This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json) Hash identifier: fhDFhNpROLum3lpt8bKlT5foypQUyNQ3mjJ1DehmdNc= Subject key identifier: A4:AD:FE:BD:EF:A7:E5:0C:A2:A5:73:01:02:A2:8C:66:B2:9A:47:53 Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Certificate serial: 019AF2E45FFA2F123324F99E04EBB62E6266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 09:00:44 +0000 Manifest this update: Sat 06 Dec 2025 09:00:44 +0000 Manifest next update: Sun 07 Dec 2025 09:00:44 +0000 Files and hashes: 1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: ZHSr6sows1rluT4ZoSraIwIxGDIfKnZQaIly+JrAWgM=) 2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:5f:fa:2f:12:33:24:f9:9e:04:eb:b6:2e:62:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Validity Not Before: Dec 6 09:00:44 2025 GMT Not After : Dec 7 09:00:44 2025 GMT Subject: CN=a4adfebdefa7e50ca2a5730102a28c66b29a4753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:d2:93:02:a2:73:56:98:50:8c:ca:38:ab: d2:60:27:d7:be:d0:bd:a2:45:e8:da:bc:f3:10:cf: 76:a7:e2:1e:44:aa:07:46:99:3b:bc:76:71:53:b1: ad:ba:8c:74:a0:b1:60:a2:90:9e:c0:4c:c6:13:f7: f1:2f:89:fc:8f:f2:3c:f8:a0:37:f2:82:93:44:cd: 18:93:7a:b1:82:a9:fb:3c:f2:fe:ec:89:0b:e0:bb: 63:d3:c5:7f:e1:96:5f:49:ab:8f:13:6b:ca:80:a0: 04:7d:9d:82:37:05:06:be:d3:07:82:05:78:46:22: c6:e8:c2:c5:9a:72:aa:1e:72:a0:1c:34:57:57:59: 17:e7:47:a2:77:c6:b9:2b:00:21:d9:f5:85:bf:9d: 76:da:16:2a:13:f1:dd:37:01:9b:d3:ac:74:49:eb: 5d:d3:17:b2:7a:c1:3f:44:e0:cc:ca:07:6d:a2:76: b2:b0:39:04:eb:78:7d:d0:bd:9a:52:17:b4:ff:50: 33:b3:24:50:30:0f:d3:1c:b5:35:66:8e:6d:ee:5b: ad:c9:93:2a:bd:28:e0:ad:78:04:65:a2:ee:95:76: 36:f2:66:a0:61:ee:b7:17:fd:0c:23:a8:1f:ae:16: 8c:64:a0:36:1d:56:03:6e:db:3c:30:d4:ee:8e:cd: 03:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AD:FE:BD:EF:A7:E5:0C:A2:A5:73:01:02:A2:8C:66:B2:9A:47:53 X509v3 Authority Key Identifier: keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f3:fc:72:23:b1:f7:da:37:59:0b:92:47:7b:5f:10:ee:9a: ee:85:89:9f:3b:92:14:09:43:84:7c:e9:16:04:1b:4b:ae:ba: e0:0c:8d:e5:c0:ea:7a:43:07:2a:98:75:bc:b4:29:5b:fa:d7: a4:73:2e:17:29:15:03:e0:e8:b7:fc:21:83:f7:07:c7:76:c3: 04:14:4e:10:c0:0b:f5:7e:e3:7b:70:17:81:31:d8:b8:1a:f5: bf:91:01:f7:c5:37:40:90:aa:7c:ff:4a:0e:63:a4:9f:0e:e2: bc:c7:0f:e8:66:ab:e4:81:fe:c0:e7:15:86:27:59:73:90:76: d2:84:55:1e:bd:77:f0:ae:bb:5c:0b:09:be:95:2f:b8:12:45: bf:e8:2f:1e:1c:9d:de:d6:ad:4d:1a:ba:78:93:9d:8e:ac:20: 22:0a:b0:a3:c5:10:ff:3a:93:fe:dc:2c:54:af:d6:74:c0:2c: 18:e0:db:54:9c:d3:76:75:b7:07:55:26:34:11:9e:d4:0a:2e: 14:ed:ed:8c:30:ed:51:ef:2a:1c:cb:ee:2f:f1:11:c5:8d:6b: 1c:48:26:c6:05:91:59:b5:7d:8d:e3:ed:23:36:df:8c:8c:38: 1e:45:e6:49:eb:8a:8b:98:2d:37:35:e2:72:9a:72:26:50:91: 80:25:81:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5F/6LxIzJPmeBOu2LmJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy MGI3NTcwHhcNMjUxMjA2MDkwMDQ0WhcNMjUxMjA3MDkwMDQ0WjAzMTEwLwYDVQQD EyhhNGFkZmViZGVmYTdlNTBjYTJhNTczMDEwMmEyOGM2NmIyOWE0NzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wbSkwKic1aYUIzKOKvSYCfXvtC9 okXo2rzzEM92p+IeRKoHRpk7vHZxU7Gtuox0oLFgopCewEzGE/fxL4n8j/I8+KA3 8oKTRM0Yk3qxgqn7PPL+7IkL4Ltj08V/4ZZfSauPE2vKgKAEfZ2CNwUGvtMHggV4 RiLG6MLFmnKqHnKgHDRXV1kX50eid8a5KwAh2fWFv5122hYqE/HdNwGb06x0Setd 0xeyesE/RODMygdtonaysDkE63h90L2aUhe0/1AzsyRQMA/THLU1Zo5t7lutyZMq vSjgrXgEZaLulXY28magYe63F/0MI6gfrhaMZKA2HVYDbts8MNTujs0DMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSt/r3vp+UMoqVzAQKijGaymkdTMB8GA1UdIwQY MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt NWJhZTM3NWNmODVhLzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfP8ciOx 99o3WQuSR3tfEO6a7oWJnzuSFAlDhHzpFgQbS6664AyN5cDqekMHKph1vLQpW/rX pHMuFykVA+Dot/whg/cHx3bDBBROEMAL9X7je3AXgTHYuBr1v5EB98U3QJCqfP9K DmOknw7ivMcP6Gar5IH+wOcVhidZc5B20oRVHr138K67XAsJvpUvuBJFv+gvHhyd 3tatTRq6eJOdjqwgIgqwo8UQ/zqT/twsVK/WdMAsGODbVJzTdnW3B1UmNBGe1Aou FO3tjDDtUe8qHMvuL/ERxY1rHEgmxgWRWbV9jePtIzbfjIw4HkXmSeuKi5gtNzXi cppyJlCRgCWBZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:16 2025 by rpki-client