This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json) Hash identifier: rjP2ai2kATxdNdh6AO6D9TDguSw7lqL/dqJJyDvL3vo= Subject key identifier: D0:CC:5F:AD:33:01:D3:92:FB:2A:1E:58:D1:24:6F:38:59:01:81:BE Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Certificate serial: 019B2D7906DA4E3E142BAD136D0DD0C383F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 18:01:04 +0000 Manifest this update: Wed 17 Dec 2025 18:01:04 +0000 Manifest next update: Thu 18 Dec 2025 18:01:04 +0000 Files and hashes: 1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: gkvpUr/8zD/pA3iDMPWHqdKV4Y7JJ7RX2S8hX6wc7fo=) 2: wfSejFWh26iFaDPELsnvR1TSCTM.roa (hash: OW8hsiyWgn6jtKd7S9vMQN1SrD9c05HrY+6z4A8TNNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:06:da:4e:3e:14:2b:ad:13:6d:0d:d0:c3:83:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Validity Not Before: Dec 17 18:01:04 2025 GMT Not After : Dec 18 18:01:04 2025 GMT Subject: CN=d0cc5fad3301d392fb2a1e58d1246f38590181be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:13:23:e4:6d:eb:5f:f2:7c:8d:43:0b:f2:ac: 31:e0:a4:e3:2c:59:c0:8f:b8:7a:4d:20:7b:83:81: df:40:3d:70:51:88:3c:8f:df:b8:19:31:b0:60:f4: 2b:f3:86:52:39:f7:3a:b1:05:6d:88:2d:15:6d:8b: 8c:22:2f:ee:33:d5:15:ec:00:12:23:09:78:45:e7: b2:a2:5d:7a:4d:53:83:aa:18:d3:49:92:d1:0e:bc: 48:76:65:31:34:64:29:ea:8b:ad:bd:23:1d:09:ae: 82:2a:87:1a:2b:1a:6b:36:ac:68:71:9f:49:a9:a2: e7:3f:2f:e6:77:71:10:43:73:d8:d0:94:1e:d5:df: 65:c9:90:5f:5a:bb:7d:0c:a8:d9:d2:12:91:15:46: 85:a4:c1:87:26:78:b2:be:8b:a9:96:94:51:eb:cf: cf:33:c1:77:95:71:41:b7:96:bf:7d:38:30:a1:45: 1b:9c:e1:00:09:a9:8f:6d:a6:c3:94:8b:fb:07:0c: 4a:d7:bc:29:ac:08:11:20:ab:99:bd:2a:c9:d3:67: d3:c5:de:09:a0:f2:c4:ba:79:23:17:4d:26:42:ec: a7:c7:ad:ba:b7:c2:32:fd:d0:a2:08:bb:60:16:88: 10:9c:2e:27:68:7a:98:cc:4b:ae:a1:af:1b:6c:f8: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CC:5F:AD:33:01:D3:92:FB:2A:1E:58:D1:24:6F:38:59:01:81:BE X509v3 Authority Key Identifier: keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d9:8a:9b:f0:18:36:37:83:0d:c0:40:5f:71:f7:0d:67:51: ae:8f:1a:18:7c:c0:b0:90:c8:90:c2:16:12:66:90:d8:84:96: 04:54:83:c0:e6:f3:41:40:19:88:6c:d8:09:e2:59:20:e1:86: c3:b3:8e:05:d6:13:eb:76:5c:63:c7:59:95:0b:2d:60:e3:36: a5:44:7c:ac:1e:f8:2f:9c:f3:e2:4a:99:7f:8f:12:63:de:39: 32:63:63:84:e3:9a:13:7c:5d:af:61:5e:75:6c:83:63:ab:f0: be:26:1b:fe:1b:64:2b:5d:df:24:e7:62:fa:c2:77:97:b1:6c: 07:28:30:33:e9:56:8f:ae:71:6b:23:ab:42:72:33:3d:cc:4e: 18:70:8c:d5:09:c8:56:7b:5d:c5:29:c0:dc:ed:ba:16:00:fe: 59:1e:44:e6:7a:0e:b6:b0:d0:1d:d9:8f:39:0e:3b:f5:d6:46: aa:c5:fc:25:16:39:bd:da:86:2b:58:83:bc:41:42:9d:2c:c2: ed:f1:5e:1f:a0:ab:31:d7:22:62:0e:78:47:d5:37:6a:e8:0f: 84:19:06:0d:30:5a:be:00:cf:de:cb:d8:d0:f9:6f:97:86:09: 75:17:3e:d4:35:34:96:15:43:f7:e9:fe:69:be:d7:fe:72:19: 47:02:90:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteQbaTj4UK60TbQ3Qw4PzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi ZjJlMDEwHhcNMjUxMjE3MTgwMTA0WhcNMjUxMjE4MTgwMTA0WjAzMTEwLwYDVQQD EyhkMGNjNWZhZDMzMDFkMzkyZmIyYTFlNThkMTI0NmYzODU5MDE4MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RMj5G3rX/J8jUML8qwx4KTjLFnA j7h6TSB7g4HfQD1wUYg8j9+4GTGwYPQr84ZSOfc6sQVtiC0VbYuMIi/uM9UV7AAS Iwl4Reeyol16TVODqhjTSZLRDrxIdmUxNGQp6outvSMdCa6CKocaKxprNqxocZ9J qaLnPy/md3EQQ3PY0JQe1d9lyZBfWrt9DKjZ0hKRFUaFpMGHJniyvouplpRR68/P M8F3lXFBt5a/fTgwoUUbnOEACamPbabDlIv7BwxK17wprAgRIKuZvSrJ02fTxd4J oPLEunkjF00mQuynx626t8Iy/dCiCLtgFogQnC4naHqYzEuuoa8bbPhd/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDMX60zAdOS+yoeWNEkbzhZAYG+MB8GA1UdIwQY MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2 LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdmKm/AY NjeDDcBAX3H3DWdRro8aGHzAsJDIkMIWEmaQ2ISWBFSDwObzQUAZiGzYCeJZIOGG w7OOBdYT63ZcY8dZlQstYOM2pUR8rB74L5zz4kqZf48SY945MmNjhOOaE3xdr2Fe dWyDY6vwviYb/htkK13fJOdi+sJ3l7FsBygwM+lWj65xayOrQnIzPcxOGHCM1QnI VntdxSnA3O26FgD+WR5E5noOtrDQHdmPOQ479dZGqsX8JRY5vdqGK1iDvEFCnSzC 7fFeH6CrMdciYg54R9U3augPhBkGDTBavgDP3svY0Plvl4YJdRc+1DU0lhVD9+n+ ab7X/nIZRwKQXA== -----END CERTIFICATE-----Generated at Thu Dec 18 02:11:48 2025 by rpki-client