This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json) Hash identifier: gMzR6zJn+Gtb5PAoiyM6z65+IAc+fkjzHf7kX2ZP0iE= Subject key identifier: 94:D7:39:BA:7E:66:32:07:AB:22:C5:13:B9:19:CF:A2:F5:C1:76:51 Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f Certificate serial: 019B40C8B610C57C8680F328496311447A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft Manifest number: 077B Signing time: Sun 21 Dec 2025 12:00:54 +0000 Manifest this update: Sun 21 Dec 2025 12:00:54 +0000 Manifest next update: Mon 22 Dec 2025 12:00:54 +0000 Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=) 2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: 1mN7mnK8ZBOqwp29jaYNU4p5z/1fBmsflnvZYcPg6nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:b6:10:c5:7c:86:80:f3:28:49:63:11:44:7a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f Validity Not Before: Dec 21 12:00:54 2025 GMT Not After : Dec 22 12:00:54 2025 GMT Subject: CN=94d739ba7e663207ab22c513b919cfa2f5c17651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:63:61:54:bc:84:0e:ad:62:2e:61:d3:3f: bb:f9:74:4c:e3:1e:d4:22:24:17:ef:e1:62:81:b0: 4b:af:06:b6:24:9c:c2:9b:54:2b:0c:b6:c9:39:07: cf:bf:36:1a:f3:14:8c:ab:0a:f7:92:88:b1:06:0d: 5a:c5:9f:f5:71:ce:96:22:77:91:73:4d:68:79:d2: 56:ca:70:b4:ce:4d:1a:2e:a8:23:47:c3:eb:c5:1d: 2c:63:1c:fb:28:99:c4:6b:71:66:ed:f7:81:04:74: 40:5d:24:f6:4e:89:9c:ae:42:84:c7:4d:a3:01:c2: 39:b7:5a:bd:cf:41:93:98:bb:0e:ca:02:b0:8c:ac: 81:58:61:49:d7:7c:8f:a4:86:1e:1a:53:5b:94:5c: 86:96:09:a9:37:33:28:31:3d:f5:70:40:65:a3:9d: 0f:e3:91:06:38:da:3d:83:ac:fa:da:4b:fc:b9:92: 19:35:85:84:b8:41:73:f5:27:c2:f7:df:9e:3a:a6: 73:5b:66:58:9c:7c:81:7e:d5:f7:39:d4:6f:fe:d3: fc:0b:d8:a3:f9:64:4f:0d:e9:9f:d5:42:b8:39:d7: 0a:43:35:c1:2e:9e:f6:bb:13:38:21:6c:62:c4:e5: bb:03:21:7f:f7:07:23:eb:15:b3:7e:47:fe:72:df: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D7:39:BA:7E:66:32:07:AB:22:C5:13:B9:19:CF:A2:F5:C1:76:51 X509v3 Authority Key Identifier: keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:2b:18:b8:a4:b3:c9:77:c4:f1:4e:6e:0d:e7:91:5e:74: 3a:3a:a7:20:34:d3:47:3f:8b:5a:f9:eb:fa:4c:e4:d7:00:ae: 19:1d:b8:be:2c:c2:24:cc:54:c5:17:fc:29:86:04:24:32:d2: fb:bd:e7:64:09:1a:b9:5d:ee:01:ae:f2:00:39:05:d7:ee:48: 0a:f8:ef:40:8b:62:38:2e:69:10:e1:07:9d:39:cc:b1:92:81: cd:3c:fa:61:e1:3c:9a:f3:35:dd:0c:6d:15:72:d9:bc:f8:ae: 78:56:bf:6b:5a:bb:f4:d8:d4:c8:e2:7a:a2:d2:f3:38:71:e7: 8f:87:8e:74:e5:04:2e:61:18:08:7c:61:6c:83:7f:7f:c0:dd: 61:45:81:40:00:d3:17:5d:e9:cb:22:0e:05:83:ff:c2:e2:37: c4:a0:e0:bb:df:68:3b:ea:5c:f3:08:b5:3c:3e:03:06:54:50: 98:e3:78:d9:ec:3b:3f:1a:67:ce:d3:26:c6:bd:28:ba:15:77: 46:6d:0e:72:66:cd:68:dc:14:4c:42:20:03:7f:9e:a1:72:1c: 95:8f:85:7f:eb:92:b9:2b:cd:0f:60:29:bf:47:98:85:a2:fc: 7a:b4:38:8d:95:36:a1:34:8a:38:c9:0e:de:30:82:85:d5:cd: 61:10:e4:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyLYQxXyGgPMoSWMRRHpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1 NTc0NGYwHhcNMjUxMjIxMTIwMDU0WhcNMjUxMjIyMTIwMDU0WjAzMTEwLwYDVQQD Eyg5NGQ3MzliYTdlNjYzMjA3YWIyMmM1MTNiOTE5Y2ZhMmY1YzE3NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiVjYVS8hA6tYi5h0z+7+XRM4x7U IiQX7+FigbBLrwa2JJzCm1QrDLbJOQfPvzYa8xSMqwr3koixBg1axZ/1cc6WIneR c01oedJWynC0zk0aLqgjR8PrxR0sYxz7KJnEa3Fm7feBBHRAXST2TomcrkKEx02j AcI5t1q9z0GTmLsOygKwjKyBWGFJ13yPpIYeGlNblFyGlgmpNzMoMT31cEBlo50P 45EGONo9g6z62kv8uZIZNYWEuEFz9SfC99+eOqZzW2ZYnHyBftX3OdRv/tP8C9ij +WRPDemf1UK4OdcKQzXBLp72uxM4IWxixOW7AyF/9wcj6xWzfkf+ct84LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTXObp+ZjIHqyLFE7kZz6L1wXZRMB8GA1UdIwQY MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt MTk0MmUwODlmMGIwLzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDYrGLik s8l3xPFObg3nkV50OjqnIDTTRz+LWvnr+kzk1wCuGR24vizCJMxUxRf8KYYEJDLS +73nZAkauV3uAa7yADkF1+5ICvjvQItiOC5pEOEHnTnMsZKBzTz6YeE8mvM13Qxt FXLZvPiueFa/a1q79NjUyOJ6otLzOHHnj4eOdOUELmEYCHxhbIN/f8DdYUWBQADT F13pyyIOBYP/wuI3xKDgu99oO+pc8wi1PD4DBlRQmON42ew7PxpnztMmxr0ouhV3 Rm0OcmbNaNwUTEIgA3+eoXIclY+Ff+uSuSvND2Apv0eYhaL8erQ4jZU2oTSKOMkO 3jCChdXNYRDkXw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:41:06 2025 by rpki-client