This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json) Hash identifier: OcVH+lijJkBTvP+MWjbDUuektEaxUKC6zJIcrt0z5s0= Subject key identifier: 6B:9C:8B:DE:AB:7E:8C:3A:A3:B4:F0:44:EF:91:C7:DB:F0:E3:C9:47 Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98 Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98 Certificate serial: 019B514ECB3E190A976FABDB79C1D992E217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 17:01:16 +0000 Manifest this update: Wed 24 Dec 2025 17:01:16 +0000 Manifest next update: Thu 25 Dec 2025 17:01:16 +0000 Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=) 2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: 3EKXROC1y4NhqEDSpVYUwYt5kzXwek7iBvCCQN9U+CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:cb:3e:19:0a:97:6f:ab:db:79:c1:d9:92:e2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98 Validity Not Before: Dec 24 17:01:16 2025 GMT Not After : Dec 25 17:01:16 2025 GMT Subject: CN=6b9c8bdeab7e8c3aa3b4f044ef91c7dbf0e3c947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:09:27:14:37:bd:94:5b:cc:69:cb:c1:15: 76:07:83:9c:bb:47:f2:7f:51:8c:92:30:68:aa:d3: 9e:a2:9b:ca:ee:83:9d:2f:6f:78:8c:00:4a:e5:37: 42:cc:29:63:2c:e5:9f:c5:b9:da:b6:de:19:3d:8f: 34:e4:09:3d:fc:ce:dd:09:6f:88:1d:d3:d8:69:51: 7e:4f:4d:de:c2:76:d7:c6:51:70:1b:df:c6:ce:33: a6:23:54:ca:c0:e2:1b:ed:77:ba:a9:2f:90:2c:b9: 89:71:17:8f:55:4c:e8:1d:bb:7c:80:c8:8d:db:bb: 46:8f:54:b1:49:6d:3c:a8:8b:78:4c:2e:22:10:6e: dd:ba:12:ca:31:bc:9e:20:29:2b:da:9c:4f:65:9a: 6b:07:9e:78:6c:c6:05:2a:42:74:40:33:ce:e6:5b: ac:80:22:01:22:bf:f3:cd:5e:88:22:f6:e1:c3:7b: d1:8e:35:64:ea:56:28:bd:7d:cc:fe:28:3e:14:93: 8e:50:09:49:2e:91:e2:66:ec:ca:17:be:f6:8c:ad: 02:6f:d9:0f:6c:d1:ba:6a:62:c2:d3:e0:39:69:4d: 58:3e:6a:f4:03:00:b8:d3:b6:77:fa:61:4e:be:a6: 8d:74:5f:09:aa:c7:5d:d3:bc:42:b7:c1:ca:0a:9f: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9C:8B:DE:AB:7E:8C:3A:A3:B4:F0:44:EF:91:C7:DB:F0:E3:C9:47 X509v3 Authority Key Identifier: keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:05:00:91:e4:a4:d6:8e:52:3b:5a:75:2a:d8:38:e7:8d:24: e4:d5:d8:49:4e:9b:bb:7f:3b:94:06:e4:50:1c:9d:e3:93:3d: 25:4d:64:5a:e4:ab:04:03:de:84:ce:b3:f2:38:00:6d:f4:e4: e5:c6:62:79:ce:8c:3d:78:ad:f9:aa:9d:c1:18:20:8a:99:36: 75:26:b6:ab:d9:43:c3:64:ed:cc:63:59:58:2e:df:34:c2:88: 95:8c:41:c5:1a:16:8f:54:a4:61:09:9d:11:7f:29:8b:88:00: bf:a1:73:b4:4b:8d:ec:d7:2d:28:00:01:2d:27:08:17:e6:28: 3a:70:27:67:56:b3:cc:97:27:c3:d3:f0:21:74:34:0a:90:e8: dd:69:f8:fc:26:71:7f:90:51:d5:48:4b:ef:dd:86:90:e9:43: 38:a2:e0:23:f9:0b:5b:93:fd:58:96:76:ed:da:03:03:82:1c: fe:df:92:5d:4c:60:c1:5a:e7:d1:95:e4:89:1c:fd:7c:5e:d8: c7:a9:69:ed:da:7b:76:28:db:cc:e6:a4:84:63:8b:8d:57:21: 40:c1:8b:30:fc:e1:1f:ee:c5:07:e2:7d:d4:0f:0d:74:08:5e: 6a:bc:ad:0d:4b:50:0a:67:11:a6:d8:bb:b6:22:4e:9b:79:8b: b1:20:61:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTss+GQqXb6vbecHZkuIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmVmZGEzZWRjYjJmNzQ1Y2NjYWJiNDVlMjBiNzllNzlh OWZjOTgwHhcNMjUxMjI0MTcwMTE2WhcNMjUxMjI1MTcwMTE2WjAzMTEwLwYDVQQD Eyg2YjljOGJkZWFiN2U4YzNhYTNiNGYwNDRlZjkxYzdkYmYwZTNjOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCkJJxQ3vZRbzGnLwRV2B4Ocu0fy f1GMkjBoqtOeopvK7oOdL294jABK5TdCzCljLOWfxbnatt4ZPY805Ak9/M7dCW+I HdPYaVF+T03ewnbXxlFwG9/GzjOmI1TKwOIb7Xe6qS+QLLmJcRePVUzoHbt8gMiN 27tGj1SxSW08qIt4TC4iEG7duhLKMbyeICkr2pxPZZprB554bMYFKkJ0QDPO5lus gCIBIr/zzV6IIvbhw3vRjjVk6lYovX3M/ig+FJOOUAlJLpHiZuzKF772jK0Cb9kP bNG6amLC0+A5aU1YPmr0AwC407Z3+mFOvqaNdF8Jqsdd07xCt8HKCp963QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuci96rfow6o7TwRO+Rx9vw48lHMB8GA1UdIwQY MBaAFAtu/aPtyy90XMyrtF4gt555qfyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEt MDBkMTRhMjAzZWIxLzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEtMDBkMTRhMjAzZWIx LzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwUAkeSk 1o5SO1p1Ktg4540k5NXYSU6bu387lAbkUByd45M9JU1kWuSrBAPehM6z8jgAbfTk 5cZiec6MPXit+aqdwRggipk2dSa2q9lDw2TtzGNZWC7fNMKIlYxBxRoWj1SkYQmd EX8pi4gAv6FztEuN7NctKAABLScIF+YoOnAnZ1azzJcnw9PwIXQ0CpDo3Wn4/CZx f5BR1UhL792GkOlDOKLgI/kLW5P9WJZ27doDA4Ic/t+SXUxgwVrn0ZXkiRz9fF7Y x6lp7dp7dijbzOakhGOLjVchQMGLMPzhH+7FB+J91A8NdAhearytDUtQCmcRpti7 tiJOm3mLsSBhCQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:49:46 2025 by rpki-client