This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json) Hash identifier: CmTIA0jswXvu0cssAz+o46msad3eCfwRh4df39ZO740= Subject key identifier: D5:4F:1D:31:1F:B4:5B:61:11:2D:75:CF:EB:16:31:59:9C:A8:D4:A4 Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Certificate serial: 019B44DCF1173C06CFBA906D44DECA5D545E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft Manifest number: 0F3F Signing time: Mon 22 Dec 2025 07:01:28 +0000 Manifest this update: Mon 22 Dec 2025 07:01:28 +0000 Manifest next update: Tue 23 Dec 2025 07:01:28 +0000 Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: ANb0WShdlQHmtLkhVGw7y+ZX5rZsyuBwljluW3i03BM=) 2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=) 3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=) 4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:f1:17:3c:06:cf:ba:90:6d:44:de:ca:5d:54:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f Validity Not Before: Dec 22 07:01:28 2025 GMT Not After : Dec 23 07:01:28 2025 GMT Subject: CN=d54f1d311fb45b61112d75cfeb1631599ca8d4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:61:21:28:e5:d8:73:2c:d4:9d:fd:34:d2:29: 75:2f:2e:ba:8b:04:3c:a4:c1:1f:fa:bd:19:0a:30: dc:81:06:50:72:a9:ca:29:5b:90:98:39:b8:83:34: de:f1:23:ff:d1:2b:f5:3f:2c:a3:b7:39:42:83:b7: 30:ee:d0:75:cb:49:15:a0:c9:43:46:7f:d2:e6:ab: 1b:88:c4:9a:2c:75:0a:c0:e3:79:02:15:eb:d9:54: 13:ba:b1:43:16:99:4e:58:a6:12:56:9a:04:2e:be: 3f:54:7a:df:80:a9:12:8b:bf:97:e1:c6:1d:b5:af: 18:f9:6a:10:7f:03:bd:f5:db:b4:b6:60:9c:37:4e: d7:6a:07:41:9c:7e:e9:7f:fb:88:b8:8b:96:49:b2: f1:d9:46:c0:bd:a3:0a:4b:e1:d6:59:e5:4a:0f:03: 00:9b:7f:11:af:fb:38:15:07:22:95:56:61:2d:98: a8:f9:3a:0a:7e:90:e3:be:f9:81:95:83:3e:59:5a: a3:03:ea:cf:32:66:4e:77:06:36:4b:ca:29:2f:fb: 41:19:10:e4:3d:3a:82:72:44:a1:f1:ea:73:79:88: a7:37:ce:7e:77:f5:86:e5:1f:e7:f7:00:2e:5e:86: d6:b1:56:86:38:8f:c5:a3:c5:67:74:7f:26:54:5c: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4F:1D:31:1F:B4:5B:61:11:2D:75:CF:EB:16:31:59:9C:A8:D4:A4 X509v3 Authority Key Identifier: keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4b:25:23:77:f0:f3:2b:d6:cd:65:9d:4a:a2:05:46:b9:0b: 2b:d9:66:7a:79:76:e2:8c:f0:1e:97:79:5d:4e:bd:11:53:12: be:9d:e4:67:11:d1:36:88:d9:6d:bb:33:3d:8e:f9:19:45:32: 1d:32:70:4a:78:7a:d7:7b:da:af:bd:03:ce:3f:09:02:06:d8: ac:e1:7f:10:fd:03:50:8d:5a:9a:cc:9a:99:d2:52:de:aa:f8: 28:78:15:8c:d2:99:a5:e7:a2:8e:3e:51:54:66:de:57:05:5e: b0:f6:50:89:58:92:86:4d:18:f2:f3:7c:be:5e:15:a2:1c:28: 63:8a:c3:2f:b7:0a:f1:40:31:bd:f9:46:d7:7e:63:0c:f0:15: 65:19:d1:ea:c1:20:c9:24:df:3d:d6:cb:3c:19:15:ca:e2:b0: d7:7d:56:90:88:5f:1a:76:2c:a4:4c:04:d2:9c:06:89:db:ef: fe:28:18:88:5b:db:59:12:02:3f:3a:a7:d1:95:ac:07:4f:1a: 33:ff:87:a1:0f:70:92:42:66:b1:5c:77:83:52:68:22:fd:5f: d1:b2:19:c2:5b:e4:d9:3e:83:b1:f8:94:be:f8:6d:9b:c2:d0: 6e:47:5d:87:36:b3:e0:61:a0:4e:69:a7:dd:e1:e6:a8:12:c0: d0:0e:22:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3PEXPAbPupBtRN7KXVReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4 OTI1MmYwHhcNMjUxMjIyMDcwMTI4WhcNMjUxMjIzMDcwMTI4WjAzMTEwLwYDVQQD EyhkNTRmMWQzMTFmYjQ1YjYxMTEyZDc1Y2ZlYjE2MzE1OTljYThkNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGEhKOXYcyzUnf000il1Ly66iwQ8 pMEf+r0ZCjDcgQZQcqnKKVuQmDm4gzTe8SP/0Sv1PyyjtzlCg7cw7tB1y0kVoMlD Rn/S5qsbiMSaLHUKwON5AhXr2VQTurFDFplOWKYSVpoELr4/VHrfgKkSi7+X4cYd ta8Y+WoQfwO99du0tmCcN07XagdBnH7pf/uIuIuWSbLx2UbAvaMKS+HWWeVKDwMA m38Rr/s4FQcilVZhLZio+ToKfpDjvvmBlYM+WVqjA+rPMmZOdwY2S8opL/tBGRDk PTqCckSh8epzeYinN85+d/WG5R/n9wAuXobWsVaGOI/Fo8VndH8mVFxHpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVPHTEftFthES11z+sWMVmcqNSkMB8GA1UdIwQY MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkslI3fw 8yvWzWWdSqIFRrkLK9lmenl24ozwHpd5XU69EVMSvp3kZxHRNojZbbszPY75GUUy HTJwSnh613var70Dzj8JAgbYrOF/EP0DUI1amsyamdJS3qr4KHgVjNKZpeeijj5R VGbeVwVesPZQiViShk0Y8vN8vl4VohwoY4rDL7cK8UAxvflG135jDPAVZRnR6sEg ySTfPdbLPBkVyuKw131WkIhfGnYspEwE0pwGidvv/igYiFvbWRICPzqn0ZWsB08a M/+HoQ9wkkJmsVx3g1JoIv1f0bIZwlvk2T6DsfiUvvhtm8LQbkddhzaz4GGgTmmn 3eHmqBLA0A4i8Q== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:17 2025 by rpki-client