This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json) Hash identifier: HyXRDZq6liglytz79AqRqd0RpFl6FXh8r1Lco1rE/HI= Subject key identifier: 99:18:F0:23:C0:DD:0C:0A:82:C4:C7:9D:21:E7:52:87:15:E8:2E:88 Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Certificate serial: 019AF1D2548918BCC012ABA9F1244D353999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft Manifest number: 0AB6 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: NsApzoXfo43knokrb+SS0xUHcUb9Ki83nopyKQn8sUc=) 2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:54:89:18:bc:c0:12:ab:a9:f1:24:4d:35:39:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=9918f023c0dd0c0a82c4c79d21e7528715e82e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:40:f5:31:da:a2:ac:60:5e:39:30:33:4f: 72:45:a6:5f:31:b8:59:52:9c:aa:9d:b7:29:df:aa: cd:f0:df:7e:cf:ba:ef:94:88:6c:9c:4f:87:f7:e4: 25:b1:2d:28:6a:15:45:c6:d1:a4:c8:6a:6f:3d:d0: d3:87:c6:a4:28:d1:3b:6c:11:61:dd:f1:4d:e8:d0: 4e:bf:ed:e4:88:04:36:71:48:f1:43:98:be:04:55: 4b:f4:79:e0:9e:70:26:52:fb:fd:d3:e4:25:2c:d1: 56:d6:9c:36:d2:2f:18:c4:01:d4:fd:55:9e:e6:4f: d2:60:8f:b1:bd:32:fd:82:b1:49:8a:b4:6d:a1:7a: a1:23:cf:22:c9:06:d8:b6:5a:31:b2:fe:f2:5f:c6: 95:a6:c8:ae:27:94:18:66:2b:8d:17:ad:25:ef:77: 60:fb:b4:ed:d6:7b:75:be:3d:9c:2e:af:35:cd:cc: 23:37:fd:32:86:c4:18:5f:7d:ab:32:d4:26:75:ca: d2:27:a0:ee:98:f7:f5:47:49:ae:e9:20:18:41:96: ac:19:ea:05:e3:a0:07:8a:46:37:cd:73:dd:fb:9d: 17:ee:66:74:ac:99:51:fa:4f:ac:ce:eb:2b:3d:bc: 9f:bb:ca:ba:8f:31:91:83:c0:1a:54:46:a1:35:e0: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:F0:23:C0:DD:0C:0A:82:C4:C7:9D:21:E7:52:87:15:E8:2E:88 X509v3 Authority Key Identifier: keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:53:1a:98:58:28:a2:88:41:bf:4b:dc:b7:d0:91:b0:dc:b6: c8:79:1a:ba:5f:0a:6f:f1:98:02:99:bc:91:41:e8:39:7e:f3: c6:32:d5:d1:93:e6:90:0d:51:57:0b:05:1a:19:ea:38:77:8e: 98:cc:b4:2c:f9:08:2f:59:7a:35:f0:ac:e1:89:38:8c:5e:ca: 9e:ad:1a:7a:01:77:10:0e:55:fd:64:ab:e2:c7:3e:50:26:a7: e3:39:29:ee:60:9f:80:1d:9d:62:d7:3e:e6:bd:5b:a5:3f:d3: 3d:da:fa:87:ee:65:9e:aa:bb:a2:f3:ea:35:df:48:eb:fc:df: 0b:d0:ef:5e:e3:08:33:45:07:d5:9c:1c:91:29:e8:44:2d:fa: 9d:33:e6:2e:82:9f:2e:22:8c:7b:26:8c:ac:c5:ee:1d:17:18: e2:ec:13:a7:dc:ad:0b:2c:26:f0:f8:72:23:4b:d0:5b:7b:5a: 69:70:b3:44:e6:fd:5a:39:80:af:c5:19:8d:ec:33:6d:80:05: 2f:ea:92:ee:05:5c:78:b8:20:57:df:bd:c5:e7:67:80:81:0a: 40:75:77:c3:b2:16:4c:24:be:a0:63:b0:2d:9c:eb:82:52:41: 1f:9c:02:7a:63:62:1d:4a:c6:ca:fd:11:26:70:fe:cc:c8:ea: c6:54:15:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lSJGLzAEqup8SRNNTmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl YzZhOGUwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD Eyg5OTE4ZjAyM2MwZGQwYzBhODJjNGM3OWQyMWU3NTI4NzE1ZTgyZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkJA9THaoqxgXjkwM09yRaZfMbhZ Upyqnbcp36rN8N9+z7rvlIhsnE+H9+QlsS0oahVFxtGkyGpvPdDTh8akKNE7bBFh 3fFN6NBOv+3kiAQ2cUjxQ5i+BFVL9HngnnAmUvv90+QlLNFW1pw20i8YxAHU/VWe 5k/SYI+xvTL9grFJirRtoXqhI88iyQbYtloxsv7yX8aVpsiuJ5QYZiuNF60l73dg +7Tt1nt1vj2cLq81zcwjN/0yhsQYX32rMtQmdcrSJ6DumPf1R0mu6SAYQZasGeoF 46AHikY3zXPd+50X7mZ0rJlR+k+szusrPbyfu8q6jzGRg8AaVEahNeCr7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkY8CPA3QwKgsTHnSHnUocV6C6IMB8GA1UdIwQY MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1MamFgo oohBv0vct9CRsNy2yHkaul8Kb/GYApm8kUHoOX7zxjLV0ZPmkA1RVwsFGhnqOHeO mMy0LPkIL1l6NfCs4Yk4jF7Knq0aegF3EA5V/WSr4sc+UCan4zkp7mCfgB2dYtc+ 5r1bpT/TPdr6h+5lnqq7ovPqNd9I6/zfC9DvXuMIM0UH1ZwckSnoRC36nTPmLoKf LiKMeyaMrMXuHRcY4uwTp9ytCywm8PhyI0vQW3taaXCzROb9WjmAr8UZjewzbYAF L+qS7gVceLggV9+9xedngIEKQHV3w7IWTCS+oGOwLZzrglJBH5wCemNiHUrGyv0R JnD+zMjqxlQVxw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:38 2025 by rpki-client