This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json) Hash identifier: Z0DPVu9SmF3vt7yr6J0y3RXsJiisKaTsoIJV1Ycm1PI= Subject key identifier: B6:0A:68:89:7C:2D:67:B2:E6:F8:69:70:6D:49:60:94:9F:66:AF:A2 Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac Certificate serial: 019B5976774A5844DC896FB4F1E95298FE07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft Manifest number: 0AC9 Signing time: Fri 26 Dec 2025 07:01:34 +0000 Manifest this update: Fri 26 Dec 2025 07:01:34 +0000 Manifest next update: Sat 27 Dec 2025 07:01:34 +0000 Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: OXJHJZFtgKZlGg7QNDcnY4+nmmbEXtgP7P4oDjstfzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:77:4a:58:44:dc:89:6f:b4:f1:e9:52:98:fe:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac Validity Not Before: Dec 26 07:01:34 2025 GMT Not After : Dec 27 07:01:34 2025 GMT Subject: CN=b60a68897c2d67b2e6f869706d4960949f66afa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:ed:1a:da:bb:7c:02:2e:24:7f:18:17:55: d8:63:87:ec:62:3a:2a:28:ae:04:d8:e1:63:20:33: 47:41:25:78:cb:57:e9:c2:e8:f8:c6:0f:3a:7e:cb: d6:c8:94:54:97:a4:10:af:76:c0:d6:51:dd:78:e6: 3d:c3:89:dd:48:e0:68:2b:97:21:a9:85:4e:16:02: 03:b9:25:db:b6:58:65:dc:28:c6:20:ee:98:0e:27: a7:06:8b:fb:92:d9:59:2d:32:a9:2c:11:8b:e2:8a: 4c:33:f2:2b:63:ae:59:57:60:2d:72:4c:50:dd:1d: dc:c3:3c:0a:94:20:6b:11:f6:ab:e8:35:98:53:20: 4e:4f:77:d6:25:6d:dc:cd:d4:5d:c0:e3:18:82:d8: 89:a2:cc:47:7d:07:53:08:3e:fe:39:ba:e2:1a:16: d9:33:3f:18:0f:e5:eb:bd:f6:fe:f4:68:b3:5a:dc: fc:ce:3f:63:da:8f:1c:91:c0:a5:77:2a:05:af:9b: f8:b3:a3:d6:ee:4e:7a:ed:b5:ab:b4:32:b7:b5:52: 5c:cb:be:2e:c4:55:ed:a9:3b:b6:a6:3d:70:34:bb: 2a:a1:eb:42:56:6c:5d:86:e7:2f:d2:c0:a0:e9:a8: 87:48:36:98:8e:da:83:1a:5b:ca:0d:8c:17:a6:87: 14:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0A:68:89:7C:2D:67:B2:E6:F8:69:70:6D:49:60:94:9F:66:AF:A2 X509v3 Authority Key Identifier: keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bc:96:98:3a:e8:6b:d4:73:37:26:e9:e2:7c:6a:cc:23:fb: 13:ca:db:43:a2:ac:20:a1:be:f6:10:5d:32:58:7b:70:ad:2d: e9:71:2d:65:7b:a6:0a:8f:c5:fd:88:0d:8b:8c:3e:0f:64:42: df:a9:22:81:a6:ce:b0:21:a5:c9:1b:20:63:af:a5:87:36:48: 96:48:bc:d8:3f:ba:55:3d:81:53:0d:a0:23:bc:ef:df:cb:83: 02:0a:6c:9e:23:f5:c1:ac:fc:5f:41:fb:3f:a0:09:d0:63:8e: 33:2a:25:dc:75:b9:62:ca:79:36:2f:42:39:ff:e5:98:fb:72: cd:01:4d:37:d4:2c:d6:33:13:46:58:d0:85:dd:45:d4:69:c5: de:7d:84:f7:26:27:65:57:6b:6b:59:b8:85:86:50:b1:51:93: 52:c4:bf:cb:4a:ee:31:cc:74:df:ee:60:f9:da:5b:9c:16:69: b6:ae:1f:c3:c1:b0:3e:82:a4:84:01:9d:7e:1c:b7:80:fa:ca: d6:97:83:7d:b8:bc:69:07:1f:f1:9a:ef:eb:9e:48:a9:53:53: 48:10:e6:eb:d4:8f:c5:65:d1:bf:4b:92:74:09:2a:dd:31:1c: 88:fc:60:b8:9c:18:e6:8e:c3:1f:ba:d8:14:c3:b2:32:d9:1f: da:88:eb:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdndKWETciW+08elSmP4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5 MGI1YWMwHhcNMjUxMjI2MDcwMTM0WhcNMjUxMjI3MDcwMTM0WjAzMTEwLwYDVQQD EyhiNjBhNjg4OTdjMmQ2N2IyZTZmODY5NzA2ZDQ5NjA5NDlmNjZhZmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZbtGtq7fAIuJH8YF1XYY4fsYjoq KK4E2OFjIDNHQSV4y1fpwuj4xg86fsvWyJRUl6QQr3bA1lHdeOY9w4ndSOBoK5ch qYVOFgIDuSXbtlhl3CjGIO6YDienBov7ktlZLTKpLBGL4opMM/IrY65ZV2AtckxQ 3R3cwzwKlCBrEfar6DWYUyBOT3fWJW3czdRdwOMYgtiJosxHfQdTCD7+ObriGhbZ Mz8YD+Xrvfb+9GizWtz8zj9j2o8ckcCldyoFr5v4s6PW7k567bWrtDK3tVJcy74u xFXtqTu2pj1wNLsqoetCVmxdhucv0sCg6aiHSDaYjtqDGlvKDYwXpocUDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYKaIl8LWey5vhpcG1JYJSfZq+iMB8GA1UdIwQY MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7yWmDro a9RzNybp4nxqzCP7E8rbQ6KsIKG+9hBdMlh7cK0t6XEtZXumCo/F/YgNi4w+D2RC 36kigabOsCGlyRsgY6+lhzZIlki82D+6VT2BUw2gI7zv38uDAgpsniP1waz8X0H7 P6AJ0GOOMyol3HW5Ysp5Ni9COf/lmPtyzQFNN9Qs1jMTRljQhd1F1GnF3n2E9yYn ZVdra1m4hYZQsVGTUsS/y0ruMcx03+5g+dpbnBZptq4fw8GwPoKkhAGdfhy3gPrK 1peDfbi8aQcf8Zrv655IqVNTSBDm69SPxWXRv0uSdAkq3TEciPxguJwY5o7DH7rY FMOyMtkf2ojrDQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client