This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json) Hash identifier: eWTrQjQagbp+lG1kDoBSsICKz6Zhrpb0gVAkiNoZhRk= Subject key identifier: 56:35:1B:6C:3F:E9:5E:CE:FD:6B:62:F7:A7:2D:1A:83:86:BB:CE:D8 Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Certificate serial: 019AF577F874BD318B416912FF7B4D851EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:11 +0000 Manifest this update: Sat 06 Dec 2025 21:01:11 +0000 Manifest next update: Sun 07 Dec 2025 21:01:11 +0000 Files and hashes: 1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: 2AgyBk2ROtir7KiecjCKiQwlXgyJLghErBVUAhy8zxU=) 2: wfSejFWh26iFaDPELsnvR1TSCTM.roa (hash: OW8hsiyWgn6jtKd7S9vMQN1SrD9c05HrY+6z4A8TNNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:f8:74:bd:31:8b:41:69:12:ff:7b:4d:85:1e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Validity Not Before: Dec 6 21:01:11 2025 GMT Not After : Dec 7 21:01:11 2025 GMT Subject: CN=56351b6c3fe95ecefd6b62f7a72d1a8386bbced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:48:55:3e:f3:5e:ae:c4:ba:19:5b:b5:4d: 39:1f:a6:93:6b:8f:34:ce:8d:52:e4:59:09:d9:53: c0:be:13:59:dd:37:e9:f9:29:e3:a3:be:07:57:44: 91:02:90:a0:db:83:6b:d8:4d:e4:d6:91:99:11:26: 38:9a:fc:d4:e5:c9:28:15:e4:44:af:a0:48:6b:e0: f4:12:50:1d:73:59:83:ad:e2:40:b4:ac:1b:ba:9b: 14:df:ca:e4:1e:c4:f2:5e:ed:a2:04:38:3a:f0:0a: 7d:0e:46:de:eb:9b:8e:6c:20:12:f6:47:6d:12:4c: eb:f2:81:db:39:d4:3c:b6:55:bb:88:11:ee:ba:b9: e6:5f:0d:6f:9a:e2:71:fc:ce:8a:07:f5:ab:c7:ab: 7c:f0:d4:ea:b0:de:48:b6:13:9a:f7:4b:2f:e1:31: 64:95:6d:d7:0f:5a:c3:05:58:4d:f5:78:0e:e2:1e: 02:18:0a:c0:33:b2:1d:db:cc:fb:53:fa:3b:5e:39: 83:74:6e:76:06:76:92:e8:f0:76:11:ac:df:f0:17: 15:69:96:da:74:95:f0:5e:a8:57:af:40:43:a3:ca: cd:df:b1:ab:95:c0:8f:25:8b:61:8d:e4:1c:e2:28: d8:02:93:54:2d:f5:a8:03:61:2e:40:2a:0b:08:e4: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:35:1B:6C:3F:E9:5E:CE:FD:6B:62:F7:A7:2D:1A:83:86:BB:CE:D8 X509v3 Authority Key Identifier: keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1d:ee:5d:bc:17:af:fa:3e:62:14:ac:2e:3a:5d:22:6f:e0: d6:31:07:d2:2b:09:80:bc:a9:60:06:4f:70:fe:0c:4a:55:d8: 45:e2:d6:f7:5a:f0:4e:10:86:79:48:09:3c:88:6c:7e:43:c9: b1:bf:57:72:c4:44:dc:01:e5:e3:a0:e4:d2:b3:00:92:09:63: 60:28:58:cf:2c:ae:70:ae:ac:b5:6b:97:70:7e:f2:b4:a2:c1: f0:80:58:91:a5:2e:59:d8:76:77:8c:2b:26:1b:fb:87:38:35: d4:7b:32:f3:ea:7e:86:66:a0:f5:a2:2f:40:46:87:13:83:73: 51:4b:df:45:6b:4e:6b:da:ee:88:d7:ca:7f:6f:5f:cd:ae:a2: 8c:21:c3:cc:eb:0d:50:c2:f6:ab:bc:5a:28:e0:4d:17:a7:a7: d1:8f:03:1f:31:6f:ca:9e:2b:bb:de:65:d9:cd:56:d7:b0:45: 53:3a:95:bc:c4:c7:4a:2e:d5:7d:8a:19:51:83:fc:89:96:26: 2a:4f:d6:b2:5a:ea:d4:0e:77:98:3c:9b:27:35:46:a0:75:4c: 7a:9c:94:eb:8d:27:12:90:5f:91:d1:ad:ab:07:49:5f:92:eb: c6:4d:33:c9:a6:34:89:ab:7b:9b:38:2d:d2:64:f9:2f:89:6a: 26:44:2c:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/h0vTGLQWkS/3tNhR7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi ZjJlMDEwHhcNMjUxMjA2MjEwMTExWhcNMjUxMjA3MjEwMTExWjAzMTEwLwYDVQQD Eyg1NjM1MWI2YzNmZTk1ZWNlZmQ2YjYyZjdhNzJkMWE4Mzg2YmJjZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX9IVT7zXq7EuhlbtU05H6aTa480 zo1S5FkJ2VPAvhNZ3Tfp+Snjo74HV0SRApCg24Nr2E3k1pGZESY4mvzU5ckoFeRE r6BIa+D0ElAdc1mDreJAtKwbupsU38rkHsTyXu2iBDg68Ap9Dkbe65uObCAS9kdt Ekzr8oHbOdQ8tlW7iBHuurnmXw1vmuJx/M6KB/Wrx6t88NTqsN5IthOa90sv4TFk lW3XD1rDBVhN9XgO4h4CGArAM7Id28z7U/o7XjmDdG52BnaS6PB2Eazf8BcVaZba dJXwXqhXr0BDo8rN37GrlcCPJYthjeQc4ijYApNULfWoA2EuQCoLCOSrSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFY1G2w/6V7O/Wti96ctGoOGu87YMB8GA1UdIwQY MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2 LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkB3uXbwX r/o+YhSsLjpdIm/g1jEH0isJgLypYAZPcP4MSlXYReLW91rwThCGeUgJPIhsfkPJ sb9XcsRE3AHl46Dk0rMAkgljYChYzyyucK6stWuXcH7ytKLB8IBYkaUuWdh2d4wr Jhv7hzg11Hsy8+p+hmag9aIvQEaHE4NzUUvfRWtOa9ruiNfKf29fza6ijCHDzOsN UML2q7xaKOBNF6en0Y8DHzFvyp4ru95l2c1W17BFUzqVvMTHSi7VfYoZUYP8iZYm Kk/Wslrq1A53mDybJzVGoHVMepyU640nEpBfkdGtqwdJX5Lrxk0zyaY0iat7mzgt 0mT5L4lqJkQsuQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:22:03 2025 by rpki-client