This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft File: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft (raw, json) Hash identifier: aGEi0KKtzxDQ9DsvFkQoER9GsISUiKbEu2lB5pcAY6o= Subject key identifier: A4:4D:77:CF:91:25:B6:4F:D8:47:B5:6D:4B:22:C8:FC:1A:0A:D5:2C Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37 Certificate issuer: /CN=0b69087cef600358ef98c1c97da07234dfd0e037 Certificate serial: 019AF61C4ED3032889D1787DD658B57D7C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft Manifest number: 01D4 Signing time: Sun 07 Dec 2025 00:00:41 +0000 Manifest this update: Sun 07 Dec 2025 00:00:41 +0000 Manifest next update: Mon 08 Dec 2025 00:00:41 +0000 Files and hashes: 1: B9IzXLL2ixuUY8NCctMry3Z9SSY.roa (hash: LgY0TUvH+7Vh/0iBbmvFVKw12ZRzdi35NQADfuagyL0=) 2: C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl (hash: IpwUSNyVZ+qK5RiTggeLRfzE7n32Ok2ByVpD4YWixHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:4e:d3:03:28:89:d1:78:7d:d6:58:b5:7d:7c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037 Validity Not Before: Dec 7 00:00:41 2025 GMT Not After : Dec 8 00:00:41 2025 GMT Subject: CN=a44d77cf9125b64fd847b56d4b22c8fc1a0ad52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a1:9e:de:f7:d1:8d:f1:71:d0:13:9a:d3:0c: 38:d3:b6:bd:60:36:95:8a:f4:44:8a:fa:20:55:46: c6:35:be:2e:7c:f0:3f:5e:04:86:ad:6c:b3:f8:26: a6:4e:67:33:a4:c4:0a:42:99:f5:eb:04:8a:e1:99: 78:c5:55:f0:6b:74:85:b6:5a:80:c6:d4:9d:a0:dd: 95:66:57:d3:55:fc:0e:fa:83:08:8d:72:45:f9:17: fd:07:23:f3:3f:8b:85:04:b2:27:16:e6:ee:29:ce: 3a:46:4c:84:4d:a2:68:de:88:3e:8c:48:70:c0:71: 0c:3b:2b:df:00:f4:3a:02:94:85:f4:23:dc:3c:db: 5c:82:75:2b:54:64:b5:2b:39:72:00:8b:bb:c3:74: 38:10:02:de:7a:5a:02:b5:ef:25:07:34:17:69:25: 6c:d0:bd:aa:97:d2:54:15:c7:18:ce:a2:dc:ee:b9: 66:88:69:11:8e:ec:5a:af:68:65:a9:d9:e2:64:5b: 29:fd:46:23:8a:15:c4:8c:a4:f3:9a:cb:9c:a2:33: 5b:38:8a:73:01:33:fc:d3:bc:da:0e:8f:61:ee:d5: 56:8e:22:63:52:56:4b:40:35:c5:c8:73:14:f0:db: c5:67:ad:50:b1:6b:2d:68:eb:22:59:fd:e1:dd:63: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4D:77:CF:91:25:B6:4F:D8:47:B5:6D:4B:22:C8:FC:1A:0A:D5:2C X509v3 Authority Key Identifier: keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:bf:7d:8e:db:fb:a7:15:5f:64:6d:d7:f6:d9:52:49:0f:ae: de:6a:b2:9b:8f:22:1d:61:e9:08:5e:cd:de:5a:ee:42:f5:07: 14:6f:2a:3d:49:1f:01:72:5c:5a:bd:f7:b3:77:3b:89:c5:f0: a7:73:5c:a4:11:60:89:b3:b1:fb:15:79:f3:94:b0:95:d5:74: 6a:b6:e9:db:20:8a:cc:01:e9:79:1f:e5:f0:b4:4c:82:75:d8: 32:a5:1a:db:e9:54:21:e9:27:c0:45:2f:0f:d1:75:0a:dd:97: 96:72:aa:85:9e:af:e6:18:a0:a6:e2:8e:6c:73:ac:13:10:9b: 4d:ac:ee:f9:9a:0a:4d:c2:b3:73:83:7e:66:1f:90:cf:3b:f9: f7:95:9c:94:fe:6a:d9:8c:02:4e:f7:1a:3b:68:ae:14:8c:5f: 4a:ca:82:bd:83:13:13:8b:59:86:2c:85:f1:2e:28:80:94:10: 1b:1f:ff:67:be:db:68:5a:11:e3:e7:cc:86:54:de:8e:b7:2a: f6:77:82:ae:9c:98:e9:53:3e:f8:f2:fc:2e:98:28:6b:f6:31: 33:fd:82:f2:85:6e:e1:bd:4e:56:c3:27:bd:0f:32:60:62:0b: 3d:05:4e:5a:46:bc:08:60:d0:f1:a2:96:33:0d:9c:33:34:59: 48:1c:22:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HE7TAyiJ0Xh91li1fXxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNjkwODdjZWY2MDAzNThlZjk4YzFjOTdkYTA3MjM0ZGZk MGUwMzcwHhcNMjUxMjA3MDAwMDQxWhcNMjUxMjA4MDAwMDQxWjAzMTEwLwYDVQQD EyhhNDRkNzdjZjkxMjViNjRmZDg0N2I1NmQ0YjIyYzhmYzFhMGFkNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qGe3vfRjfFx0BOa0ww407a9YDaV ivREivogVUbGNb4ufPA/XgSGrWyz+CamTmczpMQKQpn16wSK4Zl4xVXwa3SFtlqA xtSdoN2VZlfTVfwO+oMIjXJF+Rf9ByPzP4uFBLInFubuKc46RkyETaJo3og+jEhw wHEMOyvfAPQ6ApSF9CPcPNtcgnUrVGS1KzlyAIu7w3Q4EALeeloCte8lBzQXaSVs 0L2ql9JUFccYzqLc7rlmiGkRjuxar2hlqdniZFsp/UYjihXEjKTzmsucojNbOIpz ATP807zaDo9h7tVWjiJjUlZLQDXFyHMU8NvFZ61QsWstaOsiWf3h3WOllwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRNd8+RJbZP2Ee1bUsiyPwaCtUsMB8GA1UdIwQY MBaAFAtpCHzvYANY75jByX2gcjTf0OA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzJrSWZPOWdBMWp2bU1ISmZhQnlOTl9RNERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ODVlNjEtOWE0OS00NWE5LTkxZjct ZGY4YWRhZDg5N2JmLzEvQzJrSWZPOWdBMWp2bU1ISmZhQnlOTl9RNERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81ODVlNjEtOWE0OS00NWE5LTkxZjctZGY4YWRhZDg5N2Jm LzEvQzJrSWZPOWdBMWp2bU1ISmZhQnlOTl9RNERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL99jtv7 pxVfZG3X9tlSSQ+u3mqym48iHWHpCF7N3lruQvUHFG8qPUkfAXJcWr33s3c7icXw p3NcpBFgibOx+xV585SwldV0arbp2yCKzAHpeR/l8LRMgnXYMqUa2+lUIeknwEUv D9F1Ct2XlnKqhZ6v5higpuKObHOsExCbTazu+ZoKTcKzc4N+Zh+Qzzv595WclP5q 2YwCTvcaO2iuFIxfSsqCvYMTE4tZhiyF8S4ogJQQGx//Z77baFoR4+fMhlTejrcq 9neCrpyY6VM++PL8Lpgoa/YxM/2C8oVu4b1OVsMnvQ8yYGILPQVOWka8CGDQ8aKW Mw2cMzRZSBwipQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:41:26 2025 by rpki-client