This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json) Hash identifier: ZNeu/EoPrtkpXVpPDds82Zpbh3ebPuY6WVigMiqFL5w= Subject key identifier: EF:5C:F9:EA:D8:48:47:15:0E:B1:5C:4C:37:14:B7:1E:BC:91:96:C3 Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19 Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319 Certificate serial: 019AF19B176EE4973EAF62CCD40FE9DBD313 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: BOdS8RKSdxiK6w1SaGx1Em8tKd5Z2tuGo7Da1cmYtXI=) 2: h4zrMqfOoefngHFo_c_Z31Wn-uw.roa (hash: rUimB7Pd+YTy8jaYyx7sVXzcYUcWrZdClxDPlBTFsaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:17:6e:e4:97:3e:af:62:cc:d4:0f:e9:db:d3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=ef5cf9ead84847150eb15c4c3714b71ebc9196c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:ed:c8:c4:a9:4d:2f:ed:d2:f5:7d:56:fa: c3:af:3f:4a:97:3c:fb:10:05:79:3d:24:fb:d0:1a: 42:2d:6a:ab:f9:9b:0b:f6:ee:24:ac:23:88:0b:20: be:1e:2b:e8:dd:94:13:6e:7d:54:51:b9:cd:14:fb: 82:d9:2c:39:23:71:bd:45:69:d4:80:1c:55:a8:12: 7b:e2:8b:06:f7:39:cb:7f:77:63:fa:be:24:dc:fa: 45:6f:c8:f5:8f:7e:4a:26:2b:7e:fc:bd:18:ea:fd: 20:a4:59:44:56:88:7a:5d:81:7a:d2:1f:d9:61:03: 17:0f:ee:d8:48:58:bf:0f:2f:7d:5a:c4:96:be:d8: bd:5a:ec:07:38:71:88:f1:f2:aa:cf:d7:df:23:7d: 51:f9:e8:1d:22:53:80:c5:bd:80:8c:fe:12:c7:79: be:92:89:58:2b:91:f0:63:d7:ec:3c:8b:ae:e9:ef: 16:38:c9:66:43:06:80:47:39:a5:92:7d:39:fb:a3: 96:4c:80:3b:4b:fe:74:10:89:74:2f:e8:c2:12:da: 98:52:85:c4:00:61:72:e8:0f:6d:69:6f:0c:af:60: a9:6c:69:25:f1:88:3a:f0:9d:16:12:65:90:78:7f: 8f:54:be:81:7e:7c:ad:69:c3:23:fc:86:43:2f:ff: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5C:F9:EA:D8:48:47:15:0E:B1:5C:4C:37:14:B7:1E:BC:91:96:C3 X509v3 Authority Key Identifier: keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e2:a2:53:bc:e8:0c:e5:1d:09:68:f2:90:41:d5:74:86:db: 7e:d9:e9:1c:8c:9e:39:80:bf:37:bb:55:0c:eb:e7:db:fe:82: 4b:11:aa:bd:34:77:13:a9:d7:37:95:36:f2:2d:ed:d6:40:54: ad:62:92:33:51:2c:12:66:ad:24:ff:b1:d6:e3:3e:ea:9e:92: ea:23:b0:ba:9b:c4:21:d9:d2:4d:f6:fb:90:4f:e0:41:16:da: b7:ad:34:86:9d:d8:0b:cd:91:e6:91:f3:ad:6b:41:39:e6:2c: 54:30:6c:e9:c8:af:80:79:d2:2f:c8:8a:ca:68:a0:34:5b:ab: da:e1:4e:2e:a3:92:e3:16:3e:23:ec:75:88:ac:8b:86:32:bb: b2:8f:a8:9f:12:3d:9b:7d:41:aa:66:0e:39:84:a8:31:52:ba: 1b:db:00:47:4b:f3:df:87:16:66:10:84:4b:0f:7f:f9:6e:b8: 97:53:a6:88:73:3e:b3:45:e9:bb:11:d1:52:0e:04:d5:b9:bd: e9:99:ff:62:ae:62:54:58:df:f2:b2:59:85:97:76:29:5b:13: 02:15:64:75:fa:0f:0d:c7:3f:5e:90:37:b7:24:ac:f4:7f:16: 26:cb:cf:c7:90:99:73:b7:18:56:21:9d:92:e6:a0:62:ae:4b: 1d:34:b8:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxdu5Jc+r2LM1A/p29MTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjJiYmFjYjQ3NGRkNjEwM2U4OTExN2E2MzY3NDU2OTY0 ZGYzMTkwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhlZjVjZjllYWQ4NDg0NzE1MGViMTVjNGMzNzE0YjcxZWJjOTE5NmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LPtyMSpTS/t0vV9VvrDrz9Klzz7 EAV5PST70BpCLWqr+ZsL9u4krCOICyC+Hivo3ZQTbn1UUbnNFPuC2Sw5I3G9RWnU gBxVqBJ74osG9znLf3dj+r4k3PpFb8j1j35KJit+/L0Y6v0gpFlEVoh6XYF60h/Z YQMXD+7YSFi/Dy99WsSWvti9WuwHOHGI8fKqz9ffI31R+egdIlOAxb2AjP4Sx3m+ kolYK5HwY9fsPIuu6e8WOMlmQwaARzmlkn05+6OWTIA7S/50EIl0L+jCEtqYUoXE AGFy6A9taW8Mr2CpbGkl8Yg68J0WEmWQeH+PVL6BfnytacMj/IZDL/+YUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9c+erYSEcVDrFcTDcUtx68kZbDMB8GA1UdIwQY MBaAFAvyu6y0dN1hA+iRF6Y2dFaWTfMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUt ZDZiOTZlODhhNjExLzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9jYmQ0YTctMzk0ZC00YzAzLWJlZDUtZDZiOTZlODhhNjEx LzEvQ19LN3JMUjAzV0VENkpFWHBqWjBWcFpOOHhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuKiU7zo DOUdCWjykEHVdIbbftnpHIyeOYC/N7tVDOvn2/6CSxGqvTR3E6nXN5U28i3t1kBU rWKSM1EsEmatJP+x1uM+6p6S6iOwupvEIdnSTfb7kE/gQRbat600hp3YC82R5pHz rWtBOeYsVDBs6civgHnSL8iKymigNFur2uFOLqOS4xY+I+x1iKyLhjK7so+onxI9 m31BqmYOOYSoMVK6G9sAR0vz34cWZhCESw9/+W64l1OmiHM+s0XpuxHRUg4E1bm9 6Zn/Yq5iVFjf8rJZhZd2KVsTAhVkdfoPDcc/XpA3tySs9H8WJsvPx5CZc7cYViGd kuagYq5LHTS48A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:22 2025 by rpki-client