This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json) Hash identifier: rOCPU70MefM65S0hZIcoZYzE9je2xGcajJwN2dgJOUI= Subject key identifier: 5F:05:10:AD:89:7F:F2:B2:52:73:7B:B5:0D:F0:63:52:B3:13:DB:F8 Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Certificate serial: 019B44390CC819DD557F3F9BE065BA1C00F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 04:02:28 +0000 Manifest this update: Mon 22 Dec 2025 04:02:28 +0000 Manifest next update: Tue 23 Dec 2025 04:02:28 +0000 Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: vshSV6hYjM1x3Lvi3rixwCZube1TczzF5qx0hjYdv2I=) 2: KALMVhqVFo0O99VrdECDqSH5Z6g.roa (hash: vjDA6l8MH7MrWb72G2c81lHoX5Ci2HwmnVXmzEUbWMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:0c:c8:19:dd:55:7f:3f:9b:e0:65:ba:1c:00:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2 Validity Not Before: Dec 22 04:02:28 2025 GMT Not After : Dec 23 04:02:28 2025 GMT Subject: CN=5f0510ad897ff2b252737bb50df06352b313dbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:55:31:b4:68:2a:c6:7f:5e:1e:e5:09:21: b8:92:08:65:47:47:b1:33:f6:10:80:49:6d:1b:96: 71:a7:1d:9c:90:74:e4:a9:2d:9c:93:fc:8b:1b:3c: 81:4d:e8:f9:6b:c2:aa:6d:60:ec:b6:f3:59:d3:3c: ea:39:8b:7d:71:d5:ca:67:e5:16:28:2f:c8:6d:6c: 04:22:84:8d:79:9e:ad:0d:2c:5c:27:2e:24:15:4d: d5:35:a7:83:44:5d:ff:a8:3b:7e:a3:82:fc:94:ed: fe:ba:f0:3e:9c:2d:2e:6b:e9:a8:50:ba:82:86:c5: c8:5c:51:a3:e7:5b:ae:69:3c:47:5f:6c:5b:d3:05: e4:8e:34:15:ab:22:a2:f5:1b:09:b9:55:bd:fd:68: 31:ae:07:5d:07:40:56:b2:7f:eb:60:b1:21:2b:a6: ac:58:64:2c:82:fe:ed:b8:01:ce:a4:8f:2d:48:dc: 22:0c:c9:f9:32:62:6e:18:5a:0f:52:6c:d8:df:03: a7:69:3c:8c:99:a8:5b:0c:4f:60:fa:86:d5:05:7c: 72:3c:71:f7:42:98:a7:10:c4:c8:e2:f2:28:f7:3f: 35:98:7f:fd:23:d9:63:30:af:76:e5:27:87:69:ae: 31:e3:a5:39:1e:e1:33:65:c0:3c:96:32:f5:3e:5b: 65:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:10:AD:89:7F:F2:B2:52:73:7B:B5:0D:F0:63:52:B3:13:DB:F8 X509v3 Authority Key Identifier: keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:66:7e:27:94:03:94:c3:52:13:18:64:33:e6:89:d0:6a: 6d:56:0e:58:de:82:9f:04:59:c4:a7:be:00:ca:44:69:27:b0: 88:65:c7:65:c8:1a:cf:ad:b8:48:85:29:84:bd:65:8a:d4:8a: 84:12:8f:2a:02:8d:14:62:a3:3e:7d:a8:68:6c:17:2d:9a:18: f7:71:ed:3a:e5:19:a7:cf:b9:31:e0:c7:54:da:38:7d:a3:ec: 63:b2:d6:24:75:7f:d1:fa:cd:bd:f3:74:5e:85:ad:71:d1:96: 98:9d:c4:d7:44:87:95:43:6e:5d:e2:82:60:8d:d9:da:6a:b7: e8:27:16:6c:7b:50:00:e3:17:07:d8:49:02:87:a6:7f:85:6a: 0d:b6:8b:e9:e2:a7:41:95:f3:ff:f8:47:1f:69:a2:be:75:b7: 69:57:37:ba:ab:3c:37:6b:2d:e4:0c:f0:c1:20:d3:3b:34:fc: fd:32:6b:cc:de:86:03:b0:07:32:ef:1d:d9:d9:94:7e:44:75: 0a:83:39:dd:88:95:ac:cf:70:7a:ef:a7:a7:9f:f9:d4:00:cf: db:34:4f:22:6b:e0:14:36:cd:4c:24:c3:d2:6e:2e:49:4b:8d: 1a:a8:14:88:2d:5e:c3:ef:dc:58:ee:19:41:14:41:ba:e2:c3: 91:c1:b3:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQzIGd1Vfz+b4GW6HADzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0 ZDQ1ZTIwHhcNMjUxMjIyMDQwMjI4WhcNMjUxMjIzMDQwMjI4WjAzMTEwLwYDVQQD Eyg1ZjA1MTBhZDg5N2ZmMmIyNTI3MzdiYjUwZGYwNjM1MmIzMTNkYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo21VMbRoKsZ/Xh7lCSG4kghlR0ex M/YQgEltG5Zxpx2ckHTkqS2ck/yLGzyBTej5a8KqbWDstvNZ0zzqOYt9cdXKZ+UW KC/IbWwEIoSNeZ6tDSxcJy4kFU3VNaeDRF3/qDt+o4L8lO3+uvA+nC0ua+moULqC hsXIXFGj51uuaTxHX2xb0wXkjjQVqyKi9RsJuVW9/WgxrgddB0BWsn/rYLEhK6as WGQsgv7tuAHOpI8tSNwiDMn5MmJuGFoPUmzY3wOnaTyMmahbDE9g+obVBXxyPHH3 QpinEMTI4vIo9z81mH/9I9ljMK925SeHaa4x46U5HuEzZcA8ljL1Pltl2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8FEK2Jf/KyUnN7tQ3wY1KzE9v4MB8GA1UdIwQY MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpVmfieU A5TDUhMYZDPmidBqbVYOWN6CnwRZxKe+AMpEaSewiGXHZcgaz624SIUphL1litSK hBKPKgKNFGKjPn2oaGwXLZoY93HtOuUZp8+5MeDHVNo4faPsY7LWJHV/0frNvfN0 XoWtcdGWmJ3E10SHlUNuXeKCYI3Z2mq36CcWbHtQAOMXB9hJAoemf4VqDbaL6eKn QZXz//hHH2mivnW3aVc3uqs8N2st5AzwwSDTOzT8/TJrzN6GA7AHMu8d2dmUfkR1 CoM53YiVrM9weu+np5/51ADP2zRPImvgFDbNTCTD0m4uSUuNGqgUiC1ew+/cWO4Z QRRBuuLDkcGz2Q== -----END CERTIFICATE-----Generated at Mon Dec 22 08:51:11 2025 by rpki-client