This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json) Hash identifier: wsWcN+LksxqU5xbdkYeDnjrwJ6WnFwgCZr6IQe3efz4= Subject key identifier: 58:1F:33:8C:7A:FA:8D:5A:A4:0F:21:B8:57:D8:00:0C:9D:74:39:4D Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22 Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22 Certificate serial: 019AF1741C9ECFACE4E3AE8BE08687631BEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft Manifest number: 06FD Signing time: Sat 06 Dec 2025 02:18:29 +0000 Manifest this update: Sat 06 Dec 2025 02:18:29 +0000 Manifest next update: Sun 07 Dec 2025 02:18:29 +0000 Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=) 2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=) 3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: IYnWSdXOC7Bdp8K10e7QAag2EIKV6RIs55CwdmkCK/0=) 4: GAMWcJPDot5gDse8-ySFiFtYeDU.roa (hash: jgN5bn3hFVBjz3varL/OEb4kgGmVIwVN5Y8c2wRa1fc=) 5: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:74:1c:9e:cf:ac:e4:e3:ae:8b:e0:86:87:63:1b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086438e9889389829fa5f51b6a210731082eac22 Validity Not Before: Dec 6 02:18:29 2025 GMT Not After : Dec 7 02:18:29 2025 GMT Subject: CN=581f338c7afa8d5aa40f21b857d8000c9d74394d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:ae:0d:cd:5a:3b:68:77:80:1d:a3:df:a1: d2:e4:76:ee:5b:63:2b:5f:81:1b:e0:47:a9:d2:8d: 4b:16:f0:f5:7b:bc:4b:71:6b:0e:86:97:3f:1b:11: 46:2d:b9:47:49:e5:c4:74:e0:9b:f7:00:dd:a6:c4: 77:9d:ee:4e:88:8a:21:93:85:68:0c:48:79:d4:a8: c5:92:1d:9c:d6:b1:c6:77:66:a7:0f:bf:57:ac:2e: f7:c5:50:a4:c0:c2:43:a7:51:0a:fe:10:bb:9a:3f: 3b:5b:16:a0:76:fc:10:c1:65:22:b9:6d:63:c2:2d: e4:eb:d9:93:e5:75:22:98:48:ce:d0:7c:16:a9:74: b0:07:4b:ef:b2:ef:d7:20:0a:eb:57:4a:00:ab:47: 79:cf:40:1f:8a:9d:3b:35:68:8f:c9:15:f6:a1:67: 56:57:51:70:ec:4f:47:db:0e:b4:12:99:06:7d:22: ae:19:af:a5:7a:d9:c7:33:ad:a2:98:db:e4:42:75: 44:cf:fa:f7:82:73:29:5e:e0:26:42:60:da:56:45: 68:e8:f3:2d:42:ad:1a:30:b7:3d:82:f9:64:f3:c6: fd:6f:ad:90:73:4d:75:f4:4a:33:46:e2:3e:75:48: e8:5f:57:fc:00:ec:0d:d7:66:ac:52:47:a7:f6:28: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1F:33:8C:7A:FA:8D:5A:A4:0F:21:B8:57:D8:00:0C:9D:74:39:4D X509v3 Authority Key Identifier: keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ae:8a:64:2c:8a:40:35:da:ff:f4:d9:08:99:9d:fd:cb:6b: 27:34:ba:79:02:ab:4a:40:a2:7c:8b:b3:33:1f:a5:80:db:70: f5:36:08:ec:4c:c2:33:de:d4:52:c8:cf:6f:34:55:65:a7:eb: 59:9d:ee:0d:21:78:23:bd:9e:c3:69:ac:f8:7f:17:c2:2b:31: d0:16:70:66:10:e1:56:9b:96:10:c8:cc:4d:94:a2:58:14:d8: 66:4f:50:ff:1c:7a:63:0f:a2:8a:50:92:34:e1:d4:2c:e8:21: 58:42:c2:19:f7:3f:fb:5c:38:80:9d:f5:cf:fa:d2:0e:85:b7: ad:b3:30:b3:02:87:70:56:69:97:69:ba:10:13:7e:a1:5b:0f: d7:23:1a:7a:92:4e:e7:2a:93:e9:03:a4:8d:03:54:bc:ea:1c: 1f:59:33:ee:b7:fb:53:dd:9b:bd:c0:24:f7:f7:e4:ab:f0:8d: 78:63:a4:a2:4e:86:12:01:b0:ce:66:29:12:d5:be:d3:47:51: aa:2d:ea:d4:be:7a:91:2b:0c:0d:12:00:62:73:5b:4b:67:54: 46:36:6c:a6:c5:bb:f7:8f:82:cb:8d:ef:37:fe:3b:ce:36:79: 96:ef:c8:37:6e:47:0e:80:9c:e5:29:7b:30:37:49:a3:51:b0: 79:3d:df:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxdByez6zk466L4IaHYxvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy ZWFjMjIwHhcNMjUxMjA2MDIxODI5WhcNMjUxMjA3MDIxODI5WjAzMTEwLwYDVQQD Eyg1ODFmMzM4YzdhZmE4ZDVhYTQwZjIxYjg1N2Q4MDAwYzlkNzQzOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs6uDc1aO2h3gB2j36HS5HbuW2Mr X4Eb4Eep0o1LFvD1e7xLcWsOhpc/GxFGLblHSeXEdOCb9wDdpsR3ne5OiIohk4Vo DEh51KjFkh2c1rHGd2anD79XrC73xVCkwMJDp1EK/hC7mj87WxagdvwQwWUiuW1j wi3k69mT5XUimEjO0HwWqXSwB0vvsu/XIArrV0oAq0d5z0Afip07NWiPyRX2oWdW V1Fw7E9H2w60EpkGfSKuGa+letnHM62imNvkQnVEz/r3gnMpXuAmQmDaVkVo6PMt Qq0aMLc9gvlk88b9b62Qc0119EozRuI+dUjoX1f8AOwN12asUken9ih/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgfM4x6+o1apA8huFfYAAyddDlNMB8GA1UdIwQY MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt YTc4MTBlM2ExYmViLzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV66KZCyK QDXa//TZCJmd/ctrJzS6eQKrSkCifIuzMx+lgNtw9TYI7EzCM97UUsjPbzRVZafr WZ3uDSF4I72ew2ms+H8Xwisx0BZwZhDhVpuWEMjMTZSiWBTYZk9Q/xx6Yw+iilCS NOHULOghWELCGfc/+1w4gJ31z/rSDoW3rbMwswKHcFZpl2m6EBN+oVsP1yMaepJO 5yqT6QOkjQNUvOocH1kz7rf7U92bvcAk9/fkq/CNeGOkok6GEgGwzmYpEtW+00dR qi3q1L56kSsMDRIAYnNbS2dURjZspsW794+Cy43vN/47zjZ5lu/IN25HDoCc5Sl7 MDdJo1GweT3fSw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:16 2025 by rpki-client