This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json) Hash identifier: 6Ek5v3iWfaOJOcHH6rg7cNMCo3hv6p1QjwKv8vuMzcY= Subject key identifier: 4F:9D:A8:71:65:3F:21:04:D7:E6:19:55:89:F0:95:B1:3A:0F:EA:D7 Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b Certificate serial: 019AF31C2EE0A44385032429D911C4CB8285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: M2LhzdaiTdGIRLRufyM4gW37K9YbcHJj4tre6lkKuN0=) 2: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2e:e0:a4:43:85:03:24:29:d9:11:c4:cb:82:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=4f9da871653f2104d7e6195589f095b13a0fead7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:6d:2d:b1:98:d0:4a:1a:88:b4:0f:36:69: fb:87:90:f1:f0:2c:a9:7e:ef:65:c2:9f:dd:21:90: 5b:b5:4b:59:b5:94:fa:f3:59:85:53:b4:3f:05:ea: a3:36:75:c0:35:aa:e2:62:48:1f:d6:7f:c0:b5:a5: 26:61:6a:55:45:eb:10:78:6a:50:4b:a9:d6:aa:a8: de:c8:b4:53:41:2b:5e:89:82:66:1f:ed:50:7c:98: 4f:2b:a0:61:eb:ba:b3:95:4f:3f:8d:8d:b5:d5:3b: ff:fb:7b:a0:db:e5:09:12:05:54:5d:fa:58:51:eb: 5c:2e:f4:13:d2:50:bb:c9:84:33:8b:49:de:7b:40: 05:ed:ff:49:61:7a:c1:9b:08:56:36:b9:cb:0e:a6: 96:71:75:46:f0:f0:cc:4f:cf:df:68:bb:6f:19:db: f9:44:b5:3c:6a:ed:b9:b0:40:e3:42:8b:b7:19:f3: 18:dc:6c:72:f5:b7:6e:ac:62:99:a5:a2:55:c7:d1: d0:1d:28:0d:e6:07:21:87:9a:12:97:84:a0:2d:cb: 4c:6c:37:e0:78:2b:dc:0b:49:0b:b0:87:ff:e9:73: ba:8d:39:eb:25:00:57:dc:44:84:a2:79:a5:55:d5: d1:2c:ce:b9:e4:a2:c9:2b:d2:ac:92:c5:bb:da:65: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9D:A8:71:65:3F:21:04:D7:E6:19:55:89:F0:95:B1:3A:0F:EA:D7 X509v3 Authority Key Identifier: keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:05:d7:9e:15:03:32:fe:1f:b7:a8:01:fc:2a:ac:7e:86:0f: 24:d7:13:68:df:b2:af:ce:6b:a5:ec:f3:c1:6b:fc:01:48:4c: 26:8e:70:54:2d:a2:ea:89:13:11:39:49:a0:41:87:67:64:f4: 1e:b4:05:1d:38:17:95:06:03:6b:03:9b:92:11:e7:fa:00:6d: 28:6e:ee:06:46:36:ce:44:73:96:b7:60:e7:8c:f3:83:4b:8d: b9:26:5e:9c:a6:38:78:cd:e3:62:70:be:b7:68:20:ab:dc:52: d9:6d:fd:3a:d6:c5:f5:0a:22:2d:7c:3b:70:5d:0e:ff:13:93: 22:ae:c9:a9:e2:24:69:77:bd:6d:b0:5f:a8:c1:6e:58:fb:2f: f0:5c:c7:72:54:6b:b9:dd:df:4b:01:77:26:7e:6b:10:b3:f4: c8:90:bb:43:38:e7:c4:e6:94:22:f3:20:20:38:59:5c:e6:e4: ce:11:d5:45:af:34:44:6f:29:73:ff:9a:de:e2:63:d4:0b:3a: d1:21:fd:9a:3b:bf:18:c7:de:f6:5b:92:cf:1b:c1:fa:aa:bc: 02:61:ca:3b:2b:94:04:bc:bf:6d:8f:7d:78:7a:d2:63:a0:5c: f2:12:6e:0e:3d:0c:b7:97:d9:62:e0:db:9d:bf:21:b8:0c:c1: 36:48:ee:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC7gpEOFAyQp2RHEy4KFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTc1ZTBhMzZjNzg5ZDMxNDIwYjMzMzAzZmJjNzMyNGM3 YzU3NGIwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD Eyg0ZjlkYTg3MTY1M2YyMTA0ZDdlNjE5NTU4OWYwOTViMTNhMGZlYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmdtLbGY0EoaiLQPNmn7h5Dx8Cyp fu9lwp/dIZBbtUtZtZT681mFU7Q/BeqjNnXANariYkgf1n/AtaUmYWpVResQeGpQ S6nWqqjeyLRTQSteiYJmH+1QfJhPK6Bh67qzlU8/jY211Tv/+3ug2+UJEgVUXfpY UetcLvQT0lC7yYQzi0nee0AF7f9JYXrBmwhWNrnLDqaWcXVG8PDMT8/faLtvGdv5 RLU8au25sEDjQou3GfMY3Gxy9bdurGKZpaJVx9HQHSgN5gchh5oSl4SgLctMbDfg eCvcC0kLsIf/6XO6jTnrJQBX3ESEonmlVdXRLM655KLJK9KsksW72mUVQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+dqHFlPyEE1+YZVYnwlbE6D+rXMB8GA1UdIwQY MBaAFAgXXgo2x4nTFCCzMwP7xzJMfFdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEt MmY1MDcwOGFjNTdmLzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEtMmY1MDcwOGFjNTdm LzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQXXnhUD Mv4ft6gB/CqsfoYPJNcTaN+yr85rpezzwWv8AUhMJo5wVC2i6okTETlJoEGHZ2T0 HrQFHTgXlQYDawObkhHn+gBtKG7uBkY2zkRzlrdg54zzg0uNuSZenKY4eM3jYnC+ t2ggq9xS2W39OtbF9QoiLXw7cF0O/xOTIq7JqeIkaXe9bbBfqMFuWPsv8FzHclRr ud3fSwF3Jn5rELP0yJC7QzjnxOaUIvMgIDhZXObkzhHVRa80RG8pc/+a3uJj1As6 0SH9mju/GMfe9luSzxvB+qq8AmHKOyuUBLy/bY99eHrSY6Bc8hJuDj0Mt5fZYuDb nb8huAzBNkjuZA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:01 2025 by rpki-client