This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json) Hash identifier: FrNzVS6zswG/6ZEhbqrt5Xm9x2cQRrYXjWZS0BeHI/w= Subject key identifier: F5:8B:8C:97:20:52:D3:45:EF:6C:98:E7:9C:7E:C1:72:22:D6:3C:8A Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Certificate serial: 019B2D78BAE6A8DBA3FBB2D9DCA3725F991F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 18:00:45 +0000 Manifest this update: Wed 17 Dec 2025 18:00:45 +0000 Manifest next update: Thu 18 Dec 2025 18:00:45 +0000 Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: ffcFVP7Sso46mXKsqYaKYCgJFocmNgannShBc9ln+xE=) 2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=) 3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=) 4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:ba:e6:a8:db:a3:fb:b2:d9:dc:a3:72:5f:99:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Validity Not Before: Dec 17 18:00:45 2025 GMT Not After : Dec 18 18:00:45 2025 GMT Subject: CN=f58b8c972052d345ef6c98e79c7ec17222d63c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:a6:d1:04:4a:41:10:b5:39:ec:20:25:73: b6:8d:f0:df:67:f0:f0:e4:cc:45:1f:0e:37:28:29: ad:c8:89:76:98:ee:bf:98:8a:d0:94:c2:9f:d1:91: 16:09:d9:a6:a4:27:fb:11:1b:ec:b6:0d:b7:e8:b3: f2:34:3b:5e:d1:a6:73:4f:3e:4f:c7:f5:e5:ce:7b: 59:37:9c:64:16:15:22:ec:d3:18:b7:16:ee:97:52: b6:7a:53:c5:db:ff:e5:ae:46:55:c2:bf:b4:a8:51: cd:b7:a0:80:da:63:16:2b:c6:71:6e:d3:93:50:35: 78:dd:65:f1:b4:c6:23:6f:03:f7:82:6b:6d:ed:f7: 7b:ea:2c:20:12:6b:49:ec:bb:80:d9:23:76:99:36: 91:a9:1f:48:2b:09:05:a7:9c:1d:70:34:8a:f6:dc: 1b:6c:d5:91:62:42:76:52:4e:1a:11:09:0b:6d:d5: ad:e7:ec:4f:6d:1a:4f:a5:48:7f:25:a6:ba:81:94: 76:a6:67:28:c3:dc:ba:f5:08:3c:0a:13:ae:de:41: 93:57:df:5f:70:9e:21:2a:e3:f3:54:e8:3d:c1:8b: 89:68:a1:06:48:57:51:a8:a2:8d:07:9e:46:75:b7: e9:cd:a2:3f:fa:04:44:86:b5:72:68:2f:35:73:eb: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8B:8C:97:20:52:D3:45:EF:6C:98:E7:9C:7E:C1:72:22:D6:3C:8A X509v3 Authority Key Identifier: keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d5:1c:e1:a5:2c:14:82:28:1d:6d:8d:9f:32:0e:f9:d4:8b: 4c:b7:e0:70:f5:f7:58:1a:7d:ca:8f:b8:91:2f:79:bf:8d:c6: e5:d0:c7:ae:05:64:b9:b9:b1:93:43:42:dc:d8:c8:59:d8:ce: 1d:c5:bd:06:a8:79:86:07:a2:1d:22:7d:88:cb:40:78:3f:08: c9:95:8d:bb:04:67:98:7c:ef:80:2d:72:e4:c8:bd:b4:ef:89: ba:ee:e7:40:63:cf:39:cf:0f:e4:42:7c:1a:59:10:d1:32:b9: 4a:86:a2:21:5c:e7:c9:3b:07:cb:22:c9:f9:3d:9b:a9:d4:5c: 41:4c:ec:6a:54:21:95:8e:d6:23:59:aa:fa:1a:16:2c:ef:c7: 4f:1c:63:58:68:d2:1c:75:dd:31:23:ef:7f:f8:a2:43:dd:2a: 25:f2:fa:21:84:0a:4c:91:6f:07:e1:e5:06:db:bd:33:65:6a: 27:c8:6b:e2:8b:d3:f6:41:3f:fd:50:aa:ae:ba:3e:78:fe:ee: 86:35:8e:34:43:0f:b5:8a:41:31:12:2c:dd:9e:bc:ba:cb:7c: ef:46:4e:6c:0e:47:e5:e9:3d:6f:f6:12:0b:5a:4a:04:7b:47: ca:af:50:4d:c7:e2:27:fd:f5:c4:85:23:17:00:9d:b8:6c:2d: 63:e5:50:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteLrmqNuj+7LZ3KNyX5kfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5 MTkzNjgwHhcNMjUxMjE3MTgwMDQ1WhcNMjUxMjE4MTgwMDQ1WjAzMTEwLwYDVQQD EyhmNThiOGM5NzIwNTJkMzQ1ZWY2Yzk4ZTc5YzdlYzE3MjIyZDYzYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApROm0QRKQRC1OewgJXO2jfDfZ/Dw 5MxFHw43KCmtyIl2mO6/mIrQlMKf0ZEWCdmmpCf7ERvstg236LPyNDte0aZzTz5P x/XlzntZN5xkFhUi7NMYtxbul1K2elPF2//lrkZVwr+0qFHNt6CA2mMWK8ZxbtOT UDV43WXxtMYjbwP3gmtt7fd76iwgEmtJ7LuA2SN2mTaRqR9IKwkFp5wdcDSK9twb bNWRYkJ2Uk4aEQkLbdWt5+xPbRpPpUh/Jaa6gZR2pmcow9y69Qg8ChOu3kGTV99f cJ4hKuPzVOg9wYuJaKEGSFdRqKKNB55GdbfpzaI/+gREhrVyaC81c+tAywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWLjJcgUtNF72yY55x+wXIi1jyKMB8GA1UdIwQY MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt MDI3OGM1ZGMxNDkxLzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdUc4aUs FIIoHW2NnzIO+dSLTLfgcPX3WBp9yo+4kS95v43G5dDHrgVkubmxk0NC3NjIWdjO HcW9Bqh5hgeiHSJ9iMtAeD8IyZWNuwRnmHzvgC1y5Mi9tO+Juu7nQGPPOc8P5EJ8 GlkQ0TK5SoaiIVznyTsHyyLJ+T2bqdRcQUzsalQhlY7WI1mq+hoWLO/HTxxjWGjS HHXdMSPvf/iiQ90qJfL6IYQKTJFvB+HlBtu9M2VqJ8hr4ovT9kE//VCqrro+eP7u hjWONEMPtYpBMRIs3Z68ust870ZObA5H5ek9b/YSC1pKBHtHyq9QTcfiJ/31xIUj FwCduGwtY+VQNw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:48:08 2025 by rpki-client