This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json) Hash identifier: z7y3/ZAsOqFRZb/UHCOFHVE/uDobwdVvwsfJA9Vv13g= Subject key identifier: AB:08:8B:46:C8:24:D0:49:3A:EB:1A:22:97:90:F8:0E:06:58:8D:49 Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f Certificate serial: 019B0E9299A5A5FA283DDE3CBBF544A4B94B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft Manifest number: 0761 Signing time: Thu 11 Dec 2025 18:00:47 +0000 Manifest this update: Thu 11 Dec 2025 18:00:47 +0000 Manifest next update: Fri 12 Dec 2025 18:00:47 +0000 Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=) 2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: qkCnxd9jLfY2PqeHXL1+/CI+8O8PmfGFT4KkcWzpAhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:99:a5:a5:fa:28:3d:de:3c:bb:f5:44:a4:b9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f Validity Not Before: Dec 11 18:00:47 2025 GMT Not After : Dec 12 18:00:47 2025 GMT Subject: CN=ab088b46c824d0493aeb1a229790f80e06588d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:7c:ae:06:f4:cc:63:4e:b9:fb:cc:ca:bd: 54:a6:31:7b:cf:71:f0:b9:9c:5f:7c:66:75:20:d6: cc:b0:23:17:d1:4e:d8:a6:1a:03:04:c7:f0:a6:6d: e8:09:79:5b:81:73:f1:d9:ff:40:c2:49:90:b6:52: 58:b9:f0:70:85:29:02:a8:de:6c:8f:cf:6b:e0:0a: d5:e3:26:e9:8e:f4:7b:30:65:49:76:27:9c:fc:6b: 8c:8e:ec:37:8d:92:40:70:8d:b5:f4:9a:d8:26:a2: f2:49:60:6a:10:ff:82:36:63:cf:9a:b3:e4:10:25: c5:6e:c2:4a:f5:35:fb:e9:77:11:10:8c:d4:61:63: ac:70:ff:60:ab:48:c8:05:02:1f:51:24:fa:da:22: 5e:e9:7c:ae:6a:c8:1b:ef:c5:7a:3a:df:e0:12:c6: be:30:93:6b:c1:bc:8d:2d:1f:39:b4:a8:cb:75:a1: fe:99:55:68:a4:ef:fb:c0:d6:de:af:e8:3a:1d:08: 5e:4a:bc:ef:25:cd:16:5c:47:8a:c5:d4:f8:49:e4: 79:28:d1:50:d1:aa:a7:b8:49:1c:11:85:55:d3:20: 3f:6e:23:70:1f:ef:af:1c:30:e3:7a:5a:6b:bf:6c: c0:83:22:f5:09:4c:7b:18:d4:f1:68:5d:ea:32:15: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:08:8B:46:C8:24:D0:49:3A:EB:1A:22:97:90:F8:0E:06:58:8D:49 X509v3 Authority Key Identifier: keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0a:9d:c1:64:1c:c4:ca:4b:85:fe:38:63:8e:62:d5:16:2d: 02:de:50:06:39:9a:3a:19:12:e6:26:49:29:ae:8b:ea:fd:53: 39:bd:d3:34:63:c3:4e:1c:1e:15:0b:25:c4:0e:d8:c7:0f:b9: 45:88:8b:1e:37:d9:a3:d8:9b:e2:61:e7:1a:36:fd:70:95:cd: a6:b5:5e:cd:0d:a0:56:10:31:d1:2f:75:42:af:18:70:7c:84: cc:b5:9c:46:9c:a9:18:5f:f0:31:e3:08:0e:e0:68:36:08:2a: 70:41:7a:55:61:72:ed:9a:47:4f:1f:19:4e:7a:ba:f1:2c:fa: f5:94:0f:24:4e:b0:7b:57:72:9e:75:10:2f:91:08:e5:3f:7c: 7d:88:94:bd:9d:7a:c4:c4:4d:43:40:d4:77:22:0f:2e:4c:c8: 44:76:95:56:9e:1e:67:f5:82:c3:d0:ab:3c:6a:35:09:d3:97: 62:85:80:f5:e0:4c:cc:2b:8f:23:2e:94:00:ea:e6:cb:03:a8: 72:09:2c:b3:78:25:41:b2:e7:e3:8d:41:52:e5:42:2c:3a:4b: 16:3b:1e:8a:39:51:64:40:bb:2c:70:65:a9:db:b4:37:78:c3: 50:23:53:39:f8:f6:fe:6b:61:99:d8:7b:2c:2a:1d:e4:a8:74: 46:98:9d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpmlpfooPd48u/VEpLlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1 NTc0NGYwHhcNMjUxMjExMTgwMDQ3WhcNMjUxMjEyMTgwMDQ3WjAzMTEwLwYDVQQD EyhhYjA4OGI0NmM4MjRkMDQ5M2FlYjFhMjI5NzkwZjgwZTA2NTg4ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu018rgb0zGNOufvMyr1UpjF7z3Hw uZxffGZ1INbMsCMX0U7YphoDBMfwpm3oCXlbgXPx2f9AwkmQtlJYufBwhSkCqN5s j89r4ArV4ybpjvR7MGVJdiec/GuMjuw3jZJAcI219JrYJqLySWBqEP+CNmPPmrPk ECXFbsJK9TX76XcREIzUYWOscP9gq0jIBQIfUST62iJe6Xyuasgb78V6Ot/gEsa+ MJNrwbyNLR85tKjLdaH+mVVopO/7wNber+g6HQheSrzvJc0WXEeKxdT4SeR5KNFQ 0aqnuEkcEYVV0yA/biNwH++vHDDjelprv2zAgyL1CUx7GNTxaF3qMhUPQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsIi0bIJNBJOusaIpeQ+A4GWI1JMB8GA1UdIwQY MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt MTk0MmUwODlmMGIwLzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQqdwWQc xMpLhf44Y45i1RYtAt5QBjmaOhkS5iZJKa6L6v1TOb3TNGPDThweFQslxA7Yxw+5 RYiLHjfZo9ib4mHnGjb9cJXNprVezQ2gVhAx0S91Qq8YcHyEzLWcRpypGF/wMeMI DuBoNggqcEF6VWFy7ZpHTx8ZTnq68Sz69ZQPJE6we1dynnUQL5EI5T98fYiUvZ16 xMRNQ0DUdyIPLkzIRHaVVp4eZ/WCw9CrPGo1CdOXYoWA9eBMzCuPIy6UAOrmywOo cgkss3glQbLn441BUuVCLDpLFjseijlRZEC7LHBlqdu0N3jDUCNTOfj2/mthmdh7 LCod5Kh0RpidJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:08 2025 by rpki-client