This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json) Hash identifier: wZR/T+RCSewd1+kOtkE3E6dci6sTmP1LMSgGNo6rJHw= Subject key identifier: A6:00:81:B4:9B:D9:34:11:5D:6C:E0:2E:04:DB:FC:6A:46:3C:94:77 Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e Certificate serial: 019B44DC7BDD5E920F70A14D0BF3EBCE3F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft Manifest number: 0148 Signing time: Mon 22 Dec 2025 07:00:58 +0000 Manifest this update: Mon 22 Dec 2025 07:00:58 +0000 Manifest next update: Tue 23 Dec 2025 07:00:58 +0000 Files and hashes: 1: VHqrHR3KAxyQVs5XqkuJUlTCqyQ.roa (hash: hg67UBoyW97yawl4BR0CcyZRfHg2HHLQE7gv+QJb6ws=) 2: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: Ro879M6ZWAADBSP/4lAlQdd+3cFLKvhFTGpNNR6QvVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:7b:dd:5e:92:0f:70:a1:4d:0b:f3:eb:ce:3f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e Validity Not Before: Dec 22 07:00:58 2025 GMT Not After : Dec 23 07:00:58 2025 GMT Subject: CN=a60081b49bd934115d6ce02e04dbfc6a463c9477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ed:f0:4c:67:b8:45:74:ee:b3:b8:8c:de:c4: 0c:e7:bd:89:ea:34:f1:71:b2:03:b7:42:68:31:30: 47:e6:ac:9c:5b:ff:84:95:6f:64:16:8c:60:02:5d: 95:e7:43:d5:c3:e2:f9:8e:fc:7b:ad:80:88:1d:b6: 94:bd:06:2c:97:40:9a:28:04:14:0e:46:9f:d6:5c: 4a:18:12:f7:a1:90:05:12:fe:3f:fa:1d:da:4d:83: cf:aa:d3:ed:2a:a7:9a:31:1e:30:83:ce:87:1d:03: 8c:d5:f3:a2:f8:1a:13:4e:64:ad:a7:f4:f9:c7:f6: d7:36:dc:3f:6b:e4:e8:68:24:eb:8f:94:83:0e:e9: de:f4:80:26:00:9d:6d:0e:03:3b:5d:d0:10:6d:98: ea:c8:1d:da:c1:d7:39:94:cb:68:93:9d:b7:3f:ed: ed:c2:09:62:95:3d:7d:76:36:71:80:9f:dd:26:3f: 86:3c:44:98:dc:fb:bf:be:07:6e:4b:22:24:52:6e: 8d:e8:05:55:63:50:4a:00:d8:7f:7e:be:ce:3e:51: 3a:01:10:b6:b8:9c:a3:b7:13:9a:80:a3:c5:3d:47: da:45:8b:13:dc:df:f4:30:6b:08:b8:9e:9b:44:ca: 45:28:da:05:09:0e:0b:2a:12:5d:ac:cf:6a:5f:96: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:00:81:B4:9B:D9:34:11:5D:6C:E0:2E:04:DB:FC:6A:46:3C:94:77 X509v3 Authority Key Identifier: keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:87:f8:21:df:d6:e8:5b:6d:7b:cf:2c:46:fe:96:17:ea:1b: c9:89:47:ec:82:3d:1c:88:52:ee:a5:e5:90:75:6d:cc:0a:8c: 55:f7:6a:5a:7b:57:60:7f:54:50:ff:d9:48:c5:7a:6c:8b:28: fd:6f:71:20:c9:93:e2:05:0d:fc:e1:2d:3b:c6:bd:13:4d:b9: 5d:6e:9f:e0:03:f6:da:03:3a:2c:44:71:c2:af:7d:74:7d:66: 09:a3:af:3f:1c:02:ad:32:39:45:a3:fb:cb:ad:e7:58:d4:fe: 85:11:77:27:d2:60:71:66:5c:61:51:8f:0b:99:2a:3b:44:d6: e1:83:29:9f:97:d4:c1:71:ea:98:db:be:bd:1d:ba:1b:18:92: a6:d5:dd:e9:4a:79:2e:df:29:86:63:62:a0:66:be:1b:9a:76: b6:26:ff:a8:3b:c2:a9:35:5b:17:01:ab:28:e7:04:8b:32:a0: f7:95:2b:93:ba:27:35:eb:77:a7:f4:28:ca:12:2f:40:07:19: 0b:6e:70:79:3e:9f:d9:6e:fc:f7:e2:3b:0a:81:48:ab:7f:81: d4:b4:1b:b8:93:18:5f:3b:d5:71:04:71:3c:72:21:de:48:82: 1a:eb:45:43:a4:5f:76:0f:c1:95:a5:68:d1:75:50:d2:eb:8f: 73:84:76:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3HvdXpIPcKFNC/Przj8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzgyNmY2ZGRhNTQwMzQ5MWU0ODdjYTRlZWI3ZDdjZDc2 ZmExM2UwHhcNMjUxMjIyMDcwMDU4WhcNMjUxMjIzMDcwMDU4WjAzMTEwLwYDVQQD EyhhNjAwODFiNDliZDkzNDExNWQ2Y2UwMmUwNGRiZmM2YTQ2M2M5NDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u3wTGe4RXTus7iM3sQM572J6jTx cbIDt0JoMTBH5qycW/+ElW9kFoxgAl2V50PVw+L5jvx7rYCIHbaUvQYsl0CaKAQU Dkaf1lxKGBL3oZAFEv4/+h3aTYPPqtPtKqeaMR4wg86HHQOM1fOi+BoTTmStp/T5 x/bXNtw/a+ToaCTrj5SDDune9IAmAJ1tDgM7XdAQbZjqyB3awdc5lMtok523P+3t wglilT19djZxgJ/dJj+GPESY3Pu/vgduSyIkUm6N6AVVY1BKANh/fr7OPlE6ARC2 uJyjtxOagKPFPUfaRYsT3N/0MGsIuJ6bRMpFKNoFCQ4LKhJdrM9qX5apjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYAgbSb2TQRXWzgLgTb/GpGPJR3MB8GA1UdIwQY MBaAFHN4JvbdpUA0keSHyk7rfXzXb6E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODkt MTNmYTQxMmExN2NmLzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODktMTNmYTQxMmExN2Nm LzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4f4Id/W 6Ftte88sRv6WF+obyYlH7II9HIhS7qXlkHVtzAqMVfdqWntXYH9UUP/ZSMV6bIso /W9xIMmT4gUN/OEtO8a9E025XW6f4AP22gM6LERxwq99dH1mCaOvPxwCrTI5RaP7 y63nWNT+hRF3J9JgcWZcYVGPC5kqO0TW4YMpn5fUwXHqmNu+vR26GxiSptXd6Up5 Lt8phmNioGa+G5p2tib/qDvCqTVbFwGrKOcEizKg95Urk7onNet3p/QoyhIvQAcZ C25weT6f2W789+I7CoFIq3+B1LQbuJMYXzvVcQRxPHIh3kiCGutFQ6Rfdg/BlaVo 0XVQ0uuPc4R2cw== -----END CERTIFICATE-----Generated at Mon Dec 22 13:53:41 2025 by rpki-client