This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json) Hash identifier: R+v78f1CL+4kxtBGNAzosnBimQmR+z5vf0CY/dvBRvI= Subject key identifier: 16:9E:A1:53:9D:8F:AE:D1:0C:74:03:54:AB:9C:37:8D:20:46:2D:8F Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Certificate serial: 019AF12EEED6174AACF39132C627132C1C39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: VJTgR8PB21hR5xeQtC61boSjKChshe+pdP3Id43DE/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ee:d6:17:4a:ac:f3:91:32:c6:27:13:2c:1c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=169ea1539d8faed10c740354ab9c378d20462d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:58:0a:6c:28:ba:5e:be:b9:e7:ca:12:19: 18:46:52:a3:1c:4d:66:b6:19:fc:ee:d8:c0:e0:94: cf:40:19:a7:fe:aa:85:00:2c:17:92:16:2a:f8:98: 33:3a:72:c0:1e:91:82:12:da:9c:b4:25:9c:b7:cc: c8:c5:84:ab:c5:44:25:07:7e:90:6d:3b:3a:e9:39: 15:0c:b2:28:70:cd:b3:6d:d7:ef:1f:72:6a:08:ba: c7:1f:c6:f0:d4:96:f5:fe:cf:1b:1f:4b:69:9b:23: 5d:fe:d5:dc:79:8d:8a:88:4a:92:22:19:c7:c8:eb: 45:b2:be:3a:0b:d4:2d:e8:79:8d:70:83:e0:3e:56: 3d:df:cd:41:7d:68:1a:9a:86:10:c5:93:11:a4:05: 7f:19:77:36:fd:1d:e0:92:af:5f:4c:16:e6:5b:47: 32:49:e7:8e:1f:d1:74:15:e4:35:23:82:22:03:28: ed:c4:d5:e1:1e:29:64:3e:94:8b:52:30:34:3f:6d: 36:3b:6b:87:0b:28:58:46:b4:e8:e0:ac:77:29:2f: 04:f4:6a:f5:2c:77:a7:9d:dd:c3:49:e9:76:f4:2f: 35:a1:3a:cc:a3:b1:1c:27:d0:ea:42:f2:54:10:64: f5:0e:66:06:00:eb:84:c3:2b:69:1c:e7:27:bd:8c: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:A1:53:9D:8F:AE:D1:0C:74:03:54:AB:9C:37:8D:20:46:2D:8F X509v3 Authority Key Identifier: keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:28:a2:e8:c3:05:17:6b:01:09:59:51:c4:95:a0:9c:4f:17: f2:f7:46:dd:a6:53:34:d7:d4:fd:1d:46:50:f9:b1:e4:16:20: f6:78:0a:80:47:b0:8f:18:cd:a5:ac:38:d5:b6:ce:aa:6b:41: 0b:1a:38:3d:53:af:17:37:0e:a5:28:22:98:00:a6:55:80:3d: ea:2f:e1:1d:3b:ac:59:8e:8a:44:17:b5:91:d4:9e:d5:53:f4: 83:bc:79:49:5f:ec:60:e9:fa:3d:c0:bb:fa:9c:4b:d3:22:e3: 57:8e:5d:1b:d4:65:b5:12:cd:40:e1:ce:68:39:dd:f0:d2:83: 4e:ae:cf:56:7f:0f:36:8a:5b:9f:2c:67:7b:bf:42:94:df:f6: 1c:3d:8e:b6:ca:a7:7f:d4:75:2a:3a:76:b7:86:ff:05:ae:24: e4:2a:95:17:14:ca:78:3b:c1:d8:5e:db:26:d1:27:80:00:ae: 1a:91:a8:2d:51:b6:57:3c:38:f4:7b:62:f8:ac:59:e4:fa:10: 38:35:d1:6d:35:48:ea:74:18:ff:87:c7:d0:59:01:90:10:98: 70:1c:93:59:a1:5e:df:6d:89:ce:a7:1c:73:00:7a:e4:2c:66: 12:ea:3f:b4:ec:c5:7f:0c:fd:53:8f:82:23:11:0c:3f:98:92: d4:60:75:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLu7WF0qs85EyxicTLBw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjMyNGI1YjRjMTNkNzYwNmMzOTJjMzc0ZTM1YmJlNjRh MjRlNTAwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD EygxNjllYTE1MzlkOGZhZWQxMGM3NDAzNTRhYjljMzc4ZDIwNDYyZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqZYCmwoul6+uefKEhkYRlKjHE1m thn87tjA4JTPQBmn/qqFACwXkhYq+JgzOnLAHpGCEtqctCWct8zIxYSrxUQlB36Q bTs66TkVDLIocM2zbdfvH3JqCLrHH8bw1Jb1/s8bH0tpmyNd/tXceY2KiEqSIhnH yOtFsr46C9Qt6HmNcIPgPlY9381BfWgamoYQxZMRpAV/GXc2/R3gkq9fTBbmW0cy SeeOH9F0FeQ1I4IiAyjtxNXhHilkPpSLUjA0P202O2uHCyhYRrTo4Kx3KS8E9Gr1 LHennd3DSel29C81oTrMo7EcJ9DqQvJUEGT1DmYGAOuEwytpHOcnvYx46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaeoVOdj67RDHQDVKucN40gRi2PMB8GA1UdIwQY MBaAFHNjJLW0wT12BsOSw3TjW75kok5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYt ZWFlOGEzMDU3MTU5LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYtZWFlOGEzMDU3MTU5 LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyii6MMF F2sBCVlRxJWgnE8X8vdG3aZTNNfU/R1GUPmx5BYg9ngKgEewjxjNpaw41bbOqmtB Cxo4PVOvFzcOpSgimACmVYA96i/hHTusWY6KRBe1kdSe1VP0g7x5SV/sYOn6PcC7 +pxL0yLjV45dG9RltRLNQOHOaDnd8NKDTq7PVn8PNopbnyxne79ClN/2HD2Otsqn f9R1Kjp2t4b/Ba4k5CqVFxTKeDvB2F7bJtEngACuGpGoLVG2Vzw49Hti+KxZ5PoQ ODXRbTVI6nQY/4fH0FkBkBCYcByTWaFe322JzqcccwB65CxmEuo/tOzFfwz9U4+C IxEMP5iS1GB1oA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:55 2025 by rpki-client