This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json) Hash identifier: eL7/UktjkRCWJVLlYaM6wWjTFpQqm35zkUwSZh6oD+Y= Subject key identifier: B2:CF:DC:5B:C1:90:DD:ED:98:FE:00:54:6B:7B:E1:56:4B:46:E3:2A Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Certificate serial: 019B0E5B8C952A791F020DDFC0B8FFE30117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft Manifest number: 0C23 Signing time: Thu 11 Dec 2025 17:00:39 +0000 Manifest this update: Thu 11 Dec 2025 17:00:39 +0000 Manifest next update: Fri 12 Dec 2025 17:00:39 +0000 Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=) 2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: ORYt0GbbFrzBp0AZNtpAlDT2bMVoPqO8TPQogAzd8Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:8c:95:2a:79:1f:02:0d:df:c0:b8:ff:e3:01:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Validity Not Before: Dec 11 17:00:39 2025 GMT Not After : Dec 12 17:00:39 2025 GMT Subject: CN=b2cfdc5bc190dded98fe00546b7be1564b46e32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:f9:72:cc:0d:88:43:5d:83:f6:88:6d:82: 1f:f2:36:5d:ee:a8:a0:3e:3e:f4:e2:10:4b:bc:bd: 65:ef:99:70:c2:1f:f9:d4:16:dc:14:59:3a:12:7e: 6b:9f:ff:29:ef:f6:a1:ca:cd:fb:85:68:a1:43:0b: 21:d6:ea:e4:72:7e:16:31:94:96:e3:49:8b:a8:c5: 6b:d3:20:53:b2:d1:3c:bc:a1:d0:03:0a:c9:0f:da: 9f:d8:af:d5:33:f6:71:16:4e:6e:7f:a9:17:cd:00: 4a:65:5d:95:31:71:83:20:5b:c4:5f:8f:33:18:3a: 53:4d:04:d5:bb:36:b3:09:64:f1:9d:19:97:b9:ff: 0e:ac:99:55:6b:53:29:69:2d:ae:63:9f:91:6f:a9: 23:8c:22:6b:33:b9:9a:c6:f1:a5:0f:e6:43:23:14: 02:86:1c:3c:c0:fb:47:77:66:d0:5c:4b:1f:9f:fe: 40:82:71:3c:7a:da:8a:74:d4:cc:df:1e:a0:a2:9e: f6:d7:a3:71:42:00:c4:5e:ba:d2:04:e4:53:21:ea: 55:9b:28:2c:91:c0:bc:40:6e:0e:a2:4c:1e:04:20: ca:0a:6b:a3:42:c5:d7:fd:ca:3d:df:dc:9b:c5:b5: 3f:2e:30:cb:9e:2d:12:d9:06:15:82:48:ad:e0:4b: 09:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CF:DC:5B:C1:90:DD:ED:98:FE:00:54:6B:7B:E1:56:4B:46:E3:2A X509v3 Authority Key Identifier: keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:4b:23:8a:c5:be:b5:70:a0:73:89:ab:0f:74:cc:21:b3:bb: 7a:42:87:0c:95:d5:8a:a3:4b:c3:2e:9c:c2:75:45:a2:7c:24: 67:61:03:78:d5:01:6c:f4:d0:e5:fb:57:ce:f7:ca:65:d6:ae: 13:f9:25:0e:67:f8:9d:f4:18:59:38:c7:67:ac:f8:5d:0a:be: ef:af:ec:95:5f:a6:36:42:69:df:e5:d7:44:dd:03:ec:23:61: 00:05:32:79:83:80:21:b5:be:05:06:1c:2d:4d:4c:ec:cb:fe: 06:b1:b5:eb:48:4f:40:fa:e7:fd:83:24:90:db:e6:25:bb:96: fa:8b:e3:87:65:8d:31:ef:a6:36:4a:ff:0e:bf:4b:99:01:52: 33:12:11:f3:58:ce:66:3c:ef:53:17:b5:d0:30:fa:8a:7b:8d: 00:50:43:be:93:11:98:c7:45:d7:48:22:c9:d3:9c:61:af:c1: 85:c3:ac:ca:85:93:40:03:ad:32:d9:49:17:cc:9f:67:93:c0: c5:9a:b9:74:67:7a:e7:fa:a8:d3:62:86:f3:85:f0:4d:05:b5: 53:ec:4d:e8:49:81:18:06:a8:83:11:9e:47:3b:7f:ae:89:6d: 15:45:44:14:c8:12:6d:68:0e:a9:03:ef:00:db:10:47:63:6a: 76:6a:e7:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW4yVKnkfAg3fwLj/4wEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0 MzVlY2UwHhcNMjUxMjExMTcwMDM5WhcNMjUxMjEyMTcwMDM5WjAzMTEwLwYDVQQD EyhiMmNmZGM1YmMxOTBkZGVkOThmZTAwNTQ2YjdiZTE1NjRiNDZlMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5L5cswNiENdg/aIbYIf8jZd7qig Pj704hBLvL1l75lwwh/51BbcFFk6En5rn/8p7/ahys37hWihQwsh1urkcn4WMZSW 40mLqMVr0yBTstE8vKHQAwrJD9qf2K/VM/ZxFk5uf6kXzQBKZV2VMXGDIFvEX48z GDpTTQTVuzazCWTxnRmXuf8OrJlVa1MpaS2uY5+Rb6kjjCJrM7maxvGlD+ZDIxQC hhw8wPtHd2bQXEsfn/5AgnE8etqKdNTM3x6gop7216NxQgDEXrrSBORTIepVmygs kcC8QG4OokweBCDKCmujQsXX/co939ybxbU/LjDLni0S2QYVgkit4EsJ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLP3FvBkN3tmP4AVGt74VZLRuMqMB8GA1UdIwQY MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0sjisW+ tXCgc4mrD3TMIbO7ekKHDJXViqNLwy6cwnVFonwkZ2EDeNUBbPTQ5ftXzvfKZdau E/klDmf4nfQYWTjHZ6z4XQq+76/slV+mNkJp3+XXRN0D7CNhAAUyeYOAIbW+BQYc LU1M7Mv+BrG160hPQPrn/YMkkNvmJbuW+ovjh2WNMe+mNkr/Dr9LmQFSMxIR81jO ZjzvUxe10DD6inuNAFBDvpMRmMdF10giydOcYa/BhcOsyoWTQAOtMtlJF8yfZ5PA xZq5dGd65/qo02KG84XwTQW1U+xN6EmBGAaogxGeRzt/roltFUVEFMgSbWgOqQPv ANsQR2NqdmrnUg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:48:13 2025 by rpki-client