This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json) Hash identifier: gyzD/rxxDZk/7zOakrrf2xudgDlqskIsTZ5Z0fiEETM= Subject key identifier: 28:08:FD:96:61:DB:23:49:07:DA:D1:97:5D:4E:39:FD:B9:FB:C4:7F Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e Certificate serial: 019AF12E49A4A79743DBF2C05A5121721D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft Manifest number: 0A27 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: WgsfsOOqYxiKuAOZHI8QcBQzfql6xgV7iyjuUCah9RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:49:a4:a7:97:43:db:f2:c0:5a:51:21:72:1d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737787cf2a870d91b11369f9d74591957602814e Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=2808fd9661db234907dad1975d4e39fdb9fbc47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b6:f5:6f:d8:15:c7:26:4f:bf:9a:65:a0:6c: e9:69:13:d4:8b:2b:dc:dc:e8:fe:7e:be:9c:5f:a9: fe:b5:65:4c:b2:8b:40:45:0c:48:3a:25:cc:00:39: 4f:00:8e:32:77:b4:ef:7d:c9:a0:d0:2e:69:e1:42: b1:59:10:e5:fc:7f:c9:02:05:fd:cf:af:cb:16:ab: ae:42:8f:5c:51:0c:70:87:a7:43:da:73:34:9f:55: 05:a3:c2:9c:8b:43:76:b6:95:0e:b7:7e:38:27:60: 24:93:43:ee:79:58:74:dd:56:e4:9c:a3:8d:8b:24: 62:8d:94:69:2b:ee:35:90:53:d1:2b:c5:5d:e8:db: 86:ab:9d:29:07:2c:13:95:1c:f7:1b:ec:0e:59:c7: d2:98:d9:c6:02:75:7e:db:3e:80:e9:a1:57:21:a8: 08:2d:c4:29:f9:83:72:05:fa:11:3b:31:aa:47:72: ee:93:e2:af:94:b8:49:09:56:c2:a7:73:6c:3f:6f: 1c:34:b1:87:1a:f0:53:e2:80:8a:16:76:a6:43:ac: 18:a3:09:36:46:dc:ee:47:78:5c:ca:bb:02:b7:3f: 24:c2:17:88:eb:2d:e1:98:d7:00:b0:e7:a2:12:0b: 81:78:3c:85:7d:0a:a7:91:3e:e5:a5:80:c8:b4:f6: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:FD:96:61:DB:23:49:07:DA:D1:97:5D:4E:39:FD:B9:FB:C4:7F X509v3 Authority Key Identifier: keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:96:05:59:22:46:f2:48:8d:5a:51:38:2b:3b:d5:aa:d5:bd: ce:64:72:bc:4a:eb:6c:ee:66:cb:3b:5f:8f:67:dc:b8:41:ab: fc:14:8f:3e:a3:e1:9a:e7:da:b1:64:e3:11:f5:69:96:f9:1f: 4f:13:29:93:4f:07:48:cc:cd:46:43:b4:b0:bc:c9:5a:d0:84: e0:e0:34:d0:89:b2:9c:bd:41:06:9d:70:14:30:99:9a:69:e6: 1f:5d:87:8f:fc:b2:d0:f1:15:a8:a3:78:63:10:08:24:41:04: 4c:0c:e2:9a:e3:d0:8c:08:a0:f9:ad:da:27:c8:31:bd:33:43: f6:9e:3d:da:73:bb:f9:1f:3a:8c:72:5e:ad:35:37:70:af:2f: d6:c9:de:ab:0f:90:04:92:47:0f:bb:49:73:74:b5:d6:5c:d1: 27:49:e5:88:4f:48:90:c4:fd:0c:c5:ac:4a:16:85:b4:a2:98: f0:0e:a3:7c:8c:b5:6c:97:0b:7c:1a:f2:4c:86:6b:59:9b:3e: bd:44:ef:9e:7f:d9:9b:26:48:9e:9b:60:b9:92:db:4d:74:a5: ae:5f:1d:a4:c9:2b:6c:81:01:46:9c:06:8b:03:df:cc:9f:09: a3:aa:ea:94:c9:9f:07:ae:07:e7:c8:dc:0c:c4:71:85:dd:3b: 40:76:27:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkmkp5dD2/LAWlEhch0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzc4N2NmMmE4NzBkOTFiMTEzNjlmOWQ3NDU5MTk1NzYw MjgxNGUwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EygyODA4ZmQ5NjYxZGIyMzQ5MDdkYWQxOTc1ZDRlMzlmZGI5ZmJjNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbb1b9gVxyZPv5ploGzpaRPUiyvc 3Oj+fr6cX6n+tWVMsotARQxIOiXMADlPAI4yd7Tvfcmg0C5p4UKxWRDl/H/JAgX9 z6/LFquuQo9cUQxwh6dD2nM0n1UFo8Kci0N2tpUOt344J2Akk0PueVh03VbknKON iyRijZRpK+41kFPRK8Vd6NuGq50pBywTlRz3G+wOWcfSmNnGAnV+2z6A6aFXIagI LcQp+YNyBfoROzGqR3Luk+KvlLhJCVbCp3NsP28cNLGHGvBT4oCKFnamQ6wYowk2 RtzuR3hcyrsCtz8kwheI6y3hmNcAsOeiEguBeDyFfQqnkT7lpYDItPY0KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgI/ZZh2yNJB9rRl11OOf25+8R/MB8GA1UdIwQY MBaAFHN3h88qhw2RsRNp+ddFkZV2AoFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMt NjJjMDg1ODM0NGU4LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85NGEyNjQtZWEyOS00OTFmLWFjNGMtNjJjMDg1ODM0NGU4 LzEvYzNlSHp5cUhEWkd4RTJuNTEwV1JsWFlDZ1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpYFWSJG 8kiNWlE4KzvVqtW9zmRyvErrbO5myztfj2fcuEGr/BSPPqPhmufasWTjEfVplvkf TxMpk08HSMzNRkO0sLzJWtCE4OA00ImynL1BBp1wFDCZmmnmH12Hj/yy0PEVqKN4 YxAIJEEETAzimuPQjAig+a3aJ8gxvTND9p492nO7+R86jHJerTU3cK8v1sneqw+Q BJJHD7tJc3S11lzRJ0nliE9IkMT9DMWsShaFtKKY8A6jfIy1bJcLfBryTIZrWZs+ vUTvnn/ZmyZInptguZLbTXSlrl8dpMkrbIEBRpwGiwPfzJ8Jo6rqlMmfB64H58jc DMRxhd07QHYnmw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:38 2025 by rpki-client