This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json) Hash identifier: Vbnk0ykJni7YbV+ZwDOW4PlvWdvSbDOIUzx+pzyGmaI= Subject key identifier: 08:5D:8E:95:4B:9D:79:33:73:D1:79:7C:6A:83:BE:BB:4E:CB:6F:B8 Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98 Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98 Certificate serial: 019B533D306E434F7ADE8F717E91CCD5A4CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 02:01:17 +0000 Manifest this update: Thu 25 Dec 2025 02:01:17 +0000 Manifest next update: Fri 26 Dec 2025 02:01:17 +0000 Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=) 2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: oE/pSvkXHxJ/Ubu18D6W9tI4Ki9Y+YKV0An57q1L2xQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:30:6e:43:4f:7a:de:8f:71:7e:91:cc:d5:a4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98 Validity Not Before: Dec 25 02:01:17 2025 GMT Not After : Dec 26 02:01:17 2025 GMT Subject: CN=085d8e954b9d793373d1797c6a83bebb4ecb6fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:5f:9a:34:c6:3a:9e:3a:84:66:04:6e:8c: 80:f6:7f:ea:de:3b:ee:93:56:a1:29:6a:aa:af:d4: 9c:48:a0:bc:32:35:e2:0e:0a:bd:70:d3:c4:98:47: f1:50:98:07:8e:69:ea:68:9a:fa:e0:ff:d8:f3:78: 9d:33:02:05:b0:e5:46:f1:7a:cd:9b:e3:a1:fa:7d: 9d:2d:8a:53:ab:74:d9:4c:af:fd:8b:26:30:cb:a0: 9e:ee:99:65:45:e1:2e:c8:c9:7e:2e:bb:75:0f:79: 96:88:ca:b4:b8:a7:5f:e0:f5:3f:7b:66:ca:ec:b2: d2:d2:46:a1:5f:54:c6:8f:6a:52:f8:cb:26:18:aa: f2:55:cd:fd:50:1f:a0:15:9e:ef:73:ca:02:ea:8a: e7:78:e5:90:9f:46:37:03:3e:1a:8a:17:24:84:c5: 53:d3:c8:f2:48:ce:f1:06:3d:f7:3a:7d:33:18:45: 8b:31:02:05:e5:5b:c5:32:0b:83:7b:4d:22:e1:61: 3f:e9:d8:61:e3:3a:12:89:36:30:72:46:97:35:b1: a2:70:40:5e:d5:73:5b:2c:81:9d:98:15:ee:d5:a4: e6:e2:db:81:ff:78:e7:a3:17:15:25:5d:24:d0:43: 9e:72:b7:fa:dd:fa:47:ab:00:dc:ac:c4:a2:3d:c0: 81:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5D:8E:95:4B:9D:79:33:73:D1:79:7C:6A:83:BE:BB:4E:CB:6F:B8 X509v3 Authority Key Identifier: keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ae:28:43:53:8d:07:ca:98:23:93:35:1d:b4:45:ed:fe:80: c0:42:be:62:06:6f:79:ec:bb:03:6f:a9:67:94:52:bf:77:6d: 08:dc:5a:f9:c4:6d:44:c1:47:59:82:0a:aa:57:70:86:78:2c: 3e:27:4c:bf:a5:aa:1d:c0:90:d5:96:a6:71:01:70:ed:56:8b: 5e:e0:e6:9f:69:cc:57:09:a4:63:f2:71:f8:69:4a:5a:b1:fc: 60:52:4a:4d:bc:3f:45:ef:a5:7e:04:c9:c4:b2:ff:af:f0:5f: b9:9b:f1:87:5a:e9:bc:3d:86:e0:a7:60:35:8d:78:6d:58:99: 30:4e:09:b3:c5:88:59:e7:be:0b:0a:7b:2e:3d:f0:bd:44:92: 8d:65:44:d9:b0:ac:72:3b:7a:b3:f1:67:3b:e2:50:18:2a:03: 52:ce:5f:4e:12:e6:0e:88:df:17:ae:8a:5a:95:82:a6:40:ee: ef:ce:a0:3c:bd:58:62:c7:6f:53:6e:51:3c:e6:82:67:e3:fe: 59:33:8b:c8:b7:38:31:29:b2:4b:f9:8e:f3:65:31:9f:10:3e: b8:3c:ba:ae:24:dd:23:79:f7:84:72:a1:4c:96:0e:d8:86:ec: ab:63:6c:f2:98:6c:c5:1e:1b:67:0a:0c:86:ea:3e:2d:63:27: ab:c0:5d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPTBuQ0963o9xfpHM1aTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmVmZGEzZWRjYjJmNzQ1Y2NjYWJiNDVlMjBiNzllNzlh OWZjOTgwHhcNMjUxMjI1MDIwMTE3WhcNMjUxMjI2MDIwMTE3WjAzMTEwLwYDVQQD EygwODVkOGU5NTRiOWQ3OTMzNzNkMTc5N2M2YTgzYmViYjRlY2I2ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfpfmjTGOp46hGYEboyA9n/q3jvu k1ahKWqqr9ScSKC8MjXiDgq9cNPEmEfxUJgHjmnqaJr64P/Y83idMwIFsOVG8XrN m+Oh+n2dLYpTq3TZTK/9iyYwy6Ce7pllReEuyMl+Lrt1D3mWiMq0uKdf4PU/e2bK 7LLS0kahX1TGj2pS+MsmGKryVc39UB+gFZ7vc8oC6orneOWQn0Y3Az4aihckhMVT 08jySM7xBj33On0zGEWLMQIF5VvFMguDe00i4WE/6dhh4zoSiTYwckaXNbGicEBe 1XNbLIGdmBXu1aTm4tuB/3jnoxcVJV0k0EOecrf63fpHqwDcrMSiPcCByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhdjpVLnXkzc9F5fGqDvrtOy2+4MB8GA1UdIwQY MBaAFAtu/aPtyy90XMyrtF4gt555qfyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEt MDBkMTRhMjAzZWIxLzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEtMDBkMTRhMjAzZWIx LzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOq4oQ1ON B8qYI5M1HbRF7f6AwEK+YgZveey7A2+pZ5RSv3dtCNxa+cRtRMFHWYIKqldwhngs PidMv6WqHcCQ1ZamcQFw7VaLXuDmn2nMVwmkY/Jx+GlKWrH8YFJKTbw/Re+lfgTJ xLL/r/BfuZvxh1rpvD2G4KdgNY14bViZME4Js8WIWee+Cwp7Lj3wvUSSjWVE2bCs cjt6s/FnO+JQGCoDUs5fThLmDojfF66KWpWCpkDu786gPL1YYsdvU25RPOaCZ+P+ WTOLyLc4MSmyS/mO82UxnxA+uDy6riTdI3n3hHKhTJYO2Ibsq2Ns8phsxR4bZwoM huo+LWMnq8Bdbg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:00 2025 by rpki-client