This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json) Hash identifier: EP+pFwkseZTgfCtqke1xCSm+2bgClnth5qAONUlI33A= Subject key identifier: 1F:C4:21:B6:84:91:2A:5C:74:48:3F:9F:0D:CA:35:6F:F0:A7:68:68 Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a Certificate serial: 019B34564EF82965B00CB44F06FD715FEE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 02:00:30 +0000 Manifest this update: Fri 19 Dec 2025 02:00:30 +0000 Manifest next update: Sat 20 Dec 2025 02:00:30 +0000 Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: DRanB2ZzGQXJAJhmuiJZDjD6WHeOp4ms/Twb9EvPSR4=) 2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=) 3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:4e:f8:29:65:b0:0c:b4:4f:06:fd:71:5f:ee:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a Validity Not Before: Dec 19 02:00:30 2025 GMT Not After : Dec 20 02:00:30 2025 GMT Subject: CN=1fc421b684912a5c74483f9f0dca356ff0a76868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:c5:98:01:62:2a:e0:bf:df:71:0d:ba:77: 47:4e:d3:c7:0c:3b:05:1a:2c:ce:12:75:1f:72:80: ae:c1:48:29:3d:fd:62:7e:dd:10:25:6c:40:ed:da: aa:f2:b9:73:3e:40:a5:49:60:f0:c6:63:49:d1:80: 00:9a:6a:57:f7:80:e3:da:9b:b3:bc:3b:b2:2f:62: fb:7b:ab:ea:86:5e:cc:30:c4:2b:42:e1:c1:a8:cc: 88:ec:9d:29:f0:9d:c8:98:d9:d5:db:9a:e7:94:83: 96:e4:0b:1f:a1:ee:24:ed:ef:9d:3c:6b:10:68:a6: 79:64:96:b2:41:2d:3e:00:a4:f4:c9:cc:23:4e:89: ff:81:3a:11:cf:b0:89:bd:a8:65:01:aa:f6:14:c5: 64:e8:8a:8f:54:c6:50:97:06:9d:e0:f3:65:17:64: 0b:0e:43:19:6b:66:09:40:7a:bd:f7:6f:e5:cf:7e: 75:4a:48:67:45:db:25:e9:aa:36:e0:fd:be:85:d8: 6a:f2:43:20:9e:14:27:f3:66:ab:c9:18:1b:77:02: dc:d2:fe:c5:93:b7:35:f7:79:0a:d1:54:e6:a2:a6: 2e:aa:c8:0a:e0:a3:dc:e6:3e:76:a1:cf:a7:15:6d: 79:f5:33:2b:0e:c3:77:75:68:a7:c0:be:1c:6a:bf: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C4:21:B6:84:91:2A:5C:74:48:3F:9F:0D:CA:35:6F:F0:A7:68:68 X509v3 Authority Key Identifier: keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1e:df:41:07:20:f5:b8:08:c0:1a:72:a3:6f:9d:17:34:d5: d2:4c:19:ba:ef:68:70:c5:fd:6c:83:74:f2:b4:ed:a9:c3:7d: d9:8b:4a:0b:b3:b8:75:4d:39:76:69:71:7c:2b:bc:91:7c:31: 93:64:82:e4:44:50:99:86:65:02:73:3e:22:af:65:01:0f:6f: 6b:64:09:e4:0b:ba:a6:68:60:c5:e1:b9:a0:90:45:28:82:5f: c1:b4:c9:cc:90:c0:f9:3f:48:39:e3:49:3a:25:3b:5e:9a:36: 07:9c:95:f6:eb:1a:98:11:3b:8a:e5:5a:e7:70:88:86:44:f1: 0a:15:87:b0:10:a9:5c:77:ac:0e:a6:dc:d2:d9:e4:91:eb:57: 9f:86:d1:e1:f8:57:f7:91:82:52:c6:41:cd:71:e6:71:42:5e: 75:37:78:ef:60:4d:2f:9d:ec:10:2c:a0:68:a4:f1:6e:ed:f4: 62:d9:49:39:4c:41:ea:d1:af:f9:0f:8b:4a:7c:59:45:fe:b1: fb:85:0a:45:83:4e:02:3b:b9:ca:12:d2:5d:1d:07:86:83:9a: 88:28:ae:bb:7a:9d:ed:ed:9b:5a:ea:58:31:04:15:4a:dc:ca: 23:bc:09:96:37:f4:33:a0:11:74:af:1c:bc:2e:77:29:b7:71: 1d:74:12:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vk74KWWwDLRPBv1xX+59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWVjNmUwNjYwZGI2ZjYyNWI5NzhiZTBkNWVlNzFjMmRj ZDQ2NWEwHhcNMjUxMjE5MDIwMDMwWhcNMjUxMjIwMDIwMDMwWjAzMTEwLwYDVQQD EygxZmM0MjFiNjg0OTEyYTVjNzQ0ODNmOWYwZGNhMzU2ZmYwYTc2ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7LFmAFiKuC/33ENundHTtPHDDsF GizOEnUfcoCuwUgpPf1ift0QJWxA7dqq8rlzPkClSWDwxmNJ0YAAmmpX94Dj2puz vDuyL2L7e6vqhl7MMMQrQuHBqMyI7J0p8J3ImNnV25rnlIOW5Asfoe4k7e+dPGsQ aKZ5ZJayQS0+AKT0ycwjTon/gToRz7CJvahlAar2FMVk6IqPVMZQlwad4PNlF2QL DkMZa2YJQHq992/lz351SkhnRdsl6ao24P2+hdhq8kMgnhQn82aryRgbdwLc0v7F k7c193kK0VTmoqYuqsgK4KPc5j52oc+nFW159TMrDsN3dWinwL4car/O9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/EIbaEkSpcdEg/nw3KNW/wp2hoMB8GA1UdIwQY MBaAFApexuBmDbb2Jbl4vg1e5xwtzUZaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYt ZDNlM2M3OGU3YzQ0LzEvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy81Nzc2YTMtMDZkZC00OTgwLThmNmYtZDNlM2M3OGU3YzQ0 LzEvQ2w3RzRHWU50dllsdVhpLURWN25IQzNOUmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB7fQQcg 9bgIwBpyo2+dFzTV0kwZuu9ocMX9bIN08rTtqcN92YtKC7O4dU05dmlxfCu8kXwx k2SC5ERQmYZlAnM+Iq9lAQ9va2QJ5Au6pmhgxeG5oJBFKIJfwbTJzJDA+T9IOeNJ OiU7Xpo2B5yV9usamBE7iuVa53CIhkTxChWHsBCpXHesDqbc0tnkketXn4bR4fhX 95GCUsZBzXHmcUJedTd472BNL53sECygaKTxbu30YtlJOUxB6tGv+Q+LSnxZRf6x +4UKRYNOAju5yhLSXR0HhoOaiCiuu3qd7e2bWupYMQQVStzKI7wJljf0M6ARdK8c vC53KbdxHXQSlw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:55:46 2025 by rpki-client