This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json) Hash identifier: VnmwvPtsru65u92aaLBvQDPhMPq8uPrN5dwc4lnKb0Q= Subject key identifier: 2B:86:CA:B1:E3:56:21:92:B2:E3:5E:C6:85:80:A1:83:30:6D:63:2F Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93 Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693 Certificate serial: 019B4EBBCD9E040861F37B72159D77B90F48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft Manifest number: 171E Signing time: Wed 24 Dec 2025 05:01:29 +0000 Manifest this update: Wed 24 Dec 2025 05:01:29 +0000 Manifest next update: Thu 25 Dec 2025 05:01:29 +0000 Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: y1iH4OOz/HSlM3DzuBnsemK2V3ABoHgQpd2MOIjepc0=) 2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=) 3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:cd:9e:04:08:61:f3:7b:72:15:9d:77:b9:0f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693 Validity Not Before: Dec 24 05:01:29 2025 GMT Not After : Dec 25 05:01:29 2025 GMT Subject: CN=2b86cab1e3562192b2e35ec68580a183306d632f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:a0:fd:8d:5a:96:ae:78:c1:55:fb:5c:e6: 14:cc:98:91:15:9b:b2:95:08:55:dd:7d:e4:c8:c1: 86:b5:1c:88:d8:89:59:18:8f:be:f6:80:f7:d6:29: e2:93:52:e8:a2:5d:da:e0:cb:8e:a4:33:5d:4c:7b: 65:5f:32:6c:7e:75:5e:d6:f4:23:09:7b:a5:bc:2b: 41:41:46:6e:e6:83:50:30:0d:e6:e6:26:89:1d:6b: 2c:d5:88:e3:42:99:b0:d0:f9:dd:8c:6b:4e:3c:35: fa:8a:13:78:08:f9:a0:81:98:1c:3b:33:a1:a3:b6: ad:79:99:42:d6:27:f9:b1:40:29:3c:0b:0a:d4:b7: 2f:b9:72:cc:af:e7:d2:f1:1e:62:79:df:13:a9:62: 67:41:19:48:a5:39:1b:e1:64:a2:c3:d2:8e:d7:70: 26:f8:e4:42:3a:66:1d:a5:60:1d:56:c2:df:c3:58: 20:b7:39:b1:c5:59:d4:0d:a6:24:0d:f9:02:7c:78: a2:2f:58:b8:2b:f2:aa:64:f7:ca:58:4a:96:4a:b5: 6d:31:09:c4:f8:81:fd:bd:7c:61:a6:ca:3b:d1:51: 4e:71:52:53:d0:1a:37:c8:52:7d:42:33:ee:71:10: ff:eb:0a:e1:35:53:86:25:89:1d:25:ac:5c:96:03: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:CA:B1:E3:56:21:92:B2:E3:5E:C6:85:80:A1:83:30:6D:63:2F X509v3 Authority Key Identifier: keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:11:3a:0e:ec:f0:c2:61:83:a7:e7:ab:f3:fe:ab:f7:66:08: 52:28:71:65:39:00:11:9b:48:bc:85:6c:b6:e9:e0:b2:27:d5: dc:03:09:01:d7:ba:ae:44:f3:fb:ef:e0:a4:fc:92:a4:70:cd: 2e:a9:c3:a7:32:56:a0:3e:8e:6a:97:1f:43:d2:be:14:c8:e6: 50:1c:4f:21:74:24:08:b5:74:9f:e7:40:bd:37:29:10:8f:66: c7:57:80:f6:a8:99:de:1b:f0:8d:ed:e6:86:83:c6:c5:81:49: 23:7c:87:3f:73:c6:ee:8e:17:d8:95:f1:c6:fe:08:c5:87:45: b4:74:1f:9d:98:18:6a:77:dc:3d:81:48:26:5a:99:bc:79:7b: fa:84:1f:c8:35:fd:fb:70:af:86:f1:df:1a:3e:d6:f7:be:be: 52:dd:ba:f6:8b:07:bb:5f:45:05:6f:3e:b2:7c:f8:50:21:ee: 66:9e:b7:d1:50:1a:eb:5e:39:00:8f:d3:7d:6c:ab:a8:06:a5: 01:83:20:10:53:11:25:40:fc:cf:6b:57:29:61:ab:7d:ee:5f: b3:a9:a9:e6:60:74:5d:fb:9f:20:b6:65:cf:50:b9:04:58:1c: 3b:4f:92:11:58:fa:a7:38:a7:d1:51:f6:50:16:e8:91:fa:a4: c1:27:51:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu82eBAhh83tyFZ13uQ9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWQ0M2Y0MDljYjM1Y2ViNWU3N2I1NmQwYmJjOWE0Y2My ZDI2OTMwHhcNMjUxMjI0MDUwMTI5WhcNMjUxMjI1MDUwMTI5WjAzMTEwLwYDVQQD EygyYjg2Y2FiMWUzNTYyMTkyYjJlMzVlYzY4NTgwYTE4MzMwNmQ2MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKg/Y1alq54wVX7XOYUzJiRFZuy lQhV3X3kyMGGtRyI2IlZGI++9oD31inik1Lool3a4MuOpDNdTHtlXzJsfnVe1vQj CXulvCtBQUZu5oNQMA3m5iaJHWss1YjjQpmw0PndjGtOPDX6ihN4CPmggZgcOzOh o7ateZlC1if5sUApPAsK1LcvuXLMr+fS8R5ied8TqWJnQRlIpTkb4WSiw9KO13Am +ORCOmYdpWAdVsLfw1ggtzmxxVnUDaYkDfkCfHiiL1i4K/KqZPfKWEqWSrVtMQnE +IH9vXxhpso70VFOcVJT0Bo3yFJ9QjPucRD/6wrhNVOGJYkdJaxclgN3lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuGyrHjViGSsuNexoWAoYMwbWMvMB8GA1UdIwQY MBaAFAvtQ/QJyzXOted7VtC7yaTMLSaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMt ZDgwOGIxYWZhODgxLzEvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jNzQzY2ItODEzNy00NTVhLWE1NzMtZDgwOGIxYWZhODgx LzEvQy0xRDlBbkxOYzYxNTN0VzBMdkpwTXd0SnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhE6Duzw wmGDp+er8/6r92YIUihxZTkAEZtIvIVstungsifV3AMJAde6rkTz++/gpPySpHDN LqnDpzJWoD6OapcfQ9K+FMjmUBxPIXQkCLV0n+dAvTcpEI9mx1eA9qiZ3hvwje3m hoPGxYFJI3yHP3PG7o4X2JXxxv4IxYdFtHQfnZgYanfcPYFIJlqZvHl7+oQfyDX9 +3CvhvHfGj7W976+Ut269osHu19FBW8+snz4UCHuZp630VAa6145AI/TfWyrqAal AYMgEFMRJUD8z2tXKWGrfe5fs6mp5mB0XfufILZlz1C5BFgcO0+SEVj6pzin0VH2 UBbokfqkwSdRyA== -----END CERTIFICATE-----Generated at Wed Dec 24 14:51:36 2025 by rpki-client