This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json) Hash identifier: Co7LvAMIxgY04mlWy7vzpmDhISqQYks5KX2k9X910hc= Subject key identifier: DA:50:99:F6:B2:7B:0B:8E:24:0C:D7:9C:E3:A8:76:68:1C:C4:90:75 Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Certificate serial: 019AF42E422B944ADB5155F76BC1212BAFF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:01:03 +0000 Manifest this update: Sat 06 Dec 2025 15:01:03 +0000 Manifest next update: Sun 07 Dec 2025 15:01:03 +0000 Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: 7O5ylJFj7RqJM1Sg/PfHpefCEZMPJSNaHzPRpW55v60=) 2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:42:2b:94:4a:db:51:55:f7:6b:c1:21:2b:af:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Validity Not Before: Dec 6 15:01:03 2025 GMT Not After : Dec 7 15:01:03 2025 GMT Subject: CN=da5099f6b27b0b8e240cd79ce3a876681cc49075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:48:01:ce:4b:a3:99:92:a3:c0:be:4b:5a: d2:d3:a7:75:21:b5:03:d2:ff:6c:6b:ba:e8:bd:72: 34:55:cb:45:b0:40:62:c9:2d:5f:67:43:59:ce:4e: 43:14:62:94:18:85:48:85:5d:48:75:a2:f9:94:bc: 06:f7:cc:b0:11:c2:35:cd:04:aa:9c:7d:a3:c8:ce: d4:bd:3c:f6:a5:85:2a:ad:15:da:f8:39:56:33:31: e5:94:c4:2c:cc:33:14:37:84:2f:52:82:93:de:8f: 52:c4:90:15:26:44:fa:7f:e4:ca:14:4c:69:ad:12: 08:84:06:40:58:7d:39:67:e3:08:e5:e3:38:2a:d9: 26:23:9f:ef:82:9a:8e:7e:25:04:43:9a:12:d8:f0: 23:1e:4b:a3:a3:6b:b1:d3:e1:41:6d:70:b1:9f:22: a8:f1:4c:fa:db:e8:8e:62:78:09:23:66:44:46:aa: c3:bf:53:3f:8a:0b:05:5a:d7:cd:84:66:25:f9:db: df:f5:b5:00:5d:f5:b0:0e:80:64:c5:1f:b9:c1:d5: 04:b3:c6:ca:0d:b4:26:8f:3f:8e:44:86:c0:3c:52: aa:34:dc:94:50:36:c8:a8:e1:19:ad:7d:ba:b8:fd: 7a:81:82:68:20:c8:e8:dc:b1:24:47:ce:c8:e2:57: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:50:99:F6:B2:7B:0B:8E:24:0C:D7:9C:E3:A8:76:68:1C:C4:90:75 X509v3 Authority Key Identifier: keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ab:7d:3e:24:94:ff:d8:6c:c4:98:f8:4f:92:57:99:f4:7c: 4b:bd:62:5d:5f:4d:07:25:4c:b0:2b:ce:9d:e3:29:cf:d5:9d: 65:d1:af:c8:07:8d:9e:77:63:3e:72:c8:37:65:c6:b2:57:c2: 94:5a:3c:2a:69:c1:40:90:32:9d:f7:8f:55:28:59:de:f1:30: c9:e5:4a:9c:f0:6c:41:9f:cb:d3:e2:3e:fe:b2:c2:50:1a:cc: d7:f7:d2:ef:b6:a7:55:ed:a7:90:6e:55:de:82:c6:0d:fb:b3: b4:b8:d1:a3:c9:71:f0:0c:53:63:b1:b9:78:55:25:f7:94:44: 90:14:3c:00:b7:8a:46:68:03:ae:c1:29:99:35:36:77:f9:30: f0:7e:1f:20:37:5e:25:7e:4e:44:32:4c:86:98:1b:6f:78:06: 04:23:19:aa:dd:92:a9:10:38:de:fe:ae:d0:59:31:53:a8:a9: d8:25:6d:66:0b:7e:9d:08:5d:17:8c:fb:da:50:1e:b5:19:df: c9:f6:c0:28:70:a4:ba:19:92:54:25:a7:aa:86:6a:d9:2e:86: 13:9b:c1:db:8f:cb:01:f4:99:6b:5a:65:e9:09:6a:1f:70:93: 42:6d:30:2b:a2:c8:90:c4:79:c2:dc:31:cf:b9:b6:f2:8b:7e: 71:5a:55:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkIrlErbUVX3a8EhK6/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz YWMwNDMwHhcNMjUxMjA2MTUwMTAzWhcNMjUxMjA3MTUwMTAzWjAzMTEwLwYDVQQD EyhkYTUwOTlmNmIyN2IwYjhlMjQwY2Q3OWNlM2E4NzY2ODFjYzQ5MDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHJIAc5Lo5mSo8C+S1rS06d1IbUD 0v9sa7rovXI0VctFsEBiyS1fZ0NZzk5DFGKUGIVIhV1IdaL5lLwG98ywEcI1zQSq nH2jyM7UvTz2pYUqrRXa+DlWMzHllMQszDMUN4QvUoKT3o9SxJAVJkT6f+TKFExp rRIIhAZAWH05Z+MI5eM4KtkmI5/vgpqOfiUEQ5oS2PAjHkujo2ux0+FBbXCxnyKo 8Uz62+iOYngJI2ZERqrDv1M/igsFWtfNhGYl+dvf9bUAXfWwDoBkxR+5wdUEs8bK DbQmjz+ORIbAPFKqNNyUUDbIqOEZrX26uP16gYJoIMjo3LEkR87I4le/vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpQmfayewuOJAzXnOOodmgcxJB1MB8GA1UdIwQY MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUat9PiSU /9hsxJj4T5JXmfR8S71iXV9NByVMsCvOneMpz9WdZdGvyAeNnndjPnLIN2XGslfC lFo8KmnBQJAynfePVShZ3vEwyeVKnPBsQZ/L0+I+/rLCUBrM1/fS77anVe2nkG5V 3oLGDfuztLjRo8lx8AxTY7G5eFUl95REkBQ8ALeKRmgDrsEpmTU2d/kw8H4fIDde JX5ORDJMhpgbb3gGBCMZqt2SqRA43v6u0FkxU6ip2CVtZgt+nQhdF4z72lAetRnf yfbAKHCkuhmSVCWnqoZq2S6GE5vB24/LAfSZa1pl6QlqH3CTQm0wK6LIkMR5wtwx z7m28ot+cVpVzg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:43:00 2025 by rpki-client