This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft File: C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json) Hash identifier: wM+9RzA1CPd3/TsUZmh7y0cBpHLE56DEBU6ARlVrW0w= Subject key identifier: D2:AD:CF:4E:EF:F0:08:09:B0:A0:DC:C2:30:22:E8:D9:0C:96:EE:70 Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de Certificate serial: 019B213DB25C72C7605767C92AB073853A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 09:00:50 +0000 Manifest this update: Mon 15 Dec 2025 09:00:50 +0000 Manifest next update: Tue 16 Dec 2025 09:00:50 +0000 Files and hashes: 1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: Gv5e0ttUeRmSO9XbyOtOjWkLx7qAMUZIHtArdlKF4tw=) 2: xYedTFBsRl5b1iJAErnPYcaR3OY.roa (hash: A2Zy/D1noAod2gPyXy2Qnxa+PffBxwzOBc03vUahwok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:3d:b2:5c:72:c7:60:57:67:c9:2a:b0:73:85:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de Validity Not Before: Dec 15 09:00:50 2025 GMT Not After : Dec 16 09:00:50 2025 GMT Subject: CN=d2adcf4eeff00809b0a0dcc23022e8d90c96ee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:58:cf:d4:1c:a2:2f:9e:a5:c4:05:e3:07:79: cf:f2:3a:8c:4f:f3:06:0d:6e:82:51:86:49:04:dc: cd:a4:e4:bf:e3:f8:6f:2e:c7:16:cc:2e:b2:ab:fd: 1f:55:35:72:68:ed:58:f1:cf:23:21:01:98:f2:87: 4b:86:b9:56:dc:9e:1c:91:f3:59:8a:14:d7:0f:30: aa:5d:a6:d0:25:1f:f4:e0:f7:2f:6c:24:66:eb:5c: 3d:d2:c4:31:57:1a:e6:12:de:99:54:78:d3:ea:4d: 67:d5:97:ae:23:ca:74:da:48:2d:7f:99:17:76:cf: ed:05:a5:4c:0a:4f:bb:2d:b7:47:0c:2f:2f:51:44: 83:98:d8:7c:38:0d:1c:f8:c7:42:3d:59:b3:44:55: d6:c2:7b:7d:e5:e4:83:05:bd:c3:86:65:c4:e1:39: f0:37:25:24:28:ec:70:31:8d:66:57:31:4e:3e:23: 54:21:0d:2c:ee:bb:15:8f:ad:ce:c6:c4:a8:3c:6f: e5:07:a8:37:ca:3a:51:7d:37:dc:3c:77:34:dd:d7: 88:26:f0:fc:56:bb:d0:5a:07:be:25:8e:b8:1a:69: 3c:4b:50:8a:b8:11:e9:0b:91:c7:91:a5:d4:15:b9: bc:7b:1e:54:fb:2c:d0:2c:6a:00:74:65:4b:aa:75: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AD:CF:4E:EF:F0:08:09:B0:A0:DC:C2:30:22:E8:D9:0C:96:EE:70 X509v3 Authority Key Identifier: keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:34:1d:5a:c9:95:b7:1e:31:e4:2b:26:a5:89:a0:b0:a5:4d: d7:9c:c5:1a:89:d7:a5:4b:7c:64:47:88:aa:f9:c0:a8:8b:6c: 90:82:70:00:86:78:ea:bb:fe:b4:26:bc:b0:ad:f9:ca:b3:33: a2:da:41:ec:c6:52:d4:97:22:ba:c5:c9:16:60:81:77:81:02: a8:09:b3:12:b1:fa:ca:48:80:94:9b:a4:6c:e2:67:06:3a:cc: 79:c0:ea:d0:ea:fb:ec:a7:4c:06:c3:2a:d1:1f:5f:8e:52:c2: 31:e7:75:fd:fd:8b:d4:52:da:2a:1d:2a:08:34:8f:88:d4:a6: e7:d6:0c:08:c6:11:bd:ba:a2:ec:eb:8e:9e:45:8f:69:f5:9f: 71:71:82:3c:6e:f1:a6:15:5c:79:a3:a8:51:f4:22:44:ec:fe: 03:a1:c0:9c:03:61:2c:db:24:57:1b:e7:bc:eb:89:7f:35:30: 75:7a:04:de:70:f3:f6:6a:6a:cf:d0:d6:7d:f5:cf:70:46:ce: ab:d1:e8:de:bd:87:0b:66:2f:f5:bc:09:3a:5a:cf:dd:81:20: b7:95:12:a4:c3:de:0b:d3:c6:9f:3f:bd:81:79:fe:72:cd:35: 63:c3:f9:d6:13:e5:68:d5:7d:e8:8e:4c:75:32:cd:15:f6:32: 42:1c:d3:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshPbJccsdgV2fJKrBzhTp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDJmYjQ4MzFjMWRhZjJkOTYzYzQ3NjM4ZDcwMzA4NmVl Y2E4ZGUwHhcNMjUxMjE1MDkwMDUwWhcNMjUxMjE2MDkwMDUwWjAzMTEwLwYDVQQD EyhkMmFkY2Y0ZWVmZjAwODA5YjBhMGRjYzIzMDIyZThkOTBjOTZlZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyljP1ByiL56lxAXjB3nP8jqMT/MG DW6CUYZJBNzNpOS/4/hvLscWzC6yq/0fVTVyaO1Y8c8jIQGY8odLhrlW3J4ckfNZ ihTXDzCqXabQJR/04PcvbCRm61w90sQxVxrmEt6ZVHjT6k1n1ZeuI8p02kgtf5kX ds/tBaVMCk+7LbdHDC8vUUSDmNh8OA0c+MdCPVmzRFXWwnt95eSDBb3DhmXE4Tnw NyUkKOxwMY1mVzFOPiNUIQ0s7rsVj63OxsSoPG/lB6g3yjpRfTfcPHc03deIJvD8 VrvQWge+JY64Gmk8S1CKuBHpC5HHkaXUFbm8ex5U+yzQLGoAdGVLqnVEwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKtz07v8AgJsKDcwjAi6NkMlu5wMB8GA1UdIwQY MBaAFAtC+0gxwdry2WPEdjjXAwhu7KjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEt YjM2NjNhMzQ1NTE4LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjY3NDMtMGIyMi00MzEyLTljMWEtYjM2NjNhMzQ1NTE4 LzEvQzBMN1NESEIydkxaWThSMk9OY0RDRzdzcU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTQdWsmV tx4x5CsmpYmgsKVN15zFGonXpUt8ZEeIqvnAqItskIJwAIZ46rv+tCa8sK35yrMz otpB7MZS1JciusXJFmCBd4ECqAmzErH6ykiAlJukbOJnBjrMecDq0Or77KdMBsMq 0R9fjlLCMed1/f2L1FLaKh0qCDSPiNSm59YMCMYRvbqi7OuOnkWPafWfcXGCPG7x phVceaOoUfQiROz+A6HAnANhLNskVxvnvOuJfzUwdXoE3nDz9mpqz9DWffXPcEbO q9Ho3r2HC2Yv9bwJOlrP3YEgt5USpMPeC9PGnz+9gXn+cs01Y8P51hPlaNV96I5M dTLNFfYyQhzTDQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:26:51 2025 by rpki-client