This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json) Hash identifier: Mxi1LYniDneDcp82PQjUKZKqyqrD1v8o6OkDOid4LZo= Subject key identifier: 20:D5:28:EF:47:1B:44:FE:62:95:D6:35:B4:77:95:13:C1:E0:1B:C5 Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42 Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842 Certificate serial: 019B4FCFB0946C3973CDDCB38FB2DC4894E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft Manifest number: 1298 Signing time: Wed 24 Dec 2025 10:02:49 +0000 Manifest this update: Wed 24 Dec 2025 10:02:49 +0000 Manifest next update: Thu 25 Dec 2025 10:02:49 +0000 Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: 9iDfgmpYP5UvZTpzj4AfN21W2H/9Pg5iKez5V47hFYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:b0:94:6c:39:73:cd:dc:b3:8f:b2:dc:48:94:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842 Validity Not Before: Dec 24 10:02:49 2025 GMT Not After : Dec 25 10:02:49 2025 GMT Subject: CN=20d528ef471b44fe6295d635b4779513c1e01bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:d7:6f:71:d3:18:6d:5d:6f:d6:bf:e9:f7: 1b:d1:c3:47:1e:8f:f8:b0:d4:93:8f:85:f4:da:1a: 53:ae:95:4f:65:0f:20:e6:97:ff:bb:3f:81:c8:57: 61:3a:9c:2e:a5:ba:b0:85:36:26:b4:42:2a:59:94: 1d:29:32:b4:0d:f9:54:30:f4:98:79:0e:09:1b:74: 0d:4c:12:cd:44:fd:3e:0b:dc:83:db:2a:88:49:fd: 01:ca:c6:0c:82:b8:d3:2a:d5:2d:0f:d5:ec:ca:5d: fc:1a:67:24:b5:c3:96:5c:2e:bb:a5:14:8a:04:44: 3f:03:1b:9b:b6:53:26:84:3a:85:ec:8b:f7:26:e2: f6:d8:b1:c4:aa:43:60:6c:82:ad:6c:77:30:c7:8a: f3:4b:25:5d:50:1c:bd:b4:f0:7a:2a:5c:32:9c:bb: ab:d0:91:ca:dd:ce:30:b9:01:29:3a:b3:d2:c7:f5: a9:56:c5:18:a2:1b:59:27:10:6d:69:17:4e:11:e7: be:a5:e8:82:ed:7f:fc:ab:da:39:95:29:42:68:81: cc:83:4b:5e:f9:d4:bc:c1:6e:22:63:41:e0:e7:48: 8e:08:d7:dd:a8:10:88:89:86:88:86:cc:5c:90:76: ae:9b:43:b1:d1:7b:0c:ed:7e:29:e8:df:29:49:ed: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:28:EF:47:1B:44:FE:62:95:D6:35:B4:77:95:13:C1:E0:1B:C5 X509v3 Authority Key Identifier: keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:31:88:ab:71:dd:13:d1:22:4b:b1:20:c5:3f:7c:a2:e0:32: 1e:1e:12:71:e0:01:e2:98:86:14:39:a6:49:b3:50:6a:f5:fe: 71:40:c6:03:18:00:d3:86:4c:47:3e:af:fa:87:8c:47:28:2b: 8f:b3:e3:98:74:79:8d:76:85:f4:70:f6:9e:c6:5c:5a:f9:b7: e9:8c:2c:fe:7c:80:17:d5:94:60:76:f8:4c:e6:b7:12:4b:ae: b0:45:09:13:fb:6f:a0:c6:fe:01:ab:67:ef:4d:f1:bf:56:63: 68:7f:20:38:65:ab:88:dd:d5:b1:99:a2:3f:2c:ab:42:3f:f2: 53:92:c5:b6:81:bd:2b:30:31:a9:bb:32:3d:83:4c:c4:de:cd: 72:81:a2:a9:fb:57:75:26:fd:8b:e4:f6:a2:cd:7f:81:69:9a: 06:58:32:9f:ad:32:f0:25:ca:5f:c1:40:2f:9c:23:40:65:d5: 10:51:ed:ce:16:ca:6d:77:0c:20:6e:94:3c:71:56:25:f2:3e: 6a:85:5b:cb:91:f6:0d:d2:74:03:65:40:ba:71:68:aa:46:d3: b3:db:c9:89:65:23:b8:43:e6:ea:90:a7:0d:31:28:0c:25:20: 6e:28:25:16:1c:7d:c1:71:3d:11:fa:ab:cf:aa:c2:c5:6c:29: d1:4e:c8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz7CUbDlzzdyzj7LcSJTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZWY1YmQzNzYyZWY2MGZhNzhlZDU1ZjU0NGZhM2EwNTEz ZmQ4NDIwHhcNMjUxMjI0MTAwMjQ5WhcNMjUxMjI1MTAwMjQ5WjAzMTEwLwYDVQQD EygyMGQ1MjhlZjQ3MWI0NGZlNjI5NWQ2MzViNDc3OTUxM2MxZTAxYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArofXb3HTGG1db9a/6fcb0cNHHo/4 sNSTj4X02hpTrpVPZQ8g5pf/uz+ByFdhOpwupbqwhTYmtEIqWZQdKTK0DflUMPSY eQ4JG3QNTBLNRP0+C9yD2yqISf0BysYMgrjTKtUtD9Xsyl38GmcktcOWXC67pRSK BEQ/AxubtlMmhDqF7Iv3JuL22LHEqkNgbIKtbHcwx4rzSyVdUBy9tPB6KlwynLur 0JHK3c4wuQEpOrPSx/WpVsUYohtZJxBtaRdOEee+peiC7X/8q9o5lSlCaIHMg0te +dS8wW4iY0Hg50iOCNfdqBCIiYaIhsxckHaum0Ox0XsM7X4p6N8pSe3JuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDVKO9HG0T+YpXWNbR3lRPB4BvFMB8GA1UdIwQY MBaAFHPvW9N2LvYPp47VX1RPo6BRP9hCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQt YjU0NmEyZDIwOGYyLzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQtYjU0NmEyZDIwOGYy LzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDGIq3Hd E9EiS7EgxT98ouAyHh4SceAB4piGFDmmSbNQavX+cUDGAxgA04ZMRz6v+oeMRygr j7PjmHR5jXaF9HD2nsZcWvm36Yws/nyAF9WUYHb4TOa3EkuusEUJE/tvoMb+Aatn 703xv1ZjaH8gOGWriN3VsZmiPyyrQj/yU5LFtoG9KzAxqbsyPYNMxN7NcoGiqftX dSb9i+T2os1/gWmaBlgyn60y8CXKX8FAL5wjQGXVEFHtzhbKbXcMIG6UPHFWJfI+ aoVby5H2DdJ0A2VAunFoqkbTs9vJiWUjuEPm6pCnDTEoDCUgbiglFhx9wXE9Efqr z6rCxWwp0U7ImQ== -----END CERTIFICATE-----Generated at Wed Dec 24 16:40:27 2025 by rpki-client