This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json) Hash identifier: XiWSQuw9X4rHGmw84k9RCHTuS8xzkabnojqH+S/92hI= Subject key identifier: C1:7D:4F:E3:60:57:C1:41:5F:4B:61:25:84:FF:7C:83:8C:4F:6C:77 Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Certificate serial: 019B435BC0472041BF6DD6B14B1FE1F3271F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 00:00:45 +0000 Manifest this update: Mon 22 Dec 2025 00:00:45 +0000 Manifest next update: Tue 23 Dec 2025 00:00:45 +0000 Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: PJt5NMMZtIrN3RlwzJc0Qj0E8zGGLg9wXAK1i7HwNCg=) 2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:c0:47:20:41:bf:6d:d6:b1:4b:1f:e1:f3:27:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Validity Not Before: Dec 22 00:00:45 2025 GMT Not After : Dec 23 00:00:45 2025 GMT Subject: CN=c17d4fe36057c1415f4b612584ff7c838c4f6c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ba:53:29:7d:9c:1d:99:18:d5:98:31:59:57: 17:3e:dc:dd:45:64:84:23:c6:28:0a:2c:15:4c:a8: 73:16:51:d4:b2:1a:5a:0d:85:4f:d4:2d:18:24:0f: 83:23:95:3e:42:f3:9e:eb:d5:5b:55:2d:53:33:7a: 28:2e:d4:32:e5:9f:bd:82:ab:52:e3:db:65:05:81: 86:5b:3d:ca:1c:5c:6f:95:69:58:75:86:2b:32:3d: d4:b6:00:6b:70:17:a3:03:66:e2:dd:f5:06:0d:ba: 14:56:b9:4d:9b:0e:c4:39:33:3c:0e:0c:98:4c:ba: 14:ba:1d:42:f0:94:f5:44:ac:1b:cf:36:08:ce:ca: 87:4f:df:c0:d5:71:19:40:3d:79:81:dc:32:de:3b: 30:70:05:09:19:48:46:45:a3:0a:af:b6:f9:71:47: b2:81:7e:23:36:da:a0:47:22:ca:86:a4:c4:2a:f9: 10:f0:f4:75:9e:21:17:63:50:7c:c6:35:68:f3:53: 2e:eb:1f:95:28:fa:42:57:7e:a9:58:af:5f:53:dd: 69:05:d0:94:66:74:1b:1f:0b:09:c9:73:b7:2a:6d: a8:4e:a0:7d:00:21:0b:14:fb:24:18:fc:8b:4b:6f: 27:e4:18:92:ae:36:ee:29:1a:d7:fd:37:44:64:e9: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7D:4F:E3:60:57:C1:41:5F:4B:61:25:84:FF:7C:83:8C:4F:6C:77 X509v3 Authority Key Identifier: keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:ed:e4:80:b6:a0:ed:2f:28:65:61:80:1f:e8:5e:b5:cb: c2:90:bf:59:93:50:10:0f:86:49:93:e9:70:b5:4b:e7:b1:54: 15:e8:5d:62:c5:a5:93:b4:ad:78:70:6b:c3:c1:77:f1:95:b1: a6:38:cc:3c:ee:9b:a8:ff:73:f8:73:7f:9f:a6:52:6e:14:2f: 99:63:44:43:d7:6b:95:9c:ad:4c:c2:29:f3:49:5d:d7:59:f7: 76:36:97:ce:56:f3:ef:db:b6:15:2f:4a:da:08:a3:92:6f:b5: e4:03:21:0b:33:17:30:9d:20:bd:35:af:4b:b7:af:7f:33:71: 29:be:84:7f:6c:02:cf:50:89:80:38:a7:02:ac:14:96:04:99: b0:0e:49:81:e3:ef:f1:21:b7:c0:9b:e1:c6:2b:fa:52:07:ab: ca:f5:33:d5:87:0e:5e:24:9c:ea:13:df:78:6d:e9:7c:c8:e6: 17:fd:49:0b:b8:8b:aa:95:80:03:c2:67:49:11:8a:fb:c0:2a: d9:1b:af:0d:0f:f0:a4:cc:d7:a2:9c:8f:9e:62:ee:8c:5b:7f: 1a:ae:ad:a2:e5:9e:ef:ab:f2:98:96:78:d3:60:d8:c6:18:4d: c7:82:db:1e:43:02:1c:03:36:9a:06:98:03:06:04:30:9d:df: 3b:d2:3a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8BHIEG/bdaxSx/h8ycfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz YWMwNDMwHhcNMjUxMjIyMDAwMDQ1WhcNMjUxMjIzMDAwMDQ1WjAzMTEwLwYDVQQD EyhjMTdkNGZlMzYwNTdjMTQxNWY0YjYxMjU4NGZmN2M4MzhjNGY2Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87pTKX2cHZkY1ZgxWVcXPtzdRWSE I8YoCiwVTKhzFlHUshpaDYVP1C0YJA+DI5U+QvOe69VbVS1TM3ooLtQy5Z+9gqtS 49tlBYGGWz3KHFxvlWlYdYYrMj3UtgBrcBejA2bi3fUGDboUVrlNmw7EOTM8DgyY TLoUuh1C8JT1RKwbzzYIzsqHT9/A1XEZQD15gdwy3jswcAUJGUhGRaMKr7b5cUey gX4jNtqgRyLKhqTEKvkQ8PR1niEXY1B8xjVo81Mu6x+VKPpCV36pWK9fU91pBdCU ZnQbHwsJyXO3Km2oTqB9ACELFPskGPyLS28n5BiSrjbuKRrX/TdEZOm5tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF9T+NgV8FBX0thJYT/fIOMT2x3MB8GA1UdIwQY MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexTt5IC2 oO0vKGVhgB/oXrXLwpC/WZNQEA+GSZPpcLVL57FUFehdYsWlk7SteHBrw8F38ZWx pjjMPO6bqP9z+HN/n6ZSbhQvmWNEQ9drlZytTMIp80ld11n3djaXzlbz79u2FS9K 2gijkm+15AMhCzMXMJ0gvTWvS7evfzNxKb6Ef2wCz1CJgDinAqwUlgSZsA5JgePv 8SG3wJvhxiv6UgeryvUz1YcOXiSc6hPfeG3pfMjmF/1JC7iLqpWAA8JnSRGK+8Aq 2RuvDQ/wpMzXopyPnmLujFt/Gq6touWe76vymJZ402DYxhhNx4LbHkMCHAM2mgaY AwYEMJ3fO9I6iw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:36:59 2025 by rpki-client