12:45:71:32:4a:c4:11:5a:16:d5:bb:07:e0: 98:76:ce:36:fb:b3:2b:fb:69:e8:79:f4:63:dc:83: 04:7c:7f:b5:59:f0:36:b8:9d:50:4d:1c:08:57:8e: af:e5:bc:5a:30:7b:8e:fd:c2:92:a0:5f:80:ba:5d: e4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:14:D6:5C:20:54:0D:1C:4E:1C:F5:24:5D:38:A5:61:AF:17:68 X509v3 Authority Key Identifier: keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:01:86:0f:00:d2:aa:53:6c:71:8b:d3:a6:69:97:70:21:89: fc:03:ef:38:03:d6:b5:af:3c:27:04:41:6c:70:8c:94:2d:4f: 72:bf:76:cb:32:81:de:f2:f4:74:bf:e6:0b:81:2a:ac:36:f6: d3:ec:8b:3e:90:9e:c1:6a:c5:bd:f0:23:d1:66:74:61:08:e5: 5e:89:8b:50:d9:66:df:c5:f8:34:4c:60:a5:35:07:ff:8e:38: 1b:cd:be:b9:e2:14:e8:7f:eb:db:d6:6f:b6:ba:bf:d5:a2:a2: 75:09:72:13:46:3d:b2:6d:65:f7:cb:11:1d:3a:7e:d9:4a:b7: 24:62:98:61:7a:a6:cb:47:ee:81:14:48:da:d2:f7:68:ae:ab: e3:75:14:b2:39:22:70:13:0d:81:ca:75:75:5c:64:01:b4:ff: 5b:f4:c2:44:b2:c9:47:cc:d8:30:fd:6c:5e:a5:37:39:d2:6d: f7:3f:2d:fd:e9:f6:f0:17:de:ce:52:e9:81:94:aa:9f:dc:e0: 8d:9a:7a:e5:99:58:cc:03:c6:29:b8:d3:86:fa:d2:b0:fc:ed: 04:ba:fb:25:fe:51:55:6c:4c:c1:d1:5f:50:74:b7:9d:ba:26: df:86:be:dd:5a:9e:ea:89:6a:96:b1:0d:f6:ff:7e:b7:90:f6: 34:2b:27:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0flu07xdK0Wtsx3D78ZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4 OTI1MmYwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhjOGJiMTRkNjVjMjA1NDBkMWM0ZTFjZjUyNDVkMzhhNTYxYWYxNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vi0grmkLL2gvdOmMr8jn/Vv6FGW 4ww1iurpTg93M2atBYIj3oiHMEcOlyQKtbAfZoerRxrnlIehQExqhp/3T10hNYXK 6rxSIt0TdYtr3V6V2gES7LNYvECgpyY4lhFGoEBdyoBBuq0Zo+21iovVje6w+hyl KnEUgSChyM8eoYBm81TK2xR88jv+ea4KvgMukWhBS61EBCuni3I7d/T+4X9Y8A4t Y0QfuLqw2eSxn9oLSw1fhyyu3XA6NiFqZ7kmChTQcRJFcTJKxBFaFtW7B+CYds42 +7Mr+2noefRj3IMEfH+1WfA2uJ1QTRwIV46v5bxaMHuO/cKSoF+Aul3kAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi7FNZcIFQNHE4c9SRdOKVhrxdoMB8GA1UdIwQY MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAGGDwDS qlNscYvTpmmXcCGJ/APvOAPWta88JwRBbHCMlC1Pcr92yzKB3vL0dL/mC4EqrDb2 0+yLPpCewWrFvfAj0WZ0YQjlXomLUNlm38X4NExgpTUH/444G82+ueIU6H/r29Zv trq/1aKidQlyE0Y9sm1l98sRHTp+2Uq3JGKYYXqmy0fugRRI2tL3aK6r43UUsjki cBMNgcp1dVxkAbT/W/TCRLLJR8zYMP1sXqU3OdJt9z8t/en28BfezlLpgZSqn9zg jZp65ZlYzAPGKbjThvrSsPztBLr7Jf5RVWxMwdFfUHS3nbom34a+3Vqe6olqlrEN 9v9+t5D2NCsnhA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:15 2025 by rpki-client