This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json) Hash identifier: /SUm1bqSzWnKOawhPLPl/K5BcJL1LiqcHIflqrDmn4c= Subject key identifier: B1:A1:0B:98:47:88:35:66:43:F5:AE:9F:15:C6:88:6F:45:F6:17:01 Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Certificate serial: 019B126FDFBE8371777A2E73B3DCCDF99BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft Manifest number: 0500 Signing time: Fri 12 Dec 2025 12:01:20 +0000 Manifest this update: Fri 12 Dec 2025 12:01:20 +0000 Manifest next update: Sat 13 Dec 2025 12:01:20 +0000 Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: Icwe+YI7qYdjchou6pZOK/Tg+SBp734S3n9jQMd/o+4=) 2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:df:be:83:71:77:7a:2e:73:b3:dc:cd:f9:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Validity Not Before: Dec 12 12:01:20 2025 GMT Not After : Dec 13 12:01:20 2025 GMT Subject: CN=b1a10b984788356643f5ae9f15c6886f45f61701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:a8:96:c4:13:82:a6:3a:aa:c3:93:15:0e: 9f:b3:ee:3d:f3:18:52:98:ae:1c:cc:0a:f7:75:42: ba:28:6e:7d:e4:2b:aa:f1:f8:8b:4c:aa:0a:a5:13: 74:6b:33:77:6e:7c:c9:73:78:c7:9a:ce:c5:9e:fc: 3d:40:e0:d5:4c:d1:18:70:04:3a:bd:94:1c:87:c3: bd:10:1b:f9:06:a3:ed:6d:ea:f6:0a:f9:3f:38:e3: be:1a:90:63:c5:f1:92:7c:bf:82:2d:71:20:9a:ee: 76:89:9b:b0:16:7d:6e:e3:44:aa:77:6a:10:bc:23: de:f8:ac:b4:04:1c:ac:ad:a3:f2:5e:43:a5:f5:b8: 5a:9a:84:7b:3d:f2:29:83:2a:43:c8:00:a2:d9:9b: 05:b6:48:29:ee:1f:c5:c3:09:66:03:31:af:72:4b: e5:92:fb:b9:12:a6:ce:aa:71:9e:27:63:10:88:97: b3:5e:ac:14:98:04:e0:8e:b0:2a:94:7d:ad:a4:9a: 2a:e8:ea:3a:e7:87:4f:b1:8c:0a:ce:49:e6:be:24: be:8d:dc:33:ca:56:4e:86:58:2a:cb:26:55:7d:de: b4:54:ed:23:dc:82:fa:60:1d:39:72:99:a6:67:96: 69:f4:b9:33:bb:80:f6:71:ed:52:16:ba:79:d9:94: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:0B:98:47:88:35:66:43:F5:AE:9F:15:C6:88:6F:45:F6:17:01 X509v3 Authority Key Identifier: keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b5:3e:d5:31:53:9b:0d:df:73:1e:3d:66:e8:92:22:ce:e5: 10:18:30:79:cc:6f:b0:ad:b4:d1:b3:7e:37:2a:66:ae:c0:bb: 5c:f8:14:97:b3:01:a9:00:3f:55:d3:f0:a4:09:7d:7b:50:f1: 35:3a:d4:ee:79:5d:e5:56:f5:18:89:35:a8:b9:ac:3c:01:50: 3d:8b:d5:8b:8b:b6:03:28:9b:65:68:ba:ab:28:6a:a2:6a:37: 3f:13:7a:38:53:9f:f9:9e:20:03:ec:7d:56:cd:38:c4:23:34: 75:28:94:b7:01:7a:77:a8:73:f2:58:19:70:4c:fc:53:b6:06: 2f:c1:ec:65:80:71:37:59:9c:9e:ed:19:90:bb:ed:15:dd:85: fe:06:0a:e3:d5:64:5b:d6:1c:16:cd:d5:6f:95:55:e7:19:18: 0a:bf:fd:c1:fb:56:6b:3c:d7:8e:59:9b:4d:73:99:61:cc:e4: b2:38:99:94:ce:ff:0a:6b:40:d2:78:ec:fd:17:0f:cb:12:05: 68:d8:1f:da:fb:58:61:29:0c:c8:d0:bf:7f:d9:97:b5:ff:a9: b4:a2:15:cb:3b:20:e8:6e:15:84:58:cf:8f:ad:55:f0:d2:d1: f0:af:c7:a4:6b:f5:be:00:9a:9a:f9:f5:6c:6d:32:68:b4:51: 03:c7:4b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSb9++g3F3ei5zs9zN+ZvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1 ZjkyNjgwHhcNMjUxMjEyMTIwMTIwWhcNMjUxMjEzMTIwMTIwWjAzMTEwLwYDVQQD EyhiMWExMGI5ODQ3ODgzNTY2NDNmNWFlOWYxNWM2ODg2ZjQ1ZjYxNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprKolsQTgqY6qsOTFQ6fs+498xhS mK4czAr3dUK6KG595Cuq8fiLTKoKpRN0azN3bnzJc3jHms7Fnvw9QODVTNEYcAQ6 vZQch8O9EBv5BqPtber2Cvk/OOO+GpBjxfGSfL+CLXEgmu52iZuwFn1u40Sqd2oQ vCPe+Ky0BBysraPyXkOl9bhamoR7PfIpgypDyACi2ZsFtkgp7h/FwwlmAzGvckvl kvu5EqbOqnGeJ2MQiJezXqwUmATgjrAqlH2tpJoq6Oo654dPsYwKzknmviS+jdwz ylZOhlgqyyZVfd60VO0j3IL6YB05cpmmZ5Zp9Lkzu4D2ce1SFrp52ZRPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGhC5hHiDVmQ/WunxXGiG9F9hcBMB8GA1UdIwQY MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt ZjZjMTZhY2ExNzVlLzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7U+1TFT mw3fcx49ZuiSIs7lEBgwecxvsK200bN+NypmrsC7XPgUl7MBqQA/VdPwpAl9e1Dx NTrU7nld5Vb1GIk1qLmsPAFQPYvVi4u2AyibZWi6qyhqomo3PxN6OFOf+Z4gA+x9 Vs04xCM0dSiUtwF6d6hz8lgZcEz8U7YGL8HsZYBxN1mcnu0ZkLvtFd2F/gYK49Vk W9YcFs3Vb5VV5xkYCr/9wftWazzXjlmbTXOZYczksjiZlM7/CmtA0njs/RcPyxIF aNgf2vtYYSkMyNC/f9mXtf+ptKIVyzsg6G4VhFjPj61V8NLR8K/HpGv1vgCamvn1 bG0yaLRRA8dLYw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:32:57 2025 by rpki-client