This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json) Hash identifier: Ri9eWq+X3fHFz73kYoOqMVnZ7O6MjWtE/4jPCyLTEvA= Subject key identifier: A8:6C:D9:EE:74:D0:37:C9:52:7B:B8:E7:51:D3:29:85:BE:D9:F0:D8 Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d Certificate serial: 019AF276F73502E06CD7613615DC2A634024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 4mA6Q8aOm3oeCL0TNAambw3DHjr6JvP6HxBD9zUe+1M=) 2: eC50Tjr8BXSvc4oxm2DLYwTY1Zs.roa (hash: rtWUKkTDPRPsMUD0SVGxmUAo9zw5BtLbRAhLy1ejZ30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f7:35:02:e0:6c:d7:61:36:15:dc:2a:63:40:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=a86cd9ee74d037c9527bb8e751d32985bed9f0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:e0:a0:23:7b:bd:e2:7e:0b:96:ec:73:fb: 44:99:38:fa:27:52:2a:89:0c:b9:93:68:bb:f8:af: 57:18:bb:86:a6:ac:5e:10:20:dd:63:c6:01:05:e7: a4:59:6a:c2:cd:12:9e:1b:a5:2e:fd:cb:57:aa:39: 29:b4:f4:cf:b4:e3:ca:2f:9e:66:4f:a5:1d:38:04: c7:c1:9c:18:d7:d6:72:1f:27:5a:aa:ad:58:0c:18: 42:95:65:1c:a3:88:6e:1e:d5:3a:4c:99:d0:ed:44: 0f:a3:37:75:e8:1f:e5:67:5f:b3:78:8e:b1:04:42: 06:88:21:06:ae:2b:57:96:32:cd:fd:6e:f6:d1:24: e5:87:e3:e4:ca:35:1d:96:c2:fe:83:e6:87:b4:24: b4:61:89:cb:6b:63:a5:ba:4f:f1:73:08:b9:25:52: b0:ea:bb:a9:34:9e:48:cf:bf:fc:7b:fd:13:36:a8: 29:3d:8d:f3:32:72:85:4b:86:54:35:27:67:57:91: 55:7a:dc:7d:6b:4a:3d:89:04:f5:b2:c3:ed:26:03: 20:08:ee:28:e5:74:5d:29:d9:06:0b:2f:60:be:03: 4b:b4:c8:4c:59:e2:9b:ac:6b:c8:1a:f2:ff:a8:6e: ef:78:96:45:58:d9:3c:da:97:55:6e:7c:d7:09:89: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6C:D9:EE:74:D0:37:C9:52:7B:B8:E7:51:D3:29:85:BE:D9:F0:D8 X509v3 Authority Key Identifier: keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0e:d3:52:76:a2:b7:a5:ab:e6:4a:5e:72:af:10:6c:dc:ca: f5:5d:4e:a4:2f:f4:41:76:92:bf:ea:17:8f:c4:ac:f9:32:19: d9:78:03:68:bf:07:e6:5a:0d:75:34:00:17:01:96:f7:17:d7: 77:70:61:90:d1:a9:df:66:e4:cc:ca:24:5c:38:fd:36:c6:7c: bc:09:31:26:7c:44:3e:f3:02:8a:7b:ef:68:67:07:6f:eb:76: db:d1:6a:16:ea:9d:bc:93:b8:67:af:15:37:c7:0b:3b:63:af: ba:0e:b9:30:50:47:b7:a0:fb:0a:60:93:a3:07:e3:a4:5c:2b: c3:a3:dc:8b:c1:a9:4c:bf:bf:7f:7f:2c:88:21:11:62:44:30: ca:3f:24:48:1c:11:9f:b3:cf:69:ec:e0:f3:48:48:e4:81:12: 5b:6b:24:84:d5:55:dd:3e:7e:ce:4b:87:9b:2c:83:86:d7:92: 70:a1:b9:21:c5:81:45:e3:9e:18:ca:e5:b4:d9:10:ea:86:01: 09:df:3b:9a:57:1b:15:f0:0a:a0:91:9b:24:a8:3a:ff:e3:57: ff:06:2b:48:02:be:87:c4:e3:32:32:65:e0:a0:36:31:37:e9: 67:d5:21:8b:5a:4f:ee:f7:2b:b7:43:c3:22:42:d3:99:d4:f8: 93:8f:35:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvc1AuBs12E2FdwqY0AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj MmUwOWQwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EyhhODZjZDllZTc0ZDAzN2M5NTI3YmI4ZTc1MWQzMjk4NWJlZDlmMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNHgoCN7veJ+C5bsc/tEmTj6J1Iq iQy5k2i7+K9XGLuGpqxeECDdY8YBBeekWWrCzRKeG6Uu/ctXqjkptPTPtOPKL55m T6UdOATHwZwY19ZyHydaqq1YDBhClWUco4huHtU6TJnQ7UQPozd16B/lZ1+zeI6x BEIGiCEGritXljLN/W720STlh+PkyjUdlsL+g+aHtCS0YYnLa2Oluk/xcwi5JVKw 6rupNJ5Iz7/8e/0TNqgpPY3zMnKFS4ZUNSdnV5FVetx9a0o9iQT1ssPtJgMgCO4o 5XRdKdkGCy9gvgNLtMhMWeKbrGvIGvL/qG7veJZFWNk82pdVbnzXCYnnzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhs2e500DfJUnu451HTKYW+2fDYMB8GA1UdIwQY MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt MmY5YjAwZmRjNWQzLzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMg7TUnai t6Wr5kpecq8QbNzK9V1OpC/0QXaSv+oXj8Ss+TIZ2XgDaL8H5loNdTQAFwGW9xfX d3BhkNGp32bkzMokXDj9NsZ8vAkxJnxEPvMCinvvaGcHb+t229FqFuqdvJO4Z68V N8cLO2Ovug65MFBHt6D7CmCTowfjpFwrw6Pci8GpTL+/f38siCERYkQwyj8kSBwR n7PPaezg80hI5IESW2skhNVV3T5+zkuHmyyDhteScKG5IcWBReOeGMrltNkQ6oYB Cd87mlcbFfAKoJGbJKg6/+NX/wYrSAK+h8TjMjJl4KA2MTfpZ9Uhi1pP7vcrt0PD IkLTmdT4k481Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:27 2025 by rpki-client