This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json) Hash identifier: obHl7TXDKn5G0c763EHhbSnmpObVmCRoGKFkIG7+pgM= Subject key identifier: 3C:EF:44:FC:2E:3D:AF:AF:24:D3:57:04:06:21:0C:66:21:23:4E:BD Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a Certificate serial: 019AE6DFF0407AD3ABC2D61C61616C8714B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft Manifest number: 175C Signing time: Thu 04 Dec 2025 01:00:26 +0000 Manifest this update: Thu 04 Dec 2025 01:00:26 +0000 Manifest next update: Fri 05 Dec 2025 01:00:26 +0000 Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=) 2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: 7RefTYjjDjtPFSpwKQGVQNTqlI3LIRqzaJL9FbbnPLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e6:df:f0:40:7a:d3:ab:c2:d6:1c:61:61:6c:87:14:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a Validity Not Before: Dec 4 01:00:26 2025 GMT Not After : Dec 5 01:00:26 2025 GMT Subject: CN=3cef44fc2e3dafaf24d3570406210c6621234ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:6e:0d:64:d0:0c:4a:95:84:3a:86:be:52: d0:3a:a2:ea:6d:b7:4d:f1:2b:3c:c6:a0:fc:37:34: 3b:11:6b:49:27:99:35:75:9c:bc:a7:94:dc:f1:c2: 3d:49:fc:e3:0d:21:ee:05:6c:30:c4:ca:f8:77:ac: ea:46:de:3a:9b:65:1f:c0:7b:27:cd:b3:4f:d4:23: 7c:74:2e:c4:21:4d:db:9d:a8:c8:b5:53:a4:a3:bc: 01:00:63:af:3e:e8:5d:e4:27:32:f2:ca:97:f2:35: 95:8c:10:80:d2:cb:e9:ed:e0:e9:b9:ac:62:0e:9f: 16:ff:23:56:5f:8f:6f:4d:fb:3a:e8:75:17:98:28: 25:b9:10:8f:5d:52:1b:d5:c0:bd:d4:a1:3e:b4:cb: b4:cd:81:f3:77:5d:7f:ac:35:2d:81:61:ad:40:fc: 57:1a:ec:0d:a0:0c:cc:ee:27:96:a5:fd:8a:4a:f0: 47:fd:68:49:50:70:12:eb:e0:de:74:cc:08:a0:de: b8:9b:b5:74:75:57:8d:02:e3:51:b8:d9:00:e5:0d: 9b:45:1e:24:d8:7d:18:b4:fb:0f:f1:5a:70:e5:57: fe:44:b9:6d:8c:3c:73:30:c9:db:50:25:87:d6:3d: f6:87:4f:fd:38:90:d3:f4:09:87:18:9e:1b:50:13: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EF:44:FC:2E:3D:AF:AF:24:D3:57:04:06:21:0C:66:21:23:4E:BD X509v3 Authority Key Identifier: keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:9a:47:f1:0b:9f:76:1e:03:85:cf:6b:37:2a:df:52:8f:d9: 85:e3:3e:04:40:3c:e2:75:68:21:e8:29:fd:f9:66:48:48:d7: 98:c3:e8:be:b8:bd:a8:f3:f1:09:62:77:62:34:12:3b:12:d6: 8c:85:74:30:94:0d:c6:6f:be:f2:cf:9d:d8:a0:85:c0:ed:59: 74:37:ca:32:ef:20:e8:a7:03:0e:41:22:ed:cf:a1:09:a7:a0: 55:00:14:6d:f5:58:ed:f4:0b:8c:31:ed:1a:33:d0:43:d0:26: 7d:df:38:53:61:35:0b:f0:05:66:36:ac:a0:e0:2d:4b:9f:0c: 89:85:91:6a:c4:50:28:98:22:66:02:93:75:2d:ce:88:59:11: e8:b4:ad:ca:ba:7c:a8:85:15:45:bf:23:d0:fb:43:00:2b:eb: 1e:8e:d8:a6:f7:9c:46:24:91:25:2e:e0:f2:de:f9:5c:b8:05: 7a:4a:4e:f4:6c:ee:df:6f:ee:2c:bb:4d:49:53:ab:a6:d8:47: 55:b8:86:be:12:09:af:29:a3:2e:ae:a9:da:fb:24:77:f3:b3: 32:20:8b:5d:45:83:bc:6a:de:ec:48:84:65:16:40:6e:de:a7: c7:30:23:7f:51:b2:43:d0:8a:40:7c:e7:5e:69:a6:7b:73:a1: cc:cb:b6:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrm3/BAetOrwtYcYWFshxS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzJmNDk0NDU5ODAxOTk0NzU1MTJmNTI5NzYwOGY0NWQw OGJiNWEwHhcNMjUxMjA0MDEwMDI2WhcNMjUxMjA1MDEwMDI2WjAzMTEwLwYDVQQD EygzY2VmNDRmYzJlM2RhZmFmMjRkMzU3MDQwNjIxMGM2NjIxMjM0ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP1uDWTQDEqVhDqGvlLQOqLqbbdN 8Ss8xqD8NzQ7EWtJJ5k1dZy8p5Tc8cI9SfzjDSHuBWwwxMr4d6zqRt46m2UfwHsn zbNP1CN8dC7EIU3bnajItVOko7wBAGOvPuhd5Ccy8sqX8jWVjBCA0svp7eDpuaxi Dp8W/yNWX49vTfs66HUXmCgluRCPXVIb1cC91KE+tMu0zYHzd11/rDUtgWGtQPxX GuwNoAzM7ieWpf2KSvBH/WhJUHAS6+DedMwIoN64m7V0dVeNAuNRuNkA5Q2bRR4k 2H0YtPsP8Vpw5Vf+RLltjDxzMMnbUCWH1j32h0/9OJDT9AmHGJ4bUBN/LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzvRPwuPa+vJNNXBAYhDGYhI069MB8GA1UdIwQY MBaAFHPC9JRFmAGZR1US9Sl2CPRdCLtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjIt Nzg3YjliNTg0YzJkLzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy84YTI1MTgtMzlhMC00YTk4LTk1NjItNzg3YjliNTg0YzJk LzEvYzhMMGxFV1lBWmxIVlJMMUtYWUk5RjBJdTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZpH8Quf dh4Dhc9rNyrfUo/ZheM+BEA84nVoIegp/flmSEjXmMPovri9qPPxCWJ3YjQSOxLW jIV0MJQNxm++8s+d2KCFwO1ZdDfKMu8g6KcDDkEi7c+hCaegVQAUbfVY7fQLjDHt GjPQQ9Amfd84U2E1C/AFZjasoOAtS58MiYWRasRQKJgiZgKTdS3OiFkR6LStyrp8 qIUVRb8j0PtDACvrHo7YpvecRiSRJS7g8t75XLgFekpO9Gzu32/uLLtNSVOrpthH VbiGvhIJrymjLq6p2vskd/OzMiCLXUWDvGre7EiEZRZAbt6nxzAjf1GyQ9CKQHzn Xmmme3OhzMu2Bw== -----END CERTIFICATE-----Generated at Thu Dec 4 08:30:40 2025 by rpki-client