This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json) Hash identifier: 11iMTw8DIYZlGVOcrUfHwzT6/JbzzdP1RkW0dt+b8N8= Subject key identifier: 3E:09:95:09:96:F5:E4:27:9E:95:5C:89:73:93:9C:17:0B:32:F4:95 Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a Certificate serial: 019AF31BE36D4F0EFC566ECF27DC0A79D956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:22 +0000 Manifest this update: Sat 06 Dec 2025 10:01:22 +0000 Manifest next update: Sun 07 Dec 2025 10:01:22 +0000 Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=) 2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: b4k1Od+rOksYxNprVjc7qK0JVvJBdiW2t0WixMepNtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e3:6d:4f:0e:fc:56:6e:cf:27:dc:0a:79:d9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a Validity Not Before: Dec 6 10:01:22 2025 GMT Not After : Dec 7 10:01:22 2025 GMT Subject: CN=3e09950996f5e4279e955c8973939c170b32f495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:ca:fa:6f:c6:5a:0e:9e:c5:cb:b8:e9:8f: 47:2f:a6:67:7d:ad:15:29:c0:d1:e7:b4:bc:04:a3: 9a:fa:d6:f7:25:56:18:3e:55:b7:0b:86:3f:ae:89: e6:24:78:b6:3a:bc:17:9f:e9:4d:b9:01:e1:99:7b: 5a:fd:b1:19:74:b0:85:01:43:22:06:02:6f:8b:fc: e9:0a:66:5a:e4:5b:a0:12:96:e8:f0:b1:80:4d:db: 21:15:38:48:a5:57:98:09:5c:b5:5e:c1:cf:97:5c: c2:c4:ad:15:f7:55:fb:9c:5e:ec:d3:d8:3a:e8:50: 6f:cc:27:92:16:3e:bb:ee:32:da:0c:db:21:06:5c: 2b:47:af:cf:a6:56:44:60:8a:b9:ea:dc:7d:e9:d1: c0:02:59:24:5d:f1:cc:09:03:44:e4:91:58:30:3c: 2d:3e:65:6a:61:d0:d3:8e:20:42:57:c7:c5:4c:84: d5:39:1b:49:cf:9e:5c:10:ff:26:b8:77:22:a4:00: e4:34:5a:4d:19:46:ac:0b:0b:7a:3d:53:cd:ac:a3: c6:8f:f6:da:79:16:27:c9:96:24:ca:b9:f6:32:e6: 38:4b:5e:d1:5d:6c:9f:99:86:c2:e2:71:60:89:4d: e2:23:c3:ba:64:3d:83:5e:62:9b:eb:6c:ff:01:2d: 74:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:09:95:09:96:F5:E4:27:9E:95:5C:89:73:93:9C:17:0B:32:F4:95 X509v3 Authority Key Identifier: keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5c:e7:f7:b0:0c:78:11:8c:14:42:82:58:32:1b:5f:f1:a1: 56:1d:69:ce:3b:e9:fc:de:3d:d0:21:00:9e:b9:fa:fd:68:4a: 89:cd:d9:70:c5:b0:27:4c:5c:ea:90:91:02:b6:e2:3f:46:cf: 0d:54:d4:e5:92:53:d2:53:22:d3:61:ec:01:73:b3:c4:95:f0: 42:88:e9:6a:73:c2:8a:95:e4:fa:79:19:d8:18:1d:71:60:aa: f5:c2:94:8b:fc:34:10:0e:16:ca:42:f1:75:81:3d:ae:72:c2: 93:ca:aa:c3:e5:46:44:dd:fd:e4:5a:7a:03:9a:75:d0:47:51: fe:5b:3a:ce:37:b5:eb:d8:61:4a:a4:ee:71:1d:91:73:f8:df: 1e:10:c9:d9:1f:64:7b:b5:42:51:c9:dc:24:f2:6c:46:4e:f9: 74:ca:8b:08:51:17:37:da:6d:a7:34:b7:8e:3c:ac:a0:5a:67: 8e:6e:85:24:a0:67:89:0f:34:50:24:1f:ec:04:e6:a5:87:e3: b8:20:5e:86:df:2b:79:a5:91:4c:e3:a1:09:fe:e3:bb:06:43: bd:5b:7e:90:2e:19:e9:a8:cd:5a:a2:4e:4a:e1:89:55:6f:19: 24:6a:6a:87:57:05:58:cc:14:a2:81:ac:35:ea:19:c8:a4:fc: 7a:62:b3:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+NtTw78Vm7PJ9wKedlWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDc2MDFiYzQ0NDIyYzhkMjNhM2NkNzJiZmVhMWJiZjJh MDU2M2EwHhcNMjUxMjA2MTAwMTIyWhcNMjUxMjA3MTAwMTIyWjAzMTEwLwYDVQQD EygzZTA5OTUwOTk2ZjVlNDI3OWU5NTVjODk3MzkzOWMxNzBiMzJmNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzK+m/GWg6excu46Y9HL6Znfa0V KcDR57S8BKOa+tb3JVYYPlW3C4Y/ronmJHi2OrwXn+lNuQHhmXta/bEZdLCFAUMi BgJvi/zpCmZa5FugEpbo8LGATdshFThIpVeYCVy1XsHPl1zCxK0V91X7nF7s09g6 6FBvzCeSFj677jLaDNshBlwrR6/PplZEYIq56tx96dHAAlkkXfHMCQNE5JFYMDwt PmVqYdDTjiBCV8fFTITVORtJz55cEP8muHcipADkNFpNGUasCwt6PVPNrKPGj/ba eRYnyZYkyrn2MuY4S17RXWyfmYbC4nFgiU3iI8O6ZD2DXmKb62z/AS10oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4JlQmW9eQnnpVciXOTnBcLMvSVMB8GA1UdIwQY MBaAFAgHYBvERCLI0jo81yv+obvyoFY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgt NWQ2MWZlMjYzMWQwLzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgtNWQ2MWZlMjYzMWQw LzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVzn97AM eBGMFEKCWDIbX/GhVh1pzjvp/N490CEAnrn6/WhKic3ZcMWwJ0xc6pCRArbiP0bP DVTU5ZJT0lMi02HsAXOzxJXwQojpanPCipXk+nkZ2BgdcWCq9cKUi/w0EA4WykLx dYE9rnLCk8qqw+VGRN395Fp6A5p10EdR/ls6zje169hhSqTucR2Rc/jfHhDJ2R9k e7VCUcncJPJsRk75dMqLCFEXN9ptpzS3jjysoFpnjm6FJKBniQ80UCQf7ATmpYfj uCBeht8reaWRTOOhCf7juwZDvVt+kC4Z6ajNWqJOSuGJVW8ZJGpqh1cFWMwUooGs NeoZyKT8emKzYA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:29 2025 by rpki-client