This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json) Hash identifier: WV1CZx5aEv5xKAMaSmff70lPdbcGKUc3M4Q2mLys9uQ= Subject key identifier: C7:DB:55:30:EA:54:11:9F:8C:D5:E3:86:F7:D0:42:42:1C:13:6E:60 Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Certificate serial: 019B40C9509E8C03E116947950F7395B09D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 12:01:33 +0000 Manifest this update: Sun 21 Dec 2025 12:01:33 +0000 Manifest next update: Mon 22 Dec 2025 12:01:33 +0000 Files and hashes: 1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: 6gsPcJBs5N1fKNCNE3flQHz1mVSF9cBT5fe4OKHADoY=) 2: wfSejFWh26iFaDPELsnvR1TSCTM.roa (hash: OW8hsiyWgn6jtKd7S9vMQN1SrD9c05HrY+6z4A8TNNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:50:9e:8c:03:e1:16:94:79:50:f7:39:5b:09:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Validity Not Before: Dec 21 12:01:33 2025 GMT Not After : Dec 22 12:01:33 2025 GMT Subject: CN=c7db5530ea54119f8cd5e386f7d042421c136e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:72:e9:ca:08:b9:22:4e:83:ac:15:5c:ec: b4:f2:95:5a:7b:7d:25:3d:3e:3f:d2:27:75:84:da: 12:93:0a:e3:f7:8f:d4:66:60:94:21:56:6b:8f:f3: 13:d0:03:22:75:f9:d9:19:01:fe:bb:67:71:2b:52: f7:63:5d:43:ef:ae:bc:da:e9:24:e9:2e:9c:65:f2: 38:28:0e:ba:af:d9:69:13:c1:0e:c8:7c:8a:4d:2e: cb:9d:ed:3f:56:49:bd:2d:5e:1b:57:33:fb:1b:f7: d3:32:46:5d:04:b0:bf:52:d4:97:f9:34:b7:07:0b: 1a:8c:ff:5f:de:ae:87:8b:a6:1e:ff:37:8e:3d:0c: 64:d7:1e:bd:f8:48:4c:80:37:08:bc:b4:9f:12:d7: ea:24:e0:55:88:82:46:24:74:72:ee:81:9c:61:ba: a7:04:4f:a2:57:b8:1f:74:3a:9d:59:55:9a:d0:c8: 3a:5e:af:97:04:79:54:52:98:8d:ca:49:41:20:bb: 6f:56:fd:31:43:03:d1:48:e1:5a:32:2f:0e:0e:02: 61:56:bf:b8:e2:43:7b:63:77:3a:b6:49:3f:f9:9f: 07:c4:24:8d:dd:64:47:a8:da:bb:7f:2a:2a:ef:89: 2d:31:1d:ef:da:91:a4:e5:f4:a7:28:25:a0:cc:15: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DB:55:30:EA:54:11:9F:8C:D5:E3:86:F7:D0:42:42:1C:13:6E:60 X509v3 Authority Key Identifier: keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c2:1b:ce:44:7e:c1:2a:cf:0d:cc:b5:3b:d0:8b:76:fc:d3: 7d:27:f1:ac:78:71:9b:50:ca:7e:7f:de:b7:a0:cb:83:c1:19: 6f:5e:72:c0:d9:f5:7b:70:5a:ce:70:5a:d5:5f:02:cd:36:9e: b3:08:97:2a:1c:99:7c:84:3e:2f:3d:7e:90:3f:35:f6:45:8c: ca:a6:8f:d1:ec:93:5a:52:e9:94:77:ad:42:9c:78:43:34:9c: 51:16:a5:16:fb:06:f7:b0:78:61:7b:86:6a:34:67:2d:a2:1b: a7:b4:c2:7c:ee:3e:83:98:57:9f:d4:1d:1c:79:70:bd:c4:37: b6:93:89:2b:9c:1d:05:d7:12:38:e7:b0:3c:f3:d5:1e:c7:75: 88:ab:6e:5b:71:09:bc:7e:53:37:b6:f7:55:f3:15:7e:9b:7c: cf:b0:9b:56:ac:b3:b3:45:89:c4:0b:53:c0:f7:67:26:e4:75: 8e:26:33:a5:61:08:5e:7a:f0:fe:99:42:eb:ee:ed:c8:e3:63: fb:e3:0e:8f:4a:46:5f:af:d8:f1:56:51:05:ea:ea:e2:c7:e9: 3c:3b:8d:0c:f9:6c:d7:ef:5a:bd:c8:b2:8f:f9:82:a9:2f:59: 93:07:82:f3:f3:b2:73:a4:e8:e5:59:05:06:6e:c2:1b:ef:eb: 6a:a6:05:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyVCejAPhFpR5UPc5WwnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi ZjJlMDEwHhcNMjUxMjIxMTIwMTMzWhcNMjUxMjIyMTIwMTMzWjAzMTEwLwYDVQQD EyhjN2RiNTUzMGVhNTQxMTlmOGNkNWUzODZmN2QwNDI0MjFjMTM2ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC1y6coIuSJOg6wVXOy08pVae30l PT4/0id1hNoSkwrj94/UZmCUIVZrj/MT0AMidfnZGQH+u2dxK1L3Y11D76682ukk 6S6cZfI4KA66r9lpE8EOyHyKTS7Lne0/Vkm9LV4bVzP7G/fTMkZdBLC/UtSX+TS3 BwsajP9f3q6Hi6Ye/zeOPQxk1x69+EhMgDcIvLSfEtfqJOBViIJGJHRy7oGcYbqn BE+iV7gfdDqdWVWa0Mg6Xq+XBHlUUpiNyklBILtvVv0xQwPRSOFaMi8ODgJhVr+4 4kN7Y3c6tkk/+Z8HxCSN3WRHqNq7fyoq74ktMR3v2pGk5fSnKCWgzBU5OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfbVTDqVBGfjNXjhvfQQkIcE25gMB8GA1UdIwQY MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2 LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8IbzkR+ wSrPDcy1O9CLdvzTfSfxrHhxm1DKfn/et6DLg8EZb15ywNn1e3BaznBa1V8CzTae swiXKhyZfIQ+Lz1+kD819kWMyqaP0eyTWlLplHetQpx4QzScURalFvsG97B4YXuG ajRnLaIbp7TCfO4+g5hXn9QdHHlwvcQ3tpOJK5wdBdcSOOewPPPVHsd1iKtuW3EJ vH5TN7b3VfMVfpt8z7CbVqyzs0WJxAtTwPdnJuR1jiYzpWEIXnrw/plC6+7tyONj ++MOj0pGX6/Y8VZRBerq4sfpPDuNDPls1+9avciyj/mCqS9ZkweC8/Oyc6To5VkF Bm7CG+/raqYFHg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:18:29 2025 by rpki-client