This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json) Hash identifier: YxzgVjjPPyvbkT869hLwjPt1qgk25qwPnheXZBZbZhc= Subject key identifier: 73:C5:C4:24:F8:45:BB:F3:CE:CB:07:53:39:CC:67:82:04:6D:F3:71 Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Certificate serial: 019B1C4EAEB6349E1B449D0BA48D642B9256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 10:01:17 +0000 Manifest this update: Sun 14 Dec 2025 10:01:17 +0000 Manifest next update: Mon 15 Dec 2025 10:01:17 +0000 Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: M0PKdKSYyiOxISd5UBz3DBDP/r531d8vIRN/5s6hEh4=) 2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:ae:b6:34:9e:1b:44:9d:0b:a4:8d:64:2b:92:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e Validity Not Before: Dec 14 10:01:17 2025 GMT Not After : Dec 15 10:01:17 2025 GMT Subject: CN=73c5c424f845bbf3cecb075339cc6782046df371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:0b:8e:26:14:4a:43:41:38:19:47:23:17: 5a:3a:3d:90:7b:87:98:53:37:e9:9f:39:07:bf:55: ff:c5:7f:ba:ca:05:11:a3:5c:2c:84:4f:87:0c:2d: 98:bc:0f:94:4c:d8:82:7a:13:2d:6c:31:91:9f:18: 7a:05:7c:5e:81:26:e4:bd:7a:0f:e0:7d:c8:a3:f2: cf:92:b6:87:f9:1a:34:5f:bb:31:ef:30:f3:aa:bc: aa:9f:06:9b:8c:ed:f8:9f:fa:65:f7:31:7f:8d:1c: 0a:7a:0f:2e:f7:6f:b7:b7:a1:55:5e:f0:e6:45:0b: 78:b4:71:ed:f7:d0:96:8f:11:9f:f6:4a:41:19:f8: 97:32:8e:3e:f4:d1:f0:69:b9:81:08:93:1d:e7:1c: 80:17:6d:8e:fc:47:82:7e:a7:30:81:fd:96:11:44: 35:f5:67:f7:b8:76:90:7e:b3:79:e0:d1:2b:53:55: 04:ec:e0:5f:07:83:bd:6e:bb:4d:9f:b6:77:02:08: 8f:6c:57:b8:8a:a4:bf:3c:3e:57:80:86:3a:ac:88: 67:46:64:e7:62:8b:1e:88:0f:d2:1f:89:5e:78:58: 68:4c:71:a2:1b:d6:56:d9:55:6b:d0:e8:1b:1e:9d: eb:ff:f7:84:74:d6:9f:8f:88:49:9c:c5:c5:53:16: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C5:C4:24:F8:45:BB:F3:CE:CB:07:53:39:CC:67:82:04:6D:F3:71 X509v3 Authority Key Identifier: keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:20:d3:a6:8b:69:59:81:17:f0:d3:27:5d:dd:77:aa:59:bb: 3f:20:6b:05:b8:f3:fc:22:3f:33:70:0c:4d:14:f8:83:28:b9: 5a:d8:e2:4f:77:2f:43:78:94:dc:f3:51:b7:f9:c5:f7:b4:e6: 3d:20:29:86:cb:db:d6:51:b6:4b:78:64:d4:40:95:ba:d9:2a: 2e:bb:c3:14:1f:f4:01:f6:dd:63:a5:f0:f2:b3:2d:a3:98:bc: 77:b4:28:ec:fe:da:d9:83:24:75:fc:3d:93:96:65:12:20:8d: 1f:a1:5c:35:b1:bc:d6:74:97:56:ea:fa:9a:40:78:96:9c:16: 1b:d3:02:06:cc:2d:4e:d1:5f:52:22:d6:72:d6:32:ae:7f:11: bf:91:89:31:69:fa:5c:22:96:53:4a:2e:72:d9:9f:76:b9:55: f2:55:bc:99:70:01:88:5a:52:8f:35:91:03:a3:88:73:a8:e8: 0a:bf:de:05:c8:8c:f0:cb:c2:f0:e8:97:af:a4:00:25:a6:98: 29:41:aa:ec:28:dc:44:52:54:8e:0e:63:23:65:98:9e:3d:82: 51:68:65:93:59:f5:34:ac:14:ca:ca:19:02:57:67:c9:47:b4: 9e:98:77:d3:85:0c:46:41:b9:d0:f3:c3:e8:0a:90:35:2c:c9: bb:55:db:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTq62NJ4bRJ0LpI1kK5JWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YmEwMmY2OTk1Y2VjZTZhOWZkMzQ3NWJkMGIxY2YwZGQ4 NTgyNmUwHhcNMjUxMjE0MTAwMTE3WhcNMjUxMjE1MTAwMTE3WjAzMTEwLwYDVQQD Eyg3M2M1YzQyNGY4NDViYmYzY2VjYjA3NTMzOWNjNjc4MjA0NmRmMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0wLjiYUSkNBOBlHIxdaOj2Qe4eY UzfpnzkHv1X/xX+6ygURo1wshE+HDC2YvA+UTNiCehMtbDGRnxh6BXxegSbkvXoP 4H3Io/LPkraH+Ro0X7sx7zDzqryqnwabjO34n/pl9zF/jRwKeg8u92+3t6FVXvDm RQt4tHHt99CWjxGf9kpBGfiXMo4+9NHwabmBCJMd5xyAF22O/EeCfqcwgf2WEUQ1 9Wf3uHaQfrN54NErU1UE7OBfB4O9brtNn7Z3AgiPbFe4iqS/PD5XgIY6rIhnRmTn YoseiA/SH4leeFhoTHGiG9ZW2VVr0OgbHp3r//eEdNafj4hJnMXFUxZM4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPFxCT4RbvzzssHUznMZ4IEbfNxMB8GA1UdIwQY MBaAFAi6AvaZXOzmqf00db0LHPDdhYJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2Ut OTY1ZmFjOTc3NzIxLzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iZTIwODMtZWE3Yi00NDU0LTg3M2UtOTY1ZmFjOTc3NzIx LzEvQ0xvQzlwbGM3T2FwX1RSMXZRc2M4TjJGZ200LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiDTpotp WYEX8NMnXd13qlm7PyBrBbjz/CI/M3AMTRT4gyi5WtjiT3cvQ3iU3PNRt/nF97Tm PSAphsvb1lG2S3hk1ECVutkqLrvDFB/0AfbdY6Xw8rMto5i8d7Qo7P7a2YMkdfw9 k5ZlEiCNH6FcNbG81nSXVur6mkB4lpwWG9MCBswtTtFfUiLWctYyrn8Rv5GJMWn6 XCKWU0ouctmfdrlV8lW8mXABiFpSjzWRA6OIc6joCr/eBciM8MvC8OiXr6QAJaaY KUGq7CjcRFJUjg5jI2WYnj2CUWhlk1n1NKwUysoZAldnyUe0nph304UMRkG50PPD 6AqQNSzJu1Xbiw== -----END CERTIFICATE-----Generated at Sun Dec 14 19:11:17 2025 by rpki-client