This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft File: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json) Hash identifier: mKUItUL+WsnwHHtqqgteajspxv3sDVfQ6/vofUKkME0= Subject key identifier: A8:56:50:AB:89:68:9B:6D:E6:3C:87:79:CE:91:E3:53:84:F2:45:89 Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3 Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3 Certificate serial: 019B454A7C1B0A134330F646A58CE79043D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft Manifest number: 175D Signing time: Mon 22 Dec 2025 09:01:07 +0000 Manifest this update: Mon 22 Dec 2025 09:01:07 +0000 Manifest next update: Tue 23 Dec 2025 09:01:07 +0000 Files and hashes: 1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: 7XL0irkdxZ4L1r4F3rzQ2rio7eBSMRJYAj6mwYp8d6o=) 2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:7c:1b:0a:13:43:30:f6:46:a5:8c:e7:90:43:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3 Validity Not Before: Dec 22 09:01:07 2025 GMT Not After : Dec 23 09:01:07 2025 GMT Subject: CN=a85650ab89689b6de63c8779ce91e35384f24589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:27:b6:d0:b7:2d:fa:47:da:6e:fa:51:92: 2d:98:5d:be:35:56:9f:75:ce:32:fa:6a:67:86:53: 74:d1:28:6d:4f:0c:a1:bf:28:a6:6f:50:e0:ef:ca: c9:c4:97:42:b5:59:25:1d:c3:43:fb:8f:2b:49:87: b0:e4:e0:f2:5c:0a:8a:e7:17:c6:7a:86:fa:58:a6: ba:53:d6:0a:60:fb:1f:f7:d9:cb:4c:3b:9e:0f:ce: 7c:ff:de:e0:c0:9d:7f:d2:c8:94:a5:17:d2:cf:c4: 9b:68:53:2d:bc:0a:2f:ca:0c:bd:98:82:05:87:fe: 15:ba:70:a6:b1:9b:71:eb:7a:a4:a1:3c:2f:b4:79: 5f:bf:40:2e:a6:d0:bb:7f:02:80:1d:38:73:d9:63: 6c:d0:89:82:a2:fb:48:4e:93:b3:df:dc:41:1d:0b: b6:ab:f8:5c:11:fa:26:8e:7e:f4:8b:00:66:13:9d: 22:a4:7d:a8:a5:82:4a:5b:d4:06:3f:06:e1:19:31: 62:28:25:6f:1b:1e:2d:28:a0:a1:19:90:f0:06:c1: 64:5f:8b:c0:91:01:53:c1:cf:2b:73:d3:53:03:36: 25:20:44:d0:a8:93:86:cc:a2:de:a6:c1:ec:43:09: 81:26:2a:4a:30:78:d6:3e:7e:ef:15:4b:d7:d6:4a: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:56:50:AB:89:68:9B:6D:E6:3C:87:79:CE:91:E3:53:84:F2:45:89 X509v3 Authority Key Identifier: keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8c:da:15:a3:bf:bf:34:ee:53:6b:7b:86:18:46:ee:0e:cd: 5a:00:46:30:0a:e7:95:29:4c:69:51:b6:34:4d:37:c7:21:b0: 3a:34:04:56:46:96:89:21:95:a1:07:2a:47:e3:bf:0e:91:4d: fa:13:3a:95:d6:5b:da:81:68:09:b3:98:53:3b:40:45:dd:9b: 34:ef:98:7c:3e:1f:3c:cd:c8:7e:44:8a:5b:09:c9:45:39:6b: 93:fb:f2:69:17:68:1f:05:75:66:fc:ca:42:f3:0a:f6:5b:9c: e5:4f:7e:60:78:c1:c4:ce:a8:39:1d:d4:d1:c4:a6:49:69:f6: e0:cb:11:22:3c:75:ba:61:18:c6:a0:e1:7a:34:09:78:df:a3: c8:7f:2a:3c:0a:45:e8:aa:78:0d:20:c3:d1:d9:18:bd:e3:40: c6:c6:93:ce:68:31:85:d5:95:65:28:8a:0e:2c:e9:8b:03:58: 26:0c:d1:fa:51:f9:19:1c:37:e3:08:cd:c4:68:42:6f:f7:2a: a6:29:36:f9:43:6a:10:10:27:f1:4b:e9:27:e6:40:3e:14:04: fc:12:91:0b:92:53:60:36:d9:58:10:45:1a:50:8d:a8:5a:36: e8:cc:14:69:be:7d:10:de:ae:5f:4e:b7:4d:71:53:49:83:80: 1b:ea:1d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSnwbChNDMPZGpYznkEPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGUyMGM0OGU4OTczYzMzMWUzM2NlNTUxOTVhMzIxNzcz ZjBhYzMwHhcNMjUxMjIyMDkwMTA3WhcNMjUxMjIzMDkwMTA3WjAzMTEwLwYDVQQD EyhhODU2NTBhYjg5Njg5YjZkZTYzYzg3NzljZTkxZTM1Mzg0ZjI0NTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYYnttC3LfpH2m76UZItmF2+NVaf dc4y+mpnhlN00ShtTwyhvyimb1Dg78rJxJdCtVklHcND+48rSYew5ODyXAqK5xfG eob6WKa6U9YKYPsf99nLTDueD858/97gwJ1/0siUpRfSz8SbaFMtvAovygy9mIIF h/4VunCmsZtx63qkoTwvtHlfv0AuptC7fwKAHThz2WNs0ImCovtITpOz39xBHQu2 q/hcEfomjn70iwBmE50ipH2opYJKW9QGPwbhGTFiKCVvGx4tKKChGZDwBsFkX4vA kQFTwc8rc9NTAzYlIETQqJOGzKLepsHsQwmBJipKMHjWPn7vFUvX1kppAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhWUKuJaJtt5jyHec6R41OE8kWJMB8GA1UdIwQY MBaAFAuOIMSOiXPDMeM85VGVoyF3PwrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQt YTVhZjkzN2ZiYzA1LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80YTYxM2EtMzFlZi00YTczLThkYTQtYTVhZjkzN2ZiYzA1 LzEvQzQ0Z3hJNkpjOE14NHp6bFVaV2pJWGNfQ3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIzaFaO/ vzTuU2t7hhhG7g7NWgBGMArnlSlMaVG2NE03xyGwOjQEVkaWiSGVoQcqR+O/DpFN +hM6ldZb2oFoCbOYUztARd2bNO+YfD4fPM3IfkSKWwnJRTlrk/vyaRdoHwV1ZvzK QvMK9luc5U9+YHjBxM6oOR3U0cSmSWn24MsRIjx1umEYxqDhejQJeN+jyH8qPApF 6Kp4DSDD0dkYveNAxsaTzmgxhdWVZSiKDizpiwNYJgzR+lH5GRw34wjNxGhCb/cq pik2+UNqEBAn8UvpJ+ZAPhQE/BKRC5JTYDbZWBBFGlCNqFo26MwUab59EN6uX063 TXFTSYOAG+odoQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:55:03 2025 by rpki-client