This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json) Hash identifier: I6eJ1HlCwUFTOQJh8sKsOP5xpYDBzdA3inw+HMJou5o= Subject key identifier: 2F:02:FD:83:A0:07:7D:F1:F8:CB:FE:FB:79:07:D6:46:0C:E5:EA:14 Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588 Certificate serial: 019B3E6D5826EE91077A1CB5E5F80D0395EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft Manifest number: 0F10 Signing time: Sun 21 Dec 2025 01:01:51 +0000 Manifest this update: Sun 21 Dec 2025 01:01:51 +0000 Manifest next update: Mon 22 Dec 2025 01:01:51 +0000 Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: DrccDEyN2pu4YJIQ77tr6EKCSbjm66565qTbQq4dzNA=) 2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:58:26:ee:91:07:7a:1c:b5:e5:f8:0d:03:95:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588 Validity Not Before: Dec 21 01:01:51 2025 GMT Not After : Dec 22 01:01:51 2025 GMT Subject: CN=2f02fd83a0077df1f8cbfefb7907d6460ce5ea14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:da:13:a1:e7:49:b3:64:c4:35:37:8a:95: e5:7c:3b:95:47:ed:58:f0:49:e6:a3:5e:b2:79:1f: bd:d4:ea:f8:15:16:02:28:c0:b2:4b:81:b7:58:3c: 23:0f:e3:84:29:d4:e9:bf:45:6b:6e:ca:b7:2a:81: fc:ed:0b:53:47:01:c2:d3:34:79:dd:65:d5:76:b8: 3f:68:70:7c:13:de:55:10:34:32:13:ab:36:bf:a5: 61:58:d0:3e:dd:ec:7a:f7:22:bc:e9:75:d9:b3:1c: 86:87:5b:a4:3a:ae:c6:ba:e6:e2:2a:18:41:b8:ae: 0c:c3:3f:30:a9:d4:78:48:f7:27:fd:3c:f8:e3:ac: aa:22:f5:ae:1c:f1:bc:d6:6a:6b:a9:0e:c3:50:ab: 04:a5:18:bf:0a:44:48:31:ee:dd:4b:85:4b:12:13: f3:18:c7:1f:42:21:5f:02:b8:61:cd:cc:b6:fb:9a: 77:f8:38:75:dc:5a:9a:fd:e7:bc:06:51:3b:6f:4f: 37:9a:a2:ee:a2:38:88:98:f8:79:78:92:21:b1:e7: a1:c4:17:44:d1:da:4c:fe:d8:52:ea:5a:01:69:79: 32:ff:bd:f7:28:d1:0a:57:b8:6a:8f:71:1e:c7:de: 35:f7:f8:ab:9a:68:6e:93:1f:ee:40:62:4f:d6:ee: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:FD:83:A0:07:7D:F1:F8:CB:FE:FB:79:07:D6:46:0C:E5:EA:14 X509v3 Authority Key Identifier: keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6b:00:cd:62:94:4a:82:2c:58:f7:60:1a:ae:d1:d1:a0:47: ac:28:47:96:f3:55:2e:46:a4:16:ef:c1:03:4a:66:cf:60:39: 57:ed:d7:e1:d6:cc:8f:b9:05:f9:1c:7c:34:ed:4f:91:b0:b2: 07:f0:21:29:e6:0b:83:34:3a:4c:89:10:49:c6:23:f9:24:00: 2a:c2:43:0a:64:f4:59:24:4f:c2:54:53:74:9d:34:a8:7a:09: 3f:3b:c6:41:6b:b5:05:42:4d:ee:0a:10:6c:d3:cb:5d:b1:8d: 14:f7:7b:c4:54:09:c8:2f:9c:11:4c:b6:f7:27:5a:aa:95:01: 76:09:1f:b2:1e:51:56:41:c3:2a:a8:59:5e:06:ce:ad:15:d7: 2b:e4:ec:a9:2e:b9:e9:f0:ad:8c:b0:47:e2:7b:c8:c2:76:45: 22:bf:00:25:e3:2b:32:1e:41:61:4f:9c:39:f4:48:a1:19:1d: 1e:17:a8:2d:cc:a4:08:4c:ca:57:6b:a9:c3:aa:69:51:d5:3e: a8:41:d0:8b:c1:9d:5c:27:46:67:ba:98:87:a4:32:ef:be:cb: 06:19:4c:78:a4:f7:51:db:da:c6:40:5d:6a:e5:3a:17:e5:61: a5:84:5a:91:f4:6d:d5:67:cd:a6:b4:f9:18:0d:04:39:d2:a2: d3:35:20:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVgm7pEHehy15fgNA5XsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0 MGE1ODgwHhcNMjUxMjIxMDEwMTUxWhcNMjUxMjIyMDEwMTUxWjAzMTEwLwYDVQQD EygyZjAyZmQ4M2EwMDc3ZGYxZjhjYmZlZmI3OTA3ZDY0NjBjZTVlYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/7aE6HnSbNkxDU3ipXlfDuVR+1Y 8Enmo16yeR+91Or4FRYCKMCyS4G3WDwjD+OEKdTpv0Vrbsq3KoH87QtTRwHC0zR5 3WXVdrg/aHB8E95VEDQyE6s2v6VhWNA+3ex69yK86XXZsxyGh1ukOq7GuubiKhhB uK4Mwz8wqdR4SPcn/Tz446yqIvWuHPG81mprqQ7DUKsEpRi/CkRIMe7dS4VLEhPz GMcfQiFfArhhzcy2+5p3+Dh13Fqa/ee8BlE7b083mqLuojiImPh5eJIhseehxBdE 0dpM/thS6loBaXky/733KNEKV7hqj3Eex9419/irmmhukx/uQGJP1u5lZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8C/YOgB33x+Mv++3kH1kYM5eoUMB8GA1UdIwQY MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWsAzWKU SoIsWPdgGq7R0aBHrChHlvNVLkakFu/BA0pmz2A5V+3X4dbMj7kF+Rx8NO1PkbCy B/AhKeYLgzQ6TIkQScYj+SQAKsJDCmT0WSRPwlRTdJ00qHoJPzvGQWu1BUJN7goQ bNPLXbGNFPd7xFQJyC+cEUy29ydaqpUBdgkfsh5RVkHDKqhZXgbOrRXXK+TsqS65 6fCtjLBH4nvIwnZFIr8AJeMrMh5BYU+cOfRIoRkdHheoLcykCEzKV2upw6ppUdU+ qEHQi8GdXCdGZ7qYh6Qy777LBhlMeKT3UdvaxkBdauU6F+VhpYRakfRt1WfNprT5 GA0EOdKi0zUg8A== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:25 2025 by rpki-client