This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json) Hash identifier: 1qyNX9S9bTswJGG/VEjGC0W7Cn61UWmowW0xN7Hx3iY= Subject key identifier: 23:E5:AF:CA:B0:38:15:8F:CB:1A:8C:70:70:2E:C8:4E:EF:3A:71:19 Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Certificate serial: 019AF12F001175FDC621A15C1EEE76543D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft Manifest number: 068B Signing time: Sat 06 Dec 2025 01:03:00 +0000 Manifest this update: Sat 06 Dec 2025 01:03:00 +0000 Manifest next update: Sun 07 Dec 2025 01:03:00 +0000 Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: XXqvpS+4LJLvze8jY0QCR9T45YDZ7KEhwkILjk/nEao=) 2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:00:11:75:fd:c6:21:a1:5c:1e:ee:76:54:3d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Validity Not Before: Dec 6 01:03:00 2025 GMT Not After : Dec 7 01:03:00 2025 GMT Subject: CN=23e5afcab038158fcb1a8c70702ec84eef3a7119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:ca:a7:b7:ea:a8:fc:c6:6d:b2:4d:1e:f6: 37:c3:2c:02:60:fd:ff:a4:1b:8b:31:bc:44:7f:6a: e0:6a:3d:d1:53:e5:2c:40:e0:a7:7e:b8:ab:28:47: b8:07:9c:ca:31:37:94:ae:eb:77:00:b1:ae:98:4b: a2:7d:83:0c:3a:cf:50:7d:a4:f3:46:f3:76:8c:e4: b6:4d:a1:e1:e9:5d:68:57:94:f3:23:25:f5:f6:43: cd:94:9f:40:3b:9f:16:30:e7:4b:2b:ac:3f:4c:de: 98:b1:7d:c0:89:e0:74:5d:1c:fc:2f:a4:2f:e8:89: 4f:3f:a9:7b:b6:82:ee:0e:70:6d:a7:70:ca:c8:0c: 60:d6:fe:d8:84:03:72:1a:bd:f8:d7:e3:cd:31:05: 8c:09:48:08:66:11:b9:0f:e2:0a:18:40:3c:0b:01: 1d:d8:e7:60:2e:d7:00:a8:36:d5:ac:2b:39:58:82: f5:af:ab:9c:11:ce:e9:b8:c3:87:d4:69:56:c1:c5: 7d:8d:fa:94:90:e0:8b:be:cc:0b:74:dc:6c:17:54: 98:2d:71:fb:ff:5e:de:65:22:7a:10:7e:a0:6c:45: 7d:d2:ba:a1:41:70:df:68:1e:2d:55:18:08:36:8d: 01:89:34:04:15:8a:bc:cf:8e:6e:30:db:70:56:86: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E5:AF:CA:B0:38:15:8F:CB:1A:8C:70:70:2E:C8:4E:EF:3A:71:19 X509v3 Authority Key Identifier: keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:33:ff:4c:cf:78:fc:30:6b:34:a1:cd:f8:e2:d2:08:52:30: 3c:f0:3e:20:e0:d2:58:e0:20:0f:c6:23:c3:43:36:2d:5c:42: fc:09:78:be:53:48:1d:c5:a6:ef:86:bc:be:6f:42:5b:8c:77: 94:57:f9:7d:6d:e6:20:87:0d:ca:04:13:9c:43:8e:07:1b:64: e6:05:dd:f7:cc:59:71:05:c9:2c:61:66:79:0a:4a:45:31:b2: ac:ce:60:e8:ac:d5:85:a2:50:0c:05:3d:60:39:fc:7e:07:5f: 51:8e:20:dd:3d:63:eb:9c:3d:20:6c:71:74:86:62:ac:9d:b5: 02:8b:22:60:45:55:32:f1:30:0a:72:ad:52:f3:17:7f:87:d0: ea:75:99:30:0d:c0:be:c0:39:dc:90:1e:19:24:4e:fb:a2:b3: 60:d6:d6:f6:74:7b:2a:b1:36:25:31:e8:65:d3:7f:d9:fc:7f: 0e:12:67:b9:97:68:f8:12:6e:fc:00:21:01:51:8a:8d:c0:00: 8c:82:e9:38:d4:ec:ed:15:b7:27:1e:3c:35:b9:db:ac:7c:1a: ac:76:71:06:42:0c:b3:2f:8d:ee:f5:6c:02:c6:df:48:dc:f8: 35:1a:53:cb:7d:0f:3c:aa:1a:b9:0f:d4:19:5c:a8:ba:2d:b8: 98:6e:d5:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLwARdf3GIaFcHu52VD0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj YjFkYzkwHhcNMjUxMjA2MDEwMzAwWhcNMjUxMjA3MDEwMzAwWjAzMTEwLwYDVQQD EygyM2U1YWZjYWIwMzgxNThmY2IxYThjNzA3MDJlYzg0ZWVmM2E3MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGjKp7fqqPzGbbJNHvY3wywCYP3/ pBuLMbxEf2rgaj3RU+UsQOCnfrirKEe4B5zKMTeUrut3ALGumEuifYMMOs9QfaTz RvN2jOS2TaHh6V1oV5TzIyX19kPNlJ9AO58WMOdLK6w/TN6YsX3AieB0XRz8L6Qv 6IlPP6l7toLuDnBtp3DKyAxg1v7YhANyGr341+PNMQWMCUgIZhG5D+IKGEA8CwEd 2OdgLtcAqDbVrCs5WIL1r6ucEc7puMOH1GlWwcV9jfqUkOCLvswLdNxsF1SYLXH7 /17eZSJ6EH6gbEV90rqhQXDfaB4tVRgINo0BiTQEFYq8z45uMNtwVob79wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPlr8qwOBWPyxqMcHAuyE7vOnEZMB8GA1UdIwQY MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0 LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzP/TM94 /DBrNKHN+OLSCFIwPPA+IODSWOAgD8Yjw0M2LVxC/Al4vlNIHcWm74a8vm9CW4x3 lFf5fW3mIIcNygQTnEOOBxtk5gXd98xZcQXJLGFmeQpKRTGyrM5g6KzVhaJQDAU9 YDn8fgdfUY4g3T1j65w9IGxxdIZirJ21AosiYEVVMvEwCnKtUvMXf4fQ6nWZMA3A vsA53JAeGSRO+6KzYNbW9nR7KrE2JTHoZdN/2fx/DhJnuZdo+BJu/AAhAVGKjcAA jILpONTs7RW3Jx48NbnbrHwarHZxBkIMsy+N7vVsAsbfSNz4NRpTy30PPKoauQ/U GVyoui24mG7Vog== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:52 2025 by rpki-client