This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json) Hash identifier: b/GIDAJGhHc5bHzKMD6IzIb8zLJvI8QZPj+JT7dwzuQ= Subject key identifier: CE:66:71:8F:C8:7F:57:9E:62:6C:4F:C1:ED:13:6F:79:26:0B:4D:AE Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d Certificate serial: 019AF27673C6C08536DA2B08E44A013A8C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: y++JFLznkmif4Ncis/c/tNq9EsbWduurNtP8G8q2nlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:73:c6:c0:85:36:da:2b:08:e4:4a:01:3a:8c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=ce66718fc87f579e626c4fc1ed136f79260b4dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:76:b3:1f:78:01:f9:b3:9c:92:05:3b:a7:77: a1:6e:b4:60:13:e5:4d:f2:bf:ea:ae:a0:06:7c:5b: 5a:66:f9:b9:a2:7e:bb:94:00:db:53:f4:23:e6:00: a5:f0:5b:06:79:db:2b:cc:d9:d3:88:d5:92:63:36: 3a:c4:78:08:a4:c6:b2:2d:0c:95:a1:cd:20:be:93: 13:25:0d:bb:4f:77:89:14:c1:53:99:65:72:8d:af: 59:4a:5b:35:d5:f5:f9:05:da:bb:cb:84:a1:e6:92: c4:e5:43:d0:e5:e4:6b:06:88:c9:11:ee:61:46:33: 70:0f:e7:18:4c:50:2a:b9:5f:69:d8:4f:dc:1e:a6: ed:fe:95:78:81:66:af:88:e3:80:0b:82:6b:e2:d1: f5:1a:2c:02:92:f6:6a:20:53:ea:2a:05:49:07:0d: d3:b2:e3:dc:80:b1:d3:c9:dd:b4:58:85:b5:5e:f5: de:62:a6:82:a7:7b:e8:2a:8f:ce:f4:db:25:73:aa: e9:98:b6:b1:4c:5c:90:5b:47:01:02:84:ae:06:a2: 7b:72:90:17:a3:9d:e9:c1:9d:7c:d6:bc:6d:fa:47: 86:6b:2f:88:b9:b0:54:ba:cc:96:da:7f:0b:a1:4a: c2:c2:9f:99:50:3f:63:88:04:a7:d7:db:c1:c0:48: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:66:71:8F:C8:7F:57:9E:62:6C:4F:C1:ED:13:6F:79:26:0B:4D:AE X509v3 Authority Key Identifier: keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:af:0e:39:ee:42:9d:28:9f:bc:b9:b6:8e:e1:8f:d5:55:36: 1d:47:d0:92:e6:3c:eb:c6:aa:0a:fc:91:6e:35:07:9b:bc:60: 96:47:94:b6:c3:7a:e8:b2:0e:d7:7a:9e:73:54:22:03:15:36: 98:9f:36:f5:e0:d0:7b:c4:46:74:76:fb:fa:19:f8:9b:c1:5e: 1d:6f:ac:c9:4c:2c:a0:76:59:f9:72:6b:de:60:74:a3:07:1b: 60:b3:9c:b5:b8:77:4c:81:6f:6a:75:6b:91:5d:54:3f:87:f6: 1b:07:ea:57:db:e5:f1:5d:42:f0:53:47:ba:e2:21:6b:23:63: 73:7e:95:40:10:c3:8e:51:11:fd:48:28:45:58:80:7c:4e:5b: e4:e7:99:31:c0:b0:de:51:f9:6e:f8:c4:a3:6a:57:ca:52:ea: d0:40:8c:8c:e8:49:2f:e1:3a:cc:1c:75:21:0d:3f:99:3d:60: 7e:a0:e0:fd:81:32:44:70:dd:73:6f:91:60:66:0b:2e:84:6b: 6d:ef:d0:bb:69:cf:97:7a:fd:f2:f3:b0:97:de:92:22:d4:5a: 53:77:a6:14:45:35:c6:94:b4:5b:f4:36:99:0b:e0:fd:4d:3a: 8a:fa:ea:17:34:a6:da:76:dd:92:a7:68:4f:d7:b2:69:c1:f9: 55:06:e4:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnPGwIU22isI5EoBOow2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZmQ4YTM1YjUwYjZiNjVhMTBjMDQzOTczOTk2ZTk2YjBm NWFkNWQwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD EyhjZTY2NzE4ZmM4N2Y1NzllNjI2YzRmYzFlZDEzNmY3OTI2MGI0ZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HazH3gB+bOckgU7p3ehbrRgE+VN 8r/qrqAGfFtaZvm5on67lADbU/Qj5gCl8FsGedsrzNnTiNWSYzY6xHgIpMayLQyV oc0gvpMTJQ27T3eJFMFTmWVyja9ZSls11fX5Bdq7y4Sh5pLE5UPQ5eRrBojJEe5h RjNwD+cYTFAquV9p2E/cHqbt/pV4gWaviOOAC4Jr4tH1GiwCkvZqIFPqKgVJBw3T suPcgLHTyd20WIW1XvXeYqaCp3voKo/O9Nslc6rpmLaxTFyQW0cBAoSuBqJ7cpAX o53pwZ181rxt+keGay+IubBUusyW2n8LoUrCwp+ZUD9jiASn19vBwEirTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5mcY/If1eeYmxPwe0Tb3kmC02uMB8GA1UdIwQY MBaAFAn9ijW1C2tloQwEOXOZbpaw9a1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUt NmE5ZmJjNWRjNmM4LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUtNmE5ZmJjNWRjNmM4 LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq8OOe5C nSifvLm2juGP1VU2HUfQkuY868aqCvyRbjUHm7xglkeUtsN66LIO13qec1QiAxU2 mJ829eDQe8RGdHb7+hn4m8FeHW+syUwsoHZZ+XJr3mB0owcbYLOctbh3TIFvanVr kV1UP4f2GwfqV9vl8V1C8FNHuuIhayNjc36VQBDDjlER/UgoRViAfE5b5OeZMcCw 3lH5bvjEo2pXylLq0ECMjOhJL+E6zBx1IQ0/mT1gfqDg/YEyRHDdc2+RYGYLLoRr be/Qu2nPl3r98vOwl96SItRaU3emFEU1xpS0W/Q2mQvg/U06ivrqFzSm2nbdkqdo T9eyacH5VQbkaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:43 2025 by rpki-client