This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json) Hash identifier: WbHwo+l6KgG+0YBf3muUT/py85MEFqkyCukGKHjZfe0= Subject key identifier: B8:19:48:D1:37:30:4E:D0:12:6D:08:06:39:B6:3F:17:31:69:F8:1F Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Certificate serial: 019B2D0B7FDAE35A546F4197D6A117040A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft Manifest number: 06AA Signing time: Wed 17 Dec 2025 16:01:26 +0000 Manifest this update: Wed 17 Dec 2025 16:01:26 +0000 Manifest next update: Thu 18 Dec 2025 16:01:26 +0000 Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: hV5XpvDACZDWyQ8F6yj6acCfETjjsC9kqw3FD3QvVTg=) 2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:7f:da:e3:5a:54:6f:41:97:d6:a1:17:04:0a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Validity Not Before: Dec 17 16:01:26 2025 GMT Not After : Dec 18 16:01:26 2025 GMT Subject: CN=b81948d137304ed0126d080639b63f173169f81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:0b:65:88:7a:e9:a1:38:f6:a3:3d:a1:95: 76:ed:47:0d:5f:89:5f:7a:4b:2b:22:24:15:7c:a6: d9:1f:8c:15:9e:5e:7f:3e:f5:56:01:2d:51:ff:40: 0d:d2:45:32:d6:c2:17:a7:3b:3e:a8:78:64:e8:45: ad:98:0f:7e:2c:07:54:d9:1a:9f:57:71:5a:6a:81: e9:7f:5a:fa:71:23:e1:0f:e8:40:87:34:c2:87:74: 97:fe:99:2a:de:4d:ca:b3:85:88:39:54:16:6a:8c: cf:3c:76:13:c4:17:7b:e1:06:6a:8e:42:e2:e6:c1: 30:96:94:a5:74:1b:cf:3b:2c:73:67:86:f4:cf:d4: 3a:22:ff:85:d3:ed:5e:8b:c3:50:e6:22:2f:ef:11: 41:ee:33:9b:d1:c0:79:11:7e:7f:8b:8c:e7:76:3f: fe:b9:7b:72:10:75:9c:bd:09:d2:07:f3:09:a0:72: fd:b5:04:8b:28:3d:71:a0:e3:01:ae:91:b5:23:f0: 58:5c:f9:78:8e:1d:0a:73:9e:2e:6a:8b:d1:d1:0d: 69:2c:44:a6:85:36:e5:fd:1d:d7:cc:0c:2d:9a:3a: bd:f8:17:30:60:e5:68:86:f3:48:63:12:14:f3:4d: 0e:91:94:8c:f6:c8:49:24:01:0c:ab:98:06:e8:b9: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:48:D1:37:30:4E:D0:12:6D:08:06:39:B6:3F:17:31:69:F8:1F X509v3 Authority Key Identifier: keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:41:2b:92:28:c3:9b:29:29:da:f1:f6:7f:fb:46:d8:d5:80: 39:10:68:7e:95:8e:df:f4:d2:ce:ec:b4:2f:e9:28:48:e2:50: 27:87:e6:e9:8f:a6:45:61:cb:98:4d:7b:6f:5c:c2:80:36:90: 24:bf:18:c9:ac:9c:7b:39:ed:01:f4:63:31:35:28:20:ff:33: 83:aa:e0:dd:06:08:2a:14:6f:3e:5e:9f:eb:79:22:37:45:b4: 15:c9:86:67:82:a8:71:fd:4e:c0:b0:49:21:c3:4a:9c:68:a4: f3:d9:01:5c:7f:a0:e3:91:b4:6d:38:1d:ca:38:15:b7:d7:ef: d2:18:ba:2b:e0:f2:e7:44:c0:dc:90:e5:98:81:4b:b1:63:5c: 13:b7:cc:b1:5f:a7:5e:46:6c:01:16:e1:9c:bd:99:58:98:dc: 66:24:bd:75:9f:c3:8c:1c:bf:1f:52:23:41:72:6e:91:7d:d6: b0:e9:91:f1:75:44:2d:81:03:72:f9:94:37:32:84:b2:89:db: 15:d5:af:7d:12:23:1f:e4:ea:69:d9:e4:37:ae:92:8a:6e:26: e2:46:ba:9d:a5:01:31:63:9c:f7:ac:58:4b:6e:80:bd:27:a0: 89:34:de:e3:d4:04:c5:e6:44:67:1c:0f:66:d5:d0:e3:91:71: f9:e0:da:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC3/a41pUb0GX1qEXBAoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj YjFkYzkwHhcNMjUxMjE3MTYwMTI2WhcNMjUxMjE4MTYwMTI2WjAzMTEwLwYDVQQD EyhiODE5NDhkMTM3MzA0ZWQwMTI2ZDA4MDYzOWI2M2YxNzMxNjlmODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssQLZYh66aE49qM9oZV27UcNX4lf eksrIiQVfKbZH4wVnl5/PvVWAS1R/0AN0kUy1sIXpzs+qHhk6EWtmA9+LAdU2Rqf V3FaaoHpf1r6cSPhD+hAhzTCh3SX/pkq3k3Ks4WIOVQWaozPPHYTxBd74QZqjkLi 5sEwlpSldBvPOyxzZ4b0z9Q6Iv+F0+1ei8NQ5iIv7xFB7jOb0cB5EX5/i4zndj/+ uXtyEHWcvQnSB/MJoHL9tQSLKD1xoOMBrpG1I/BYXPl4jh0Kc54uaovR0Q1pLESm hTbl/R3XzAwtmjq9+BcwYOVohvNIYxIU800OkZSM9shJJAEMq5gG6Ln6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgZSNE3ME7QEm0IBjm2PxcxafgfMB8GA1UdIwQY MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0 LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskErkijD mykp2vH2f/tG2NWAORBofpWO3/TSzuy0L+koSOJQJ4fm6Y+mRWHLmE17b1zCgDaQ JL8YyaycezntAfRjMTUoIP8zg6rg3QYIKhRvPl6f63kiN0W0FcmGZ4Kocf1OwLBJ IcNKnGik89kBXH+g45G0bTgdyjgVt9fv0hi6K+Dy50TA3JDlmIFLsWNcE7fMsV+n XkZsARbhnL2ZWJjcZiS9dZ/DjBy/H1IjQXJukX3WsOmR8XVELYEDcvmUNzKEsonb FdWvfRIjH+TqadnkN66Sim4m4ka6naUBMWOc96xYS26AvSegiTTe49QExeZEZxwP ZtXQ45Fx+eDaWA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:52 2025 by rpki-client