This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json) Hash identifier: IEjvyhKq7fHSSM93L3kyNy7sd8pX30cW3LHwy5ibYqA= Subject key identifier: 36:B7:03:13:39:5D:FD:D0:F3:4B:9B:BA:73:42:44:39:ED:E5:E6:B6 Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Certificate serial: 019B3EDA2490628BA38610428CCF7C1CF7BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft Manifest number: 045C Signing time: Sun 21 Dec 2025 03:00:42 +0000 Manifest this update: Sun 21 Dec 2025 03:00:42 +0000 Manifest next update: Mon 22 Dec 2025 03:00:42 +0000 Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: Q+ql1PhnGLg8BeQgrcyPs1mrMsL6go+2YhdTpE9bH3Y=) 2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:24:90:62:8b:a3:86:10:42:8c:cf:7c:1c:f7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Validity Not Before: Dec 21 03:00:42 2025 GMT Not After : Dec 22 03:00:42 2025 GMT Subject: CN=36b70313395dfdd0f34b9bba73424439ede5e6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e0:13:5b:d3:97:9c:71:4e:66:a7:0a:b6:22: 1d:0f:3f:2f:c9:7e:60:9a:35:2f:18:ce:52:50:d8: 7d:35:02:8b:bb:b1:bb:6b:64:bd:2e:14:d4:0c:d3: 65:cd:a1:ca:b6:64:11:16:09:0e:32:97:0d:34:a1: 97:0b:3f:44:be:e6:66:01:3e:63:b5:9f:60:27:eb: 54:40:9c:21:d5:28:1a:df:c0:e5:a6:69:02:15:da: c2:3f:a2:be:32:de:63:c4:07:73:ee:47:43:5a:a1: d2:91:e4:b1:6b:ea:a0:81:f3:96:74:87:91:dc:dc: 29:06:47:e2:2b:55:59:31:3c:9b:a2:22:4c:79:09: 07:6b:e5:cd:d9:40:76:c9:b7:85:da:24:fa:80:80: c4:e7:e3:61:43:2f:57:74:78:01:44:57:0e:e8:06: c7:7d:e1:6f:4c:cc:ec:f2:42:8a:e0:db:af:ef:aa: 77:79:6e:67:22:ed:03:1c:e0:d4:22:93:45:a9:bb: cb:66:cf:ee:6e:ad:0b:18:51:17:4b:e6:d8:02:99: 47:56:1e:6e:a4:f0:05:4e:bf:78:c8:1c:2c:5a:46: 2c:91:6d:1f:39:ac:8c:c7:10:9a:72:8b:52:1e:e7: ad:c5:7b:45:87:b1:ca:13:c1:25:82:f7:c6:33:27: f3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B7:03:13:39:5D:FD:D0:F3:4B:9B:BA:73:42:44:39:ED:E5:E6:B6 X509v3 Authority Key Identifier: keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:e8:3e:07:db:09:7e:30:1e:37:1f:88:45:ad:10:c5:e1: 93:2d:cb:34:d6:1a:0c:d1:c1:d2:74:ad:bb:f7:77:85:1a:12: 0f:e6:28:f8:d4:5d:37:3b:37:f9:b7:dd:6d:99:50:ab:a5:d9: bc:2d:7c:84:e7:06:64:fc:12:f7:cd:d6:31:b9:37:64:85:89: 6b:06:d5:80:d0:da:a3:29:cd:0c:7b:e5:36:c3:1c:ed:74:2b: 56:51:5c:d7:46:f3:86:04:88:47:80:c2:f1:2e:ea:d0:ac:51: 31:30:02:33:97:6a:66:05:00:25:37:8a:e2:b2:72:5f:1c:5f: 11:f8:46:b2:87:7a:0f:da:cf:34:4b:29:d9:63:4f:03:4f:f8: 40:a3:e6:07:37:12:6f:05:8c:93:8b:76:96:89:29:6c:4a:7b: df:75:69:6a:38:dd:06:38:89:4f:1b:ba:7f:ea:1b:47:89:27: 8b:5f:ac:71:b6:96:2f:e3:93:bc:ab:5a:c6:7f:a0:57:41:e3: db:9b:2b:1a:e2:46:94:ba:c5:ee:3a:a8:a5:5e:b8:c2:57:2e: 52:8e:59:ec:f0:29:59:2f:a6:79:5b:95:cf:86:44:d9:db:3f: 57:58:2b:fb:40:e8:a0:61:64:01:47:32:09:b7:ec:7e:7d:f8: a5:15:c1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2iSQYoujhhBCjM98HPe+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh NzlkYzIwHhcNMjUxMjIxMDMwMDQyWhcNMjUxMjIyMDMwMDQyWjAzMTEwLwYDVQQD EygzNmI3MDMxMzM5NWRmZGQwZjM0YjliYmE3MzQyNDQzOWVkZTVlNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OATW9OXnHFOZqcKtiIdDz8vyX5g mjUvGM5SUNh9NQKLu7G7a2S9LhTUDNNlzaHKtmQRFgkOMpcNNKGXCz9EvuZmAT5j tZ9gJ+tUQJwh1Sga38DlpmkCFdrCP6K+Mt5jxAdz7kdDWqHSkeSxa+qggfOWdIeR 3NwpBkfiK1VZMTyboiJMeQkHa+XN2UB2ybeF2iT6gIDE5+NhQy9XdHgBRFcO6AbH feFvTMzs8kKK4Nuv76p3eW5nIu0DHODUIpNFqbvLZs/ubq0LGFEXS+bYAplHVh5u pPAFTr94yBwsWkYskW0fOayMxxCacotSHuetxXtFh7HKE8ElgvfGMyfzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDa3AxM5Xf3Q80ubunNCRDnt5ea2MB8GA1UdIwQY MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5 LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiLoPgfb CX4wHjcfiEWtEMXhky3LNNYaDNHB0nStu/d3hRoSD+Yo+NRdNzs3+bfdbZlQq6XZ vC18hOcGZPwS983WMbk3ZIWJawbVgNDaoynNDHvlNsMc7XQrVlFc10bzhgSIR4DC 8S7q0KxRMTACM5dqZgUAJTeK4rJyXxxfEfhGsod6D9rPNEsp2WNPA0/4QKPmBzcS bwWMk4t2lokpbEp733VpajjdBjiJTxu6f+obR4kni1+scbaWL+OTvKtaxn+gV0Hj 25srGuJGlLrF7jqopV64wlcuUo5Z7PApWS+meVuVz4ZE2ds/V1gr+0DooGFkAUcy Cbfsfn34pRXBlQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:45:26 2025 by rpki-client