This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json) Hash identifier: yvrpvcDny57wEtaWVVZv6C7DpfGnUKZFdoIAybKpcZ4= Subject key identifier: 19:83:3F:DA:A7:CD:15:2F:8E:CF:A2:AB:FE:C7:97:49:DA:05:A4:17 Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3 Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3 Certificate serial: 019B59E46F94AF85C6E16B701943C4566A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 09:01:41 +0000 Manifest this update: Fri 26 Dec 2025 09:01:41 +0000 Manifest next update: Sat 27 Dec 2025 09:01:41 +0000 Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=) 2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: 2y6HJNZ3GY1bk4BwvnNm5TdXr7EwzFgxKvYJsPKobyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6f:94:af:85:c6:e1:6b:70:19:43:c4:56:6a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3 Validity Not Before: Dec 26 09:01:41 2025 GMT Not After : Dec 27 09:01:41 2025 GMT Subject: CN=19833fdaa7cd152f8ecfa2abfec79749da05a417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:43:78:ed:77:ba:34:3a:2c:d1:89:6b:34: 57:cc:a4:b8:e1:76:b3:ab:21:aa:1a:cc:63:80:fc: 7b:93:b9:9c:4c:d6:19:7d:a8:2e:22:ec:22:d0:25: 83:b0:a2:bf:09:bc:3b:61:31:26:90:5b:b1:ca:58: 27:32:7d:db:d0:36:83:d4:a0:a1:b2:a7:5e:7d:33: 39:c5:92:c0:7c:56:6e:b9:b9:c8:92:70:17:8a:dc: 79:4a:6e:b2:e5:f8:a9:6a:99:7d:d5:96:2b:fb:01: d2:ed:50:bb:d0:ee:0f:30:49:06:bb:1b:5f:8e:c4: ae:4f:50:c3:4b:09:0b:8e:40:1e:f7:a7:9a:8d:b5: dd:0a:ff:cb:72:99:82:20:e6:2a:67:f5:e8:98:f8: 42:c4:db:53:a3:58:c7:54:e5:d0:19:ab:47:ec:85: 10:91:ae:d4:76:66:6e:c9:4d:31:cd:a6:be:8b:33: ca:25:e7:4b:c3:c0:56:72:b7:75:9b:11:67:27:34: e0:8c:1b:93:12:52:a2:21:ad:51:60:a7:17:6f:e9: 9c:d3:7a:2b:d2:93:e0:e3:04:cd:c0:68:48:79:53: b4:60:78:52:2b:e7:b1:45:da:0c:71:3e:45:a2:44: 6a:25:cc:42:cd:9f:59:a8:3e:48:87:f8:ec:5d:24: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:3F:DA:A7:CD:15:2F:8E:CF:A2:AB:FE:C7:97:49:DA:05:A4:17 X509v3 Authority Key Identifier: keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b6:46:48:b8:3f:39:a3:35:2d:0e:e7:73:68:24:6e:67:bb: df:4c:92:fe:72:10:c0:19:69:5a:8d:67:7d:57:74:6f:b8:d7: ed:c1:86:c8:68:85:f2:39:64:7a:dd:23:58:9d:c9:3f:73:d9: b5:10:42:5f:1c:87:cd:ae:c1:ea:78:3d:72:e1:c2:5d:d6:26: f4:c4:d3:04:41:17:57:5c:1e:70:2d:87:7f:37:05:da:94:58: 35:c6:b5:a5:cf:43:ed:97:38:fe:9a:d1:2f:5b:8c:3d:c4:b4: 08:79:26:3e:bd:ab:af:4d:1b:48:97:c5:e8:a8:c8:b2:6d:d9: 44:b3:6c:3e:82:cd:ec:bb:11:2c:a1:8b:0d:be:7a:e4:31:43: bf:4b:86:17:b1:84:5c:da:23:33:6f:57:a7:03:09:6e:a7:f0: 17:3b:cc:9e:14:17:22:76:9f:5a:92:3d:4e:ff:fc:a8:5f:d2: 23:17:06:32:90:b5:62:7a:73:c6:0b:77:3d:17:a1:e2:46:ee: 59:62:7c:20:05:5b:18:3d:45:39:a1:fc:e7:ee:3f:4c:bb:c0: a0:a4:af:43:96:1e:73:c4:4b:8a:29:f2:ab:b4:ac:97:84:d7: 90:62:35:bf:79:36:b2:ee:ed:02:9f:38:7b:7c:62:1e:eb:98: 3b:ef:97:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5G+Ur4XG4WtwGUPEVmpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh ODcyZTMwHhcNMjUxMjI2MDkwMTQxWhcNMjUxMjI3MDkwMTQxWjAzMTEwLwYDVQQD EygxOTgzM2ZkYWE3Y2QxNTJmOGVjZmEyYWJmZWM3OTc0OWRhMDVhNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2VDeO13ujQ6LNGJazRXzKS44Xaz qyGqGsxjgPx7k7mcTNYZfaguIuwi0CWDsKK/Cbw7YTEmkFuxylgnMn3b0DaD1KCh sqdefTM5xZLAfFZuubnIknAXitx5Sm6y5fipapl91ZYr+wHS7VC70O4PMEkGuxtf jsSuT1DDSwkLjkAe96eajbXdCv/LcpmCIOYqZ/XomPhCxNtTo1jHVOXQGatH7IUQ ka7UdmZuyU0xzaa+izPKJedLw8BWcrd1mxFnJzTgjBuTElKiIa1RYKcXb+mc03or 0pPg4wTNwGhIeVO0YHhSK+exRdoMcT5FokRqJcxCzZ9ZqD5Ih/jsXSQGzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmDP9qnzRUvjs+iq/7Hl0naBaQXMB8GA1UdIwQY MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7ZGSLg/ OaM1LQ7nc2gkbme730yS/nIQwBlpWo1nfVd0b7jX7cGGyGiF8jlket0jWJ3JP3PZ tRBCXxyHza7B6ng9cuHCXdYm9MTTBEEXV1wecC2HfzcF2pRYNca1pc9D7Zc4/prR L1uMPcS0CHkmPr2rr00bSJfF6KjIsm3ZRLNsPoLN7LsRLKGLDb565DFDv0uGF7GE XNojM29XpwMJbqfwFzvMnhQXInafWpI9Tv/8qF/SIxcGMpC1Ynpzxgt3PReh4kbu WWJ8IAVbGD1FOaH85+4/TLvAoKSvQ5Yec8RLiinyq7Ssl4TXkGI1v3k2su7tAp84 e3xiHuuYO++XFw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:18 2025 by rpki-client