This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json) Hash identifier: kx4ddKBBXOxJUkJudeGLzs3AOBkkT/jM+YAqoIKVx/o= Subject key identifier: 04:94:9C:99:0E:FA:92:15:3A:66:65:B4:36:5E:AA:96:DC:5A:FC:47 Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8 Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8 Certificate serial: 019B454A44E6FF24269ED75A6E9155AB4BC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft Manifest number: 0BA1 Signing time: Mon 22 Dec 2025 09:00:53 +0000 Manifest this update: Mon 22 Dec 2025 09:00:53 +0000 Manifest next update: Tue 23 Dec 2025 09:00:53 +0000 Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: OZobnrASYq7jsUnqOKKz7M6UNmWLSGrQOnUC9F8NTv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:44:e6:ff:24:26:9e:d7:5a:6e:91:55:ab:4b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8 Validity Not Before: Dec 22 09:00:53 2025 GMT Not After : Dec 23 09:00:53 2025 GMT Subject: CN=04949c990efa92153a6665b4365eaa96dc5afc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:8f:0b:d4:28:e7:b7:e9:76:2c:cb:c8:2b: 54:e3:cb:c4:bb:f9:fc:33:b8:9a:18:74:71:55:fc: b6:38:6e:d5:1d:b1:34:da:c3:e3:dd:48:73:24:a6: fc:bc:7c:d9:d7:a0:51:9b:99:33:8d:27:b7:44:77: b1:29:77:f8:50:b6:fd:cc:cb:11:84:31:92:13:17: d6:18:56:61:19:51:68:2d:f2:10:3f:0b:2f:d4:11: f1:2d:00:28:ca:52:ad:28:1d:57:ec:71:3c:38:d9: 73:c1:13:43:81:7c:ab:6b:8b:7a:81:fb:b1:28:98: 20:08:32:8a:05:0e:7a:73:7b:5c:ed:6d:e0:ea:56: f0:a9:03:ba:0c:44:ee:18:7b:79:fb:9d:e2:ec:b4: c0:3d:0c:48:90:77:0f:8a:2e:a7:51:45:89:91:62: 95:35:38:2e:0c:0a:25:61:84:55:c5:9a:ae:6c:88: 11:91:db:41:a3:32:9d:4f:25:fa:ec:d7:6f:f4:c4: d9:e6:06:ec:fe:be:cc:d3:6a:9a:26:db:92:21:9d: 73:fd:29:54:5d:43:10:0f:d1:b5:1d:b9:93:59:4e: 65:1c:5b:43:9c:42:24:01:c6:92:f5:23:6e:0f:1b: eb:60:d9:05:9a:ff:2d:eb:d8:76:91:e3:ae:6c:d5: 17:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:9C:99:0E:FA:92:15:3A:66:65:B4:36:5E:AA:96:DC:5A:FC:47 X509v3 Authority Key Identifier: keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:2c:fd:85:ec:c2:63:56:4d:10:6b:73:be:6e:d0:79:84:d8: 5d:33:2a:11:56:94:a0:2f:1f:07:5e:eb:69:4c:68:65:d2:ed: 66:83:68:47:f8:38:d0:db:b6:27:c2:27:61:a7:71:80:1f:bc: 81:4d:07:37:b5:d7:51:9e:63:a0:4c:ac:4c:6c:87:c5:53:9f: 77:f7:49:37:df:8e:cb:1f:83:7d:78:85:24:67:81:25:e8:80: a6:7d:0d:f5:3d:f6:3e:d5:a6:43:f3:89:db:b0:47:f1:92:f1: af:80:72:f5:7c:19:ef:5b:e5:8a:5c:2b:b1:39:df:28:2e:3f: 6f:bd:70:02:c9:4f:5b:ec:45:a0:ab:b9:28:11:09:76:94:79: 8e:c3:5d:5b:45:d9:37:a2:73:24:21:f3:49:f5:ca:83:7c:7a: 9b:44:3b:82:54:9b:54:1e:68:31:c7:a1:11:b1:3a:b3:54:bf: 5f:ba:73:87:42:15:3a:e9:c4:3d:d4:12:e1:02:d3:9a:e0:67: 23:07:78:31:3e:a2:b8:f3:65:f3:9c:03:cb:6d:bc:52:a1:94: a0:a6:af:ce:5d:ab:d6:39:1e:28:04:17:99:64:af:8e:a1:ac: 09:80:e8:b4:7a:df:d2:2f:a6:25:2c:25:c7:20:28:21:c6:0b: 99:5d:69:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSkTm/yQmntdabpFVq0vGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl YTI5YzgwHhcNMjUxMjIyMDkwMDUzWhcNMjUxMjIzMDkwMDUzWjAzMTEwLwYDVQQD EygwNDk0OWM5OTBlZmE5MjE1M2E2NjY1YjQzNjVlYWE5NmRjNWFmYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnePC9Qo57fpdizLyCtU48vEu/n8 M7iaGHRxVfy2OG7VHbE02sPj3UhzJKb8vHzZ16BRm5kzjSe3RHexKXf4ULb9zMsR hDGSExfWGFZhGVFoLfIQPwsv1BHxLQAoylKtKB1X7HE8ONlzwRNDgXyra4t6gfux KJggCDKKBQ56c3tc7W3g6lbwqQO6DETuGHt5+53i7LTAPQxIkHcPii6nUUWJkWKV NTguDAolYYRVxZqubIgRkdtBozKdTyX67Ndv9MTZ5gbs/r7M02qaJtuSIZ1z/SlU XUMQD9G1HbmTWU5lHFtDnEIkAcaS9SNuDxvrYNkFmv8t69h2keOubNUXrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASUnJkO+pIVOmZltDZeqpbcWvxHMB8GA1UdIwQY MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyyz9hezC Y1ZNEGtzvm7QeYTYXTMqEVaUoC8fB17raUxoZdLtZoNoR/g40Nu2J8InYadxgB+8 gU0HN7XXUZ5joEysTGyHxVOfd/dJN9+Oyx+DfXiFJGeBJeiApn0N9T32PtWmQ/OJ 27BH8ZLxr4By9XwZ71vlilwrsTnfKC4/b71wAslPW+xFoKu5KBEJdpR5jsNdW0XZ N6JzJCHzSfXKg3x6m0Q7glSbVB5oMcehEbE6s1S/X7pzh0IVOunEPdQS4QLTmuBn Iwd4MT6iuPNl85wDy228UqGUoKavzl2r1jkeKAQXmWSvjqGsCYDotHrf0i+mJSwl xyAoIcYLmV1pNQ== -----END CERTIFICATE-----Generated at Mon Dec 22 16:07:04 2025 by rpki-client