This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft File: C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json) Hash identifier: yyMiQlIuKsrPJSHw9JJpf0qTKuz3dHDnahsuHwhFLMc= Subject key identifier: D1:39:33:CE:D2:05:6A:B3:9D:6A:27:2D:CE:92:0E:A1:63:FD:AE:65 Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8 Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8 Certificate serial: 019B42EE90F61AD803E8AE838F0D1AF8ABAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:29 +0000 Manifest this update: Sun 21 Dec 2025 22:01:29 +0000 Manifest next update: Mon 22 Dec 2025 22:01:29 +0000 Files and hashes: 1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: WHM2J+R1jn6lroCf+MLH6HACeZk2uwtHM4tFzNTAz2Q=) 2: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (hash: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:90:f6:1a:d8:03:e8:ae:83:8f:0d:1a:f8:ab:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8 Validity Not Before: Dec 21 22:01:29 2025 GMT Not After : Dec 22 22:01:29 2025 GMT Subject: CN=d13933ced2056ab39d6a272dce920ea163fdae65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:10:f1:d5:83:4d:62:7a:25:71:da:6e:6b: f9:be:94:7a:c7:95:7a:c1:c9:47:32:f9:2e:e6:ea: e3:0b:b9:6e:c8:28:89:cc:b0:87:fa:67:e4:23:c6: 63:8e:59:a2:49:7e:e0:be:8f:f9:6f:e6:4e:a0:de: bb:8b:48:e7:4b:1e:30:48:60:b8:4b:c0:95:65:a2: dd:cc:0d:7d:be:35:45:bf:93:99:db:44:1a:89:84: fc:01:b8:50:35:00:f4:51:f6:1d:3b:f7:05:fe:de: 1c:c7:02:ba:47:c7:9a:24:a3:86:ec:e4:4f:ec:9a: 11:f4:4e:bf:5f:c4:45:32:5b:20:db:f1:b4:0c:ed: 54:a4:ca:29:38:b9:39:96:6f:e5:03:55:9a:fa:22: 96:07:79:3a:ec:ae:da:6c:ff:71:b6:1e:a8:d7:57: 62:8c:0d:00:32:5c:9b:82:9a:8a:ab:39:c2:62:72: f8:9d:46:e6:b0:0f:09:5f:cd:97:ea:3a:90:c9:d2: da:7c:20:91:87:64:5b:1f:6a:a3:d9:bc:4f:c5:41: 4b:7b:ab:4c:4b:5d:42:77:de:05:d5:38:c9:0a:13: 61:f3:75:f7:f9:bb:a6:fc:13:e7:2a:33:8d:ae:39: 51:19:2a:5d:9e:c5:37:40:1f:bf:fb:94:d1:e8:d4: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:39:33:CE:D2:05:6A:B3:9D:6A:27:2D:CE:92:0E:A1:63:FD:AE:65 X509v3 Authority Key Identifier: keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:92:ee:9d:52:bd:06:a6:a4:72:1b:8c:18:2b:ab:69:eb:24: 98:49:59:d3:3e:20:86:13:68:86:2e:31:80:bf:2b:04:71:ef: ad:99:38:8b:a0:76:63:80:4c:84:21:a6:06:28:1b:90:fc:d4: a4:fa:ca:f8:ac:78:14:f7:86:5a:6a:23:26:66:e7:3d:c3:14: 78:44:e1:18:d4:4f:38:c3:f8:22:a1:6c:fa:19:01:1d:2f:6a: 9b:98:0d:a8:f4:04:26:9c:f2:5e:5b:cc:85:cc:b2:84:fe:6c: af:cd:4c:54:d3:57:04:35:59:52:97:cf:80:33:56:58:a9:88: 2c:46:8d:05:43:4d:be:10:47:03:7b:65:7e:f8:1d:07:38:b5: 70:f9:3b:b7:9f:35:c5:46:af:6b:82:7b:42:29:61:7e:20:fc: d3:27:9d:f9:4f:d6:e0:e7:2a:63:34:d7:0e:6c:7e:7f:91:82: d0:50:de:3d:28:60:87:6d:ef:b2:93:5a:38:f1:42:34:c9:2c: 57:45:ca:fb:0b:bf:a4:8b:db:16:62:3a:44:ca:28:0c:56:da: 2a:28:24:ca:22:4f:4e:f1:29:ba:30:fe:f5:b7:1d:19:81:ba: 13:af:59:ee:81:76:a5:25:dc:be:b5:ac:68:fd:2a:7c:c3:67: 8e:39:62:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7pD2GtgD6K6Djw0a+KusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZTc3OWViOTBiZTdkNWJlMGMxZGM0OGE2Y2QyM2RiZDQz Yjk3YzgwHhcNMjUxMjIxMjIwMTI5WhcNMjUxMjIyMjIwMTI5WjAzMTEwLwYDVQQD EyhkMTM5MzNjZWQyMDU2YWIzOWQ2YTI3MmRjZTkyMGVhMTYzZmRhZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/UQ8dWDTWJ6JXHabmv5vpR6x5V6 wclHMvku5urjC7luyCiJzLCH+mfkI8ZjjlmiSX7gvo/5b+ZOoN67i0jnSx4wSGC4 S8CVZaLdzA19vjVFv5OZ20QaiYT8AbhQNQD0UfYdO/cF/t4cxwK6R8eaJKOG7ORP 7JoR9E6/X8RFMlsg2/G0DO1UpMopOLk5lm/lA1Wa+iKWB3k67K7abP9xth6o11di jA0AMlybgpqKqznCYnL4nUbmsA8JX82X6jqQydLafCCRh2RbH2qj2bxPxUFLe6tM S11Cd94F1TjJChNh83X3+bum/BPnKjONrjlRGSpdnsU3QB+/+5TR6NTplwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNE5M87SBWqznWonLc6SDqFj/a5lMB8GA1UdIwQY MBaAFAvneeuQvn1b4MHcSKbNI9vUO5fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUt Mzg3YThmYmIxMDQyLzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUtMzg3YThmYmIxMDQy LzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZLunVK9 BqakchuMGCuraeskmElZ0z4ghhNohi4xgL8rBHHvrZk4i6B2Y4BMhCGmBigbkPzU pPrK+Kx4FPeGWmojJmbnPcMUeEThGNRPOMP4IqFs+hkBHS9qm5gNqPQEJpzyXlvM hcyyhP5sr81MVNNXBDVZUpfPgDNWWKmILEaNBUNNvhBHA3tlfvgdBzi1cPk7t581 xUava4J7QilhfiD80yed+U/W4OcqYzTXDmx+f5GC0FDePShgh23vspNaOPFCNMks V0XK+wu/pIvbFmI6RMooDFbaKigkyiJPTvEpujD+9bcdGYG6E69Z7oF2pSXcvrWs aP0qfMNnjjliww== -----END CERTIFICATE-----Generated at Mon Dec 22 07:59:58 2025 by rpki-client