This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json) Hash identifier: iGEkTbP+2QKhKCFA42Xp9dULorw6lbjl8OMzkaMIyK8= Subject key identifier: 7D:E2:BB:71:CE:DB:2A:DA:DC:BC:C9:89:53:88:44:E0:33:BC:D9:1A Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e Certificate serial: 019B5A1ACAB2FE6576EFE6237E694EE697D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft Manifest number: 0153 Signing time: Fri 26 Dec 2025 10:01:03 +0000 Manifest this update: Fri 26 Dec 2025 10:01:03 +0000 Manifest next update: Sat 27 Dec 2025 10:01:03 +0000 Files and hashes: 1: VHqrHR3KAxyQVs5XqkuJUlTCqyQ.roa (hash: hg67UBoyW97yawl4BR0CcyZRfHg2HHLQE7gv+QJb6ws=) 2: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: gEDqqzWyKvzi6kficWcV3AlXVWjpXTVoA46oQCtaD+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:ca:b2:fe:65:76:ef:e6:23:7e:69:4e:e6:97:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e Validity Not Before: Dec 26 10:01:03 2025 GMT Not After : Dec 27 10:01:03 2025 GMT Subject: CN=7de2bb71cedb2adadcbcc989538844e033bcd91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:2c:d3:67:09:f3:f0:37:d8:4e:4a:30:39: 00:b6:d6:94:16:de:97:7c:95:69:99:96:55:88:54: 4c:f7:27:8a:9a:d2:15:26:59:53:23:01:a0:ef:e7: 99:c5:55:0b:27:b8:2f:e7:5c:f5:6c:68:95:10:97: d9:2f:4c:2c:82:23:92:d2:18:0f:b3:2c:1e:ea:97: 3d:a1:9c:1c:37:24:95:dd:da:60:e3:10:47:63:8e: df:92:e7:20:6d:b2:76:d5:1f:60:7c:53:11:73:1e: 83:52:3d:de:df:e5:12:12:f0:ab:57:d3:48:3a:8d: 22:ea:7c:de:8d:a7:38:a7:7e:64:26:cc:73:32:91: ea:5e:ec:49:2c:3d:22:42:b2:f6:01:a1:c3:8c:d1: 24:4a:5d:f9:2c:f3:31:e2:31:58:03:4b:84:ac:c1: 0f:43:a7:2a:2e:62:29:f4:00:11:64:d0:25:39:4c: 8a:f0:f1:b0:46:f0:47:15:2c:20:bd:77:b7:b4:f5: d3:fd:3b:49:8b:ab:1b:67:4c:3e:ca:6a:0c:90:dd: b3:81:b0:8c:e5:42:ca:d0:1c:6e:ef:98:29:e9:06: f7:94:c1:49:23:40:76:46:ea:de:79:e8:c1:dd:96: bb:a3:97:1b:4e:b2:48:75:9d:b1:5a:2a:3f:eb:fa: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E2:BB:71:CE:DB:2A:DA:DC:BC:C9:89:53:88:44:E0:33:BC:D9:1A X509v3 Authority Key Identifier: keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2b:3a:4f:33:82:4b:3b:b5:4d:bb:b9:18:a3:12:e3:1e:be: cc:55:9f:8b:39:4c:59:85:94:d4:9a:83:72:f1:51:57:a8:fc: 3e:7a:f3:e0:c3:9b:14:36:4d:30:b6:30:48:69:0e:97:63:fb: a7:95:0b:15:d0:ba:25:2d:3a:7f:f3:d2:65:74:2f:09:a1:a1: ef:53:c7:05:7f:be:34:bf:38:2c:c8:09:2b:77:32:ca:45:ff: 7a:74:22:e3:70:34:33:28:2e:f9:0f:2d:1b:ae:48:4d:c2:b5: 49:47:52:35:d8:c9:06:26:6f:93:92:e5:eb:6f:33:c5:8c:2e: e2:4a:5b:ef:70:08:d8:b9:54:c0:8d:d1:0d:64:4f:fe:45:77: fc:d3:bd:f5:98:6e:24:3b:24:ec:10:2f:43:2e:32:2e:ee:6b: 01:96:bd:85:04:66:10:cf:97:e3:09:e6:3f:84:b4:87:e1:f7: b3:ba:c0:c6:8e:c1:2a:af:ee:f6:f3:53:dd:62:e6:8c:ea:80: e7:1a:57:c5:43:da:15:91:41:6e:8c:0f:31:a8:18:11:87:2a: ed:64:40:01:84:47:b6:52:ac:db:18:19:20:f3:79:ea:62:ce: e2:ff:ab:94:89:42:f0:6f:0e:62:17:5b:1d:03:92:20:1b:3c: 6d:51:b4:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsqy/mV27+YjfmlO5pfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNzgyNmY2ZGRhNTQwMzQ5MWU0ODdjYTRlZWI3ZDdjZDc2 ZmExM2UwHhcNMjUxMjI2MTAwMTAzWhcNMjUxMjI3MTAwMTAzWjAzMTEwLwYDVQQD Eyg3ZGUyYmI3MWNlZGIyYWRhZGNiY2M5ODk1Mzg4NDRlMDMzYmNkOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ks02cJ8/A32E5KMDkAttaUFt6X fJVpmZZViFRM9yeKmtIVJllTIwGg7+eZxVULJ7gv51z1bGiVEJfZL0wsgiOS0hgP sywe6pc9oZwcNySV3dpg4xBHY47fkucgbbJ21R9gfFMRcx6DUj3e3+USEvCrV9NI Oo0i6nzejac4p35kJsxzMpHqXuxJLD0iQrL2AaHDjNEkSl35LPMx4jFYA0uErMEP Q6cqLmIp9AARZNAlOUyK8PGwRvBHFSwgvXe3tPXT/TtJi6sbZ0w+ymoMkN2zgbCM 5ULK0Bxu75gp6Qb3lMFJI0B2RureeejB3Za7o5cbTrJIdZ2xWio/6/rSbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3iu3HO2yra3LzJiVOIROAzvNkaMB8GA1UdIwQY MBaAFHN4JvbdpUA0keSHyk7rfXzXb6E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODkt MTNmYTQxMmExN2NmLzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODktMTNmYTQxMmExN2Nm LzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYis6TzOC Szu1Tbu5GKMS4x6+zFWfizlMWYWU1JqDcvFRV6j8Pnrz4MObFDZNMLYwSGkOl2P7 p5ULFdC6JS06f/PSZXQvCaGh71PHBX++NL84LMgJK3cyykX/enQi43A0Mygu+Q8t G65ITcK1SUdSNdjJBiZvk5Ll628zxYwu4kpb73AI2LlUwI3RDWRP/kV3/NO99Zhu JDsk7BAvQy4yLu5rAZa9hQRmEM+X4wnmP4S0h+H3s7rAxo7BKq/u9vNT3WLmjOqA 5xpXxUPaFZFBbowPMagYEYcq7WRAAYRHtlKs2xgZIPN56mLO4v+rlIlC8G8OYhdb HQOSIBs8bVG0Qw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:59 2025 by rpki-client