This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json) Hash identifier: Nt39BlUeUUAAYbkJhjuIVk6bFnIU55s53dt/T2qc+5Q= Subject key identifier: 77:98:04:01:6B:38:E8:CB:36:97:2C:4B:6D:27:8E:96:9E:32:CA:F0 Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Certificate serial: 019B19BC3543BA07B13809A403819F5993ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft Manifest number: 1703 Signing time: Sat 13 Dec 2025 22:02:03 +0000 Manifest this update: Sat 13 Dec 2025 22:02:03 +0000 Manifest next update: Sun 14 Dec 2025 22:02:03 +0000 Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: R/WBZVLuB0bGOxbKOrX+uw47W1M35Fm+kQHZ11mw/IA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:35:43:ba:07:b1:38:09:a4:03:81:9f:59:93:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Validity Not Before: Dec 13 22:02:03 2025 GMT Not After : Dec 14 22:02:03 2025 GMT Subject: CN=779804016b38e8cb36972c4b6d278e969e32caf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:ed:4d:a9:61:66:4e:30:d4:9d:59:73:95: 64:76:a9:1b:84:59:e5:48:9e:8b:9d:31:c2:83:25: 31:e1:f8:09:49:ea:2d:ad:22:84:7f:1d:c9:5a:e2: f6:68:ca:e8:25:90:95:97:ce:a4:c1:fe:5c:84:23: ad:e7:78:7b:16:bf:39:e7:3c:2a:ef:02:8d:ed:44: df:44:07:e1:6e:01:a2:23:39:31:60:ad:1c:40:ec: 39:4a:e2:48:52:7b:b3:47:37:25:ce:57:56:55:f3: ff:54:51:41:56:40:07:52:5b:8f:95:03:f5:d1:ac: 7e:b8:70:3f:ca:f3:ab:21:cf:d9:36:3e:65:7c:f5: 15:cb:43:20:c2:9f:a9:68:bc:ae:d2:10:bc:7d:2f: 1c:bb:13:84:7f:3d:7d:ec:59:67:d5:93:59:fa:c1: 2e:cd:7f:c5:a3:ce:69:36:24:d3:5c:f2:9d:7b:af: 18:bb:47:45:51:27:59:dd:fa:5c:52:aa:16:59:25: 5f:5f:d7:fc:f2:03:18:dd:87:e2:92:0e:4b:b6:d8: 5e:c7:6a:02:7e:4a:0e:32:c1:4c:17:c0:87:1c:47: 87:fc:fb:79:e4:d0:3d:6c:f0:ff:f0:2b:29:50:eb: 9c:bb:a4:09:7f:68:05:68:f4:a4:93:81:bb:41:e3: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:04:01:6B:38:E8:CB:36:97:2C:4B:6D:27:8E:96:9E:32:CA:F0 X509v3 Authority Key Identifier: keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:8d:18:7f:7f:78:29:a0:4a:bf:1c:db:60:9f:96:56:69:0d: 81:9a:80:f8:10:4e:8a:c9:21:e3:09:78:41:75:17:58:d0:1f: b6:20:e7:c0:6a:41:4a:22:bc:39:6e:49:f0:32:0c:ca:e4:af: bb:ad:e4:34:91:ea:a7:c2:b3:a2:af:5a:33:40:86:38:0a:34: 62:9e:de:10:6c:06:a5:d0:3e:6f:49:79:7f:8c:f7:72:25:a7: 59:1e:b5:2f:dd:8f:b1:3b:47:60:ac:7f:0c:9f:5a:ef:22:80: ab:62:f1:85:f4:2c:9d:a0:2c:80:cf:87:51:e7:92:7a:1e:72: 02:c5:62:fe:04:45:64:c5:87:a7:70:fe:ea:ca:51:5e:e2:1e: d4:ad:1d:48:b2:5e:d6:7a:f8:a2:c6:66:b8:7b:f8:9a:9b:74: b3:77:c8:c1:38:d2:52:d2:b8:f0:5b:06:4a:1c:31:ba:0f:79: a0:85:7f:a6:ca:83:05:ac:74:05:8c:b8:1b:74:25:79:af:fe: 54:21:70:13:b7:dc:5a:43:a2:60:7c:bb:c2:6f:9c:18:96:c5: c4:ff:ef:0e:28:01:c7:73:30:48:79:28:93:ab:88:5a:ba:70: c4:23:02:c8:64:ab:ed:57:76:0a:ac:89:13:f8:c1:43:e2:23: 08:38:8c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvDVDugexOAmkA4GfWZPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk MzI1ZDkwHhcNMjUxMjEzMjIwMjAzWhcNMjUxMjE0MjIwMjAzWjAzMTEwLwYDVQQD Eyg3Nzk4MDQwMTZiMzhlOGNiMzY5NzJjNGI2ZDI3OGU5NjllMzJjYWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5TtTalhZk4w1J1Zc5VkdqkbhFnl SJ6LnTHCgyUx4fgJSeotrSKEfx3JWuL2aMroJZCVl86kwf5chCOt53h7Fr855zwq 7wKN7UTfRAfhbgGiIzkxYK0cQOw5SuJIUnuzRzclzldWVfP/VFFBVkAHUluPlQP1 0ax+uHA/yvOrIc/ZNj5lfPUVy0Mgwp+paLyu0hC8fS8cuxOEfz197Fln1ZNZ+sEu zX/Fo85pNiTTXPKde68Yu0dFUSdZ3fpcUqoWWSVfX9f88gMY3Yfikg5Ltthex2oC fkoOMsFMF8CHHEeH/Pt55NA9bPD/8CspUOucu6QJf2gFaPSkk4G7QeMqiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeYBAFrOOjLNpcsS20njpaeMsrwMB8GA1UdIwQY MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGo0Yf394 KaBKvxzbYJ+WVmkNgZqA+BBOiskh4wl4QXUXWNAftiDnwGpBSiK8OW5J8DIMyuSv u63kNJHqp8Kzoq9aM0CGOAo0Yp7eEGwGpdA+b0l5f4z3ciWnWR61L92PsTtHYKx/ DJ9a7yKAq2LxhfQsnaAsgM+HUeeSeh5yAsVi/gRFZMWHp3D+6spRXuIe1K0dSLJe 1nr4osZmuHv4mpt0s3fIwTjSUtK48FsGShwxug95oIV/psqDBax0BYy4G3Qlea/+ VCFwE7fcWkOiYHy7wm+cGJbFxP/vDigBx3MwSHkok6uIWrpwxCMCyGSr7Vd2CqyJ E/jBQ+IjCDiM4g== -----END CERTIFICATE-----Generated at Sun Dec 14 00:08:19 2025 by rpki-client