This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json) Hash identifier: CayNEeKCusMSWpIHtxPfRejVfoX6a+4MmX6ErYHeq8Q= Subject key identifier: 23:66:A6:6E:92:64:F3:D9:37:C1:0A:41:39:55:90:70:21:B3:23:80 Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Certificate serial: 019B4DE1298CD375654010E2D5AB52D7656C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 01:02:40 +0000 Manifest this update: Wed 24 Dec 2025 01:02:40 +0000 Manifest next update: Thu 25 Dec 2025 01:02:40 +0000 Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: Xb2W1sH81bi5HvZDEXNoYG5ytVPT58mcmUlBgTFfqIo=) 2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:29:8c:d3:75:65:40:10:e2:d5:ab:52:d7:65:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Validity Not Before: Dec 24 01:02:40 2025 GMT Not After : Dec 25 01:02:40 2025 GMT Subject: CN=2366a66e9264f3d937c10a413955907021b32380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:9d:63:1e:8e:ae:2e:fc:b2:75:30:c8:28: 01:69:85:8a:83:15:ef:3c:01:02:8d:e1:17:d4:9f: ea:c3:2d:6e:e5:51:cd:5e:e5:7d:29:6f:a0:81:0d: 84:fb:a5:ed:a0:49:8a:a6:bb:bb:0c:41:05:d8:11: 44:7e:22:64:1d:c6:eb:05:4e:84:cc:e0:b3:04:df: a0:b2:73:44:ae:ab:17:e6:4c:75:8c:1f:5a:e9:f2: 5e:11:43:f0:1f:a1:bf:cb:e3:a0:07:bf:0e:53:a8: 11:c7:c9:ca:df:41:9d:fb:cc:50:2c:b6:0d:a5:f7: f4:ae:6c:e9:e6:96:c6:d4:f9:7f:40:1d:7a:9c:d5: 58:3e:72:ed:47:e3:27:82:ae:9f:10:5b:e2:04:1f: b0:60:8e:27:40:62:5c:03:cb:39:3a:01:b1:2f:64: cf:4c:de:b6:6e:df:91:8e:41:f4:f2:a1:ae:29:3b: 29:b3:08:9d:99:60:dd:c2:6e:7c:02:80:42:56:9c: 9c:5b:c2:a2:45:c8:d0:63:cd:fa:31:b4:7d:64:23: b9:48:c8:f6:6c:c1:0b:06:0b:0a:b9:18:7f:33:1a: 31:f9:4d:28:08:23:ec:06:61:a7:98:07:60:71:7f: 79:93:ec:26:9a:3b:c2:e0:bc:cc:ff:05:cb:9c:be: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:66:A6:6E:92:64:F3:D9:37:C1:0A:41:39:55:90:70:21:B3:23:80 X509v3 Authority Key Identifier: keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d3:6b:ee:d4:52:b3:05:be:de:da:df:b8:39:08:67:64:f7: 6c:76:29:a9:c0:3a:f7:76:ee:cd:03:fa:59:79:ae:57:35:77: 87:1d:86:d0:5c:d5:e2:5c:13:d9:ac:ec:c8:aa:88:ae:b8:62: fe:8e:9f:54:ed:7f:21:46:a5:28:fc:91:1f:66:3e:16:77:2c: 95:ba:7f:ca:04:fb:99:b6:3b:c9:7f:01:eb:7b:d7:5f:cd:3a: 80:9c:88:7d:f3:3c:c6:68:5e:63:ff:f6:2e:69:3b:58:bf:5a: d8:d7:3c:2a:57:24:95:5a:c2:c6:2a:f7:5d:c6:88:fd:c0:95: 81:bf:96:35:50:63:5d:43:a2:13:59:b9:b5:66:86:12:a4:46: 78:0f:45:1e:4a:5d:b6:ac:1a:c5:8d:5c:91:ae:7a:5d:6f:9c: 38:19:b9:1d:44:7c:1e:72:a9:f7:e9:92:65:45:22:38:46:e8: a5:85:cf:73:19:88:68:11:4d:a7:36:e2:d6:01:8b:df:a4:64: 04:4e:60:6e:d5:cb:a4:0f:42:8e:cb:5e:9d:19:79:df:ca:24: 57:6c:5b:1c:8e:20:70:ef:89:7b:8c:54:dc:c4:3f:ed:98:54: cc:29:16:97:e8:aa:7f:43:68:c8:af:e1:80:3a:f7:0a:a3:4f: cf:3c:7d:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4SmM03VlQBDi1atS12VsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0 ZDQ1ZTIwHhcNMjUxMjI0MDEwMjQwWhcNMjUxMjI1MDEwMjQwWjAzMTEwLwYDVQQD EygyMzY2YTY2ZTkyNjRmM2Q5MzdjMTBhNDEzOTU1OTA3MDIxYjMyMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiedYx6Ori78snUwyCgBaYWKgxXv PAECjeEX1J/qwy1u5VHNXuV9KW+ggQ2E+6XtoEmKpru7DEEF2BFEfiJkHcbrBU6E zOCzBN+gsnNErqsX5kx1jB9a6fJeEUPwH6G/y+OgB78OU6gRx8nK30Gd+8xQLLYN pff0rmzp5pbG1Pl/QB16nNVYPnLtR+Mngq6fEFviBB+wYI4nQGJcA8s5OgGxL2TP TN62bt+RjkH08qGuKTspswidmWDdwm58AoBCVpycW8KiRcjQY836MbR9ZCO5SMj2 bMELBgsKuRh/Mxox+U0oCCPsBmGnmAdgcX95k+wmmjvC4LzM/wXLnL431wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNmpm6SZPPZN8EKQTlVkHAhsyOAMB8GA1UdIwQY MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9Nr7tRS swW+3trfuDkIZ2T3bHYpqcA693buzQP6WXmuVzV3hx2G0FzV4lwT2azsyKqIrrhi /o6fVO1/IUalKPyRH2Y+Fncslbp/ygT7mbY7yX8B63vXX806gJyIffM8xmheY//2 Lmk7WL9a2Nc8KlcklVrCxir3XcaI/cCVgb+WNVBjXUOiE1m5tWaGEqRGeA9FHkpd tqwaxY1cka56XW+cOBm5HUR8HnKp9+mSZUUiOEbopYXPcxmIaBFNpzbi1gGL36Rk BE5gbtXLpA9CjstenRl538okV2xbHI4gcO+Je4xU3MQ/7ZhUzCkWl+iqf0NoyK/h gDr3CqNPzzx9hQ== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:17 2025 by rpki-client