This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json) Hash identifier: 0ZJdTShyUQP/8IP5qOT2TX/KyePzH7zlB6B/tOnQPDc= Subject key identifier: 37:5E:8D:1A:8E:52:26:08:00:9F:92:2A:49:F8:32:76:E7:07:B4:BE Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Certificate serial: 019B2219FB5EE1148F0080291F18E990B71F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 13:01:26 +0000 Manifest this update: Mon 15 Dec 2025 13:01:26 +0000 Manifest next update: Tue 16 Dec 2025 13:01:26 +0000 Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: 8VB8jI3gd9sYiJ8l0QJ/722fquD8mHSs72yCN2Dd2sc=) 2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:fb:5e:e1:14:8f:00:80:29:1f:18:e9:90:b7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Validity Not Before: Dec 15 13:01:26 2025 GMT Not After : Dec 16 13:01:26 2025 GMT Subject: CN=375e8d1a8e522608009f922a49f83276e707b4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:84:9b:72:eb:39:9b:aa:57:d0:bc:89:f3: c0:1e:03:0f:8f:47:a2:98:52:fa:40:3b:99:f0:34: 1d:45:66:10:d8:99:a1:f5:6c:17:c3:da:bb:eb:f8: 73:e8:c7:29:b9:7d:80:2c:9d:b9:16:a7:89:91:dd: b2:1b:5a:2a:1c:44:b3:14:27:3f:02:89:96:d1:a5: e3:eb:b2:4e:09:3d:85:cb:72:b2:c0:e7:57:2e:0a: e1:31:26:8b:c8:9c:89:b3:1d:0b:ba:34:54:81:17: 70:49:5f:1c:1b:0f:6c:5f:a9:a6:83:84:b6:81:60: 61:52:e6:8a:4e:47:25:9f:10:03:ae:50:b9:88:61: ba:37:6b:de:3c:fc:ef:24:91:02:b5:7a:ec:c7:88: 78:5e:cf:84:23:02:e1:77:a3:5d:66:80:27:77:e6: 65:5c:43:8b:cd:cb:02:ea:1d:c2:6f:9a:81:dd:0d: 4e:a1:0a:3c:47:9e:f2:b9:14:cf:b8:b3:8b:a8:db: ef:dc:2b:ed:33:3a:a1:30:e8:d0:a1:81:01:fe:7d: 83:78:f6:85:d1:ce:d7:aa:b6:70:c0:2a:2a:20:22: b0:25:12:e3:35:95:fa:d5:c2:e8:c1:c4:96:f3:85: 5c:4f:e5:4f:6c:eb:36:69:9f:dc:6a:34:fc:bf:e1: 66:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5E:8D:1A:8E:52:26:08:00:9F:92:2A:49:F8:32:76:E7:07:B4:BE X509v3 Authority Key Identifier: keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:85:97:72:ee:f6:9e:16:b9:13:e8:34:fb:6a:5d:5d:1f:0b: 42:97:2d:05:69:c3:96:3e:ba:4a:4d:65:af:eb:6f:3e:60:ec: 05:b9:be:5c:fe:9d:0b:59:c8:7b:f9:9d:25:bb:de:a5:63:88: 7d:c1:db:87:0d:9e:31:63:b1:b3:12:e9:57:68:d7:5b:1c:de: a7:97:44:2d:b7:5a:5a:20:11:e3:07:f4:55:01:46:13:66:08: 1b:5c:41:2b:02:6d:1e:46:3a:99:3d:21:08:3c:9f:95:d1:a3: 1f:19:af:fb:3b:51:5d:0e:64:02:1b:13:44:c1:22:f3:7c:76: 43:db:e8:8b:51:03:a7:ef:9f:b7:ba:0e:15:0e:1c:12:65:62: a0:27:c9:49:2e:4d:37:52:37:45:a3:f1:d7:85:d1:17:0a:8d: 74:b6:cf:eb:b8:03:ac:41:a8:97:84:02:b5:90:49:3a:83:7c: 65:78:42:5e:3a:05:07:29:b9:2a:ad:93:f9:07:ff:85:17:bd: 47:1b:0f:af:9b:73:b9:da:9b:db:8a:31:2b:7f:d1:e3:fc:f6: 1a:c8:1d:4e:e6:aa:96:58:db:19:ef:a8:4a:92:88:c5:b0:33: 24:bd:67:fb:f8:74:e1:6c:a3:43:6c:78:db:ca:90:b9:d8:91: 8b:78:17:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGfte4RSPAIApHxjpkLcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4 NTgyNmUwHhcNMjUxMjE1MTMwMTI2WhcNMjUxMjE2MTMwMTI2WjAzMTEwLwYDVQQD EygzNzVlOGQxYThlNTIyNjA4MDA5ZjkyMmE0OWY4MzI3NmU3MDdiNGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BSEm3LrOZuqV9C8ifPAHgMPj0ei mFL6QDuZ8DQdRWYQ2Jmh9WwXw9q76/hz6McpuX2ALJ25FqeJkd2yG1oqHESzFCc/ AomW0aXj67JOCT2Fy3KywOdXLgrhMSaLyJyJsx0LujRUgRdwSV8cGw9sX6mmg4S2 gWBhUuaKTkclnxADrlC5iGG6N2vePPzvJJECtXrsx4h4Xs+EIwLhd6NdZoAnd+Zl XEOLzcsC6h3Cb5qB3Q1OoQo8R57yuRTPuLOLqNvv3CvtMzqhMOjQoYEB/n2DePaF 0c7XqrZwwCoqICKwJRLjNZX61cLowcSW84VcT+VPbOs2aZ/cajT8v+FmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdejRqOUiYIAJ+SKkn4MnbnB7S+MB8GA1UdIwQY MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoWXcu72 nha5E+g0+2pdXR8LQpctBWnDlj66Sk1lr+tvPmDsBbm+XP6dC1nIe/mdJbvepWOI fcHbhw2eMWOxsxLpV2jXWxzep5dELbdaWiAR4wf0VQFGE2YIG1xBKwJtHkY6mT0h CDyfldGjHxmv+ztRXQ5kAhsTRMEi83x2Q9voi1EDp++ft7oOFQ4cEmVioCfJSS5N N1I3RaPx14XRFwqNdLbP67gDrEGol4QCtZBJOoN8ZXhCXjoFBym5Kq2T+Qf/hRe9 RxsPr5tzudqb24oxK3/R4/z2GsgdTuaqlljbGe+oSpKIxbAzJL1n+/h04WyjQ2x4 28qQudiRi3gXPg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:16 2025 by rpki-client