This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json) Hash identifier: rWAcGE8yfHBTH/TeWgivoWvKNPVvMEkKGf61qRon5b8= Subject key identifier: DF:BC:42:3C:84:7D:FF:AA:2E:39:F3:F2:90:8C:0B:7C:28:AF:07:7B Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6 Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6 Certificate serial: 019B2B8A8CCC136D7071E40131049AEB5D5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 09:00:58 +0000 Manifest this update: Wed 17 Dec 2025 09:00:58 +0000 Manifest next update: Thu 18 Dec 2025 09:00:58 +0000 Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=) 2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: CAEkTVLDX2o1smaV4cDKhnVhxbXHd84OXQdr2ec3nps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:8c:cc:13:6d:70:71:e4:01:31:04:9a:eb:5d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6 Validity Not Before: Dec 17 09:00:58 2025 GMT Not After : Dec 18 09:00:58 2025 GMT Subject: CN=dfbc423c847dffaa2e39f3f2908c0b7c28af077b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:2c:5d:62:4a:2b:62:32:1d:f2:d4:fc:46: 44:b4:07:b0:58:5e:a6:1e:6b:93:16:98:02:de:ca: 07:86:aa:fa:e8:6a:46:96:e4:64:62:f3:77:dd:f6: 4b:97:1f:b4:3c:dd:40:85:7d:e4:66:82:59:a6:d9: fd:1b:74:46:1c:6b:1e:04:d0:e1:01:12:83:b3:98: 5c:bd:1e:3f:f8:67:ef:f2:74:c6:bb:94:96:fc:89: df:a3:0b:8a:81:ec:1e:e2:46:98:17:ad:00:e2:b3: 8f:69:61:f6:10:e4:16:67:7a:f4:27:a2:64:c9:0e: 84:f9:2c:22:63:13:35:41:c0:af:4c:de:be:86:89: f4:5d:0c:1b:75:b1:43:4a:a0:56:50:b9:0b:25:f4: d3:d5:e1:cd:4a:d0:c7:d3:9e:01:e3:eb:bd:c0:9f: 97:0f:13:9c:43:e4:5f:4d:21:c5:fd:32:03:fa:96: bb:40:e8:04:eb:15:ec:0a:1b:b1:e1:1c:71:3d:52: bf:3b:2e:00:30:bf:f0:00:d7:5b:92:e0:41:ba:0c: 51:7b:89:d6:5d:97:05:cd:47:8a:d9:65:56:6a:f1: 20:b4:6a:82:39:d9:73:be:8d:ca:9e:de:19:fe:5e: 36:48:dd:ad:30:dc:e0:da:ec:f9:ce:08:00:d2:e7: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:42:3C:84:7D:FF:AA:2E:39:F3:F2:90:8C:0B:7C:28:AF:07:7B X509v3 Authority Key Identifier: keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:e2:a5:e5:28:4b:a8:8a:79:49:b1:f1:a4:32:32:a8:81: bd:02:25:00:28:7f:d7:8a:b7:7e:12:3a:a4:f3:c3:7e:07:21: 2b:92:23:e8:8b:00:76:da:de:37:e9:3b:b8:3e:d6:83:bf:38: 2b:9c:44:09:52:ce:42:87:e5:42:f7:7f:77:1f:69:c8:e8:dd: 5a:82:d1:a1:46:17:55:80:fc:17:82:b9:e1:1f:ff:cc:82:46: 81:84:52:60:82:5c:79:ac:52:d7:45:4e:82:0a:85:96:3e:73: ff:a0:2e:b1:19:e0:39:be:c9:20:a9:d0:c6:ff:e7:e1:7b:6e: 56:88:eb:42:35:c2:2c:71:55:e6:49:8b:b1:ec:bd:98:01:bd: 3d:96:ce:a1:aa:80:65:3f:85:8b:a5:8f:98:3d:42:3d:ba:6d: f4:b6:9f:38:35:89:6b:6c:30:d8:ec:57:e0:72:cf:f9:91:7a: 9d:3a:eb:22:8f:3a:f5:f9:2d:e0:e7:14:bb:f8:c0:54:d0:9f: 89:bb:8a:15:7b:34:4e:bb:6f:74:77:b3:88:75:05:c0:50:2f: 0b:86:a7:98:2f:5d:10:f7:8e:2e:86:21:4a:95:e2:16:49:9e: 34:f8:a5:2d:74:7a:71:ae:02:0d:44:ee:f9:09:ec:82:fe:91: 97:44:5c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriozME21wceQBMQSa611dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj MGFjYTYwHhcNMjUxMjE3MDkwMDU4WhcNMjUxMjE4MDkwMDU4WjAzMTEwLwYDVQQD EyhkZmJjNDIzYzg0N2RmZmFhMmUzOWYzZjI5MDhjMGI3YzI4YWYwNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+MsXWJKK2IyHfLU/EZEtAewWF6m HmuTFpgC3soHhqr66GpGluRkYvN33fZLlx+0PN1AhX3kZoJZptn9G3RGHGseBNDh ARKDs5hcvR4/+Gfv8nTGu5SW/InfowuKgewe4kaYF60A4rOPaWH2EOQWZ3r0J6Jk yQ6E+SwiYxM1QcCvTN6+hon0XQwbdbFDSqBWULkLJfTT1eHNStDH054B4+u9wJ+X DxOcQ+RfTSHF/TID+pa7QOgE6xXsChux4RxxPVK/Oy4AML/wANdbkuBBugxRe4nW XZcFzUeK2WVWavEgtGqCOdlzvo3Knt4Z/l42SN2tMNzg2uz5zggA0uc0wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+8QjyEff+qLjnz8pCMC3worwd7MB8GA1UdIwQY MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwHipeUo S6iKeUmx8aQyMqiBvQIlACh/14q3fhI6pPPDfgchK5Ij6IsAdtreN+k7uD7Wg784 K5xECVLOQoflQvd/dx9pyOjdWoLRoUYXVYD8F4K54R//zIJGgYRSYIJceaxS10VO ggqFlj5z/6AusRngOb7JIKnQxv/n4XtuVojrQjXCLHFV5kmLsey9mAG9PZbOoaqA ZT+Fi6WPmD1CPbpt9LafODWJa2ww2OxX4HLP+ZF6nTrrIo869fkt4OcUu/jAVNCf ibuKFXs0TrtvdHeziHUFwFAvC4anmC9dEPeOLoYhSpXiFkmeNPilLXR6ca4CDUTu +Qnsgv6Rl0RciQ== -----END CERTIFICATE-----Generated at Wed Dec 17 16:48:09 2025 by rpki-client