This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json) Hash identifier: PH+mrfoHrCMB8Q9kNO2ImRuMB/StvSjks9dA2uhjRk4= Subject key identifier: 05:14:2E:25:0E:D6:A7:3A:C7:D4:29:C3:5E:E5:AB:F4:54:4E:18:D2 Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Certificate serial: 019B3E6D54F6FA0CF67ABE99BC2F72851595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 01:01:51 +0000 Manifest this update: Sun 21 Dec 2025 01:01:51 +0000 Manifest next update: Mon 22 Dec 2025 01:01:51 +0000 Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: GbR4Iw8kqG/MXQgvmDGi00OCm/IG6D9SyfdXYqD8iGA=) 2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:54:f6:fa:0c:f6:7a:be:99:bc:2f:72:85:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Validity Not Before: Dec 21 01:01:51 2025 GMT Not After : Dec 22 01:01:51 2025 GMT Subject: CN=05142e250ed6a73ac7d429c35ee5abf4544e18d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:d5:55:62:a5:db:14:d8:aa:6e:3b:de:a8: 10:dc:2c:af:23:33:39:1c:fd:c5:15:b7:25:7e:35: 86:c5:75:ac:2c:3a:55:26:07:7b:bd:3b:a9:c5:ff: 14:55:f6:d9:db:5d:66:c6:dd:5f:7a:5a:98:42:19: aa:4e:79:07:a0:28:2d:d5:57:f6:0a:b1:8e:eb:43: 37:a1:fc:2f:13:59:80:c4:d4:21:9f:ed:9f:dd:bf: 54:d6:fb:3d:fa:d2:da:b7:e4:ef:b0:1d:9a:82:2b: 32:23:09:76:bd:1c:bb:e3:97:9a:ed:2c:8c:7d:82: 02:ba:e5:b8:82:35:dc:11:3f:c9:1e:0e:8b:35:79: ff:61:58:bb:06:c9:86:f4:9d:6d:05:66:00:78:79: 12:7b:43:24:af:92:61:3a:0f:69:5a:d6:55:f8:c5: 6f:c3:c6:d8:a4:e4:ab:09:d0:8c:48:10:a6:15:4e: 1f:fa:f4:47:8d:94:2b:4f:47:40:4e:aa:d5:74:9f: 05:fc:75:6f:1e:76:70:67:a9:27:35:32:e0:a2:30: a3:b6:c8:37:1a:6f:79:7d:65:c3:a8:87:96:a6:c2: 94:17:85:bd:18:1a:df:44:91:ae:5b:d5:f3:4e:2c: fa:fc:0e:a0:dd:fc:7e:0b:f3:0d:31:af:10:9d:b1: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:2E:25:0E:D6:A7:3A:C7:D4:29:C3:5E:E5:AB:F4:54:4E:18:D2 X509v3 Authority Key Identifier: keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4a:53:81:93:bf:25:e8:11:43:50:de:ef:80:d9:21:9e:15: b3:fa:6d:8f:40:15:35:9e:39:40:45:8e:49:ee:eb:10:db:2f: df:26:a7:f2:dc:96:86:4d:e9:98:e3:00:26:56:ab:d0:bb:5d: 25:4c:a9:ff:3f:66:fe:03:aa:20:d1:da:1f:43:73:68:fc:9c: d6:a8:da:4f:7c:fe:eb:03:cb:34:45:b5:81:b6:8c:13:a7:53: 38:11:bc:47:58:6c:ee:18:40:46:8f:1a:a6:9a:04:be:3e:94: 87:0c:03:a4:c3:25:0d:cc:94:14:2d:1c:3a:49:eb:1b:30:fd: af:4c:5d:c3:11:96:fd:ba:93:b0:7a:15:79:38:a7:0d:40:ce: 2d:8e:8b:15:4a:16:a1:51:b1:02:41:00:35:69:58:b7:d8:15: d6:dc:ab:83:8a:b7:91:ab:47:eb:0e:cc:1f:98:60:37:63:44: 9a:cd:31:c0:9a:ef:5c:e6:dc:8e:71:38:59:81:66:dd:7c:d8: 17:ff:42:a7:49:8b:11:38:58:12:e9:e0:be:b7:43:05:8d:24: 5d:29:30:42:e8:f6:fa:8c:37:a6:16:99:6a:f8:a6:cd:9e:19: 06:ec:d9:8c:0d:10:ae:15:03:fe:fa:fb:9e:c7:58:71:2d:bd: 10:ca:89:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVT2+gz2er6ZvC9yhRWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0 ZDQ1ZTIwHhcNMjUxMjIxMDEwMTUxWhcNMjUxMjIyMDEwMTUxWjAzMTEwLwYDVQQD EygwNTE0MmUyNTBlZDZhNzNhYzdkNDI5YzM1ZWU1YWJmNDU0NGUxOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T7VVWKl2xTYqm473qgQ3CyvIzM5 HP3FFbclfjWGxXWsLDpVJgd7vTupxf8UVfbZ211mxt1felqYQhmqTnkHoCgt1Vf2 CrGO60M3ofwvE1mAxNQhn+2f3b9U1vs9+tLat+TvsB2agisyIwl2vRy745ea7SyM fYICuuW4gjXcET/JHg6LNXn/YVi7BsmG9J1tBWYAeHkSe0Mkr5JhOg9pWtZV+MVv w8bYpOSrCdCMSBCmFU4f+vRHjZQrT0dATqrVdJ8F/HVvHnZwZ6knNTLgojCjtsg3 Gm95fWXDqIeWpsKUF4W9GBrfRJGuW9XzTiz6/A6g3fx+C/MNMa8QnbFujwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUULiUO1qc6x9Qpw17lq/RUThjSMB8GA1UdIwQY MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEpTgZO/ JegRQ1De74DZIZ4Vs/ptj0AVNZ45QEWOSe7rENsv3yan8tyWhk3pmOMAJlar0Ltd JUyp/z9m/gOqINHaH0NzaPyc1qjaT3z+6wPLNEW1gbaME6dTOBG8R1hs7hhARo8a ppoEvj6UhwwDpMMlDcyUFC0cOknrGzD9r0xdwxGW/bqTsHoVeTinDUDOLY6LFUoW oVGxAkEANWlYt9gV1tyrg4q3katH6w7MH5hgN2NEms0xwJrvXObcjnE4WYFm3XzY F/9Cp0mLEThYEungvrdDBY0kXSkwQuj2+ow3phaZavimzZ4ZBuzZjA0QrhUD/vr7 nsdYcS29EMqJLw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:20:18 2025 by rpki-client