This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json) Hash identifier: 0Uv0eKRxuBwULLJ+CC2qvAf8UPOSmIqI8nM7Jzvnn1c= Subject key identifier: 13:AB:A0:16:AC:8F:5E:9C:89:05:AD:C1:DC:4F:FF:FE:43:FF:4B:CB Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6 Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6 Certificate serial: 019B1A28E85E2B525FF703560DA66045E6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft Manifest number: 1773 Signing time: Sun 14 Dec 2025 00:00:46 +0000 Manifest this update: Sun 14 Dec 2025 00:00:46 +0000 Manifest next update: Mon 15 Dec 2025 00:00:46 +0000 Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=) 2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: hJHfYGLIdQPpiJfGmTYELWBh5fz4y9SLjNynNEBQjFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:e8:5e:2b:52:5f:f7:03:56:0d:a6:60:45:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6 Validity Not Before: Dec 14 00:00:46 2025 GMT Not After : Dec 15 00:00:46 2025 GMT Subject: CN=13aba016ac8f5e9c8905adc1dc4ffffe43ff4bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:d0:f8:31:f0:87:d6:b6:03:86:40:15:a3: e8:b7:76:8b:a2:fd:8b:f5:3a:8b:06:ae:0e:0b:1b: b7:b4:0f:97:6e:ec:85:92:89:35:ae:9f:3b:7d:52: ae:43:32:a8:0a:96:85:3a:c3:04:79:40:bf:12:99: 8d:46:c4:be:6e:84:30:70:9f:6f:2f:b4:86:76:12: a8:08:17:2f:a6:27:a5:80:c2:b8:1d:a0:e3:f5:5e: 4c:07:1f:4b:d0:67:ec:ea:67:d5:45:e4:a4:28:bc: 38:2f:1f:e5:fd:a4:b4:da:6f:81:06:99:d7:92:6b: e9:16:f4:6b:3a:81:41:be:0a:16:1b:a8:4b:7c:4e: 9e:37:ad:30:7e:5f:0d:60:76:c0:6d:4d:9e:41:6e: 34:57:7e:b3:5a:20:0b:9e:2c:6e:2e:9f:a2:73:01: e1:0b:78:db:23:ed:40:09:9f:97:49:96:1d:c6:06: 6f:8b:cf:33:46:f6:bf:1c:e0:17:47:da:bf:ae:77: 0d:f6:e2:26:33:94:88:74:d8:f0:cf:7e:7d:de:d6: 19:8a:76:00:5a:12:78:ed:61:f9:2e:b4:d4:ee:49: 5a:95:54:56:f0:d7:5d:c5:2b:f9:b9:67:87:e1:0b: f7:bf:cf:e0:c7:24:44:45:ce:37:e8:76:f4:2e:47: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AB:A0:16:AC:8F:5E:9C:89:05:AD:C1:DC:4F:FF:FE:43:FF:4B:CB X509v3 Authority Key Identifier: keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5a:8b:cd:a1:79:cb:9b:8d:8d:e6:56:81:b6:cc:9b:1a:1f: 5b:80:d9:2e:8d:bc:31:cf:57:ff:57:ba:c9:f4:ed:94:9c:26: 89:d5:a7:46:72:81:b0:61:46:c1:b1:9a:7d:04:59:57:72:01: 79:27:6f:9c:54:1b:37:75:cb:90:ba:52:04:66:10:b9:12:c5: e9:7c:3b:b6:d5:a5:c9:49:40:f9:9f:68:87:f4:04:42:ee:4c: e7:c4:a6:95:ed:a2:fc:a3:a7:b1:70:6f:e6:7e:0e:52:8a:8c: b5:f0:71:ef:9d:6b:98:95:71:a7:0c:ab:79:a0:08:8a:23:55: cb:de:5a:c9:7e:54:df:8c:f2:d9:3b:4d:f4:c9:bc:02:b9:68: b1:91:6a:c8:db:e8:9f:bb:fa:4e:8e:7a:c6:e2:fc:52:cf:09: 56:e4:87:e8:db:8c:3c:48:55:86:8b:36:f3:e4:13:b1:6b:e1: 19:27:1d:2a:42:0b:61:d3:fe:de:92:57:6b:9d:ff:a8:9a:a0: 0f:03:0a:04:ce:51:8f:f7:35:90:1a:bb:4f:1e:f0:bc:94:44: 70:10:66:dd:55:52:a5:a9:0a:6f:b6:6d:1d:a6:b7:0b:dc:74: e5:94:bd:7b:13:a7:5c:04:7d:6d:af:90:0f:17:45:26:a2:8c: ba:99:b0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKOheK1Jf9wNWDaZgReagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj MGFjYTYwHhcNMjUxMjE0MDAwMDQ2WhcNMjUxMjE1MDAwMDQ2WjAzMTEwLwYDVQQD EygxM2FiYTAxNmFjOGY1ZTljODkwNWFkYzFkYzRmZmZmZTQzZmY0YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopfQ+DHwh9a2A4ZAFaPot3aLov2L 9TqLBq4OCxu3tA+XbuyFkok1rp87fVKuQzKoCpaFOsMEeUC/EpmNRsS+boQwcJ9v L7SGdhKoCBcvpielgMK4HaDj9V5MBx9L0Gfs6mfVReSkKLw4Lx/l/aS02m+BBpnX kmvpFvRrOoFBvgoWG6hLfE6eN60wfl8NYHbAbU2eQW40V36zWiALnixuLp+icwHh C3jbI+1ACZ+XSZYdxgZvi88zRva/HOAXR9q/rncN9uImM5SIdNjwz3593tYZinYA WhJ47WH5LrTU7klalVRW8NddxSv5uWeH4Qv3v8/gxyRERc436Hb0LkeuBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOroBasj16ciQWtwdxP//5D/0vLMB8GA1UdIwQY MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVqLzaF5 y5uNjeZWgbbMmxofW4DZLo28Mc9X/1e6yfTtlJwmidWnRnKBsGFGwbGafQRZV3IB eSdvnFQbN3XLkLpSBGYQuRLF6Xw7ttWlyUlA+Z9oh/QEQu5M58Smle2i/KOnsXBv 5n4OUoqMtfBx751rmJVxpwyreaAIiiNVy95ayX5U34zy2TtN9Mm8ArlosZFqyNvo n7v6To56xuL8Us8JVuSH6NuMPEhVhos28+QTsWvhGScdKkILYdP+3pJXa53/qJqg DwMKBM5Rj/c1kBq7Tx7wvJREcBBm3VVSpakKb7ZtHaa3C9x05ZS9exOnXAR9ba+Q DxdFJqKMupmwfw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:54 2025 by rpki-client