This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json) Hash identifier: kC83DtHe37a+fgdf2/Tg8T2b1BEhvVSYUgIY80M46gc= Subject key identifier: C7:00:78:F7:A1:2E:3C:13:27:CB:08:B0:56:45:9E:23:F6:EB:2B:12 Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8 Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8 Certificate serial: 019AF164348C1A0BA3BF3A814BF0481D1342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: Z+KoHMG3usZRUzr1htmOwpBO5OLpeaS16TNzPqe4VRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:34:8c:1a:0b:a3:bf:3a:81:4b:f0:48:1d:13:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8 Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=c70078f7a12e3c1327cb08b056459e23f6eb2b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:59:67:60:45:b8:87:8b:c9:a8:3f:d6:32: 13:42:a7:03:9b:56:24:34:dd:60:2a:e6:a0:91:67: 2a:b9:9e:b7:21:b7:4c:b6:f3:f7:d7:99:72:93:7f: 1f:c5:2f:5f:a8:a0:ea:52:e6:33:71:e9:42:07:ee: 6e:0b:66:34:d5:af:71:3f:81:21:f3:43:85:0c:7e: ef:34:c2:7c:c4:f4:46:b9:30:b9:b9:54:18:10:52: dc:09:31:db:e7:ec:e2:d7:b0:22:d6:8a:89:8f:96: d7:24:57:7f:9d:1d:2b:2e:70:a7:9c:4d:80:03:c8: 7a:17:a0:f6:86:89:e1:19:24:82:f2:6f:0f:b5:4e: d3:d0:30:8d:25:b2:bc:28:14:f8:8e:5d:fa:a7:6b: b1:d2:b6:8b:91:d6:d8:8d:75:07:b4:6d:a7:55:e7: d9:fd:4d:38:4e:71:c1:95:b6:a8:d7:af:42:01:5c: d6:1e:02:62:e9:b1:07:33:af:42:f7:3f:a7:5d:6e: 65:7e:23:04:02:9c:f6:ba:7e:b7:fc:f0:b6:8b:a3: 49:c7:6a:a3:67:21:e8:0c:29:31:33:fa:cc:bf:ec: ef:94:99:47:02:e3:c4:df:1a:fc:62:49:1c:80:3a: e2:23:36:8a:fe:be:86:d3:1f:fc:77:06:99:27:9e: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:00:78:F7:A1:2E:3C:13:27:CB:08:B0:56:45:9E:23:F6:EB:2B:12 X509v3 Authority Key Identifier: keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4a:3f:0c:c4:b0:50:c9:83:a0:b3:4a:75:d5:b7:e8:bf:cc: f4:40:9d:98:d4:10:db:16:3c:28:18:72:82:53:a4:ca:37:e6: 53:06:cc:56:0f:61:6c:3e:63:5f:27:73:18:10:46:55:0d:f3: a1:28:fc:b5:5c:74:ba:47:bb:f2:ba:4a:89:4e:8e:cb:18:0e: 27:f4:15:f0:7b:0a:ca:ee:0e:5f:66:94:b5:5a:6e:43:ba:93: 92:e6:be:5a:6d:ad:74:55:c7:61:ab:81:16:31:bb:7d:37:be: 59:bf:e5:c0:09:6a:55:39:63:85:84:2d:82:d8:ae:af:eb:48: b4:9a:55:12:4d:e6:b4:77:1f:b2:23:15:9b:cb:6b:bb:81:42: 6f:60:19:19:13:a2:4e:30:07:39:4c:f0:50:9b:26:d0:c5:9d: 61:d8:95:a0:6e:76:fa:e8:be:16:29:7b:50:54:2e:13:b8:07: a2:59:53:ab:65:79:db:a8:db:01:60:b4:9a:2a:2d:d1:35:5f: 2a:20:65:9e:5e:c0:59:74:14:94:82:ba:8e:30:d2:63:f8:a7: 5d:8c:6a:8e:6e:d1:d1:c8:9e:05:bc:72:b8:41:41:e1:cb:41: be:b6:76:39:bd:65:28:33:eb:48:19:3d:2c:3a:91:07:7d:1b: 24:e4:cd:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDSMGgujvzqBS/BIHRNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNjdkYmEwODcwN2ZlNDBiZDAwMmU5N2FlMzA4NDg2MzI5 MTVkYjgwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD EyhjNzAwNzhmN2ExMmUzYzEzMjdjYjA4YjA1NjQ1OWUyM2Y2ZWIyYjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPhZZ2BFuIeLyag/1jITQqcDm1Yk NN1gKuagkWcquZ63IbdMtvP315lyk38fxS9fqKDqUuYzcelCB+5uC2Y01a9xP4Eh 80OFDH7vNMJ8xPRGuTC5uVQYEFLcCTHb5+zi17Ai1oqJj5bXJFd/nR0rLnCnnE2A A8h6F6D2honhGSSC8m8PtU7T0DCNJbK8KBT4jl36p2ux0raLkdbYjXUHtG2nVefZ /U04TnHBlbao169CAVzWHgJi6bEHM69C9z+nXW5lfiMEApz2un63/PC2i6NJx2qj ZyHoDCkxM/rMv+zvlJlHAuPE3xr8YkkcgDriIzaK/r6G0x/8dwaZJ5754QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcAePehLjwTJ8sIsFZFniP26ysSMB8GA1UdIwQY MBaAFAtn26CHB/5AvQAul64whIYykV24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUt MzhhNWMyYTY1NTRhLzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUtMzhhNWMyYTY1NTRh LzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMko/DMSw UMmDoLNKddW36L/M9ECdmNQQ2xY8KBhyglOkyjfmUwbMVg9hbD5jXydzGBBGVQ3z oSj8tVx0uke78rpKiU6OyxgOJ/QV8HsKyu4OX2aUtVpuQ7qTkua+Wm2tdFXHYauB FjG7fTe+Wb/lwAlqVTljhYQtgtiur+tItJpVEk3mtHcfsiMVm8tru4FCb2AZGROi TjAHOUzwUJsm0MWdYdiVoG52+ui+Fil7UFQuE7gHollTq2V526jbAWC0miot0TVf KiBlnl7AWXQUlIK6jjDSY/inXYxqjm7R0cieBbxyuEFB4ctBvrZ2Ob1lKDPrSBk9 LDqRB30bJOTNzg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:51 2025 by rpki-client