This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json) Hash identifier: FXY3VX9Bik7dW2i+wduIymx2AED5lz8EmW4SmW+kSlw= Subject key identifier: B5:94:6B:4B:F1:6F:78:3B:B1:B1:FE:94:A1:EF:3F:02:51:82:76:B8 Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74 Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874 Certificate serial: 019AF2AD6227F65067BB208F0B90AF6B4C91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft Manifest number: 04C7 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=) 2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: FwmrSXNRe6dF/L8u5Gnu/3t63vdrSbC1PmbeAFjKR2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:62:27:f6:50:67:bb:20:8f:0b:90:af:6b:4c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=b5946b4bf16f783bb1b1fe94a1ef3f02518276b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:37:1d:b9:b2:1d:30:26:69:c0:d0:2a:70: 64:b3:30:8f:b0:4d:1c:40:84:b6:14:a9:87:da:20: 9f:11:5d:35:eb:18:fc:76:06:57:dd:32:20:2a:87: 78:48:9c:b8:1b:47:3d:e8:9c:65:b2:d2:3a:65:00: 67:80:49:70:bf:92:e6:15:7e:f0:08:2f:cf:ee:35: 2e:96:75:a7:d4:10:be:5d:c9:dd:38:b2:b4:3c:2b: 05:fb:ab:bd:24:da:97:b9:aa:6b:ed:7a:9c:d4:6f: 92:39:d6:a8:e5:5a:01:1e:30:a7:33:c3:29:e1:5f: 77:b1:04:25:bb:ce:1e:40:50:b4:85:2b:1c:d3:da: e5:7d:4c:75:1c:32:63:43:e4:79:6f:f4:49:be:4f: 67:21:ea:5f:e3:d2:16:f1:b3:c5:c5:16:7d:cd:87: a0:27:f9:e3:c8:fe:84:d4:99:54:de:2b:cd:3a:91: 01:61:ab:c2:9f:e9:b7:08:d1:28:9f:24:da:60:76: f9:9b:1d:68:41:81:39:3f:1f:a9:9c:98:4d:89:19: da:cc:ca:54:98:54:68:05:fa:ad:db:28:60:de:2d: ea:8d:45:bb:06:e7:9d:60:9b:3c:cb:f2:e6:91:f5: a2:bb:29:c0:d8:e8:8b:56:cf:b8:b8:d0:1b:36:22: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:94:6B:4B:F1:6F:78:3B:B1:B1:FE:94:A1:EF:3F:02:51:82:76:B8 X509v3 Authority Key Identifier: keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f7:81:1f:ea:2c:e7:9e:ed:01:66:c7:c1:49:db:bb:b9:15: 63:08:dd:94:81:77:6a:33:79:cc:78:96:e8:56:45:c3:35:51: 6e:57:d2:0b:a3:e1:9b:c6:ae:9a:e8:8c:dd:1d:52:b4:1d:8a: 61:ce:e0:09:eb:f0:6f:65:1d:60:d8:86:56:bf:c5:57:60:33: 4f:f0:ac:43:36:91:83:b2:f1:35:ea:78:e0:26:dd:06:58:a1: 51:5a:c9:06:13:fe:86:9e:1c:6d:91:3a:24:46:4a:27:bb:e8: de:73:b6:18:77:7f:ae:22:f3:ef:52:2a:b4:1b:9d:42:42:22: 24:15:8a:17:c7:0d:55:3b:3b:ec:b0:60:a1:a5:24:c5:2b:1b: 7d:c3:93:73:73:18:83:15:b0:9a:06:9c:dd:40:76:76:07:37: 4b:ef:45:23:24:6d:69:b9:c3:bb:f6:90:c3:6e:23:d7:27:3a: ac:92:60:aa:b7:82:8f:5e:7d:2d:ef:6f:ac:d1:af:7f:0a:96: f1:8a:9d:88:0c:e4:a3:a1:6f:50:6e:63:1a:84:2a:3a:64:25: 81:ed:69:4f:e6:36:b2:95:2c:50:31:fe:86:d5:24:fe:48:50: 64:70:ac:b5:9e:f5:23:74:ec:b2:2c:94:cf:98:f1:21:b9:b7: 2a:ef:3d:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWIn9lBnuyCPC5Cva0yRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjE0N2QzOWU0M2JiNzVmOWY3YWZmNDVlN2JmMmI4MzUz MGY4NzQwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EyhiNTk0NmI0YmYxNmY3ODNiYjFiMWZlOTRhMWVmM2YwMjUxODI3NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvo3HbmyHTAmacDQKnBkszCPsE0c QIS2FKmH2iCfEV016xj8dgZX3TIgKod4SJy4G0c96JxlstI6ZQBngElwv5LmFX7w CC/P7jUulnWn1BC+XcndOLK0PCsF+6u9JNqXuapr7Xqc1G+SOdao5VoBHjCnM8Mp 4V93sQQlu84eQFC0hSsc09rlfUx1HDJjQ+R5b/RJvk9nIepf49IW8bPFxRZ9zYeg J/njyP6E1JlU3ivNOpEBYavCn+m3CNEonyTaYHb5mx1oQYE5Px+pnJhNiRnazMpU mFRoBfqt2yhg3i3qjUW7BuedYJs8y/LmkfWiuynA2OiLVs+4uNAbNiIAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWUa0vxb3g7sbH+lKHvPwJRgna4MB8GA1UdIwQY MBaAFAixR9OeQ7t1+fev9F578rg1MPh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82YWM3M2EtNmI1Zi00MjMyLTliOGMt MzA1ZTMzZWY4YjI5LzEvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82YWM3M2EtNmI1Zi00MjMyLTliOGMtMzA1ZTMzZWY4YjI5 LzEvQ0xGSDA1NUR1M1g1OTZfMFhudnl1RFV3LUhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPeBH+os 557tAWbHwUnbu7kVYwjdlIF3ajN5zHiW6FZFwzVRblfSC6Phm8aumuiM3R1StB2K Yc7gCevwb2UdYNiGVr/FV2AzT/CsQzaRg7LxNep44CbdBlihUVrJBhP+hp4cbZE6 JEZKJ7vo3nO2GHd/riLz71IqtBudQkIiJBWKF8cNVTs77LBgoaUkxSsbfcOTc3MY gxWwmgac3UB2dgc3S+9FIyRtabnDu/aQw24j1yc6rJJgqreCj159Le9vrNGvfwqW 8YqdiAzko6FvUG5jGoQqOmQlge1pT+Y2spUsUDH+htUk/khQZHCstZ71I3TssiyU z5jxIbm3Ku89AQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:47 2025 by rpki-client