This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json) Hash identifier: aL6HpDLb1OsVfaWqD1tKYmo9NPsaOtJQ1TDxtPWRRNY= Subject key identifier: 79:63:39:87:91:BD:65:D1:E8:6D:1B:FB:12:7E:21:F4:F7:D5:AA:54 Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8 Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8 Certificate serial: 019B59ACA16B2A9B5ABE207A3861C0989812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 08:00:44 +0000 Manifest this update: Fri 26 Dec 2025 08:00:44 +0000 Manifest next update: Sat 27 Dec 2025 08:00:44 +0000 Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: rfIP5lTjj7+xnmB2WZKOuCc3y9HVbKkFOCnlTv5Ichw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a1:6b:2a:9b:5a:be:20:7a:38:61:c0:98:98:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8 Validity Not Before: Dec 26 08:00:44 2025 GMT Not After : Dec 27 08:00:44 2025 GMT Subject: CN=7963398791bd65d1e86d1bfb127e21f4f7d5aa54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:ae:7c:f1:35:a6:7e:6a:7c:f1:27:32:8a: 85:be:66:66:4a:41:18:cb:e6:45:a2:a2:c3:e4:28: 9d:14:0f:75:2a:4d:75:4c:06:51:48:b4:1e:cc:21: 90:2b:58:0c:9c:f6:12:fd:01:ed:b2:f8:e0:5c:20: 35:9c:b8:c5:ea:bf:ab:df:ad:57:97:d6:21:ab:6a: c1:64:82:66:f1:b1:d2:57:69:42:34:c2:35:66:bc: 5f:aa:1c:ce:02:bf:18:56:4e:df:c8:bf:89:b9:28: 17:13:65:a4:5b:81:d9:e6:0d:38:5c:a4:65:25:35: fc:43:7f:77:40:07:f9:4c:ba:48:e9:02:9f:1a:0b: d8:aa:8b:b1:f9:69:d7:2a:c0:40:0f:d1:54:07:8e: 83:20:72:3b:ab:92:26:e3:e0:8e:38:1f:e5:72:fa: 37:76:17:39:a1:8c:88:a5:1d:25:6c:a1:e8:c2:3e: 69:94:54:90:42:ca:80:b6:5d:e5:8b:0a:29:e4:1a: fa:b6:f2:fb:0c:76:12:54:0b:d9:d8:64:92:55:73: 02:d2:ee:da:fb:3d:59:0e:44:73:07:a6:43:04:5b: 24:cb:f1:96:dc:d4:41:fe:c4:ee:3f:bc:7d:19:f7: 6f:1e:7d:62:fc:b0:35:b0:18:a3:a2:7d:55:a6:3c: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:63:39:87:91:BD:65:D1:E8:6D:1B:FB:12:7E:21:F4:F7:D5:AA:54 X509v3 Authority Key Identifier: keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:8f:b1:ec:2d:54:ea:41:6e:03:73:da:97:91:87:cc:e2: 6e:44:6e:55:b4:4a:a5:7e:5a:4f:af:3b:6b:53:bc:8d:0f:6e: d0:99:bf:08:9a:f3:61:8f:66:9a:c8:c5:47:6a:e4:48:79:77: 62:0c:90:8c:85:4b:26:cf:15:f4:0e:41:90:01:4c:2d:4d:20: e1:15:46:a3:71:dc:c2:1f:49:a0:92:40:d0:9b:51:55:65:02: b0:00:5a:eb:67:49:dc:21:fd:2f:56:0f:c6:7a:bd:fc:4e:ec: 63:33:d0:2d:e9:3e:fd:ec:d1:45:b3:13:73:bd:20:1f:4f:74: 42:a5:63:1d:6b:76:b9:aa:e2:7c:8f:80:3b:54:cc:31:da:58: 2c:85:e0:a2:62:a0:08:4c:1d:1b:9a:79:48:3d:f5:8d:43:c9: 2a:e5:35:c8:f5:67:96:78:87:94:0a:8c:a8:92:33:78:a3:e0: be:df:54:21:5b:32:ef:58:40:a8:3a:94:cb:67:0b:cc:38:d3: 80:ba:9f:9f:5a:4d:cb:49:ad:07:95:7f:f1:ed:51:ee:0a:4b: 07:3d:08:17:19:f9:85:5a:d4:4b:6f:6c:cb:8f:04:b6:85:b9: 87:08:7c:aa:4f:22:14:16:0f:56:dc:b7:09:15:42:d8:e8:fb: 3c:a9:3b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKFrKptaviB6OGHAmJgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNjdkYmEwODcwN2ZlNDBiZDAwMmU5N2FlMzA4NDg2MzI5 MTVkYjgwHhcNMjUxMjI2MDgwMDQ0WhcNMjUxMjI3MDgwMDQ0WjAzMTEwLwYDVQQD Eyg3OTYzMzk4NzkxYmQ2NWQxZTg2ZDFiZmIxMjdlMjFmNGY3ZDVhYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNuufPE1pn5qfPEnMoqFvmZmSkEY y+ZFoqLD5CidFA91Kk11TAZRSLQezCGQK1gMnPYS/QHtsvjgXCA1nLjF6r+r361X l9Yhq2rBZIJm8bHSV2lCNMI1ZrxfqhzOAr8YVk7fyL+JuSgXE2WkW4HZ5g04XKRl JTX8Q393QAf5TLpI6QKfGgvYqoux+WnXKsBAD9FUB46DIHI7q5Im4+COOB/lcvo3 dhc5oYyIpR0lbKHowj5plFSQQsqAtl3liwop5Br6tvL7DHYSVAvZ2GSSVXMC0u7a +z1ZDkRzB6ZDBFsky/GW3NRB/sTuP7x9GfdvHn1i/LA1sBijon1VpjxmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHljOYeRvWXR6G0b+xJ+IfT31apUMB8GA1UdIwQY MBaAFAtn26CHB/5AvQAul64whIYykV24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUt MzhhNWMyYTY1NTRhLzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUtMzhhNWMyYTY1NTRh LzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYyPsewt VOpBbgNz2peRh8zibkRuVbRKpX5aT687a1O8jQ9u0Jm/CJrzYY9mmsjFR2rkSHl3 YgyQjIVLJs8V9A5BkAFMLU0g4RVGo3Hcwh9JoJJA0JtRVWUCsABa62dJ3CH9L1YP xnq9/E7sYzPQLek+/ezRRbMTc70gH090QqVjHWt2uarifI+AO1TMMdpYLIXgomKg CEwdG5p5SD31jUPJKuU1yPVnlniHlAqMqJIzeKPgvt9UIVsy71hAqDqUy2cLzDjT gLqfn1pNy0mtB5V/8e1R7gpLBz0IFxn5hVrUS29sy48EtoW5hwh8qk8iFBYPVty3 CRVC2Oj7PKk74A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:22 2025 by rpki-client