This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json) Hash identifier: 1y2/XeVW3YUjMzlRaCT2Zk2WWXtsJbsD8P9f/DrrKc8= Subject key identifier: C8:62:89:31:E7:25:49:0F:4F:F4:B3:BD:21:E9:C8:97:C3:DE:27:F7 Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Certificate serial: 019AF5AF0BB9A84AB2C2DB250D53041D1E31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 22:01:20 +0000 Manifest this update: Sat 06 Dec 2025 22:01:20 +0000 Manifest next update: Sun 07 Dec 2025 22:01:20 +0000 Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: vq6BITey2TWPD3lN/E2ZXxBZn3QGYNHN9+dY8UJUbgg=) 2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:0b:b9:a8:4a:b2:c2:db:25:0d:53:04:1d:1e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Validity Not Before: Dec 6 22:01:20 2025 GMT Not After : Dec 7 22:01:20 2025 GMT Subject: CN=c8628931e725490f4ff4b3bd21e9c897c3de27f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f1:f2:db:58:05:13:dd:46:0c:51:d6:33:1c: 75:18:ca:2d:3d:3c:34:e2:2a:fe:9d:b9:a0:af:a3: be:24:dc:d6:cb:cd:96:ac:ef:57:21:56:c7:af:00: 55:a2:af:72:ec:17:ac:60:5d:ae:a3:5b:34:87:13: c1:2f:9e:3f:02:65:d9:fd:bb:bb:3d:85:e1:0f:e8: 79:aa:0d:55:39:d7:51:4b:9f:9e:4a:fa:2f:f4:29: fa:ff:69:47:f3:4e:5d:a8:5c:f5:9f:31:41:61:3c: 5a:60:f4:0f:6c:fb:7e:f5:91:7c:2b:1d:0e:df:b3: 99:24:db:7d:db:75:ed:2d:a5:ee:ac:db:77:f9:84: 08:a0:00:50:20:4e:30:dc:0c:b8:3e:1b:76:90:46: 5c:9f:51:f2:1a:9b:ba:ba:e9:5a:2e:eb:f2:9f:5a: d4:05:a2:1f:66:52:69:00:e6:04:73:23:f9:13:c6: 4e:5f:8e:16:fc:08:18:b6:4c:9a:d2:6b:54:4d:35: a6:99:d0:70:f3:fa:92:23:ea:27:d8:98:f7:9e:ac: 30:96:7e:93:cd:c5:17:8c:b7:55:c5:da:4d:73:87: 62:15:87:f8:fa:e8:c6:b0:bf:8a:3f:c0:0c:b6:c3: 60:e8:83:b1:86:63:a6:12:97:f0:80:d0:d3:db:0c: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:89:31:E7:25:49:0F:4F:F4:B3:BD:21:E9:C8:97:C3:DE:27:F7 X509v3 Authority Key Identifier: keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:32:23:04:d7:af:9d:35:c7:2b:49:07:7b:57:5b:4c:dd:b4: 6a:09:92:cf:ff:fd:1a:f3:2b:f7:42:71:05:7b:58:cc:0c:95: c4:26:bd:71:27:c9:ea:b3:55:4a:66:e5:62:25:52:55:a5:85: 66:54:9e:62:ad:8d:6d:bd:bb:32:c0:30:07:1e:78:62:f9:39: ed:50:b3:49:ec:8d:2e:b5:3d:ae:0a:11:c2:29:2a:e9:9a:cd: 96:5a:e6:80:9d:b6:e1:d6:b5:d0:06:84:5b:58:52:6b:79:11: e3:ae:c8:d4:d2:e2:47:61:05:4b:0e:12:78:47:5e:7a:39:d8: 17:01:ff:fb:8d:d2:52:1f:bc:73:86:78:52:63:75:80:7a:cf: 5d:b7:a7:28:c5:03:b5:c8:cc:8a:3c:51:5a:92:e4:b2:ba:c2: 14:59:c8:c9:c8:93:08:61:17:98:ee:0a:78:b1:37:fc:58:f6: 92:b1:84:8f:6c:24:b5:55:ac:08:47:47:da:3f:0e:68:96:60: fe:66:8a:1a:01:5c:0c:b7:ea:9b:01:7e:6a:53:23:9c:50:dd: 61:b8:e7:ef:8b:2b:b2:00:2e:c3:fb:7b:c3:a3:9a:26:88:1d: 5c:74:9a:d2:5d:04:a5:57:da:96:7f:e6:43:dd:1c:53:da:e4: 4f:d5:ec:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwu5qEqywtslDVMEHR4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4 NTgyNmUwHhcNMjUxMjA2MjIwMTIwWhcNMjUxMjA3MjIwMTIwWjAzMTEwLwYDVQQD EyhjODYyODkzMWU3MjU0OTBmNGZmNGIzYmQyMWU5Yzg5N2MzZGUyN2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfHy21gFE91GDFHWMxx1GMotPTw0 4ir+nbmgr6O+JNzWy82WrO9XIVbHrwBVoq9y7BesYF2uo1s0hxPBL54/AmXZ/bu7 PYXhD+h5qg1VOddRS5+eSvov9Cn6/2lH805dqFz1nzFBYTxaYPQPbPt+9ZF8Kx0O 37OZJNt923XtLaXurNt3+YQIoABQIE4w3Ay4Pht2kEZcn1HyGpu6uulaLuvyn1rU BaIfZlJpAOYEcyP5E8ZOX44W/AgYtkya0mtUTTWmmdBw8/qSI+on2Jj3nqwwln6T zcUXjLdVxdpNc4diFYf4+ujGsL+KP8AMtsNg6IOxhmOmEpfwgNDT2wx+bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhiiTHnJUkPT/SzvSHpyJfD3if3MB8GA1UdIwQY MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjIjBNev nTXHK0kHe1dbTN20agmSz//9GvMr90JxBXtYzAyVxCa9cSfJ6rNVSmblYiVSVaWF ZlSeYq2Nbb27MsAwBx54Yvk57VCzSeyNLrU9rgoRwikq6ZrNllrmgJ224da10AaE W1hSa3kR467I1NLiR2EFSw4SeEdeejnYFwH/+43SUh+8c4Z4UmN1gHrPXbenKMUD tcjMijxRWpLksrrCFFnIyciTCGEXmO4KeLE3/Fj2krGEj2wktVWsCEdH2j8OaJZg /maKGgFcDLfqmwF+alMjnFDdYbjn74srsgAuw/t7w6OaJogdXHSa0l0EpVfaln/m Q90cU9rkT9XspQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:06 2025 by rpki-client