This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json) Hash identifier: JWAjrogQo+3fk9wROFDNz9wDimZO0GVlB5RRYtobtOA= Subject key identifier: 97:EB:03:D3:14:01:64:F7:9D:0F:5B:1C:92:C5:9C:7C:A9:04:6C:0B Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d Certificate serial: 019B6BEA205C5193BC4530C4507B2E56971A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft Manifest number: 07EF Signing time: Mon 29 Dec 2025 21:01:04 +0000 Manifest this update: Mon 29 Dec 2025 21:01:04 +0000 Manifest next update: Tue 30 Dec 2025 21:01:04 +0000 Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: rmTVnx+ayaLfjPQlaovEqdUFd3tp/Ds25/HsKHXA9bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:ea:20:5c:51:93:bc:45:30:c4:50:7b:2e:56:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d Validity Not Before: Dec 29 21:01:04 2025 GMT Not After : Dec 30 21:01:04 2025 GMT Subject: CN=97eb03d3140164f79d0f5b1c92c59c7ca9046c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:43:22:eb:7a:16:4b:e8:92:93:66:4b:7e: 45:bf:d0:71:dc:12:af:2b:5f:36:47:1d:43:75:f7: 00:c8:41:b4:d6:53:24:4c:65:57:a9:7e:0c:4e:1a: 9d:b1:54:a5:48:16:5b:9a:18:f3:1a:44:9d:73:69: eb:90:52:ab:05:70:7e:7f:58:f6:7c:a6:21:bf:e4: da:ce:d9:5f:1a:2a:90:31:40:70:f7:86:e6:77:41: d4:4c:ed:f4:8d:f7:04:88:6b:3c:ae:31:bc:31:d4: 94:5e:a7:4d:3e:29:37:a0:f6:97:6d:07:ee:d9:4c: c7:3e:1d:64:43:24:87:dc:47:c3:e5:4c:a9:44:3d: 35:a2:76:28:38:56:4e:1b:8a:c4:d1:38:51:ac:0a: 3a:0c:a3:44:9b:0b:8b:48:cf:7c:ba:39:ce:dc:51: e5:10:0c:9b:61:87:a3:1e:51:50:4b:9f:97:f4:b0: 78:68:f9:d8:30:73:7b:59:26:28:e8:d8:ea:f9:0c: e8:a0:30:2e:6f:04:a6:de:53:37:a0:cb:76:57:c1: 74:fe:42:be:c3:54:51:0b:fa:74:be:dc:b5:bd:23: 63:a9:07:a7:f2:20:8f:f1:1d:27:12:5d:1b:46:ae: e5:6e:74:53:19:e3:bb:23:e3:89:e5:e2:41:0a:e3: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EB:03:D3:14:01:64:F7:9D:0F:5B:1C:92:C5:9C:7C:A9:04:6C:0B X509v3 Authority Key Identifier: keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:ce:72:39:8b:f0:aa:f9:61:5e:e5:0c:94:fd:6d:1a:b1: 02:5e:0b:bf:52:c3:b7:bb:7b:69:0f:cb:5d:64:82:f2:24:35: 96:87:1d:00:d6:a3:c1:cf:6d:80:c1:21:8e:9f:97:36:42:eb: 59:4d:fe:e9:75:3c:49:53:14:42:a1:81:b0:7a:f8:bb:50:ea: e2:92:f5:9c:e6:b3:7b:b1:2e:99:4d:0f:dd:f7:45:5e:47:f0: 22:c5:55:a3:cf:3d:04:3a:13:bb:93:42:1a:c8:07:56:90:b0: 99:a2:fe:e1:67:6a:a3:82:f6:8c:b5:99:00:83:96:43:dc:97: 57:0e:21:ab:54:e6:f6:16:10:aa:4d:53:dd:0c:4a:e0:d4:52: ac:37:91:3e:d5:f5:f6:9f:4d:9b:4b:a1:16:bd:20:0a:89:4e: dd:51:f9:b8:15:36:04:42:b3:6c:b0:6a:7a:b3:d1:fd:6d:36: 83:db:89:8b:b0:0d:02:55:e9:69:be:41:d2:f7:42:af:f6:33: 49:f0:cc:4d:32:ab:ea:c2:43:17:2b:53:82:fb:75:05:96:93: b5:4f:f0:89:b3:5b:54:c3:82:e7:03:92:53:1f:dd:e4:0e:4a: c5:13:95:77:14:d3:88:e2:a1:23:06:93:fe:86:1e:99:d9:47: 5b:87:00:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6iBcUZO8RTDEUHsuVpcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNTBiM2I3Y2Q0Y2UzYjE0NWI3NTNiZjcxNzlhOTU1Y2Nk MjkyNWQwHhcNMjUxMjI5MjEwMTA0WhcNMjUxMjMwMjEwMTA0WjAzMTEwLwYDVQQD Eyg5N2ViMDNkMzE0MDE2NGY3OWQwZjViMWM5MmM1OWM3Y2E5MDQ2YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju1DIut6FkvokpNmS35Fv9Bx3BKv K182Rx1DdfcAyEG01lMkTGVXqX4MThqdsVSlSBZbmhjzGkSdc2nrkFKrBXB+f1j2 fKYhv+TaztlfGiqQMUBw94bmd0HUTO30jfcEiGs8rjG8MdSUXqdNPik3oPaXbQfu 2UzHPh1kQySH3EfD5UypRD01onYoOFZOG4rE0ThRrAo6DKNEmwuLSM98ujnO3FHl EAybYYejHlFQS5+X9LB4aPnYMHN7WSYo6Njq+QzooDAubwSm3lM3oMt2V8F0/kK+ w1RRC/p0vty1vSNjqQen8iCP8R0nEl0bRq7lbnRTGeO7I+OJ5eJBCuPdqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfrA9MUAWT3nQ9bHJLFnHypBGwLMB8GA1UdIwQY MBaAFApQs7fNTOOxRbdTv3F5qVXM0pJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2Mt MTcwZWQyMzBkNWY4LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2MtMTcwZWQyMzBkNWY4 LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsXOcjmL 8Kr5YV7lDJT9bRqxAl4Lv1LDt7t7aQ/LXWSC8iQ1locdANajwc9tgMEhjp+XNkLr WU3+6XU8SVMUQqGBsHr4u1Dq4pL1nOaze7EumU0P3fdFXkfwIsVVo889BDoTu5NC GsgHVpCwmaL+4Wdqo4L2jLWZAIOWQ9yXVw4hq1Tm9hYQqk1T3QxK4NRSrDeRPtX1 9p9Nm0uhFr0gColO3VH5uBU2BEKzbLBqerPR/W02g9uJi7ANAlXpab5B0vdCr/Yz SfDMTTKr6sJDFytTgvt1BZaTtU/wibNbVMOC5wOSUx/d5A5KxROVdxTTiOKhIwaT /oYemdlHW4cAjg== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:24 2025 by rpki-client