This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json) Hash identifier: ObXPUZw8m2QhkGR3Eh9My6R4PtgPhQvpf7pjP975DwA= Subject key identifier: 92:E4:BF:D3:64:9A:34:FB:BB:42:17:AD:71:B9:BE:60:E5:4F:EE:83 Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19 Certificate serial: 019AF19B7CE82F125E431A70D6DE2DAD7BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft Manifest number: 14EE Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: oDkfz/lySMl7gtCmR+AM6kdSKfzrK5KF2CFtDdzp1eQ=) 2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7c:e8:2f:12:5e:43:1a:70:d6:de:2d:ad:7b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=92e4bfd3649a34fbbb4217ad71b9be60e54fee83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:22:f0:60:6d:1f:5a:3e:db:e7:56:de:50: 1d:ee:5f:4f:5d:5a:84:0c:5d:38:9b:a7:7f:8d:83: 42:60:c5:87:17:58:84:41:3a:47:4d:07:e2:c4:95: ce:16:d7:58:47:2a:a0:9d:a9:0b:9e:ff:0b:8a:1d: f5:54:8b:cb:90:f9:0f:92:b1:56:e4:fe:14:3c:f0: 8d:69:60:b4:b8:2d:af:cf:1e:42:1c:0a:92:59:36: 77:7b:f1:fb:d3:87:c6:34:b0:5b:ef:ec:19:c7:55: 82:ef:fa:83:08:f9:47:b9:a8:a2:76:f3:64:8b:d0: b8:44:6e:56:7a:a9:00:a1:c7:ec:89:05:f3:ba:e4: 8e:99:9a:de:a3:49:16:57:a8:89:35:6a:01:14:c4: 80:ab:5d:ee:3c:bd:41:55:a7:8e:5b:9e:2f:37:ba: 85:61:73:f8:40:47:6d:8e:d7:92:9b:26:6a:35:df: 9e:c3:44:da:c1:23:57:2d:6e:13:51:e8:f7:79:e4: 18:9b:c0:92:8d:b0:94:43:de:57:19:47:f2:09:70: b8:fb:3f:b9:e2:a1:60:62:ad:d7:52:14:75:a1:a8: 2a:2f:74:f1:61:28:f3:79:d0:aa:b4:43:80:bd:a2: 6c:25:33:16:98:8b:2c:2a:93:2d:8b:f8:61:4c:4a: 15:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E4:BF:D3:64:9A:34:FB:BB:42:17:AD:71:B9:BE:60:E5:4F:EE:83 X509v3 Authority Key Identifier: keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:f4:2b:d7:0f:b3:ff:36:f0:c3:ff:ff:bf:65:76:6b:dc: 9f:19:f3:aa:8f:d3:f9:b4:5e:d0:30:d8:f5:0e:bb:9e:27:ec: 75:d8:92:61:14:c6:e3:ff:50:20:fd:76:2e:5d:83:1c:6a:0c: 4a:be:1f:9a:81:fe:6b:aa:bb:79:89:12:5c:e5:7f:32:d2:42: 59:2d:3d:25:af:d0:d8:bc:ba:49:56:0e:68:f2:63:93:1e:14: d6:3c:de:f4:4c:b8:0c:44:30:01:f6:04:0d:bd:cc:84:12:3b: 4a:5d:bb:39:49:de:ce:de:05:2c:24:bd:80:8e:8f:2f:45:a9: f5:3c:e8:b5:59:ba:f7:b4:2c:fa:69:0a:64:cc:a8:04:97:d2: a4:6c:92:30:94:7e:41:b3:fd:7b:a0:29:f0:28:6e:12:90:45: 27:9f:31:8d:98:65:d1:49:99:c6:3d:27:b1:0d:b1:05:d3:48: 64:3f:7b:b3:57:bd:f8:22:ed:7e:54:c6:51:b1:f0:b0:7f:1c: 58:d5:14:a3:72:e6:c6:78:91:8b:ab:2d:3f:0a:5c:89:67:0a: eb:7e:f3:b6:4a:83:17:e7:5d:e4:a1:7f:62:9f:95:b8:88:32: e2:a3:6f:38:f8:41:10:74:ed:75:1d:9c:ba:b2:cf:13:b4:ab: 24:9f:64:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3zoLxJeQxpw1t4trXvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3 N2ZkMTkwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD Eyg5MmU0YmZkMzY0OWEzNGZiYmI0MjE3YWQ3MWI5YmU2MGU1NGZlZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bwi8GBtH1o+2+dW3lAd7l9PXVqE DF04m6d/jYNCYMWHF1iEQTpHTQfixJXOFtdYRyqgnakLnv8Lih31VIvLkPkPkrFW 5P4UPPCNaWC0uC2vzx5CHAqSWTZ3e/H704fGNLBb7+wZx1WC7/qDCPlHuaiidvNk i9C4RG5WeqkAocfsiQXzuuSOmZreo0kWV6iJNWoBFMSAq13uPL1BVaeOW54vN7qF YXP4QEdtjteSmyZqNd+ew0TawSNXLW4TUej3eeQYm8CSjbCUQ95XGUfyCXC4+z+5 4qFgYq3XUhR1oagqL3TxYSjzedCqtEOAvaJsJTMWmIssKpMti/hhTEoVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLkv9NkmjT7u0IXrXG5vmDlT+6DMB8GA1UdIwQY MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6X0K9cP s/828MP//79ldmvcnxnzqo/T+bRe0DDY9Q67nifsddiSYRTG4/9QIP12Ll2DHGoM Sr4fmoH+a6q7eYkSXOV/MtJCWS09Ja/Q2Ly6SVYOaPJjkx4U1jze9Ey4DEQwAfYE Db3MhBI7Sl27OUnezt4FLCS9gI6PL0Wp9TzotVm697Qs+mkKZMyoBJfSpGySMJR+ QbP9e6Ap8ChuEpBFJ58xjZhl0UmZxj0nsQ2xBdNIZD97s1e9+CLtflTGUbHwsH8c WNUUo3LmxniRi6stPwpciWcK637ztkqDF+dd5KF/Yp+VuIgy4qNvOPhBEHTtdR2c urLPE7SrJJ9kgw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:17 2025 by rpki-client