This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json) Hash identifier: ei/ZzLxswoaA+oICoDgdEh5T01sbKKW5Ci8ZXbaSmzA= Subject key identifier: 65:A2:27:7B:D2:3B:7C:94:A7:13:5C:0E:4B:5B:CE:0B:0B:EF:D7:3B Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2 Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2 Certificate serial: 019AF31C0ADC827D099EC4AB361766DD857F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: iiqU9ykP0V94tVjjV5XbUuWPxu8DedTmdgcCseaWkHM=) 2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:0a:dc:82:7d:09:9e:c4:ab:36:17:66:dd:85:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2 Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=65a2277bd23b7c94a7135c0e4b5bce0b0befd73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:83:f3:1e:3e:4f:a0:93:c2:44:75:73:b9: 87:c2:5a:54:b7:91:42:6f:44:ec:d5:0b:ff:37:b9: dd:1d:b4:30:b9:f8:0d:9e:46:f0:b2:6b:e3:c3:a4: 27:80:d1:25:cc:8b:cc:e9:de:4d:3c:32:ef:99:df: 11:2a:33:d7:c5:90:56:66:18:64:fe:a5:75:24:61: 1b:ca:c6:98:f4:db:09:40:04:0d:08:a6:54:0f:3a: e4:64:0f:4f:e8:3a:c1:f8:6c:26:03:06:f2:b3:b4: f6:be:7a:79:27:7e:d4:83:76:44:a7:c7:4d:7a:c6: 26:cf:da:1c:c7:3a:6b:10:85:55:88:b1:34:04:38: ef:cc:c1:6e:a6:5f:9b:e5:a5:2f:13:6c:a6:6d:ad: 59:a6:6d:06:f7:cf:af:73:16:7f:d0:b1:28:7b:97: 4f:af:29:71:1f:38:34:7c:52:61:4a:96:16:61:0b: d2:4a:ae:7f:3b:32:ef:91:5e:d2:d1:90:e7:41:87: 9f:18:19:d9:dc:cb:2e:15:15:1b:eb:c7:70:2f:f4: f4:27:ec:b6:fc:34:dd:2d:ac:af:de:bb:06:c4:36: 47:e7:d8:ef:28:ed:cb:7c:13:69:a3:63:a2:ca:fc: 64:d8:3b:2e:7f:17:77:d1:9a:04:32:db:b4:9e:1e: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A2:27:7B:D2:3B:7C:94:A7:13:5C:0E:4B:5B:CE:0B:0B:EF:D7:3B X509v3 Authority Key Identifier: keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8a:47:7b:b3:0b:b0:aa:59:62:d9:0e:06:a3:45:bb:91:59: 02:97:d2:20:a7:5e:7a:2f:cd:df:4d:73:0c:43:0b:43:d8:2b: 5b:02:26:14:a8:3a:7f:24:3e:66:12:fd:f0:1a:b5:a7:b4:c4: 29:4e:e7:0d:f3:17:e1:ca:c3:54:85:e1:49:e0:02:9c:6a:4f: 94:76:9e:85:9b:9c:fb:aa:5f:9e:c8:03:b2:66:70:c2:bf:c6: d3:fc:6e:4b:8c:84:73:f1:e7:0c:9a:15:cb:48:30:33:39:9b: fb:90:1f:87:6f:79:8d:4c:90:05:e3:d6:16:44:e6:39:da:2d: c2:43:5f:a1:08:91:7a:d2:64:30:be:ce:e4:8f:22:38:62:87: 52:0c:b9:2d:3f:c9:21:6d:99:68:f6:28:40:0f:d4:03:a5:2b: e4:12:e0:fa:c9:df:ef:3b:98:30:bc:2f:8e:72:68:34:e6:69: 42:dc:3c:6b:19:24:36:9a:b7:2d:8b:77:e6:ea:c2:e2:e5:be: 74:49:d3:34:eb:8a:7d:1a:cd:bb:04:bb:4a:31:5f:fa:01:dc: 6f:cc:1f:da:1b:c2:d5:00:a2:45:08:b2:cc:2c:9c:b2:a6:bf: ac:46:a2:97:20:bb:bd:14:22:70:23:3e:49:e7:77:fa:9c:0e: 72:a6:5a:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHArcgn0JnsSrNhdm3YV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1 YjNlZjIwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD Eyg2NWEyMjc3YmQyM2I3Yzk0YTcxMzVjMGU0YjViY2UwYjBiZWZkNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugmD8x4+T6CTwkR1c7mHwlpUt5FC b0Ts1Qv/N7ndHbQwufgNnkbwsmvjw6QngNElzIvM6d5NPDLvmd8RKjPXxZBWZhhk /qV1JGEbysaY9NsJQAQNCKZUDzrkZA9P6DrB+GwmAwbys7T2vnp5J37Ug3ZEp8dN esYmz9ocxzprEIVViLE0BDjvzMFupl+b5aUvE2ymba1Zpm0G98+vcxZ/0LEoe5dP rylxHzg0fFJhSpYWYQvSSq5/OzLvkV7S0ZDnQYefGBnZ3MsuFRUb68dwL/T0J+y2 /DTdLayv3rsGxDZH59jvKO3LfBNpo2Oiyvxk2Dsufxd30ZoEMtu0nh4RpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWiJ3vSO3yUpxNcDktbzgsL79c7MB8GA1UdIwQY MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1 LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4pHe7ML sKpZYtkOBqNFu5FZApfSIKdeei/N301zDEMLQ9grWwImFKg6fyQ+ZhL98Bq1p7TE KU7nDfMX4crDVIXhSeACnGpPlHaehZuc+6pfnsgDsmZwwr/G0/xuS4yEc/HnDJoV y0gwMzmb+5Afh295jUyQBePWFkTmOdotwkNfoQiRetJkML7O5I8iOGKHUgy5LT/J IW2ZaPYoQA/UA6Ur5BLg+snf7zuYMLwvjnJoNOZpQtw8axkkNpq3LYt35urC4uW+ dEnTNOuKfRrNuwS7SjFf+gHcb8wf2hvC1QCiRQiyzCycsqa/rEailyC7vRQicCM+ Sed3+pwOcqZa8w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:42 2025 by rpki-client