This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json) Hash identifier: TTw5zRF+qSczkLQ+ikUdfjW9NrORUyS0ueF4jJk7Y8s= Subject key identifier: 13:C1:64:36:39:B5:31:42:78:92:AD:9C:1C:33:0F:D2:31:F5:37:AA Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Certificate serial: 019AF12E1CC03B2C17AB24C200584DD182A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft Manifest number: 16EE Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: grYl/8Pw4PxydNbGSUl8U++h+c+DGXhj8+gzqI87xVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1c:c0:3b:2c:17:ab:24:c2:00:58:4d:d1:82:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=13c1643639b531427892ad9c1c330fd231f537aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:74:df:37:b7:74:07:34:d4:ce:29:00:11:ea: 5f:41:ac:00:61:1d:66:51:98:11:07:be:83:d7:ca: ed:0b:37:f7:e2:43:6b:09:98:b5:85:02:35:8a:19: bf:31:7e:cb:c4:08:8c:f7:ca:97:52:50:fe:d7:bd: 57:bb:1b:70:d2:07:60:82:75:8e:18:db:9d:03:e1: 8f:ae:53:ad:f0:bb:f0:2e:b4:99:39:50:43:3b:79: 3d:ba:50:38:2d:27:20:7d:30:dc:ce:b9:a8:af:2a: ef:ab:be:87:f3:66:98:98:f8:09:7d:f2:d1:6d:cf: 42:95:54:67:e8:c4:d7:b0:dd:98:98:a2:ea:a1:82: e9:ee:21:c9:d0:8a:86:0b:61:17:58:a3:7e:fd:c4: 79:f3:1f:56:76:1a:a1:5c:2a:6c:c0:0f:df:17:13: ca:a4:9f:08:1c:f9:c6:5f:b9:be:9c:da:93:b3:0f: 1d:8a:88:31:1b:1b:47:0e:0e:5c:b9:95:19:f9:14: ae:6c:39:c8:62:59:15:04:cc:d4:93:f3:0a:e5:0b: b9:dd:a7:1d:49:f5:39:04:5b:83:12:68:fa:c4:b3: e0:1a:9d:e8:e2:78:4f:13:e8:bb:d4:05:b9:bb:38: 3e:a8:fb:1c:39:57:cc:17:97:c4:4b:fd:ee:7f:e0: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C1:64:36:39:B5:31:42:78:92:AD:9C:1C:33:0F:D2:31:F5:37:AA X509v3 Authority Key Identifier: keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e3:1f:4c:00:ce:87:49:ad:bc:55:72:45:73:37:ca:33:71: 84:f1:cb:34:ee:af:03:d3:0f:f0:c4:f7:3f:55:3d:60:f7:8b: a7:28:66:7c:3e:88:61:11:fb:ab:a7:82:42:7c:dd:7a:d6:2f: 16:90:30:19:43:7c:a3:0d:a1:09:7a:ce:0d:2a:4b:73:38:69: 85:30:c2:29:e4:bd:85:7c:2b:e5:11:d8:35:e7:7d:ce:58:d5: ca:be:a5:a4:33:e4:1e:37:bb:f2:82:11:7e:c4:4f:03:17:b9: 39:7e:25:95:09:e0:cf:81:a6:57:f2:4f:f4:a9:88:13:6d:4f: 0d:bf:b7:29:94:35:19:41:45:a5:6b:9b:7f:6e:74:24:3f:bf: 0f:5c:bf:be:b7:d9:6f:d2:7c:8e:ef:75:a5:f0:dc:33:3d:48: 4f:e3:86:d4:e6:dc:71:e7:43:71:3d:fb:70:30:0e:4e:92:70: df:01:dc:eb:43:8e:dc:8a:f0:3f:3f:d9:80:d9:30:92:c0:1b: 5e:10:25:03:d8:fd:17:3b:40:7f:59:53:a4:26:bd:4e:ad:41: 33:a0:58:4b:ef:53:d5:77:6d:a0:f9:0d:e8:9b:3a:4d:7d:38: 49:8c:eb:bc:8b:7f:db:0b:d4:ac:06:da:33:1b:3e:45:2c:6b: 73:68:f6:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhzAOywXqyTCAFhN0YKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk MzI1ZDkwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD EygxM2MxNjQzNjM5YjUzMTQyNzg5MmFkOWMxYzMzMGZkMjMxZjUzN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13TfN7d0BzTUzikAEepfQawAYR1m UZgRB76D18rtCzf34kNrCZi1hQI1ihm/MX7LxAiM98qXUlD+171Xuxtw0gdggnWO GNudA+GPrlOt8LvwLrSZOVBDO3k9ulA4LScgfTDczrmoryrvq76H82aYmPgJffLR bc9ClVRn6MTXsN2YmKLqoYLp7iHJ0IqGC2EXWKN+/cR58x9WdhqhXCpswA/fFxPK pJ8IHPnGX7m+nNqTsw8diogxGxtHDg5cuZUZ+RSubDnIYlkVBMzUk/MK5Qu53acd SfU5BFuDEmj6xLPgGp3o4nhPE+i71AW5uzg+qPscOVfMF5fES/3uf+DwpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPBZDY5tTFCeJKtnBwzD9Ix9TeqMB8GA1UdIwQY MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveMfTADO h0mtvFVyRXM3yjNxhPHLNO6vA9MP8MT3P1U9YPeLpyhmfD6IYRH7q6eCQnzdetYv FpAwGUN8ow2hCXrODSpLczhphTDCKeS9hXwr5RHYNed9zljVyr6lpDPkHje78oIR fsRPAxe5OX4llQngz4GmV/JP9KmIE21PDb+3KZQ1GUFFpWubf250JD+/D1y/vrfZ b9J8ju91pfDcMz1IT+OG1ObccedDcT37cDAOTpJw3wHc60OO3IrwPz/ZgNkwksAb XhAlA9j9FztAf1lTpCa9Tq1BM6BYS+9T1XdtoPkN6Js6TX04SYzrvIt/2wvUrAba Mxs+RSxrc2j2Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:37 2025 by rpki-client