This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json) Hash identifier: vLHpyJKATHqGlSozV1qedIThu8NU60AQrhthinosc3E= Subject key identifier: 95:EC:10:FF:E6:31:A9:00:5C:BD:DC:E1:67:ED:55:57:04:F2:C2:53 Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f Certificate serial: 019B1EAA445CA1166DCFD9DE0DEC15EE7875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft Manifest number: 03FF Signing time: Sun 14 Dec 2025 21:00:33 +0000 Manifest this update: Sun 14 Dec 2025 21:00:33 +0000 Manifest next update: Mon 15 Dec 2025 21:00:33 +0000 Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: u4XptFFK/6UmhuWU+bI78LomltMGF7OuYD5SlzsQQmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:44:5c:a1:16:6d:cf:d9:de:0d:ec:15:ee:78:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f Validity Not Before: Dec 14 21:00:33 2025 GMT Not After : Dec 15 21:00:33 2025 GMT Subject: CN=95ec10ffe631a9005cbddce167ed555704f2c253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:a4:50:9c:af:1c:16:58:39:01:4d:1b:dd: a5:a6:2d:90:b1:32:d9:a3:54:4f:b4:fc:3e:b6:13: 18:8f:1d:93:2e:99:f1:49:02:ae:fa:92:ac:3c:ff: 76:fb:4a:63:29:ab:bb:96:34:42:fa:15:25:0b:d0: 6f:d8:35:9a:22:d3:09:a6:c5:9e:f5:68:4a:26:35: 38:47:78:3b:96:36:14:67:95:25:37:d0:62:1e:9b: da:61:d4:95:1c:76:f1:93:70:2e:0e:fe:e5:97:61: e0:84:c1:ec:a0:6c:b6:96:c7:24:ca:36:50:2b:b9: e2:28:7c:62:26:56:09:c4:fa:83:32:36:36:66:e3: 65:41:40:04:bd:b6:71:66:5e:1e:02:43:71:16:05: b6:77:0e:ea:db:ab:53:61:40:19:90:ec:82:70:20: d0:f1:0f:04:f2:05:57:33:33:b0:b4:88:ef:d5:f7: 2f:f9:59:7b:54:f4:97:cd:01:c5:5d:08:83:ac:88: 0b:44:6c:89:59:c1:55:95:c6:86:75:be:ac:e5:87: 13:0b:7b:ac:e1:fb:e9:68:04:10:2f:69:1b:fc:ef: fa:bd:3b:b2:da:94:f4:0a:d4:de:6c:a2:06:a7:31: 5d:a7:8c:f7:ad:a3:53:5b:08:d5:91:af:76:c1:3e: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EC:10:FF:E6:31:A9:00:5C:BD:DC:E1:67:ED:55:57:04:F2:C2:53 X509v3 Authority Key Identifier: keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:40:33:fd:8f:8c:59:11:00:fa:60:ef:b2:a5:74:a3:6d:7b: c4:e0:73:d8:6a:50:cc:29:ff:05:85:1e:6b:ec:bb:2f:17:77: 21:72:86:4c:11:e9:a5:48:f2:00:f5:b7:c7:b4:1b:ad:06:b3: de:58:98:8a:23:14:d5:49:bf:fe:2c:73:bb:09:5b:be:ad:38: 92:ce:e0:6b:8c:ce:39:90:fa:94:d3:05:7a:b8:56:78:f0:93: 49:a6:40:dd:5c:bb:91:a1:52:51:b1:a9:ac:44:9a:d4:96:2d: 13:1c:11:45:87:80:0d:1c:52:b5:cf:8d:13:78:33:78:53:61: 32:cc:08:1c:4f:4a:e7:fd:49:7f:bc:ff:a4:fe:18:c6:40:51: 4d:d9:b7:32:88:e6:c4:42:b4:b5:90:6f:c3:ca:87:43:4a:c0: 4e:ae:b8:b0:0e:17:39:b3:b9:24:a4:ce:b6:ed:77:b8:2d:6c: 53:7e:aa:13:3c:48:4f:cd:75:d7:8b:fb:49:56:cc:20:3c:a0: 2e:0f:a5:21:b9:dd:17:80:d1:2c:d4:f2:1c:4a:b7:c6:7d:86: 72:da:63:c9:3f:e5:14:e0:a4:4d:d1:fc:8c:4e:6b:fd:6d:f6: 13:c4:54:6a:4d:5f:f2:41:70:ff:0d:cf:0e:97:70:00:15:99: f8:4c:18:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqkRcoRZtz9neDewV7nh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNTAwZWViNDdjMmYxMzU3MTg3NmExOTY2MzUzN2Y4YjYz NmE4MGYwHhcNMjUxMjE0MjEwMDMzWhcNMjUxMjE1MjEwMDMzWjAzMTEwLwYDVQQD Eyg5NWVjMTBmZmU2MzFhOTAwNWNiZGRjZTE2N2VkNTU1NzA0ZjJjMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV+kUJyvHBZYOQFNG92lpi2QsTLZ o1RPtPw+thMYjx2TLpnxSQKu+pKsPP92+0pjKau7ljRC+hUlC9Bv2DWaItMJpsWe 9WhKJjU4R3g7ljYUZ5UlN9BiHpvaYdSVHHbxk3AuDv7ll2HghMHsoGy2lsckyjZQ K7niKHxiJlYJxPqDMjY2ZuNlQUAEvbZxZl4eAkNxFgW2dw7q26tTYUAZkOyCcCDQ 8Q8E8gVXMzOwtIjv1fcv+Vl7VPSXzQHFXQiDrIgLRGyJWcFVlcaGdb6s5YcTC3us 4fvpaAQQL2kb/O/6vTuy2pT0CtTebKIGpzFdp4z3raNTWwjVka92wT4HJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXsEP/mMakAXL3c4WftVVcE8sJTMB8GA1UdIwQY MBaAFHNQDutHwvE1cYdqGWY1N/i2NqgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAt YzA3ODFjYTgwOTFjLzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAtYzA3ODFjYTgwOTFj LzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0Az/Y+M WREA+mDvsqV0o217xOBz2GpQzCn/BYUea+y7Lxd3IXKGTBHppUjyAPW3x7QbrQaz 3liYiiMU1Um//ixzuwlbvq04ks7ga4zOOZD6lNMFerhWePCTSaZA3Vy7kaFSUbGp rESa1JYtExwRRYeADRxStc+NE3gzeFNhMswIHE9K5/1Jf7z/pP4YxkBRTdm3Mojm xEK0tZBvw8qHQ0rATq64sA4XObO5JKTOtu13uC1sU36qEzxIT81114v7SVbMIDyg Lg+lIbndF4DRLNTyHEq3xn2GctpjyT/lFOCkTdH8jE5r/W32E8RUak1f8kFw/w3P DpdwABWZ+EwYAA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:40:11 2025 by rpki-client