This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json) Hash identifier: 2d7WwWaVbhTMBCuuC7+QDjp66v4WhC9Od3xetapX/Ec= Subject key identifier: A3:52:19:02:DA:0E:6E:EA:1C:E4:E0:F1:B6:F3:39:B7:A4:F5:BE:16 Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Certificate serial: 019B2664382E97AE651089FA394AE9971D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 09:01:00 +0000 Manifest this update: Tue 16 Dec 2025 09:01:00 +0000 Manifest next update: Wed 17 Dec 2025 09:01:00 +0000 Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: ADjd3dNTU1SQ66qsD7KKTdnhSjFrrGpE/l9d/FP3VNw=) 2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:38:2e:97:ae:65:10:89:fa:39:4a:e9:97:1d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Validity Not Before: Dec 16 09:01:00 2025 GMT Not After : Dec 17 09:01:00 2025 GMT Subject: CN=a3521902da0e6eea1ce4e0f1b6f339b7a4f5be16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:63:d2:69:53:af:00:8f:59:67:ac:7c:33: 47:21:33:d0:c3:fd:bd:44:c0:23:08:13:8e:25:7a: 93:ee:87:89:e5:fc:cd:60:bd:12:9b:02:7f:a6:18: e2:c3:cc:e7:61:be:ea:a9:93:e5:55:56:44:29:a0: c4:16:fb:30:a9:cd:22:a2:01:23:7a:2f:39:19:e2: 6e:e5:c7:8d:2e:14:80:1a:68:ac:24:93:fa:bf:bf: d0:95:93:e9:5b:b3:3c:0e:7f:da:35:db:ca:e3:2d: b7:0f:b3:3e:83:8b:e9:38:2b:ab:46:cc:50:0b:d8: 9d:92:24:b7:0a:53:71:f1:7d:9c:0d:8c:2d:91:c2: c1:5e:2a:ed:6a:d6:d4:b1:16:18:e1:b4:d7:eb:1f: d4:62:95:32:04:e4:bb:65:e2:70:8c:88:bb:21:e9: 6c:cf:7b:02:f3:04:b1:21:cf:eb:66:e3:2b:12:ab: 4d:3b:ee:5e:de:3d:f7:69:38:8e:30:05:5f:e5:60: 74:60:d6:d2:36:d2:61:a7:54:04:52:02:2c:ab:ae: 77:c8:72:d3:43:87:45:76:68:38:d8:3a:1a:f6:85: 61:40:47:75:6f:48:b3:62:af:fa:c6:32:ba:3e:06: c9:84:26:ad:56:c9:6a:9c:f0:7c:2b:41:37:5a:48: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:52:19:02:DA:0E:6E:EA:1C:E4:E0:F1:B6:F3:39:B7:A4:F5:BE:16 X509v3 Authority Key Identifier: keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1e:ec:b8:80:e9:fb:04:d8:4a:97:de:84:69:35:36:44:7a: a3:13:f2:93:d4:a5:c3:56:a3:e4:d3:a4:01:bb:f1:9c:e8:f6: e0:c2:7b:e1:62:01:44:f0:0f:d0:f0:96:f3:02:af:27:64:aa: ca:56:4c:80:b9:07:43:df:1a:6c:8d:1f:16:fe:ba:28:a3:ca: 5a:1b:f8:0e:44:68:a9:54:37:8a:d9:29:fe:25:fd:07:45:4f: 0f:df:d3:8b:f1:52:f2:ba:d6:3b:0a:9b:1e:e6:9e:f8:57:91: 84:54:d7:ac:2e:57:83:52:33:3d:23:31:5d:80:99:90:14:0a: aa:58:34:03:b1:dc:2d:43:61:a0:1b:a4:3d:d2:da:ea:9a:ed: 55:fa:1a:80:b2:eb:8b:59:a7:09:8a:7b:60:37:b6:21:5b:70: 6b:86:cc:85:5d:ef:f0:e2:58:34:9b:f5:e5:6c:86:bd:1d:da: 40:b3:1f:fc:71:9e:35:df:31:71:43:e0:0f:93:64:c9:35:05: eb:33:70:16:54:b5:33:bf:69:99:9c:26:96:e0:80:a0:e7:43: 65:78:d3:8a:ca:f4:e2:bd:4c:da:be:e3:96:96:4a:4a:28:9d: 32:bf:9a:8a:22:eb:44:21:8a:d9:bb:85:99:96:04:c0:08:d9: 7f:19:1d:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZDgul65lEIn6OUrplx0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz YWMwNDMwHhcNMjUxMjE2MDkwMTAwWhcNMjUxMjE3MDkwMTAwWjAzMTEwLwYDVQQD EyhhMzUyMTkwMmRhMGU2ZWVhMWNlNGUwZjFiNmYzMzliN2E0ZjViZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR1j0mlTrwCPWWesfDNHITPQw/29 RMAjCBOOJXqT7oeJ5fzNYL0SmwJ/phjiw8znYb7qqZPlVVZEKaDEFvswqc0iogEj ei85GeJu5ceNLhSAGmisJJP6v7/QlZPpW7M8Dn/aNdvK4y23D7M+g4vpOCurRsxQ C9idkiS3ClNx8X2cDYwtkcLBXirtatbUsRYY4bTX6x/UYpUyBOS7ZeJwjIi7Iels z3sC8wSxIc/rZuMrEqtNO+5e3j33aTiOMAVf5WB0YNbSNtJhp1QEUgIsq653yHLT Q4dFdmg42Doa9oVhQEd1b0izYq/6xjK6PgbJhCatVslqnPB8K0E3WkjTfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNSGQLaDm7qHOTg8bbzObek9b4WMB8GA1UdIwQY MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANB7suIDp +wTYSpfehGk1NkR6oxPyk9Slw1aj5NOkAbvxnOj24MJ74WIBRPAP0PCW8wKvJ2Sq ylZMgLkHQ98abI0fFv66KKPKWhv4DkRoqVQ3itkp/iX9B0VPD9/Ti/FS8rrWOwqb Huae+FeRhFTXrC5Xg1IzPSMxXYCZkBQKqlg0A7HcLUNhoBukPdLa6prtVfoagLLr i1mnCYp7YDe2IVtwa4bMhV3v8OJYNJv15WyGvR3aQLMf/HGeNd8xcUPgD5NkyTUF 6zNwFlS1M79pmZwmluCAoOdDZXjTisr04r1M2r7jlpZKSiidMr+aiiLrRCGK2buF mZYEwAjZfxkd9A== -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:40 2025 by rpki-client