This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json) Hash identifier: 0Zs4c7jfgBWLRyaYteyld05ldbuKlOj91GVPc9Iqf7Q= Subject key identifier: 5E:DD:60:5E:D7:21:94:42:F0:B5:13:A4:88:D7:CE:D6:34:FE:ED:C7 Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73 Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773 Certificate serial: 019AFCC3145613E112FB8C0D78E2AFC3037E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft Manifest number: 1765 Signing time: Mon 08 Dec 2025 07:00:34 +0000 Manifest this update: Mon 08 Dec 2025 07:00:34 +0000 Manifest next update: Tue 09 Dec 2025 07:00:34 +0000 Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: mBUG+DYxZmArcbtfcKLIUvVDv4PrzbeNLHr+js44n4A=) 2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=) 3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:14:56:13:e1:12:fb:8c:0d:78:e2:af:c3:03:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773 Validity Not Before: Dec 8 07:00:34 2025 GMT Not After : Dec 9 07:00:34 2025 GMT Subject: CN=5edd605ed7219442f0b513a488d7ced634feedc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:69:47:ea:e8:59:8d:89:86:a5:b4:dc:57: e2:5f:a7:11:99:8f:c4:10:81:eb:0c:50:17:77:07: 0c:96:a6:fe:0c:bc:e9:c5:86:e2:1c:ea:8f:76:6e: 03:ee:99:df:10:11:09:bb:64:c5:52:af:a2:6b:57: e1:1f:3e:9b:2d:18:ff:ee:ad:a2:6e:52:9d:e7:7c: 78:ae:01:ae:8a:53:b6:9a:b6:16:f2:8b:96:42:6d: f0:c4:e9:ae:21:1b:5a:ad:59:cb:a4:7f:a6:b4:c1: 92:54:f2:5d:a6:e5:d3:26:b3:ee:00:4b:63:7e:11: 8d:ae:46:b5:c9:69:52:50:61:51:ab:a9:2b:46:88: a1:3a:a5:c5:86:f6:f3:6f:8c:06:80:0e:da:ff:29: e5:0b:36:2b:16:d6:85:dd:98:ad:d7:07:12:cd:7a: 0f:15:46:d5:6a:a5:82:7a:b9:94:ec:b2:bd:7d:88: f3:e9:60:f9:49:4f:b6:50:2b:84:42:55:e2:e6:46: 77:06:96:e6:20:82:a1:9e:e9:65:ec:1a:35:e6:c4: 18:22:41:86:6e:02:6d:0f:d2:65:cf:14:0e:ba:3b: ac:80:a2:8e:87:56:e2:16:51:b1:67:ac:86:fb:3e: c3:9b:89:b8:ca:37:40:86:f4:28:1e:b7:07:ce:b7: 3d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:60:5E:D7:21:94:42:F0:B5:13:A4:88:D7:CE:D6:34:FE:ED:C7 X509v3 Authority Key Identifier: keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:df:47:d5:e0:d1:b5:49:e2:0a:25:0e:48:d9:2c:50:1e:0f: 8e:c7:d5:59:a8:55:d0:98:45:10:15:c4:9f:05:95:45:9e:8e: ea:db:29:bd:8b:b6:91:8c:f6:a4:bc:99:1d:91:fa:fd:39:d0: be:29:a6:17:11:8c:55:bf:d4:aa:2c:05:f9:62:9a:96:2e:41: c4:6c:10:44:72:e3:9c:64:2f:60:a8:fa:6e:58:de:39:b6:dd: 1e:76:89:6c:7f:ce:0f:60:e3:f5:52:59:12:5c:fd:66:af:ed: c2:96:a1:2a:89:20:c8:8d:e2:61:e2:b5:43:80:2a:23:32:28: 31:a0:5e:4b:aa:64:30:cc:d5:d3:e4:6a:6a:be:ab:32:e3:c8: cc:43:6b:06:9e:38:4b:87:f1:09:18:bd:14:8b:98:b6:85:0e: 72:29:4a:64:4a:5d:88:05:76:c5:74:b8:e1:79:c7:29:f6:37: 2e:dc:b9:01:0f:88:53:9d:47:7e:c7:37:7f:51:e4:32:40:ce: 67:be:05:b6:af:99:ac:97:8b:31:3a:48:f9:1a:f9:4d:22:d3: 22:e2:3a:e4:37:de:84:97:29:1a:4d:d2:18:c8:f2:47:4f:c2: 6c:8d:42:b3:b9:8d:ea:dc:cb:09:f4:e6:b1:65:33:ac:45:70: 3d:18:5d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8wxRWE+ES+4wNeOKvwwN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGNmYWJlNDdlOTI4NWY2NWYxZjJkNjg2YmFhZjE1Yjhi NDE3NzMwHhcNMjUxMjA4MDcwMDM0WhcNMjUxMjA5MDcwMDM0WjAzMTEwLwYDVQQD Eyg1ZWRkNjA1ZWQ3MjE5NDQyZjBiNTEzYTQ4OGQ3Y2VkNjM0ZmVlZGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg1pR+roWY2JhqW03FfiX6cRmY/E EIHrDFAXdwcMlqb+DLzpxYbiHOqPdm4D7pnfEBEJu2TFUq+ia1fhHz6bLRj/7q2i blKd53x4rgGuilO2mrYW8ouWQm3wxOmuIRtarVnLpH+mtMGSVPJdpuXTJrPuAEtj fhGNrka1yWlSUGFRq6krRoihOqXFhvbzb4wGgA7a/ynlCzYrFtaF3Zit1wcSzXoP FUbVaqWCermU7LK9fYjz6WD5SU+2UCuEQlXi5kZ3BpbmIIKhnull7Bo15sQYIkGG bgJtD9JlzxQOujusgKKOh1biFlGxZ6yG+z7Dm4m4yjdAhvQoHrcHzrc9PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7dYF7XIZRC8LUTpIjXztY0/u3HMB8GA1UdIwQY MBaAFAtM+r5H6ShfZfHy1oa6rxW4tBdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDct NjgwNmUzZDRjZTRmLzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDctNjgwNmUzZDRjZTRm LzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf99H1eDR tUniCiUOSNksUB4PjsfVWahV0JhFEBXEnwWVRZ6O6tspvYu2kYz2pLyZHZH6/TnQ vimmFxGMVb/UqiwF+WKali5BxGwQRHLjnGQvYKj6bljeObbdHnaJbH/OD2Dj9VJZ Elz9Zq/twpahKokgyI3iYeK1Q4AqIzIoMaBeS6pkMMzV0+Rqar6rMuPIzENrBp44 S4fxCRi9FIuYtoUOcilKZEpdiAV2xXS44XnHKfY3Lty5AQ+IU51Hfsc3f1HkMkDO Z74Ftq+ZrJeLMTpI+Rr5TSLTIuI65DfehJcpGk3SGMjyR0/CbI1Cs7mN6tzLCfTm sWUzrEVwPRhdxg== -----END CERTIFICATE-----Generated at Mon Dec 8 11:16:24 2025 by rpki-client