This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json) Hash identifier: F3Z1eRLq/x829NC0p9CiJLTN3hT4tmDuf7Et3ZBuniE= Subject key identifier: C9:EB:99:6E:58:55:BB:13:11:04:91:56:C1:FF:36:7D:9F:5B:8C:81 Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Certificate serial: 019B1080E72952F457C9E46128FBD1761A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 03:00:41 +0000 Manifest this update: Fri 12 Dec 2025 03:00:41 +0000 Manifest next update: Sat 13 Dec 2025 03:00:41 +0000 Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=) 2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: FwYwnW+hVut+iFGfZfYcED0ezPOvw0I51IvdheWfOHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:80:e7:29:52:f4:57:c9:e4:61:28:fb:d1:76:1a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf Validity Not Before: Dec 12 03:00:41 2025 GMT Not After : Dec 13 03:00:41 2025 GMT Subject: CN=c9eb996e5855bb1311049156c1ff367d9f5b8c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:70:06:dd:7a:3c:24:dc:b2:cf:07:d5:5c: 22:ad:75:af:8e:3b:b5:7d:b8:06:df:d6:4b:c5:f7: de:0c:bf:f5:d4:24:7e:b6:1e:ad:cc:88:59:aa:53: 40:b1:e0:94:1b:be:69:9b:81:66:4d:96:0c:17:f1: e8:6d:5a:96:41:1a:f3:b8:80:fd:49:ef:1a:64:6a: 82:48:23:b4:ef:ed:44:f7:d7:63:b6:92:db:de:8e: 42:d5:0f:ea:ea:5c:e5:af:82:25:58:cc:9d:35:1e: 74:82:e4:2c:79:d6:34:60:74:b1:4b:6e:fb:0d:c9: 46:cf:3c:e1:b1:47:18:fc:50:71:9b:9f:0b:82:52: 2e:3e:79:1b:e5:97:54:5b:0d:09:65:e6:49:09:b1: e9:15:6b:db:95:11:6b:cd:47:e1:4e:4f:58:2a:3d: ae:fb:13:5b:9f:04:b7:59:ed:18:dc:ff:d4:76:2a: 7f:6e:ef:26:cc:60:1b:00:2f:93:a5:e2:4f:04:88: a1:36:89:cd:7a:20:80:6a:bd:05:cf:28:dc:8f:b2: c7:de:ef:5a:6d:04:62:cd:4b:a5:77:09:5f:81:54: fd:1a:04:f4:ed:69:54:0a:ab:f5:7a:a2:c0:31:29: 69:64:27:ed:98:05:e3:9a:61:79:4b:83:42:9e:e0: 1c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EB:99:6E:58:55:BB:13:11:04:91:56:C1:FF:36:7D:9F:5B:8C:81 X509v3 Authority Key Identifier: keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:98:e8:67:ff:ff:86:63:7a:ae:91:d9:6e:bd:fb:e7:53:6d: cd:86:48:a3:58:4d:41:b8:c6:96:d5:40:25:c8:99:1b:f6:c1: 2b:16:82:80:69:c3:27:c3:1a:49:bd:af:23:3d:22:4d:40:c3: d1:51:da:ca:fd:42:e9:f4:0c:3e:90:2e:20:7d:87:9c:02:cd: 68:c0:16:ec:da:1c:fd:b6:c6:7b:61:8c:b9:f5:9d:e9:81:46: 9b:38:a9:bb:ae:b8:69:99:97:10:cc:84:fc:75:98:f2:53:7d: f6:02:1e:a0:8f:2c:50:59:5d:04:8d:ba:fb:80:47:f3:00:5b: b2:98:55:47:8a:bf:3f:50:8a:c6:69:b2:14:fd:ed:b2:42:e3: 05:8f:d0:cb:eb:e9:73:10:4f:c6:fd:61:60:23:59:fb:0c:c8: a0:ea:18:c2:40:41:50:8f:c8:ac:f2:d8:e9:c7:84:88:13:69: f6:f9:6c:a3:2d:ad:bc:48:c2:89:4b:22:17:16:1c:1e:c7:e0: 0b:27:cb:e0:ad:f5:bf:35:6f:29:94:5b:ca:07:20:36:a8:d1: cf:c4:4e:ee:37:12:9a:d1:6c:86:61:67:fc:82:07:58:86:74: d3:9c:42:26:14:71:32:99:37:56:d8:f9:65:d7:04:c6:77:05: dc:4a:e0:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgOcpUvRXyeRhKPvRdhpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYjgxNjQwZTFiNjRmNTFkMmJhN2Q3OGY2Nzc3YzA1NmQx MTU0YmYwHhcNMjUxMjEyMDMwMDQxWhcNMjUxMjEzMDMwMDQxWjAzMTEwLwYDVQQD EyhjOWViOTk2ZTU4NTViYjEzMTEwNDkxNTZjMWZmMzY3ZDlmNWI4YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0BwBt16PCTcss8H1VwirXWvjju1 fbgG39ZLxffeDL/11CR+th6tzIhZqlNAseCUG75pm4FmTZYMF/HobVqWQRrzuID9 Se8aZGqCSCO07+1E99djtpLb3o5C1Q/q6lzlr4IlWMydNR50guQsedY0YHSxS277 DclGzzzhsUcY/FBxm58LglIuPnkb5ZdUWw0JZeZJCbHpFWvblRFrzUfhTk9YKj2u +xNbnwS3We0Y3P/Udip/bu8mzGAbAC+TpeJPBIihNonNeiCAar0Fzyjcj7LH3u9a bQRizUuldwlfgVT9GgT07WlUCqv1eqLAMSlpZCftmAXjmmF5S4NCnuAccQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnrmW5YVbsTEQSRVsH/Nn2fW4yBMB8GA1UdIwQY MBaAFHO4FkDhtk9R0rp9ePZ3fAVtEVS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUt ZDMwZjkxNjhmODAxLzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hYmIxNTMtNTFiMy00ODQ5LTg5ODUtZDMwZjkxNjhmODAx LzEvYzdnV1FPRzJUMUhTdW4xNDluZDhCVzBSVkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5joZ/// hmN6rpHZbr3751NtzYZIo1hNQbjGltVAJciZG/bBKxaCgGnDJ8MaSb2vIz0iTUDD 0VHayv1C6fQMPpAuIH2HnALNaMAW7Noc/bbGe2GMufWd6YFGmzipu664aZmXEMyE /HWY8lN99gIeoI8sUFldBI26+4BH8wBbsphVR4q/P1CKxmmyFP3tskLjBY/Qy+vp cxBPxv1hYCNZ+wzIoOoYwkBBUI/IrPLY6ceEiBNp9vlsoy2tvEjCiUsiFxYcHsfg CyfL4K31vzVvKZRbygcgNqjRz8RO7jcSmtFshmFn/IIHWIZ005xCJhRxMpk3Vtj5 ZdcExncF3ErgsQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:03:36 2025 by rpki-client