This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json) Hash identifier: suJiGSf9DtN9WG8mF4ETc9wVPtOFlLP29MRD7YXSAiI= Subject key identifier: 85:B1:A0:87:8C:D7:E5:C6:57:FA:D1:4D:13:55:48:E0:0D:CB:8A:48 Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Certificate serial: 019B4249D383FD0C43D7ABA6C654BC385715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft Manifest number: 1718 Signing time: Sun 21 Dec 2025 19:01:33 +0000 Manifest this update: Sun 21 Dec 2025 19:01:33 +0000 Manifest next update: Mon 22 Dec 2025 19:01:33 +0000 Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: tEr/JhYF+E474rY2ShZpTe07R7gmvzX9wGpJcWFxdOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:d3:83:fd:0c:43:d7:ab:a6:c6:54:bc:38:57:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Validity Not Before: Dec 21 19:01:33 2025 GMT Not After : Dec 22 19:01:33 2025 GMT Subject: CN=85b1a0878cd7e5c657fad14d135548e00dcb8a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:91:74:1a:4e:a7:e5:45:49:94:1c:b6:a8:15: a0:00:79:d3:79:3b:1e:ec:ea:91:2d:90:1a:e8:bb: 87:b7:13:ea:c0:db:69:70:13:01:f3:50:6f:9f:4b: 05:01:df:96:f6:26:3a:af:75:16:eb:78:ff:f9:6f: ae:45:40:b0:db:81:39:97:60:51:58:aa:97:5b:1f: 24:05:26:be:01:69:6f:8e:2d:43:fd:04:43:cd:31: 4e:5c:17:3d:d8:2f:fc:5f:ce:21:dd:96:7c:d3:05: 9e:7a:15:02:fb:c0:dc:76:3a:8b:1f:28:4a:71:e5: 16:c6:78:92:25:fe:fa:f7:43:04:87:75:57:40:60: a9:31:31:11:cc:6d:02:5f:e1:b8:40:83:da:aa:5b: 90:e9:4a:14:ca:da:86:a0:8b:c3:c3:cb:ce:c5:45: da:d0:f0:f9:d7:4d:b2:da:f2:71:e3:e7:33:72:6d: bb:9e:6f:a9:ec:7a:8f:e0:15:88:8e:bf:29:b1:79: 6f:13:8b:33:85:3e:de:0c:20:72:c0:b3:c7:6a:6c: 98:fc:48:ca:51:1a:7c:69:00:0a:65:77:e1:ce:48: 1f:63:f5:c5:97:c1:52:a4:fe:b8:51:94:84:38:16: 57:52:b0:37:74:41:b8:14:3f:d4:e4:22:bc:ef:63: c5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:A0:87:8C:D7:E5:C6:57:FA:D1:4D:13:55:48:E0:0D:CB:8A:48 X509v3 Authority Key Identifier: keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f6:97:79:58:5f:08:d3:46:ad:7c:0d:b7:f7:95:ba:ad:bf: 22:f4:20:6a:83:1b:6c:07:4f:9e:bd:02:67:e8:6f:f5:e5:c4: 85:1d:6e:c3:1a:59:4e:d5:8d:4e:2c:e5:c4:1c:4b:a2:b8:cb: ca:6f:5b:4b:b8:c5:64:3c:cf:b3:62:24:ae:c9:c1:0c:93:c1: b0:64:4b:fc:9d:f1:f7:a2:6c:70:f0:85:d6:fd:5e:b2:ee:eb: 07:56:db:cd:e9:a0:5a:49:17:a3:70:78:1a:47:95:c9:9c:46: 20:6c:32:43:12:74:c5:78:be:50:ae:30:c4:6d:f7:c3:40:2a: 9c:03:52:a4:d0:de:5a:c3:55:e3:bb:f0:91:07:b8:66:20:85: 0b:3c:2f:e0:50:f0:5e:1b:4b:80:53:b3:d0:d5:15:e9:85:e4: 46:a7:f7:45:b2:73:cd:81:d1:8c:77:60:ec:c2:75:c0:fc:3e: ac:9b:5e:ba:b7:f6:51:4f:9d:d6:c8:49:c9:01:af:2e:61:8e: 9f:df:c2:ff:63:df:de:c3:e2:32:61:13:43:a8:e5:46:e1:bd: a8:3b:b2:e8:2d:17:68:85:78:f7:ee:38:83:e0:e0:5d:29:c9: 9b:e3:58:24:22:12:c6:3a:1e:51:ca:48:cc:59:d4:50:18:ef: af:71:5b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSdOD/QxD16umxlS8OFcVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk MzI1ZDkwHhcNMjUxMjIxMTkwMTMzWhcNMjUxMjIyMTkwMTMzWjAzMTEwLwYDVQQD Eyg4NWIxYTA4NzhjZDdlNWM2NTdmYWQxNGQxMzU1NDhlMDBkY2I4YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JF0Gk6n5UVJlBy2qBWgAHnTeTse 7OqRLZAa6LuHtxPqwNtpcBMB81Bvn0sFAd+W9iY6r3UW63j/+W+uRUCw24E5l2BR WKqXWx8kBSa+AWlvji1D/QRDzTFOXBc92C/8X84h3ZZ80wWeehUC+8DcdjqLHyhK ceUWxniSJf7690MEh3VXQGCpMTERzG0CX+G4QIPaqluQ6UoUytqGoIvDw8vOxUXa 0PD5102y2vJx4+czcm27nm+p7HqP4BWIjr8psXlvE4szhT7eDCBywLPHamyY/EjK URp8aQAKZXfhzkgfY/XFl8FSpP64UZSEOBZXUrA3dEG4FD/U5CK872PF+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWxoIeM1+XGV/rRTRNVSOANy4pIMB8GA1UdIwQY MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPaXeVhf CNNGrXwNt/eVuq2/IvQgaoMbbAdPnr0CZ+hv9eXEhR1uwxpZTtWNTizlxBxLorjL ym9bS7jFZDzPs2IkrsnBDJPBsGRL/J3x96JscPCF1v1esu7rB1bbzemgWkkXo3B4 GkeVyZxGIGwyQxJ0xXi+UK4wxG33w0AqnANSpNDeWsNV47vwkQe4ZiCFCzwv4FDw XhtLgFOz0NUV6YXkRqf3RbJzzYHRjHdg7MJ1wPw+rJteurf2UU+d1shJyQGvLmGO n9/C/2Pf3sPiMmETQ6jlRuG9qDuy6C0XaIV49+44g+DgXSnJm+NYJCISxjoeUcpI zFnUUBjvr3FbGA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:20:00 2025 by rpki-client