This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json) Hash identifier: l5mTWm06NxSiddhCF3hjR0KhzPnh/jro9zapVCCIoWY= Subject key identifier: 42:D1:97:39:09:A4:8F:A5:CC:3D:8E:8D:E5:4B:F1:C7:B3:A8:0B:25 Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Certificate serial: 019AF352279029E55069047B33C22DEE33F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft Manifest number: 0C15 Signing time: Sat 06 Dec 2025 11:00:38 +0000 Manifest this update: Sat 06 Dec 2025 11:00:38 +0000 Manifest next update: Sun 07 Dec 2025 11:00:38 +0000 Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=) 2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: K8EWhd4O1ClYZy8keOIY10wUsMlcElZEHcbWuHbG8c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:27:90:29:e5:50:69:04:7b:33:c2:2d:ee:33:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Validity Not Before: Dec 6 11:00:38 2025 GMT Not After : Dec 7 11:00:38 2025 GMT Subject: CN=42d1973909a48fa5cc3d8e8de54bf1c7b3a80b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:0c:fb:e5:a5:6d:3b:78:4f:6a:00:f8:db: 50:6b:d3:11:41:46:4d:91:6c:93:97:ff:5f:40:55: 10:8d:6f:3a:75:b8:41:02:f6:cd:fc:43:dc:70:3c: 11:3c:c7:7f:8a:8b:b3:ee:98:a7:90:83:89:fb:ee: 80:28:4f:69:d9:6b:ba:07:74:31:0a:c3:f1:07:2e: e1:61:fc:85:0e:84:51:70:9e:38:c2:e4:47:71:68: 58:73:6d:b3:3a:d4:e5:1e:4f:29:a0:7b:77:e1:d4: fa:b5:af:6e:a6:67:a8:fd:1c:06:6a:ee:09:b7:3e: 46:99:b5:f4:c4:0c:ca:09:d0:0a:a6:0f:c4:1d:45: 28:04:b8:58:b9:79:3e:fa:9a:08:d8:5c:ff:9e:3a: dd:15:9f:00:10:61:4b:d1:80:78:d8:b1:5f:88:d6: 25:ea:26:33:47:df:1e:73:88:f6:33:0b:34:fe:b8: be:31:7a:20:a3:36:18:3e:ac:a4:d0:42:06:ce:d9: dd:3d:77:60:a8:fd:1c:69:9b:3e:53:ec:d8:6d:00: 6c:b4:b4:08:20:c0:21:65:3c:e8:25:9c:ac:79:d3: 83:93:1a:72:30:63:d6:dd:7a:b2:42:af:f9:5f:aa: 34:9f:83:18:53:fc:71:45:ff:88:18:67:e2:6b:26: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D1:97:39:09:A4:8F:A5:CC:3D:8E:8D:E5:4B:F1:C7:B3:A8:0B:25 X509v3 Authority Key Identifier: keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:de:be:f5:26:f7:2c:ed:5e:68:eb:66:e7:2e:c8:d8:87:c7: 6b:49:ee:8e:88:b8:d2:14:f7:e2:9f:d7:86:25:3d:3d:a4:a5: ad:99:29:07:88:25:bc:35:53:c7:db:21:f7:10:af:49:0c:10: 61:d6:e6:f4:7e:13:bd:de:5a:65:82:ce:69:b9:55:24:2f:7b: 23:aa:a3:6f:3c:fe:af:f6:c8:ea:dc:08:49:b8:68:ed:24:e2: c6:58:1f:90:05:25:2c:b8:b8:a7:42:9d:b9:7f:2c:d7:4c:54: 17:45:7b:a8:bc:0e:e3:6e:ee:b5:7f:12:d6:b5:6a:f6:e1:12: 15:f8:06:07:3b:2c:58:1e:52:a4:ff:5b:ca:7a:49:50:80:73: 2a:a7:87:7d:62:f3:5e:61:0e:e5:77:83:71:d9:ad:5f:5c:31: b9:01:79:11:3b:8a:28:69:15:af:ff:a6:b2:7f:a2:52:9c:dd: e3:dd:4a:e5:9d:02:ea:f0:6b:1b:e4:12:fe:8d:52:d7:f4:ed: bc:6d:ab:4e:82:af:ee:a7:ac:ae:5f:e6:a8:33:60:7c:4c:0d: 6d:88:48:f5:03:f9:95:24:78:ca:60:a6:d4:7b:d0:73:dd:fb: d4:57:10:8c:ab:95:4c:42:11:0d:d7:8c:a6:29:0c:de:d7:78: 5c:89:b8:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUieQKeVQaQR7M8It7jP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0 MzVlY2UwHhcNMjUxMjA2MTEwMDM4WhcNMjUxMjA3MTEwMDM4WjAzMTEwLwYDVQQD Eyg0MmQxOTczOTA5YTQ4ZmE1Y2MzZDhlOGRlNTRiZjFjN2IzYTgwYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj4M++WlbTt4T2oA+NtQa9MRQUZN kWyTl/9fQFUQjW86dbhBAvbN/EPccDwRPMd/iouz7pinkIOJ++6AKE9p2Wu6B3Qx CsPxBy7hYfyFDoRRcJ44wuRHcWhYc22zOtTlHk8poHt34dT6ta9upmeo/RwGau4J tz5GmbX0xAzKCdAKpg/EHUUoBLhYuXk++poI2Fz/njrdFZ8AEGFL0YB42LFfiNYl 6iYzR98ec4j2Mws0/ri+MXogozYYPqyk0EIGztndPXdgqP0caZs+U+zYbQBstLQI IMAhZTzoJZysedODkxpyMGPW3XqyQq/5X6o0n4MYU/xxRf+IGGfiayantwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELRlzkJpI+lzD2OjeVL8cezqAslMB8GA1UdIwQY MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd6+9Sb3 LO1eaOtm5y7I2IfHa0nujoi40hT34p/XhiU9PaSlrZkpB4glvDVTx9sh9xCvSQwQ Ydbm9H4Tvd5aZYLOablVJC97I6qjbzz+r/bI6twISbho7STixlgfkAUlLLi4p0Kd uX8s10xUF0V7qLwO427utX8S1rVq9uESFfgGBzssWB5SpP9bynpJUIBzKqeHfWLz XmEO5XeDcdmtX1wxuQF5ETuKKGkVr/+msn+iUpzd491K5Z0C6vBrG+QS/o1S1/Tt vG2rToKv7qesrl/mqDNgfEwNbYhI9QP5lSR4ymCm1HvQc9371FcQjKuVTEIRDdeM pikM3td4XIm49w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:03 2025 by rpki-client