This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft File: C7M4e-bSDUos4TzAkuh_d3uLmVY.mft (raw, json) Hash identifier: YfgqX5KUQxAtCv40Fcj8SoiIgetZ8Xi6RmvVOeOzVNs= Subject key identifier: C5:57:6F:BD:94:B6:96:80:30:2E:C5:B8:7F:37:EF:E9:EA:C6:AF:A3 Authority key identifier: 0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56 Certificate issuer: /CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956 Certificate serial: 019AF087F69703FD32B3BED1FF9F01F56311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft Manifest number: 1235 Signing time: Fri 05 Dec 2025 22:00:33 +0000 Manifest this update: Fri 05 Dec 2025 22:00:33 +0000 Manifest next update: Sat 06 Dec 2025 22:00:33 +0000 Files and hashes: 1: C7M4e-bSDUos4TzAkuh_d3uLmVY.crl (hash: k5ovQ+ftqEi7AmuexYtny1Pv330u1T34i52VQlBMHeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f6:97:03:fd:32:b3:be:d1:ff:9f:01:f5:63:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bb3387be6d20d4a2ce13cc092e87f777b8b9956 Validity Not Before: Dec 5 22:00:33 2025 GMT Not After : Dec 6 22:00:33 2025 GMT Subject: CN=c5576fbd94b69680302ec5b87f37efe9eac6afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:07:77:e1:ea:db:18:0a:eb:1d:38:fd:02: 86:54:7b:6a:fa:b0:d6:f7:12:ca:3c:7e:b6:91:ce: 91:96:02:eb:3b:99:42:ca:7a:f7:98:26:54:ba:eb: 45:5b:f8:d4:8b:d0:dc:78:50:6f:40:60:65:d8:33: bf:94:79:46:1e:0e:9c:c5:eb:92:62:60:d7:c5:4a: ad:91:5d:0b:b3:36:e0:65:8e:b4:17:ce:6c:ef:e3: 80:f3:ef:8a:c9:e2:ab:76:23:44:d8:0b:5b:a1:b2: 6f:17:a2:51:8c:71:5b:53:0e:c4:19:6f:77:8e:d1: ff:16:48:ed:94:dc:56:5a:ab:4e:86:97:c8:74:d4: b9:1e:a9:de:77:bc:cc:de:df:90:5a:d0:38:92:e0: 69:91:10:81:0c:33:e6:10:db:92:56:f2:51:e6:c0: 9c:95:86:6e:6c:8d:0f:5e:66:50:38:9c:34:aa:c0: 75:bf:0d:24:fc:09:dd:c7:08:f1:eb:54:69:f6:1b: 1d:52:15:16:2b:9e:0f:3c:22:da:71:fd:ba:8e:dc: 9e:5d:37:c6:82:7e:db:23:06:6b:ba:15:cb:a1:e7: 15:5b:dc:dc:3a:dc:e8:e1:e1:b4:cb:26:e4:db:63: 2e:8d:ae:21:ae:ae:77:8a:24:c4:1f:4b:57:ae:17: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:57:6F:BD:94:B6:96:80:30:2E:C5:B8:7F:37:EF:E9:EA:C6:AF:A3 X509v3 Authority Key Identifier: keyid:0B:B3:38:7B:E6:D2:0D:4A:2C:E1:3C:C0:92:E8:7F:77:7B:8B:99:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7M4e-bSDUos4TzAkuh_d3uLmVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/ec1ef4-61fe-40b7-a028-4404d7ee7122/1/C7M4e-bSDUos4TzAkuh_d3uLmVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d0:a3:e1:c6:64:fe:bb:a9:62:d5:fd:53:79:2f:9a:df:8a: 