This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json) Hash identifier: CopqPN2nXPPfbIJtUjvbA8CHO3o8mBNpa9SgZXlaRbE= Subject key identifier: A7:97:80:24:13:C6:59:B0:AB:9E:A5:3D:CE:3D:16:CD:05:A5:99:8C Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de Certificate serial: 019B4023CD57C50BAA0B2B03A849E0F66777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 09:00:46 +0000 Manifest this update: Sun 21 Dec 2025 09:00:46 +0000 Manifest next update: Mon 22 Dec 2025 09:00:46 +0000 Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: xP1/JiKbdHkn50baFS6FFTFB1GZfJ35lWB0Lg2ln9NM=) 2: xYedTFBsRl5b1iJAErnPYcaR3OY.roa (hash: A2Zy/D1noAod2gPyXy2Qnxa+PffBxwzOBc03vUahwok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:cd:57:c5:0b:aa:0b:2b:03:a8:49:e0:f6:67:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de Validity Not Before: Dec 21 09:00:46 2025 GMT Not After : Dec 22 09:00:46 2025 GMT Subject: CN=a797802413c659b0ab9ea53dce3d16cd05a5998c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:6a:bc:7e:a4:47:bd:0f:f2:ba:08:07:fa: 7b:1b:50:9d:1e:fa:00:dd:2e:26:32:a3:8e:cb:e9: 42:77:b4:81:00:ce:04:e6:45:ff:39:ea:a6:80:de: a2:d6:74:86:53:a1:d2:20:a1:61:7d:ce:10:2d:90: a1:b0:05:ad:84:ef:4e:26:43:2b:89:e8:bb:9d:37: dd:4b:22:a8:d6:8a:19:6f:46:f3:6f:a2:8c:57:bf: 39:b4:19:10:68:a3:b7:22:71:af:74:ea:19:ca:87: 4a:50:1d:a5:96:4e:ac:ac:f4:07:06:19:b2:76:69: 71:87:ef:a2:d4:fd:d0:c8:c8:29:53:aa:67:95:ee: bc:8e:06:48:c5:ff:47:ed:61:fa:d5:cb:77:1b:04: 7e:d3:dc:d4:f3:b4:7f:20:a6:57:b1:f1:f2:7e:c7: 71:d5:0c:85:f4:2b:8e:40:45:69:70:e3:72:59:9c: 44:6f:1c:a9:50:ac:9b:0a:d1:98:38:08:e1:74:20: 2a:c1:1b:8e:ab:65:92:a5:bb:10:b7:79:a2:d5:a2: 75:d5:cf:ab:cf:be:85:b1:00:ce:3f:32:cf:20:8a: 30:75:39:d3:66:31:c3:01:5f:9a:20:f3:9d:1b:59: 4b:9f:3a:5b:a5:53:98:89:3d:2b:7c:5b:8d:fe:9d: e8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:80:24:13:C6:59:B0:AB:9E:A5:3D:CE:3D:16:CD:05:A5:99:8C X509v3 Authority Key Identifier: keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:39:a5:f7:a5:c2:53:20:0f:79:24:82:53:4f:e9:de:13:b4: 80:6c:ab:30:ee:4d:92:5d:62:c9:e9:5a:1a:d5:fa:07:ae:b5: 99:fd:a3:37:ac:8e:73:c2:bb:71:2d:29:a5:49:37:4e:b0:2c: 46:7a:8d:56:3b:2b:45:f0:c1:ae:2e:6c:4a:3d:e6:f0:1c:e7: d3:a9:f7:cd:1f:af:45:34:0e:84:35:45:31:d9:54:6e:ee:1f: 5e:6d:83:6b:df:4b:77:48:97:e9:72:a4:20:a2:86:fd:15:5d: 51:7b:e3:f4:3e:d0:bd:b8:b1:53:fa:1b:db:a9:f0:28:cf:48: d6:2d:6c:1e:e3:86:da:3f:b5:8f:a4:d0:0d:f7:2d:35:8f:16: c9:93:aa:52:35:9b:13:17:65:f5:e1:84:e4:82:39:84:fa:90: f7:1f:fe:6d:6a:ff:58:06:6f:40:31:0c:43:a1:92:b8:9f:08: cd:23:95:95:0d:73:ef:c8:04:78:50:9d:68:ae:a5:bf:6f:69: 91:f1:24:98:03:eb:0d:0a:07:34:bd:7e:e5:1e:86:1f:db:71: 3e:5f:b3:f7:1d:7d:dc:12:62:c0:34:c9:93:b0:53:29:b8:ac: 57:8e:f7:4b:df:2f:38:dd:fd:83:12:16:18:db:2e:d1:31:45: 39:f6:4b:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI81XxQuqCysDqEng9md3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl Y2E4ZGUwHhcNMjUxMjIxMDkwMDQ2WhcNMjUxMjIyMDkwMDQ2WjAzMTEwLwYDVQQD EyhhNzk3ODAyNDEzYzY1OWIwYWI5ZWE1M2RjZTNkMTZjZDA1YTU5OThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFqvH6kR70P8roIB/p7G1CdHvoA 3S4mMqOOy+lCd7SBAM4E5kX/OeqmgN6i1nSGU6HSIKFhfc4QLZChsAWthO9OJkMr iei7nTfdSyKo1ooZb0bzb6KMV785tBkQaKO3InGvdOoZyodKUB2llk6srPQHBhmy dmlxh++i1P3QyMgpU6pnle68jgZIxf9H7WH61ct3GwR+09zU87R/IKZXsfHyfsdx 1QyF9CuOQEVpcONyWZxEbxypUKybCtGYOAjhdCAqwRuOq2WSpbsQt3mi1aJ11c+r z76FsQDOPzLPIIowdTnTZjHDAV+aIPOdG1lLnzpbpVOYiT0rfFuN/p3oUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeXgCQTxlmwq56lPc49Fs0FpZmMMB8GA1UdIwQY MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4 LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDml96XC UyAPeSSCU0/p3hO0gGyrMO5Nkl1iyelaGtX6B661mf2jN6yOc8K7cS0ppUk3TrAs RnqNVjsrRfDBri5sSj3m8Bzn06n3zR+vRTQOhDVFMdlUbu4fXm2Da99Ld0iX6XKk IKKG/RVdUXvj9D7QvbixU/ob26nwKM9I1i1sHuOG2j+1j6TQDfctNY8WyZOqUjWb Exdl9eGE5II5hPqQ9x/+bWr/WAZvQDEMQ6GSuJ8IzSOVlQ1z78gEeFCdaK6lv29p kfEkmAPrDQoHNL1+5R6GH9txPl+z9x193BJiwDTJk7BTKbisV473S98vON39gxIW GNsu0TFFOfZLug== -----END CERTIFICATE-----Generated at Sun Dec 21 15:32:39 2025 by rpki-client