This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json) Hash identifier: Ca+2uid+bGB+PxyP4UXV8W+avwb8M3yh5hlTy3dpSo8= Subject key identifier: 90:01:67:A4:52:72:32:0B:E4:E7:82:67:67:EB:7E:66:ED:F7:AF:57 Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c Certificate serial: 019AF46578E4838DDE111F5B359E0715BAF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 16:01:22 +0000 Manifest this update: Sat 06 Dec 2025 16:01:22 +0000 Manifest next update: Sun 07 Dec 2025 16:01:22 +0000 Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: 1rhw3Gx1ihtDKnu8MtmhF0kx8L1qJy0gdCYrTTxl2rg=) 2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:78:e4:83:8d:de:11:1f:5b:35:9e:07:15:ba:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c Validity Not Before: Dec 6 16:01:22 2025 GMT Not After : Dec 7 16:01:22 2025 GMT Subject: CN=900167a45272320be4e7826767eb7e66edf7af57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:99:14:5f:1c:c9:ef:25:35:72:ae:d9:d6: 09:5a:a1:9f:15:4b:4a:84:42:8e:56:f4:84:e2:73: 91:5c:e1:31:84:34:0c:a9:c8:ab:87:c3:a6:45:38: 7e:c6:8e:d5:de:f5:22:3d:a8:69:6a:0e:2d:a1:27: 6e:19:9c:2c:1a:22:11:92:f4:8d:88:c5:15:6e:4e: 05:27:76:a5:7d:99:8c:c3:39:8a:32:7c:54:c6:f2: 0d:59:bc:f5:cc:2c:5a:de:12:b5:40:22:9c:ae:21: ef:71:73:f2:6a:f0:4e:c9:bc:6e:4a:af:07:8b:78: 18:2e:32:40:69:1e:b6:7b:fa:41:70:a1:98:32:d4: 26:c9:37:b2:34:e5:3d:90:85:fc:bc:b7:12:e8:35: f1:fd:22:1f:27:91:9c:10:4c:82:f1:57:9b:6f:24: b5:72:d0:bc:56:f2:9a:45:d9:53:4f:e2:19:1c:29: 55:41:d2:c0:d2:21:6f:6b:8d:5c:e0:c0:3d:61:8e: 84:58:e8:fc:4b:b9:8a:63:89:12:df:c7:08:82:a6: 0a:4f:dd:97:c1:6b:9c:d8:09:e1:72:27:3d:1b:6f: 6b:cf:e7:da:65:07:92:20:c0:36:41:0b:70:de:73: ba:7c:49:8a:25:3b:34:42:30:31:99:8b:ba:3a:9d: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:67:A4:52:72:32:0B:E4:E7:82:67:67:EB:7E:66:ED:F7:AF:57 X509v3 Authority Key Identifier: keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3c:72:0a:9a:b5:e6:92:ae:9e:c3:64:ab:e4:6f:39:c6:94: f6:41:54:b4:37:ad:97:b8:8f:78:73:dd:1a:92:9a:94:dd:56: 86:96:e5:3e:f0:4c:ec:ff:48:37:40:58:ed:0a:f9:01:de:85: 99:87:6f:0b:51:98:a5:ff:2b:4e:9d:11:5d:c4:b1:8e:03:07: 5e:99:7b:88:5c:97:d1:28:aa:6e:3f:cd:61:10:a9:93:46:ea: 08:3b:b5:a7:fd:a9:95:33:9e:13:41:d8:a2:09:56:c6:04:7c: 8b:09:8a:99:7a:38:63:bf:db:90:2e:51:e2:cb:9e:f5:58:98: 6c:11:80:e0:e6:88:90:b4:0a:f9:bd:9f:8a:bb:b3:94:6d:c1: c3:6b:f7:ef:cb:18:5d:04:01:5d:21:bc:a1:95:56:6b:03:6f: 40:f7:00:16:8d:d7:7e:e8:0a:23:e9:7b:c6:34:7d:e5:b6:06: 8e:b5:10:52:95:22:13:7e:a5:4a:3c:0e:99:5b:97:2c:54:49: 16:89:53:8f:82:81:12:08:34:17:02:e8:9e:e7:be:11:08:a2: f9:e1:f9:af:61:3a:f2:bf:a0:59:9d:0a:cb:9f:4a:04:4f:6f: 45:0c:7f:f7:d5:ce:ec:49:e7:a1:8f:ac:1d:73:dd:1a:ca:1f: 1c:0c:ac:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXjkg43eER9bNZ4HFbrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWJhYzhmYjI0OTA5MDFmYTYxMDQ4MGEwNWI2NjM1OGI5 MTI0NmMwHhcNMjUxMjA2MTYwMTIyWhcNMjUxMjA3MTYwMTIyWjAzMTEwLwYDVQQD Eyg5MDAxNjdhNDUyNzIzMjBiZTRlNzgyNjc2N2ViN2U2NmVkZjdhZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiOZFF8cye8lNXKu2dYJWqGfFUtK hEKOVvSE4nORXOExhDQMqcirh8OmRTh+xo7V3vUiPahpag4toSduGZwsGiIRkvSN iMUVbk4FJ3alfZmMwzmKMnxUxvINWbz1zCxa3hK1QCKcriHvcXPyavBOybxuSq8H i3gYLjJAaR62e/pBcKGYMtQmyTeyNOU9kIX8vLcS6DXx/SIfJ5GcEEyC8VebbyS1 ctC8VvKaRdlTT+IZHClVQdLA0iFva41c4MA9YY6EWOj8S7mKY4kS38cIgqYKT92X wWuc2Anhcic9G29rz+faZQeSIMA2QQtw3nO6fEmKJTs0QjAxmYu6Op0q+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJABZ6RScjIL5OeCZ2frfmbt969XMB8GA1UdIwQY MBaAFApbrI+ySQkB+mEEgKBbZjWLkSRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQt MWY2YjBiM2E3NjQ0LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQtMWY2YjBiM2E3NjQ0 LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTxyCpq1 5pKunsNkq+RvOcaU9kFUtDetl7iPeHPdGpKalN1WhpblPvBM7P9IN0BY7Qr5Ad6F mYdvC1GYpf8rTp0RXcSxjgMHXpl7iFyX0Siqbj/NYRCpk0bqCDu1p/2plTOeE0HY oglWxgR8iwmKmXo4Y7/bkC5R4sue9ViYbBGA4OaIkLQK+b2firuzlG3Bw2v378sY XQQBXSG8oZVWawNvQPcAFo3XfugKI+l7xjR95bYGjrUQUpUiE36lSjwOmVuXLFRJ FolTj4KBEgg0FwLonue+EQii+eH5r2E68r+gWZ0Ky59KBE9vRQx/99XO7EnnoY+s HXPdGsofHAysHA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:52 2025 by rpki-client