This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json) Hash identifier: lm6wArRRsag08TVUp4OaqsyycNkzs84D9QNC/BvOBro= Subject key identifier: 18:D4:9C:DE:E0:E6:BD:EC:49:30:8C:7A:66:4A:DC:DB:FB:41:02:EE Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Certificate serial: 019B6E7CE8548B9467D8BF5E7241D1B05666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 09:00:38 +0000 Manifest this update: Tue 30 Dec 2025 09:00:38 +0000 Manifest next update: Wed 31 Dec 2025 09:00:38 +0000 Files and hashes: 1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: P1C1oZikgXpTdlXMu5k2oC+siPGYr5QYwxdgLWADEmU=) 2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:7c:e8:54:8b:94:67:d8:bf:5e:72:41:d1:b0:56:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Validity Not Before: Dec 30 09:00:38 2025 GMT Not After : Dec 31 09:00:38 2025 GMT Subject: CN=18d49cdee0e6bdec49308c7a664adcdbfb4102ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:b7:96:1a:69:25:17:d2:1f:c4:72:96:20: b6:f0:63:68:f4:b4:a9:55:e7:83:e6:bd:06:6a:60: e5:d3:29:43:f6:31:92:9f:a3:4d:89:5a:17:21:dc: 5d:f7:4a:c0:37:84:da:92:95:9b:98:fa:ff:60:27: b8:53:2a:7b:23:26:e0:97:cd:6b:98:c8:5a:7c:47: f0:af:d6:63:52:b5:d9:76:f1:03:52:81:a2:3f:53: 2b:7d:01:85:12:4d:a9:d7:88:71:90:72:3b:b7:2d: b6:34:fa:27:95:9f:84:fa:8a:28:7b:14:d4:d3:31: 55:ec:93:5f:de:c0:5c:46:5a:07:fa:e1:c1:ce:c3: 83:ba:29:09:43:19:1c:8e:32:c3:d5:84:bb:c9:d3: 56:aa:ed:56:3c:ee:31:06:46:cc:82:8f:4c:be:df: b0:a0:38:76:18:df:e9:51:d3:e9:02:5b:e4:a3:ed: 34:25:4b:1e:a7:b1:38:73:5f:0a:06:83:9e:ce:f5: cf:aa:8f:1f:ad:7b:b7:ef:f8:22:da:03:39:35:13: 14:9a:68:0d:0a:68:5d:d7:0f:93:19:c0:f6:4a:07: c6:5c:b5:14:46:01:81:fa:7f:39:36:93:98:a8:b8: c5:69:d6:c4:bc:0e:8e:fa:1f:e2:24:c9:5a:53:82: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D4:9C:DE:E0:E6:BD:EC:49:30:8C:7A:66:4A:DC:DB:FB:41:02:EE X509v3 Authority Key Identifier: keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:82:21:a9:4d:ee:af:c6:6b:28:b0:13:82:1c:81:c4:15:93: ad:29:2d:cb:05:14:f5:39:88:c8:ca:a7:93:4d:26:36:1f:52: 0d:3f:86:ea:2b:f7:d0:f3:e1:14:36:f0:fe:d2:8b:89:71:85: 97:26:33:56:c6:bb:fb:24:10:ad:f0:82:24:2d:8f:cb:e9:0b: e9:e8:d8:8c:30:f2:1c:0b:b9:e9:df:c0:a9:e6:65:90:44:1a: 13:59:21:66:84:7d:48:b4:e5:fe:6a:4d:3d:a6:3d:52:f9:fa: ca:44:27:74:2e:c9:0c:16:aa:d8:55:45:ab:de:ec:84:82:d1: e9:8b:b7:00:01:76:a2:9d:c4:b4:2c:55:a5:7e:81:95:7e:46: 32:73:fa:12:38:99:1e:c5:6f:7e:31:43:0f:44:a3:d5:35:f0: 3c:a5:70:5a:d4:03:0f:d7:13:e0:7d:69:4d:06:c9:a8:38:3b: f7:6d:73:6d:e5:28:f0:80:a2:33:52:e4:af:08:d2:ef:6f:0a: bc:62:ca:51:11:1d:c0:49:dd:03:0b:b0:0d:17:c1:8c:74:31: f8:5f:2b:12:ec:2a:84:9c:97:22:f5:d0:d7:a9:14:14:f4:79: 6a:f5:cb:d8:89:aa:62:7e:13:d2:3e:92:32:ce:b8:c3:43:a2: 90:ec:4f:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtufOhUi5Rn2L9eckHRsFZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy MGI3NTcwHhcNMjUxMjMwMDkwMDM4WhcNMjUxMjMxMDkwMDM4WjAzMTEwLwYDVQQD EygxOGQ0OWNkZWUwZTZiZGVjNDkzMDhjN2E2NjRhZGNkYmZiNDEwMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqES3lhppJRfSH8RyliC28GNo9LSp VeeD5r0GamDl0ylD9jGSn6NNiVoXIdxd90rAN4TakpWbmPr/YCe4Uyp7Iybgl81r mMhafEfwr9ZjUrXZdvEDUoGiP1MrfQGFEk2p14hxkHI7ty22NPonlZ+E+oooexTU 0zFV7JNf3sBcRloH+uHBzsODuikJQxkcjjLD1YS7ydNWqu1WPO4xBkbMgo9Mvt+w oDh2GN/pUdPpAlvko+00JUsep7E4c18KBoOezvXPqo8frXu37/gi2gM5NRMUmmgN Cmhd1w+TGcD2SgfGXLUURgGB+n85NpOYqLjFadbEvA6O+h/iJMlaU4JyXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjUnN7g5r3sSTCMemZK3Nv7QQLuMB8GA1UdIwQY MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt NWJhZTM3NWNmODVhLzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4IhqU3u r8ZrKLATghyBxBWTrSktywUU9TmIyMqnk00mNh9SDT+G6iv30PPhFDbw/tKLiXGF lyYzVsa7+yQQrfCCJC2Py+kL6ejYjDDyHAu56d/AqeZlkEQaE1khZoR9SLTl/mpN PaY9Uvn6ykQndC7JDBaq2FVFq97shILR6Yu3AAF2op3EtCxVpX6BlX5GMnP6EjiZ HsVvfjFDD0Sj1TXwPKVwWtQDD9cT4H1pTQbJqDg7921zbeUo8ICiM1LkrwjS728K vGLKUREdwEndAwuwDRfBjHQx+F8rEuwqhJyXIvXQ16kUFPR5avXL2ImqYn4T0j6S Ms64w0OikOxPfQ== -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:00 2025 by rpki-client