This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json) Hash identifier: 14GXIt7Ei8ebLp78g+nH2/gTIl3HCvobobRd2eXpTTw= Subject key identifier: 43:C4:18:A9:49:03:92:D9:FC:1B:10:88:9B:C9:1A:C3:D1:48:B7:FF Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de Certificate serial: 019AF08870F5469F7DF5D64E7CBEC5A67224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 22:01:04 +0000 Manifest this update: Fri 05 Dec 2025 22:01:04 +0000 Manifest next update: Sat 06 Dec 2025 22:01:04 +0000 Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: U29xdYVLCZ9PoiKmK9U1CkqcaZD6BXt1DrLRvIbdNEc=) 2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:70:f5:46:9f:7d:f5:d6:4e:7c:be:c5:a6:72:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de Validity Not Before: Dec 5 22:01:04 2025 GMT Not After : Dec 6 22:01:04 2025 GMT Subject: CN=43c418a9490392d9fc1b10889bc91ac3d148b7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f2:26:98:cb:87:27:50:df:5b:12:88:2d:38: 0a:d1:89:87:68:03:04:9e:16:20:3a:d7:ec:76:68: 1a:0b:d8:d7:4d:83:5b:7b:b4:f4:68:5d:47:3f:ea: 56:17:cf:e1:3f:f0:45:7e:d9:e3:7c:36:7a:6a:16: e5:a9:e3:d3:20:76:55:f5:dc:74:0d:eb:70:c5:e9: b6:2b:5f:69:17:30:ec:c5:56:86:f6:6e:e3:1d:34: 8f:cc:95:57:42:92:61:d0:f4:13:05:b9:59:dd:49: 27:b7:bc:bd:eb:44:ce:3c:98:14:8c:24:ae:97:4e: 86:4f:07:68:8e:3e:e3:57:bd:52:e8:bf:b8:11:a4: 2e:6e:cb:ef:a8:18:b0:7c:08:77:05:17:cb:e2:37: 64:e6:f4:e7:c6:cc:ae:68:ab:84:6c:55:0f:4a:2c: ec:13:65:df:e4:d2:6f:db:3c:c0:7e:01:84:f8:16: ae:e3:a2:7e:1c:68:28:ee:15:88:a3:ac:62:31:66: 79:5a:ae:ff:f8:a4:87:5e:c7:37:fa:3e:92:b3:ef: 67:aa:3d:e5:f3:f3:ce:14:95:32:ee:72:6b:10:a1: f6:b3:6d:ab:39:b4:64:d0:5e:89:20:f2:ce:1a:11: 60:3d:28:18:53:d5:0b:9b:03:d1:ca:10:98:86:64: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C4:18:A9:49:03:92:D9:FC:1B:10:88:9B:C9:1A:C3:D1:48:B7:FF X509v3 Authority Key Identifier: keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:6c:c6:f0:79:e5:23:b6:1a:cb:4e:bc:dd:44:df:9f:b3:14: 70:d2:ed:21:b1:5a:d9:cb:8a:b5:65:a0:82:da:a1:3a:7d:0a: bd:07:eb:8f:cb:a4:ac:ac:6a:8d:83:6f:6c:76:c5:ab:52:26: ac:bb:e0:5e:e3:61:eb:22:6c:26:f9:6f:3f:bb:2c:9d:a2:ba: 27:34:05:97:10:60:43:c7:bf:af:f7:3c:6b:68:39:32:65:ce: c4:76:2f:be:f8:fa:2f:9e:13:00:f4:f7:5f:53:6f:08:ca:3d: b9:93:ab:8e:e0:5e:bd:ce:46:8a:16:1c:37:db:cb:cc:5a:7c: cd:97:b2:64:32:1f:39:30:08:bd:48:61:48:d5:cf:d2:55:c4: cf:2b:ce:d3:dc:88:2d:3d:2f:d0:0e:e1:b8:5c:76:1f:f7:6b: bb:59:66:80:bb:e8:5c:59:eb:c0:35:a5:05:9a:d1:f1:94:bf: f8:e9:2c:df:b8:d5:1d:c8:1c:4a:df:b1:44:5b:13:ab:a4:60: 8d:a0:7e:6d:a2:2d:73:d6:27:ba:d1:d3:05:32:27:ca:1e:60: b4:51:07:ff:9d:87:01:d3:b6:29:67:b7:b3:0c:ee:ae:b6:7c: 68:fa:f8:ed:aa:f5:70:16:57:80:5c:cc:a3:f3:72:b3:f6:ac: 0b:62:bb:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHD1Rp999dZOfL7FpnIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl Y2E4ZGUwHhcNMjUxMjA1MjIwMTA0WhcNMjUxMjA2MjIwMTA0WjAzMTEwLwYDVQQD Eyg0M2M0MThhOTQ5MDM5MmQ5ZmMxYjEwODg5YmM5MWFjM2QxNDhiN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ImmMuHJ1DfWxKILTgK0YmHaAME nhYgOtfsdmgaC9jXTYNbe7T0aF1HP+pWF8/hP/BFftnjfDZ6ahblqePTIHZV9dx0 Detwxem2K19pFzDsxVaG9m7jHTSPzJVXQpJh0PQTBblZ3Uknt7y960TOPJgUjCSu l06GTwdojj7jV71S6L+4EaQubsvvqBiwfAh3BRfL4jdk5vTnxsyuaKuEbFUPSizs E2Xf5NJv2zzAfgGE+Bau46J+HGgo7hWIo6xiMWZ5Wq7/+KSHXsc3+j6Ss+9nqj3l 8/POFJUy7nJrEKH2s22rObRk0F6JIPLOGhFgPSgYU9ULmwPRyhCYhmQOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPEGKlJA5LZ/BsQiJvJGsPRSLf/MB8GA1UdIwQY MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4 LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWzG8Hnl I7Yay0683UTfn7MUcNLtIbFa2cuKtWWggtqhOn0KvQfrj8ukrKxqjYNvbHbFq1Im rLvgXuNh6yJsJvlvP7ssnaK6JzQFlxBgQ8e/r/c8a2g5MmXOxHYvvvj6L54TAPT3 X1NvCMo9uZOrjuBevc5GihYcN9vLzFp8zZeyZDIfOTAIvUhhSNXP0lXEzyvO09yI LT0v0A7huFx2H/dru1lmgLvoXFnrwDWlBZrR8ZS/+Oks37jVHcgcSt+xRFsTq6Rg jaB+baItc9YnutHTBTInyh5gtFEH/52HAdO2KWe3swzurrZ8aPr47ar1cBZXgFzM o/Nys/asC2K7mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:16 2025 by rpki-client