This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json) Hash identifier: h9EozaVXtIdLeJA8GPBlZ9rStwWx8HvBtvx+uLe5ekw= Subject key identifier: 02:FE:C3:17:B0:BB:AF:18:96:B2:B5:69:46:DC:14:4C:E7:25:6D:67 Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Certificate serial: 019AF3C0A4547864C49E85380BE421CF1886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 13:01:19 +0000 Manifest this update: Sat 06 Dec 2025 13:01:19 +0000 Manifest next update: Sun 07 Dec 2025 13:01:19 +0000 Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: 0O/AUFV6bzLJ+vb8q3flFgsMzHFxEs8cAaZh98+phKM=) 2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a4:54:78:64:c4:9e:85:38:0b:e4:21:cf:18:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Validity Not Before: Dec 6 13:01:19 2025 GMT Not After : Dec 7 13:01:19 2025 GMT Subject: CN=02fec317b0bbaf1896b2b56946dc144ce7256d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fb:1a:5b:f8:91:eb:24:f1:16:5e:2c:98:4c: b0:a7:27:ef:e8:0d:e4:9f:11:c3:71:86:20:b9:fb: 54:c0:46:99:98:ec:dd:6b:76:88:0a:7f:78:fb:0c: 54:66:d9:29:2e:77:7a:73:84:cf:8d:9c:17:80:1f: 92:b6:58:da:fe:da:66:84:02:bd:db:0b:b7:ff:94: a9:51:03:ac:3f:c7:b2:52:dd:dd:4b:d8:2b:b8:3a: 82:5c:22:05:a2:71:85:43:55:3f:88:c3:3f:ee:7a: 7b:e9:bf:40:45:8f:88:9c:b2:00:93:a1:a0:55:3c: 1e:b2:cc:1c:cc:9e:83:05:e7:f1:e8:b2:ac:28:c2: 33:ff:58:dd:e3:92:91:4f:0f:a7:7e:81:6c:b1:eb: ad:ad:9f:cc:0a:93:0b:b3:3a:e7:9d:4e:12:19:1c: 66:93:ec:2f:54:74:81:3c:43:b3:0d:ea:62:bf:95: 23:a8:ad:5a:14:2d:a7:60:36:7c:8e:c7:1a:11:41: 66:b8:e6:5a:c9:4c:46:29:7c:35:e7:1d:54:5b:ef: 83:90:82:cd:32:18:9c:5f:5c:58:18:31:ff:2d:11: 24:8b:fe:9f:20:b6:87:28:09:29:d1:77:fc:89:39: 9c:ff:6e:cc:9b:ab:6b:e1:a8:6b:e3:38:f8:f3:8d: 8c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:C3:17:B0:BB:AF:18:96:B2:B5:69:46:DC:14:4C:E7:25:6D:67 X509v3 Authority Key Identifier: keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:99:cc:c0:c5:b3:9d:a7:20:7b:e1:8e:5e:9b:3b:fd:70:83: 96:2c:1f:f9:83:30:66:82:b5:e4:da:e8:7d:28:8e:ba:58:ba: f6:89:6f:c5:e3:8d:a4:cb:5a:81:fd:0c:ad:70:d4:e6:ba:99: 78:fd:61:40:f9:de:81:28:ae:b5:38:f0:fa:18:da:64:ad:a5: 8c:e1:25:4c:d7:d0:dc:e0:e3:0f:38:32:7a:8f:fe:f6:7c:c7: ea:23:bb:71:38:64:6d:d6:6b:e9:b5:a8:bd:ec:9e:c8:ee:33: e5:c1:8c:be:d7:07:72:28:9f:db:93:e7:c6:73:f8:c4:99:46: 9f:fb:bf:05:03:ac:ce:8b:90:7f:90:17:b4:b7:64:db:b8:ca: 16:c8:f9:80:dc:93:0c:f0:b0:8d:91:36:7f:c4:6a:4d:68:e0: 2e:75:c8:d1:c2:f0:33:f3:95:75:8b:1f:2f:ab:b6:a0:a6:bb: 3f:28:95:82:f8:6f:63:81:b1:be:d8:59:16:5b:65:02:f8:fe: 97:c6:7b:39:57:70:5d:2c:86:8a:4f:24:4c:32:34:dd:6f:14: bb:77:71:26:71:7d:ae:c4:ab:7f:d9:9a:90:c8:32:45:b7:75: 64:ba:8a:d9:bf:cd:c0:ff:93:d2:be:1a:89:a5:94:85:4c:4a: 70:b1:d7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKRUeGTEnoU4C+QhzxiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4 NTgyNmUwHhcNMjUxMjA2MTMwMTE5WhcNMjUxMjA3MTMwMTE5WjAzMTEwLwYDVQQD EygwMmZlYzMxN2IwYmJhZjE4OTZiMmI1Njk0NmRjMTQ0Y2U3MjU2ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovsaW/iR6yTxFl4smEywpyfv6A3k nxHDcYYguftUwEaZmOzda3aICn94+wxUZtkpLnd6c4TPjZwXgB+Stlja/tpmhAK9 2wu3/5SpUQOsP8eyUt3dS9gruDqCXCIFonGFQ1U/iMM/7np76b9ARY+InLIAk6Gg VTwesswczJ6DBefx6LKsKMIz/1jd45KRTw+nfoFsseutrZ/MCpMLszrnnU4SGRxm k+wvVHSBPEOzDepiv5UjqK1aFC2nYDZ8jscaEUFmuOZayUxGKXw15x1UW++DkILN MhicX1xYGDH/LREki/6fILaHKAkp0Xf8iTmc/27Mm6tr4ahr4zj4842M8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL+wxewu68YlrK1aUbcFEznJW1nMB8GA1UdIwQY MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5nMwMWz nacge+GOXps7/XCDliwf+YMwZoK15NrofSiOuli69olvxeONpMtagf0MrXDU5rqZ eP1hQPnegSiutTjw+hjaZK2ljOElTNfQ3ODjDzgyeo/+9nzH6iO7cThkbdZr6bWo veyeyO4z5cGMvtcHciif25PnxnP4xJlGn/u/BQOszouQf5AXtLdk27jKFsj5gNyT DPCwjZE2f8RqTWjgLnXI0cLwM/OVdYsfL6u2oKa7PyiVgvhvY4GxvthZFltlAvj+ l8Z7OVdwXSyGik8kTDI03W8Uu3dxJnF9rsSrf9makMgyRbd1ZLqK2b/NwP+T0r4a iaWUhUxKcLHXQg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:27 2025 by rpki-client