This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json) Hash identifier: FBRCTMIH8PHdkzazyuFK6XimUl7d7Nhf1HlHNOSSpTU= Subject key identifier: CD:B4:8E:08:81:B2:00:0C:7B:F6:1F:73:1A:A9:DE:93:69:31:19:80 Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Certificate serial: 019B35A0DA7E2586E9FDB3E079263198B103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft Manifest number: 141E Signing time: Fri 19 Dec 2025 08:01:32 +0000 Manifest this update: Fri 19 Dec 2025 08:01:32 +0000 Manifest next update: Sat 20 Dec 2025 08:01:32 +0000 Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: EYag7oS7no/SMWnQ4SYS9dtfqEmrxRABz2Y/c9lDlbY=) 2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:da:7e:25:86:e9:fd:b3:e0:79:26:31:98:b1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Validity Not Before: Dec 19 08:01:32 2025 GMT Not After : Dec 20 08:01:32 2025 GMT Subject: CN=cdb48e0881b2000c7bf61f731aa9de9369311980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:80:1c:ab:8c:c8:3c:49:a6:42:5a:d6:17: ab:c2:74:f2:ae:a2:96:70:a8:70:db:9d:da:7d:ed: 97:50:7d:fd:f8:36:cf:32:36:8f:ce:61:ca:9a:2f: 73:37:d7:e9:83:f6:5f:04:1d:a1:87:f4:d5:dc:b2: ff:91:54:60:c8:44:af:aa:51:c6:29:8d:25:64:ff: 5b:fb:2e:f7:1a:39:12:74:4c:12:45:fa:6c:b2:ee: 7f:2d:e1:45:69:f2:6f:0b:a1:74:4a:b2:00:02:ea: 22:56:16:b2:b6:cf:5f:4a:d7:42:68:0f:89:63:47: a5:5e:2a:39:25:28:4a:5a:27:16:c7:a9:c9:58:3e: c7:c9:61:ff:30:64:9e:85:a3:31:a7:59:a8:75:03: 2c:05:d3:10:49:d6:e5:e1:23:43:9e:b1:b2:ca:2a: 23:f6:6e:5f:80:a5:92:9c:18:e8:71:84:f1:3a:bc: 27:29:af:8b:93:6e:c4:ff:61:da:2e:87:1f:8a:c4: ec:38:94:38:23:d0:19:07:10:18:24:13:d8:62:29: 26:58:ec:b0:5c:91:69:ec:ec:17:bd:ea:38:c1:71: 04:b4:26:a5:77:a0:1f:cd:46:6d:3a:ec:94:d2:f4: ce:62:f4:9a:df:85:b7:b4:c1:36:aa:c6:49:a6:13: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:8E:08:81:B2:00:0C:7B:F6:1F:73:1A:A9:DE:93:69:31:19:80 X509v3 Authority Key Identifier: keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:f5:f2:42:c4:d6:27:e4:5c:d7:e1:5a:7f:19:e3:23:24: e5:b2:38:ff:09:87:5e:9c:18:98:ff:7d:88:ed:dd:65:ac:54: 4d:21:cc:06:ae:6f:ca:48:88:51:55:1a:86:e6:bd:37:4c:8e: 2b:d8:68:2c:39:0f:2e:9b:1b:b5:17:88:8f:5d:23:88:04:93: 0e:70:0a:6e:53:bc:7c:22:35:66:38:b6:7a:1d:dd:76:c3:1b: d9:bc:3d:6f:f8:28:71:ff:a2:f1:00:96:d2:8b:9f:d4:e4:62: 47:83:6b:46:9a:65:98:25:99:54:75:c0:5d:a2:98:c1:46:95: ff:24:9d:81:64:22:23:1d:70:fe:2c:3d:5d:aa:51:7c:5c:4a: 88:c9:11:31:ec:1c:36:de:2a:c6:86:44:5f:c9:91:8d:18:95: 63:0c:fe:36:ae:b0:77:52:47:9c:42:f6:55:c2:c5:c8:51:16: 10:60:6e:8a:08:02:4c:ea:e3:60:3a:32:f5:c1:df:80:b0:78: 36:eb:48:5c:ca:46:d6:5c:d0:2e:0f:2a:eb:4d:9b:b4:eb:9b: 24:13:e0:74:9f:14:13:c6:6b:34:86:6a:47:9a:63:56:b1:35: f5:48:6a:ca:f3:9d:c5:1f:fb:df:bb:8a:38:d4:4c:90:d0:05: 61:ea:f7:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNp+JYbp/bPgeSYxmLEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjBmMTJmMTE1YWQ0MGYyYzJiNGFhZDQ1NGQyZTQzNjEx YzlhMDYwHhcNMjUxMjE5MDgwMTMyWhcNMjUxMjIwMDgwMTMyWjAzMTEwLwYDVQQD EyhjZGI0OGUwODgxYjIwMDBjN2JmNjFmNzMxYWE5ZGU5MzY5MzExOTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAOAHKuMyDxJpkJa1herwnTyrqKW cKhw253afe2XUH39+DbPMjaPzmHKmi9zN9fpg/ZfBB2hh/TV3LL/kVRgyESvqlHG KY0lZP9b+y73GjkSdEwSRfpssu5/LeFFafJvC6F0SrIAAuoiVhayts9fStdCaA+J Y0elXio5JShKWicWx6nJWD7HyWH/MGSehaMxp1modQMsBdMQSdbl4SNDnrGyyioj 9m5fgKWSnBjocYTxOrwnKa+Lk27E/2HaLocfisTsOJQ4I9AZBxAYJBPYYikmWOyw XJFp7OwXveo4wXEEtCald6AfzUZtOuyU0vTOYvSa34W3tME2qsZJphP3KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM20jgiBsgAMe/Yfcxqp3pNpMRmAMB8GA1UdIwQY MBaAFAiw8S8RWtQPLCtKrUVNLkNhHJoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4Mjkt NDhkZWExMDIxYTY5LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4MjktNDhkZWExMDIxYTY5 LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiL18kLE 1ifkXNfhWn8Z4yMk5bI4/wmHXpwYmP99iO3dZaxUTSHMBq5vykiIUVUahua9N0yO K9hoLDkPLpsbtReIj10jiASTDnAKblO8fCI1Zji2eh3ddsMb2bw9b/gocf+i8QCW 0ouf1ORiR4NrRpplmCWZVHXAXaKYwUaV/ySdgWQiIx1w/iw9XapRfFxKiMkRMewc Nt4qxoZEX8mRjRiVYwz+Nq6wd1JHnEL2VcLFyFEWEGBuiggCTOrjYDoy9cHfgLB4 NutIXMpG1lzQLg8q602btOubJBPgdJ8UE8ZrNIZqR5pjVrE19UhqyvOdxR/737uK ONRMkNAFYer3Yw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:00:28 2025 by rpki-client