53:93:3b:1c:7a:16:60:c7:43:61:72:20:03:14:fd:6c:ff:ab: 55:4e:91:5c:3e:75:42:15:b1:35:68:cf:c1:51:cb:d7:fe:04: 75:d6:d6:95:79:87:0a:6f:c9:24:aa:d9:2e:b6:e3:a6:73:c5: 97:9f:77:69:0b:5c:77:c7:6f:91:13:3a:33:62:84:39:6b:84: 93:11:09:db:3a:c0:4e:e2:02:67:5e:c3:31:02:d3:56:ea:55: c6:5e:7f:5f:b1:51:59:99:b3:ea:77:2a:32:58:ed:a9:d5:4d: f4:68:9d:69:47:5f:b5:6a:c9:ab:f4:8d:b1:92:77:ff:a1:dc: f7:7a:25:64:33:0c:73:74:42:2b:dd:51:91:e4:6c:6d:f2:58: 31:8d:9f:1d:9d:5f:76:ed:3a:02:47:66:33:36:57:55:68:42: a6:8c:53:66:5e:4b:56:f6:a3:6f:61:05:55:26:13:6c:df:da: 06:21:c0:83:66:96:3f:21:a6:99:18:f9:c0:da:cc:41:d0:fc: 2e:59:fe:18:b7:da:06:b2:ea:26:ea:23:07:d0:2a:e5:c6:ac: b9:07:7c:02:4f:81:52:9b:76:41:6c:22:fd:82:ed:2b:f6:d6: 41:81:c0:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/aXA/0ys77R/58B9WMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYjMzODdiZTZkMjBkNGEyY2UxM2NjMDkyZTg3Zjc3N2I4 Yjk5NTYwHhcNMjUxMjA1MjIwMDMzWhcNMjUxMjA2MjIwMDMzWjAzMTEwLwYDVQQD EyhjNTU3NmZiZDk0YjY5NjgwMzAyZWM1Yjg3ZjM3ZWZlOWVhYzZhZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunwHd+Hq2xgK6x04/QKGVHtq+rDW 9xLKPH62kc6RlgLrO5lCynr3mCZUuutFW/jUi9DceFBvQGBl2DO/lHlGHg6cxeuS YmDXxUqtkV0LszbgZY60F85s7+OA8++KyeKrdiNE2AtbobJvF6JRjHFbUw7EGW93 jtH/FkjtlNxWWqtOhpfIdNS5Hqned7zM3t+QWtA4kuBpkRCBDDPmENuSVvJR5sCc lYZubI0PXmZQOJw0qsB1vw0k/Andxwjx61Rp9hsdUhUWK54PPCLacf26jtyeXTfG gn7bIwZruhXLoecVW9zcOtzo4eG0yybk22Muja4hrq53iiTEH0tXrhfwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVXb72UtpaAMC7FuH837+nqxq+jMB8GA1UdIwQY MBaAFAuzOHvm0g1KLOE8wJLof3d7i5lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgt NDQwNGQ3ZWU3MTIyLzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lYzFlZjQtNjFmZS00MGI3LWEwMjgtNDQwNGQ3ZWU3MTIy LzEvQzdNNGUtYlNEVW9zNFR6QWt1aF9kM3VMbVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdCj4cZk /rupYtX9U3kvmt+KU5M7HHoWYMdDYXIgAxT9bP+rVU6RXD51QhWxNWjPwVHL1/4E ddbWlXmHCm/JJKrZLrbjpnPFl593aQtcd8dvkRM6M2KEOWuEkxEJ2zrATuICZ17D MQLTVupVxl5/X7FRWZmz6ncqMljtqdVN9GidaUdftWrJq/SNsZJ3/6Hc93olZDMM c3RCK91RkeRsbfJYMY2fHZ1fdu06AkdmMzZXVWhCpoxTZl5LVvajb2EFVSYTbN/a BiHAg2aWPyGmmRj5wNrMQdD8Lln+GLfaBrLqJuojB9Aq5casuQd8Ak+BUpt2QWwi /YLtK/bWQYHAuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:57 2025 by rpki-client