This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json) Hash identifier: ffUvwWO6hAd02qVpYWNWpIfIx1DDhCBWZ1jXtHPlzno= Subject key identifier: AD:42:0E:F3:DC:52:33:9B:A5:29:E7:60:87:62:18:CF:BF:54:74:46 Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Certificate serial: 019AF208E2D80024A86BA8ABBC44151C7D97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft Manifest number: 13FB Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: zMDtN00GjQznoPmVwc2p+lk6wU3UWAP7iAWTWxUAI70=) 2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:d8:00:24:a8:6b:a8:ab:bc:44:15:1c:7d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=ad420ef3dc52339ba529e760876218cfbf547446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:83:2b:0a:45:01:c8:4b:cb:60:da:c7:54: e8:d2:1f:c6:e0:e1:85:ce:07:4f:ba:76:20:64:2e: 9e:70:6d:b6:4a:1d:34:12:5b:69:ad:76:ab:90:66: c7:00:30:b8:a8:ee:ce:3a:59:b3:15:3d:aa:f4:2a: c2:0d:00:2b:06:96:79:ce:88:cb:c4:23:94:39:59: 99:10:58:f5:46:af:5f:93:f3:e3:44:8d:0a:a0:f0: e8:0e:b0:2f:11:65:b4:0c:ac:c7:a6:eb:6c:53:72: 71:11:c1:6e:92:a5:f8:af:7a:4f:cb:99:1f:dd:39: 3c:ed:41:63:e0:ea:44:23:be:0a:d8:cd:c6:d4:32: a2:c9:16:25:f4:f9:86:49:5f:e7:1b:ad:c0:e9:84: e2:60:6b:c2:b9:29:d4:a6:e1:fe:09:30:cc:69:6c: a8:81:8e:86:d3:e2:df:69:f7:d0:98:fc:91:9e:4a: 41:53:5b:f6:80:45:f3:18:46:16:91:4b:48:0e:c1: 5a:8c:91:fa:3c:46:2c:25:8c:1f:5e:f6:77:0f:33: 29:16:69:0e:d7:08:6a:41:7e:64:ca:3c:4d:27:fe: ff:be:1e:51:54:87:46:d2:d6:e4:72:a6:e6:85:5c: a3:98:50:25:87:a9:35:05:01:5f:d3:8d:01:d2:02: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:42:0E:F3:DC:52:33:9B:A5:29:E7:60:87:62:18:CF:BF:54:74:46 X509v3 Authority Key Identifier: keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:06:8a:60:6e:8e:b4:75:49:37:0e:7a:84:60:e9:e1:4f:2d: a6:82:ad:b2:ba:b2:9e:f8:d1:67:f9:40:b5:f5:a9:d5:cb:e1: 91:29:3a:0e:ff:d9:b8:9c:1c:d8:4f:64:a1:63:5e:25:ea:95: 91:2d:c9:d5:89:cb:48:be:b1:1e:64:ca:80:f1:6a:9c:f8:4d: 3b:b9:db:d6:ee:e6:e1:86:44:01:b6:9f:f1:fe:8f:37:fd:e3: 6c:a5:4b:bd:85:64:f6:38:b3:95:5d:a3:36:c5:fc:85:9b:0a: c7:af:d6:23:bc:f0:81:d7:e2:9b:bf:34:72:63:69:94:97:a4: fa:94:8f:e7:23:6a:65:27:5b:83:64:38:04:ae:0b:bc:28:c8: 74:c1:ec:ef:3e:28:bf:70:a7:11:bb:41:62:2c:47:91:26:9d: 04:1e:f8:e7:10:ca:45:48:10:75:09:05:67:85:50:b5:5f:56: ad:98:57:40:68:9e:fc:13:af:a3:ed:59:1c:4c:ea:83:0b:37: 0e:2f:4f:8d:60:0d:ee:5d:fe:5e:7d:23:72:75:67:c3:66:31: ce:92:69:7a:f8:a2:2d:ae:c1:25:38:67:7c:a5:92:f9:50:11: 49:43:38:05:42:fd:40:fa:3b:7d:74:5c:91:3e:a2:fc:82:9c: e7:be:6d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOLYACSoa6irvEQVHH2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjBmMTJmMTE1YWQ0MGYyYzJiNGFhZDQ1NGQyZTQzNjEx YzlhMDYwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EyhhZDQyMGVmM2RjNTIzMzliYTUyOWU3NjA4NzYyMThjZmJmNTQ3NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx6DKwpFAchLy2Dax1To0h/G4OGF zgdPunYgZC6ecG22Sh00EltprXarkGbHADC4qO7OOlmzFT2q9CrCDQArBpZ5zojL xCOUOVmZEFj1Rq9fk/PjRI0KoPDoDrAvEWW0DKzHputsU3JxEcFukqX4r3pPy5kf 3Tk87UFj4OpEI74K2M3G1DKiyRYl9PmGSV/nG63A6YTiYGvCuSnUpuH+CTDMaWyo gY6G0+LfaffQmPyRnkpBU1v2gEXzGEYWkUtIDsFajJH6PEYsJYwfXvZ3DzMpFmkO 1whqQX5kyjxNJ/7/vh5RVIdG0tbkcqbmhVyjmFAlh6k1BQFf040B0gJK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1CDvPcUjObpSnnYIdiGM+/VHRGMB8GA1UdIwQY MBaAFAiw8S8RWtQPLCtKrUVNLkNhHJoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4Mjkt NDhkZWExMDIxYTY5LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4MjktNDhkZWExMDIxYTY5 LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAaKYG6O tHVJNw56hGDp4U8tpoKtsrqynvjRZ/lAtfWp1cvhkSk6Dv/ZuJwc2E9koWNeJeqV kS3J1YnLSL6xHmTKgPFqnPhNO7nb1u7m4YZEAbaf8f6PN/3jbKVLvYVk9jizlV2j NsX8hZsKx6/WI7zwgdfim780cmNplJek+pSP5yNqZSdbg2Q4BK4LvCjIdMHs7z4o v3CnEbtBYixHkSadBB745xDKRUgQdQkFZ4VQtV9WrZhXQGie/BOvo+1ZHEzqgws3 Di9PjWAN7l3+Xn0jcnVnw2YxzpJpeviiLa7BJThnfKWS+VARSUM4BUL9QPo7fXRc kT6i/IKc575tqA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:36 2025 by rpki-client