This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json) Hash identifier: vCovG9TftVyzkarl6K07T36zyhymxSBHE8x+Cit2580= Subject key identifier: B2:7B:05:EC:D6:2F:ED:E3:32:98:F4:31:D6:38:48:EE:59:44:3B:C4 Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Certificate serial: 019AF209813E48AD7A13987C0ED8507E4DF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft Manifest number: 0B77 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: Emhlp6ku2vng05Nf8RONQKIuEjpUIRqlQaLjHcDqaSU=) 2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:81:3e:48:ad:7a:13:98:7c:0e:d8:50:7e:4d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=b27b05ecd62fede33298f431d63848ee59443bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:f9:55:18:38:3a:84:e3:91:e3:10:a7:1a: dd:7e:f8:3d:1f:4f:e2:01:5c:8a:12:71:d3:aa:21: 62:72:05:34:9f:58:19:4f:3d:33:f1:b9:b4:22:fb: f1:d7:67:44:98:38:65:01:96:da:80:fe:8a:e5:42: 20:a8:6d:4d:2a:db:20:72:20:8e:57:1e:ba:69:9b: ee:59:ca:34:3d:46:07:73:b4:fa:63:01:2a:de:39: 46:22:78:35:54:6f:30:a7:d6:40:4c:56:62:13:0d: 5c:2a:44:b8:bd:33:4b:9d:ec:5c:21:ba:11:38:83: 6f:f9:d5:21:a0:97:7c:c5:5c:ee:b3:fd:78:2b:58: 39:a4:01:30:57:85:75:d1:d0:7b:75:57:d8:e1:97: ed:b5:36:f2:00:b8:ea:30:9c:23:bf:46:33:7f:63: 05:6a:ac:78:dd:75:3f:31:29:d8:a1:f5:45:80:fd: 27:6d:0e:50:8f:00:cf:2c:3c:4e:ed:0a:b1:07:e1: 76:63:cc:94:0e:40:e6:36:97:5f:e9:d4:8f:a3:9b: a5:94:32:21:22:81:e1:07:1b:b2:f0:8b:00:fc:f2: 23:b4:64:e3:b0:a5:a1:81:8b:85:09:70:3b:22:4e: 14:28:67:27:e5:6b:89:ae:3f:3b:ec:de:7e:1a:2f: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7B:05:EC:D6:2F:ED:E3:32:98:F4:31:D6:38:48:EE:59:44:3B:C4 X509v3 Authority Key Identifier: keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:3f:2f:83:6d:14:cd:0b:a5:76:7e:e9:d4:49:ce:62:51:95: 5f:2e:2f:a0:ee:db:03:9a:d5:cb:b0:6a:a5:09:3d:ee:2e:51: 78:36:37:22:06:21:66:1a:6b:4c:da:91:aa:ab:3b:13:13:7b: ac:da:1f:7e:01:4f:6b:c7:d7:c4:1c:cc:fa:ed:fc:a5:e0:13: a2:4f:33:ab:a4:c4:41:99:75:ed:ae:63:89:ac:7f:ff:2d:2b: 26:1e:fd:21:a0:3f:53:b7:97:dc:c1:35:54:98:d2:2c:b2:fe: 7a:d5:f9:ce:29:43:46:11:dc:86:6b:8f:06:de:62:5d:b0:9a: 61:f0:c0:8d:da:63:21:9a:b8:1e:70:d0:00:49:dc:1f:c6:a8: 8c:40:61:27:eb:96:58:50:63:1c:7e:a3:9a:7e:b5:59:81:6d: 19:e5:9d:c6:29:94:fd:16:cb:12:71:ba:5a:57:45:e7:de:3d: 5d:3d:fc:31:18:20:5e:b7:ed:1a:51:f1:51:95:7a:68:58:33: 2e:f9:e7:b7:12:a9:45:74:b9:9c:56:d0:c9:8e:99:1a:b9:51: 3d:3a:69:72:35:b6:38:6c:72:b6:f7:82:b3:88:05:84:fb:3f: b8:9e:6f:9d:6b:cb:e6:9b:e5:03:48:15:91:3d:6f:da:71:40: 7a:2f:55:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYE+SK16E5h8DthQfk3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm OTdhMjEwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EyhiMjdiMDVlY2Q2MmZlZGUzMzI5OGY0MzFkNjM4NDhlZTU5NDQzYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk75VRg4OoTjkeMQpxrdfvg9H0/i AVyKEnHTqiFicgU0n1gZTz0z8bm0Ivvx12dEmDhlAZbagP6K5UIgqG1NKtsgciCO Vx66aZvuWco0PUYHc7T6YwEq3jlGIng1VG8wp9ZATFZiEw1cKkS4vTNLnexcIboR OINv+dUhoJd8xVzus/14K1g5pAEwV4V10dB7dVfY4ZfttTbyALjqMJwjv0Yzf2MF aqx43XU/MSnYofVFgP0nbQ5QjwDPLDxO7QqxB+F2Y8yUDkDmNpdf6dSPo5ullDIh IoHhBxuy8IsA/PIjtGTjsKWhgYuFCXA7Ik4UKGcn5WuJrj877N5+Gi/Z2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJ7BezWL+3jMpj0MdY4SO5ZRDvEMB8GA1UdIwQY MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt ZTdmZGY3NzQxYTY1LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1 LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj8vg20U zQuldn7p1EnOYlGVXy4voO7bA5rVy7BqpQk97i5ReDY3IgYhZhprTNqRqqs7ExN7 rNoffgFPa8fXxBzM+u38peATok8zq6TEQZl17a5jiax//y0rJh79IaA/U7eX3ME1 VJjSLLL+etX5zilDRhHchmuPBt5iXbCaYfDAjdpjIZq4HnDQAEncH8aojEBhJ+uW WFBjHH6jmn61WYFtGeWdximU/RbLEnG6WldF5949XT38MRggXrftGlHxUZV6aFgz LvnntxKpRXS5nFbQyY6ZGrlRPTppcjW2OGxytveCs4gFhPs/uJ5vnWvL5pvlA0gV kT1v2nFAei9VTg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:14 2025 by rpki-client