This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json) Hash identifier: 7ptpAe2c4cjTcW7pXYDJxPmoJtx/b/S25/Or2won5hw= Subject key identifier: DF:17:AC:77:ED:B5:12:65:AD:02:EE:F7:ED:5B:8B:E9:30:78:09:B3 Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Certificate serial: 019B367BEB62D29AF4790E63A65857A258EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 12:00:49 +0000 Manifest this update: Fri 19 Dec 2025 12:00:49 +0000 Manifest next update: Sat 20 Dec 2025 12:00:49 +0000 Files and hashes: 1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: f96hpWOa2Ahkuwh+zsQ13Pd/LkMwjvhOS27mcvsZCK0=) 2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:eb:62:d2:9a:f4:79:0e:63:a6:58:57:a2:58:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Validity Not Before: Dec 19 12:00:49 2025 GMT Not After : Dec 20 12:00:49 2025 GMT Subject: CN=df17ac77edb51265ad02eef7ed5b8be9307809b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:92:c0:76:a2:27:e5:4b:c6:7c:11:e9:26:01: e1:de:b8:aa:4f:87:11:e8:2b:81:9d:cb:da:1c:b4: f1:2c:d1:80:65:a0:2c:52:d9:12:0c:3b:24:0e:e3: ff:3b:f2:ee:c3:fc:7a:1c:cd:2a:47:53:c3:30:66: 33:63:89:f8:d2:4d:c4:cd:3b:1c:ca:62:80:c9:b9: 1c:af:d7:9f:f3:15:c8:cd:c4:de:7a:13:e6:e4:8e: e3:9c:17:07:5c:65:fe:a9:8e:5e:7c:96:70:eb:f9: 09:2c:f7:36:d8:ad:e2:76:d6:8a:fe:59:3d:97:15: b3:7e:b0:5b:be:89:63:90:4a:4f:cc:d4:fb:0b:3a: 02:9a:66:b9:82:9c:0e:3d:3b:c8:1c:2f:a5:c2:ab: 23:62:df:5b:77:84:c0:4e:43:28:e1:81:f7:b2:13: f5:1e:e6:28:e7:64:eb:93:fe:75:28:1d:f2:68:0a: 47:9e:ef:74:01:72:18:9d:61:27:3c:12:79:c3:4b: d8:2a:f3:e9:ba:54:38:81:91:1c:cc:d1:86:3d:68: 9d:f9:11:9b:2c:75:7a:ca:88:2d:8a:17:df:a7:59: 8a:33:17:89:12:c3:d0:24:17:de:0b:d3:03:10:89: 25:aa:1d:d6:62:09:12:b0:24:79:9d:8b:b3:84:1f: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:17:AC:77:ED:B5:12:65:AD:02:EE:F7:ED:5B:8B:E9:30:78:09:B3 X509v3 Authority Key Identifier: keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:25:72:62:92:e6:5d:a4:bd:6e:1c:51:3c:ed:7a:2d:ae:35: c5:af:e6:c1:5b:b6:74:c6:35:41:d4:ea:93:a0:36:e2:b8:f5: 0c:90:10:64:49:10:c0:4d:da:3f:9c:c1:56:37:6e:17:2a:2c: 95:1e:ae:76:65:29:8d:30:f0:b0:97:d9:68:72:76:0c:52:33: cd:0b:18:87:c4:08:46:d3:29:78:db:5f:29:60:37:15:58:9e: 13:bb:ac:7e:ab:d0:e6:89:f9:ab:81:50:ea:1a:20:82:78:06: 43:cb:b6:68:d8:8e:26:5b:95:7b:69:e1:1a:86:29:98:c8:ad: 02:fa:73:a1:1e:ea:55:3c:f7:d3:a1:d2:8a:24:20:f4:00:8f: 39:39:1a:9f:f9:2a:05:ab:b4:e4:a8:51:1d:13:38:de:91:70: 05:66:da:71:25:0e:73:bf:ad:18:47:ce:24:01:e2:c2:68:ba: 52:ba:e7:2a:07:46:be:bd:97:7c:c8:59:45:46:7e:ea:06:fd: 83:ce:7d:87:2c:a9:89:a0:99:2b:78:58:fd:37:84:c5:8c:33: 58:86:9c:14:cc:67:0e:e2:c0:0d:2d:f5:9a:4d:4f:33:ea:51: 5d:d8:7f:2d:80:9e:fc:ee:12:37:f3:a7:cd:a7:3b:01:96:26: b2:ca:cd:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e+ti0pr0eQ5jplhXoljvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy MGI3NTcwHhcNMjUxMjE5MTIwMDQ5WhcNMjUxMjIwMTIwMDQ5WjAzMTEwLwYDVQQD EyhkZjE3YWM3N2VkYjUxMjY1YWQwMmVlZjdlZDViOGJlOTMwNzgwOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35LAdqIn5UvGfBHpJgHh3riqT4cR 6CuBncvaHLTxLNGAZaAsUtkSDDskDuP/O/Luw/x6HM0qR1PDMGYzY4n40k3EzTsc ymKAybkcr9ef8xXIzcTeehPm5I7jnBcHXGX+qY5efJZw6/kJLPc22K3idtaK/lk9 lxWzfrBbvoljkEpPzNT7CzoCmma5gpwOPTvIHC+lwqsjYt9bd4TATkMo4YH3shP1 HuYo52Trk/51KB3yaApHnu90AXIYnWEnPBJ5w0vYKvPpulQ4gZEczNGGPWid+RGb LHV6yogtihffp1mKMxeJEsPQJBfeC9MDEIklqh3WYgkSsCR5nYuzhB9+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8XrHfttRJlrQLu9+1bi+kweAmzMB8GA1UdIwQY MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt NWJhZTM3NWNmODVhLzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCVyYpLm XaS9bhxRPO16La41xa/mwVu2dMY1QdTqk6A24rj1DJAQZEkQwE3aP5zBVjduFyos lR6udmUpjTDwsJfZaHJ2DFIzzQsYh8QIRtMpeNtfKWA3FVieE7usfqvQ5on5q4FQ 6hoggngGQ8u2aNiOJluVe2nhGoYpmMitAvpzoR7qVTz306HSiiQg9ACPOTkan/kq Bau05KhRHRM43pFwBWbacSUOc7+tGEfOJAHiwmi6UrrnKgdGvr2XfMhZRUZ+6gb9 g859hyypiaCZK3hY/TeExYwzWIacFMxnDuLADS31mk1PM+pRXdh/LYCe/O4SN/On zac7AZYmssrNGA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:02 2025 by rpki-client