This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft File: C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json) Hash identifier: uQ+22HB0py6cYmo+cunAt6jvrhabApTbmI2UnEJfIBE= Subject key identifier: 92:2B:4E:0C:27:0A:B4:E7:B1:D7:CD:31:84:82:13:B3:98:44:61:E9 Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 Certificate issuer: /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Certificate serial: 6C924E25305362F14910FD66DFC651146F45AAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject info access: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft Manifest number: 03D4 Signing time: Fri 05 Dec 2025 14:39:23 +0000 Manifest this update: Fri 05 Dec 2025 14:34:23 +0000 Manifest next update: Sat 06 Dec 2025 15:53:23 +0000 Files and hashes: 1: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: CCqk7EVQGyFcDLfTMrD/8qvnLMOh17NYQVIqLindE1g=) 2: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=) 3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:92:4e:25:30:53:62:f1:49:10:fd:66:df:c6:51:14:6f:45:aa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9 Validity Not Before: Dec 5 14:34:23 2025 GMT Not After : Dec 6 15:53:23 2025 GMT Subject: CN=922B4E0C270AB4E7B1D7CD31848213B3984461E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:25:af:ce:f4:ac:a2:96:ea:e4:93:c6:a7: df:33:87:15:c3:a1:86:fd:f8:23:eb:9e:42:55:8a: 01:be:65:43:4d:dd:be:87:53:73:4d:ca:e9:2c:f1: 4a:f8:72:1b:e9:0f:89:78:77:6c:1c:79:a1:33:7c: c2:25:af:b4:c7:a2:80:d1:12:be:f9:c8:88:fc:62: 74:67:9b:1b:bd:73:c3:c4:a1:d3:47:22:35:c1:d3: aa:5e:f3:3f:24:33:ae:39:f7:66:3d:d5:06:07:db: a1:42:04:70:c2:1c:c0:a3:16:b9:33:3a:55:c2:be: 4d:7c:84:09:93:b8:d3:d2:8b:a7:6f:50:ef:66:75: 03:6c:ba:a6:d0:b3:ec:29:63:a0:63:26:dd:2c:86: 5e:e1:84:7d:be:58:03:1e:91:f7:14:06:32:fc:09: 07:47:b4:88:77:ae:52:6c:0d:d0:83:e1:29:39:cd: e8:89:93:f6:03:21:09:90:e2:a2:94:05:cf:fe:5c: b4:ff:6b:00:f6:20:91:48:ce:9c:d2:10:d9:fe:6a: ac:c6:94:e7:4e:e6:ee:88:38:7a:51:46:46:eb:0c: d5:74:84:b0:1f:22:96:d4:8f:dc:ef:cc:32:a4:a7: cf:22:b6:2f:08:80:b3:1f:ae:5f:b6:19:d7:5c:79: 63:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2B:4E:0C:27:0A:B4:E7:B1:D7:CD:31:84:82:13:B3:98:44:61:E9 X509v3 Authority Key Identifier: keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:a4:a4:4f:cd:74:55:84:ed:0c:aa:26:91:aa:df:df:8f:30: 48:ba:c7:1e:1a:5b:6e:a3:11:fd:e4:1b:fb:14:84:be:f6:ce: bf:ee:4c:24:0f:ed:a4:a9:b8:70:23:c0:0f:27:af:cf:83:85: 7e:d3:d8:31:3c:c6:03:40:ac:83:ce:62:3f:a0:59:f2:d7:3e: 8b:47:30:8e:68:69:59:5f:2e:b3:d5:0d:aa:07:bb:59:76:8d: 32:59:74:85:e1:4d:15:5c:7e:1b:9b:ce:28:91:05:1b:74:81: 87:bd:92:5c:25:28:f6:2a:d6:72:3e:9a:08:25:e6:40:af:24: 07:74:c2:b4:30:d7:00:fe:5c:d0:d6:b5:87:e9:4f:56:a4:f4: cf:de:8f:28:00:2d:8a:50:06:34:1e:91:ec:0f:be:a3:e9:c4: bb:0e:7a:90:b5:31:82:41:35:9f:50:e9:2f:5b:04:82:d2:85: 57:40:3a:26:e3:13:95:cf:e2:22:ec:c3:cf:07:9f:fb:99:1d: 50:22:b7:ba:37:da:d4:f2:98:bd:db:3a:f5:1a:7a:65:e5:4d: 14:e7:9a:2d:dd:8a:7c:84:f2:b2:26:00:60:95:79:66:68:f0: 19:4f:6b:18:55:e1:74:e1:7b:0c:06:ea:fc:82:6d:07:74:82: 3c:52:16:16 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUbJJOJTBTYvFJEP1m38ZRFG9FqtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw NTE0ZGRmOTAeFw0yNTEyMDUxNDM0MjNaFw0yNTEyMDYxNTUzMjNaMDMxMTAvBgNV BAMTKDkyMkI0RTBDMjcwQUI0RTdCMUQ3Q0QzMTg0ODIxM0IzOTg0NDYxRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ECWvzvSsopbq5JPGp98zhxXD oYb9+CPrnkJVigG+ZUNN3b6HU3NNyuks8Ur4chvpD4l4d2wceaEzfMIlr7THooDR Er75yIj8YnRnmxu9c8PEodNHIjXB06pe8z8kM64592Y91QYH26FCBHDCHMCjFrkz OlXCvk18hAmTuNPSi6dvUO9mdQNsuqbQs+wpY6BjJt0shl7hhH2+WAMekfcUBjL8 CQdHtIh3rlJsDdCD4Sk5zeiJk/YDIQmQ4qKUBc/+XLT/awD2IJFIzpzSENn+aqzG lOdO5u6IOHpRRkbrDNV0hLAfIpbUj9zvzDKkp88iti8IgLMfrl+2GddceWMbAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUkitODCcKtOex180xhIITs5hEYekwHwYDVR0j BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDNpKRPzXRVhO0MqiaRqt/fjzBIusceGltu oxH95Bv7FIS+9s6/7kwkD+2kqbhwI8APJ6/Pg4V+09gxPMYDQKyDzmI/oFny1z6L RzCOaGlZXy6z1Q2qB7tZdo0yWXSF4U0VXH4bm84okQUbdIGHvZJcJSj2KtZyPpoI JeZAryQHdMK0MNcA/lzQ1rWH6U9WpPTP3o8oAC2KUAY0HpHsD76j6cS7DnqQtTGC QTWfUOkvWwSC0oVXQDom4xOVz+Ii7MPPB5/7mR1QIre6N9rU8pi92zr1Gnpl5U0U 55ot3Yp8hPKyJgBglXlmaPAZT2sYVeF04XsMBur8gm0HdII8UhYW -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:23 2025 by rpki-client