This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json) Hash identifier: glS6aUlDDTG7I5HNAX90q/NZ8+BKzJxi/sTfWl6y06U= Subject key identifier: 59:B3:0F:12:E9:47:B2:3C:71:DF:D2:25:6B:8F:0A:1B:34:D0:A9:36 Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Certificate serial: 019B330CCBD36656142155BE8CF98F4DA3A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft Manifest number: 0C36 Signing time: Thu 18 Dec 2025 20:00:35 +0000 Manifest this update: Thu 18 Dec 2025 20:00:35 +0000 Manifest next update: Fri 19 Dec 2025 20:00:35 +0000 Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=) 2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: lfgqFK41qB64y6OQc9kvrRuVvYnMx0nVmEKO86xI9Q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:cb:d3:66:56:14:21:55:be:8c:f9:8f:4d:a3:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece Validity Not Before: Dec 18 20:00:35 2025 GMT Not After : Dec 19 20:00:35 2025 GMT Subject: CN=59b30f12e947b23c71dfd2256b8f0a1b34d0a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:e8:16:fe:6d:b6:cf:28:a9:86:91:7d:72: b8:7f:81:b1:d1:f7:9c:e0:3b:55:1b:47:42:d9:c7: ef:79:e0:76:b6:9e:ce:cf:06:94:30:74:92:7e:4e: 70:e9:3c:e0:fe:5b:6c:16:21:47:4e:6f:e8:c5:da: 18:cd:8d:e3:3c:4e:ea:06:4d:68:37:e6:1b:4a:b0: 45:04:66:b8:88:06:22:b7:0a:3b:3d:c4:23:fe:99: ef:9a:e7:9b:2e:4f:72:b6:1f:60:1f:70:ef:ea:4c: 50:ec:9c:10:8d:6e:d1:24:37:e7:fd:02:1c:08:54: 59:d6:fd:2c:ba:85:4a:89:93:81:59:e8:f4:a4:a9: 07:a7:75:e4:44:f7:32:ef:5f:83:49:c5:36:47:db: 52:9c:4c:f9:86:f5:a0:b3:df:ed:14:8d:a8:80:63: c4:4e:6c:df:90:e5:38:5c:75:12:d7:66:47:c7:23: 39:fa:04:84:b5:8f:42:a7:c2:28:01:58:11:3c:ab: 9e:b9:97:f7:0f:ca:f2:2c:27:9e:e1:32:29:d0:8b: 38:1d:43:58:66:06:62:6b:07:f3:3d:45:f6:40:a5: de:b0:44:26:6a:34:1a:4d:98:3d:66:34:a3:42:90: ef:28:d2:5a:08:ca:15:e0:80:e2:c7:1b:2b:c6:b1: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B3:0F:12:E9:47:B2:3C:71:DF:D2:25:6B:8F:0A:1B:34:D0:A9:36 X509v3 Authority Key Identifier: keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:dc:66:92:6b:41:1b:60:2c:75:72:2c:a3:8d:e6:b4:5e:04: 2c:77:54:16:2a:c9:63:c3:e4:2e:50:28:f0:c6:e7:7e:fa:71: d9:6f:d2:df:95:94:c7:c7:4b:8e:d6:b2:cf:38:81:36:e2:38: d6:bd:d5:78:4e:44:0f:26:61:70:1b:c2:36:22:2f:e7:f8:ac: 53:5a:90:e8:70:82:33:65:d7:8f:0b:34:86:ca:73:07:3d:83: 9c:9f:df:6a:2f:4e:3e:bb:79:65:24:d2:05:86:2c:2a:59:27: d6:ae:6c:bd:9a:33:88:bc:fa:32:23:0d:fc:67:f9:17:bf:18: 23:20:63:e3:f5:75:ee:00:41:7e:8d:fc:ec:61:d8:bd:44:28: 04:46:60:f2:96:74:01:bb:6e:d4:ed:8c:e4:d7:db:59:e4:90: ff:db:91:09:b9:fb:0b:70:03:96:35:a9:fe:76:d8:a3:d3:00: 11:b4:c1:99:f3:9b:e6:b6:46:70:ac:37:8d:7b:c7:3d:9b:66: 4e:81:2c:ed:4a:2f:48:33:53:11:8e:44:0c:c0:66:16:e0:84: 11:3d:4d:98:a9:16:e4:b6:e9:1b:c0:58:ae:fe:91:69:8d:3f: 8f:99:0d:e8:19:87:21:55:bd:9b:66:99:91:ca:c3:61:5f:6c: f4:3a:4f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDMvTZlYUIVW+jPmPTaOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYmJjMjEzYzZmOTBiZDhmMDA3MTM5ZWFlNmZlMGNhZmE0 MzVlY2UwHhcNMjUxMjE4MjAwMDM1WhcNMjUxMjE5MjAwMDM1WjAzMTEwLwYDVQQD Eyg1OWIzMGYxMmU5NDdiMjNjNzFkZmQyMjU2YjhmMGExYjM0ZDBhOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDnoFv5tts8oqYaRfXK4f4Gx0fec 4DtVG0dC2cfveeB2tp7OzwaUMHSSfk5w6Tzg/ltsFiFHTm/oxdoYzY3jPE7qBk1o N+YbSrBFBGa4iAYitwo7PcQj/pnvmuebLk9yth9gH3Dv6kxQ7JwQjW7RJDfn/QIc CFRZ1v0suoVKiZOBWej0pKkHp3XkRPcy71+DScU2R9tSnEz5hvWgs9/tFI2ogGPE TmzfkOU4XHUS12ZHxyM5+gSEtY9Cp8IoAVgRPKueuZf3D8ryLCee4TIp0Is4HUNY ZgZiawfzPUX2QKXesEQmajQaTZg9ZjSjQpDvKNJaCMoV4IDixxsrxrEp4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmzDxLpR7I8cd/SJWuPChs00Kk2MB8GA1UdIwQY MBaAFHO7whPG+QvY8AcTnq5v4Mr6Q17OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAt OTU4MTdlZTk0NGNlLzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YTE2MGUtYTU2ZC00MWM4LTg5MzAtOTU4MTdlZTk0NGNl LzEvYzd2Q0U4YjVDOWp3QnhPZXJtX2d5dnBEWHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdxmkmtB G2AsdXIso43mtF4ELHdUFirJY8PkLlAo8Mbnfvpx2W/S35WUx8dLjtayzziBNuI4 1r3VeE5EDyZhcBvCNiIv5/isU1qQ6HCCM2XXjws0hspzBz2DnJ/fai9OPrt5ZSTS BYYsKlkn1q5svZoziLz6MiMN/Gf5F78YIyBj4/V17gBBfo387GHYvUQoBEZg8pZ0 Abtu1O2M5NfbWeSQ/9uRCbn7C3ADljWp/nbYo9MAEbTBmfOb5rZGcKw3jXvHPZtm ToEs7UovSDNTEY5EDMBmFuCEET1NmKkW5LbpG8BYrv6RaY0/j5kN6BmHIVW9m2aZ kcrDYV9s9DpPuA== -----END CERTIFICATE-----Generated at Fri Dec 19 04:51:23 2025 by rpki-client