This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json) Hash identifier: hQhttmzCw2aESVD8YtUXNpYKYUEjTXGqjN+wxk+o77M= Subject key identifier: 28:52:15:11:19:D4:9C:DE:46:A2:93:4E:D9:6B:EA:3A:DC:29:8E:C3 Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Certificate serial: 019B1A29508D4F2AA70F02D29BFFC94C357A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 00:01:13 +0000 Manifest this update: Sun 14 Dec 2025 00:01:13 +0000 Manifest next update: Mon 15 Dec 2025 00:01:13 +0000 Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: e4HF6j0MTUxf+GBloKKlcVfAGH0z+ZB4swfNdEkpnJ4=) 2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=) 3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=) 4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:50:8d:4f:2a:a7:0f:02:d2:9b:ff:c9:4c:35:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368 Validity Not Before: Dec 14 00:01:13 2025 GMT Not After : Dec 15 00:01:13 2025 GMT Subject: CN=2852151119d49cde46a2934ed96bea3adc298ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cc:e6:9e:d1:c8:a2:17:5c:51:2b:b9:90:41: 25:09:87:6d:0a:44:cc:ad:ad:07:df:e0:21:a4:3a: 3e:0f:40:ae:55:a2:dd:f6:a1:3d:a4:d4:88:3f:93: ca:cc:e4:8b:df:d8:9a:44:a5:49:b5:b8:cf:ff:20: 8a:3b:d8:97:c5:62:a3:27:af:d6:f4:46:d8:1c:c1: 9e:5d:6e:71:61:24:97:85:0d:93:95:d0:11:52:c9: 2b:36:dd:15:07:ce:c3:2c:29:5c:d4:6a:32:00:ba: 4b:8a:68:e9:35:95:4a:64:e1:e9:be:3b:02:51:29: 9e:c8:43:5f:fa:7c:42:0c:26:4e:5a:8d:ad:0a:ec: e5:d0:38:b1:3f:d6:b7:64:6d:1b:11:08:8e:02:ea: d2:3c:ed:ef:91:e0:35:44:80:13:cb:37:f0:28:2b: 6b:c7:da:11:8b:c3:08:13:4a:fe:ac:be:92:f0:b5: 67:5e:6a:5c:5d:96:6f:5c:3f:48:07:bf:bf:12:29: 50:c6:10:de:b1:ce:ca:b2:5d:d3:d7:0c:c9:74:9e: 21:08:e8:c2:b1:d4:3f:2c:9c:e7:66:c1:ce:dd:69: de:89:72:31:3b:b1:f7:12:14:b1:db:f2:ce:29:13: 95:d7:55:1f:fa:2c:a4:25:d2:ee:09:44:d5:f7:d3: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:52:15:11:19:D4:9C:DE:46:A2:93:4E:D9:6B:EA:3A:DC:29:8E:C3 X509v3 Authority Key Identifier: keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7e:b5:aa:a2:ca:46:fb:4d:6d:13:08:71:56:3c:9b:9e:2f: d9:80:e1:56:e5:01:5a:f4:56:b8:65:64:83:1b:0b:8e:4f:47: 29:d6:ff:f2:96:0b:78:fa:dc:0c:a6:d8:b6:82:4b:50:16:63: bc:a1:c9:c6:8a:dd:a5:7f:f9:b1:29:88:08:04:38:a4:71:ed: 52:46:4f:bf:a3:f1:1f:35:fa:b2:b5:81:66:89:38:19:17:8e: c3:46:74:28:6f:ca:bf:46:7c:15:d3:de:f5:3f:1d:20:7d:43: 6e:27:66:75:6a:8e:86:3d:ae:33:74:de:a4:6d:ee:c4:31:3a: 60:91:38:8c:e9:b2:e3:42:2e:1a:d7:b0:84:d7:2e:a6:66:1a: b6:4d:6e:43:84:54:13:aa:92:86:23:bf:80:e8:11:48:32:25: 1d:9a:e4:07:06:d3:00:c2:d5:4a:c4:99:6f:f4:d8:c9:cb:d6: 4b:b3:83:43:75:11:d7:90:f2:f8:fb:bc:9d:dd:9b:ec:2d:6a: 91:ab:08:34:7b:bf:a2:ec:bb:e2:cc:ec:f8:01:b3:bd:53:54: d6:9a:c3:06:3d:5c:27:da:1c:4f:34:b4:22:d0:11:a8:f4:21: 9c:c8:74:8b:51:a2:52:96:1e:98:ea:45:8a:22:cb:37:c2:fa: 73:c7:b9:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKVCNTyqnDwLSm//JTDV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOGQxYmI3Mjc5MWM4Nzg1NTBkMWI5ZDhmZWY1NjRhYzM5 MTkzNjgwHhcNMjUxMjE0MDAwMTEzWhcNMjUxMjE1MDAwMTEzWjAzMTEwLwYDVQQD EygyODUyMTUxMTE5ZDQ5Y2RlNDZhMjkzNGVkOTZiZWEzYWRjMjk4ZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38zmntHIohdcUSu5kEElCYdtCkTM ra0H3+AhpDo+D0CuVaLd9qE9pNSIP5PKzOSL39iaRKVJtbjP/yCKO9iXxWKjJ6/W 9EbYHMGeXW5xYSSXhQ2TldARUskrNt0VB87DLClc1GoyALpLimjpNZVKZOHpvjsC USmeyENf+nxCDCZOWo2tCuzl0DixP9a3ZG0bEQiOAurSPO3vkeA1RIATyzfwKCtr x9oRi8MIE0r+rL6S8LVnXmpcXZZvXD9IB7+/EilQxhDesc7Ksl3T1wzJdJ4hCOjC sdQ/LJznZsHO3WneiXIxO7H3EhSx2/LOKROV11Uf+iykJdLuCUTV99OgYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChSFREZ1JzeRqKTTtlr6jrcKY7DMB8GA1UdIwQY MBaAFAuNG7cnkch4VQ0bnY/vVkrDkZNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMt MDI3OGM1ZGMxNDkxLzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wMzY3ZDAtZmE4NS00NTQ2LWI4NGMtMDI3OGM1ZGMxNDkx LzEvQzQwYnR5ZVJ5SGhWRFJ1ZGotOVdTc09SazJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn61qqLK RvtNbRMIcVY8m54v2YDhVuUBWvRWuGVkgxsLjk9HKdb/8pYLePrcDKbYtoJLUBZj vKHJxordpX/5sSmICAQ4pHHtUkZPv6PxHzX6srWBZok4GReOw0Z0KG/Kv0Z8FdPe 9T8dIH1DbidmdWqOhj2uM3TepG3uxDE6YJE4jOmy40IuGtewhNcupmYatk1uQ4RU E6qShiO/gOgRSDIlHZrkBwbTAMLVSsSZb/TYycvWS7ODQ3UR15Dy+Pu8nd2b7C1q kasINHu/ouy74szs+AGzvVNU1prDBj1cJ9ocTzS0ItARqPQhnMh0i1GiUpYemOpF iiLLN8L6c8e5QA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:19:59 2025 by rpki-client