This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json) Hash identifier: cYWgA+S6S8RPdIoz2OhB+46jx/C5ZmZx0sGKT8OvyV0= Subject key identifier: F3:88:82:35:CA:93:69:F4:86:3E:93:F6:D1:B6:0C:85:26:05:3B:D0 Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Certificate serial: 019B5A88C1560CB943718CDC8049064C95DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 12:01:10 +0000 Manifest this update: Fri 26 Dec 2025 12:01:10 +0000 Manifest next update: Sat 27 Dec 2025 12:01:10 +0000 Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: FkhbqK8OV9KVUPBIMZ0ENL+Miknr8Aye9gyonpLs0TU=) 2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c1:56:0c:b9:43:71:8c:dc:80:49:06:4c:95:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043 Validity Not Before: Dec 26 12:01:10 2025 GMT Not After : Dec 27 12:01:10 2025 GMT Subject: CN=f3888235ca9369f4863e93f6d1b60c8526053bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ca:a5:12:31:4f:d6:c5:f3:ed:8a:b4:73:8f: d0:97:07:de:8d:0e:7d:91:12:f5:98:4e:97:52:07: e3:fb:7b:6e:93:df:44:fd:97:96:86:9b:f4:9c:b5: 53:e7:a7:85:0b:c5:4a:b1:d4:f1:fa:c4:95:ab:d1: fc:2f:a3:3b:7b:ec:7d:12:42:81:7d:56:53:fd:37: f0:d6:f8:97:48:42:a1:6e:bd:70:c9:80:25:f6:c9: d7:39:f6:b5:c9:ba:52:72:4a:29:57:1a:75:79:ad: 61:08:7f:17:f8:cc:e4:00:8d:f5:39:ee:53:ba:f6: 06:2b:8d:0c:ba:be:d7:9d:90:8f:21:8d:b4:fe:8b: c9:56:db:f9:b3:9b:45:9f:71:5d:8c:36:3f:38:4e: 93:c0:21:ca:3d:fa:e0:09:65:84:29:21:86:85:cb: 26:1c:72:52:04:00:b0:cb:f5:68:95:5d:38:ed:78: 2d:51:4b:87:10:5a:c8:6b:2d:ce:43:4e:c1:91:f8: 5b:f8:2e:94:ae:a2:bc:cc:64:33:15:ab:fe:ed:e0: 7b:2d:bb:00:2c:5d:c2:e3:77:d6:bf:11:7f:b0:9e: f4:bf:18:89:30:d8:de:d0:bd:f6:aa:4b:bb:3d:dc: ff:cc:f5:68:70:c2:e4:ed:f5:89:58:d7:54:02:27: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:88:82:35:CA:93:69:F4:86:3E:93:F6:D1:B6:0C:85:26:05:3B:D0 X509v3 Authority Key Identifier: keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:6c:5e:f5:9c:0e:b5:ae:3b:24:f2:9f:97:e7:eb:d6:df:92: da:70:08:85:96:b5:08:24:43:be:37:34:98:90:a8:cd:7a:8e: c9:70:cb:5e:6f:47:2c:6f:33:20:ac:24:df:9d:8c:74:fc:6a: 86:1c:ae:6a:c2:23:c6:15:b8:fe:a1:5c:1a:90:37:51:b2:ed: 2c:75:41:e9:1c:56:e1:05:30:a8:f8:5e:a7:86:1d:b9:be:80: 3a:38:39:bf:65:47:51:1e:69:fb:98:eb:6b:d9:ae:c3:94:55: d2:a8:92:b9:85:09:7e:16:3f:ae:26:e2:1d:61:26:34:d3:80: 25:0b:26:13:39:57:dc:60:79:f9:83:f4:48:d6:b2:56:e8:d0: 05:a3:53:04:85:0b:fc:08:e2:a6:73:3b:36:8f:44:60:0d:a2: 2c:8d:e3:5f:a3:04:9b:2f:f6:3b:99:a5:55:16:b6:c3:55:ac: d0:55:f0:51:c6:e5:9f:a7:bc:8d:6c:29:04:aa:c3:37:ec:6f: b2:a8:cb:a1:04:52:b7:e7:04:e3:5e:8f:9a:07:85:ad:4c:0b: c8:f0:14:6b:22:76:5d:63:af:ac:45:6c:c0:48:1e:8c:8e:27: 58:71:08:ab:b6:4c:b1:ad:94:9d:e7:fc:9f:dc:8d:6c:1c:b8: 7a:86:e3:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMFWDLlDcYzcgEkGTJXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz YWMwNDMwHhcNMjUxMjI2MTIwMTEwWhcNMjUxMjI3MTIwMTEwWjAzMTEwLwYDVQQD EyhmMzg4ODIzNWNhOTM2OWY0ODYzZTkzZjZkMWI2MGM4NTI2MDUzYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MqlEjFP1sXz7Yq0c4/QlwfejQ59 kRL1mE6XUgfj+3tuk99E/ZeWhpv0nLVT56eFC8VKsdTx+sSVq9H8L6M7e+x9EkKB fVZT/Tfw1viXSEKhbr1wyYAl9snXOfa1ybpSckopVxp1ea1hCH8X+MzkAI31Oe5T uvYGK40Mur7XnZCPIY20/ovJVtv5s5tFn3FdjDY/OE6TwCHKPfrgCWWEKSGGhcsm HHJSBACwy/VolV047XgtUUuHEFrIay3OQ07Bkfhb+C6UrqK8zGQzFav+7eB7LbsA LF3C43fWvxF/sJ70vxiJMNje0L32qku7Pdz/zPVocMLk7fWJWNdUAif51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOIgjXKk2n0hj6T9tG2DIUmBTvQMB8GA1UdIwQY MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGxe9ZwO ta47JPKfl+fr1t+S2nAIhZa1CCRDvjc0mJCozXqOyXDLXm9HLG8zIKwk352MdPxq hhyuasIjxhW4/qFcGpA3UbLtLHVB6RxW4QUwqPhep4Ydub6AOjg5v2VHUR5p+5jr a9muw5RV0qiSuYUJfhY/ribiHWEmNNOAJQsmEzlX3GB5+YP0SNayVujQBaNTBIUL /AjipnM7No9EYA2iLI3jX6MEmy/2O5mlVRa2w1Ws0FXwUcbln6e8jWwpBKrDN+xv sqjLoQRSt+cE416PmgeFrUwLyPAUayJ2XWOvrEVswEgejI4nWHEIq7ZMsa2Unef8 n9yNbBy4eobjiQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:29 2025 by rpki-client