This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json) Hash identifier: 760DrmsdKZw4Bbdv1XDm9WSiFAkuMIO/IHWyqfsHPXE= Subject key identifier: B6:5F:52:59:02:76:B6:1D:BC:0D:A3:4D:F6:AB:4D:5D:BA:92:61:0E Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19 Certificate serial: 019B31559A506E7D5334F564F15DF0B86676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft Manifest number: 150F Signing time: Thu 18 Dec 2025 12:00:52 +0000 Manifest this update: Thu 18 Dec 2025 12:00:52 +0000 Manifest next update: Fri 19 Dec 2025 12:00:52 +0000 Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: CLjN0MuR3j4TnTq60ujW/52joFtE7UK5lpP691qTQCM=) 2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:9a:50:6e:7d:53:34:f5:64:f1:5d:f0:b8:66:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19 Validity Not Before: Dec 18 12:00:52 2025 GMT Not After : Dec 19 12:00:52 2025 GMT Subject: CN=b65f52590276b61dbc0da34df6ab4d5dba92610e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:a5:79:f8:83:6c:fb:5c:9b:65:8e:6b:31: 21:42:02:e7:b1:94:57:59:a0:93:2e:ff:0b:f2:b8: a9:e3:f2:ac:0a:c6:6d:8c:7a:f4:e9:a4:57:81:e1: 55:3c:35:b8:cf:42:0b:98:2d:4e:58:57:7c:ee:f5: 49:88:78:26:5f:ec:a4:e0:15:54:be:16:8a:8c:c6: a5:1c:f1:01:ca:57:fa:db:9f:4b:1c:9b:da:c6:f6: a1:5f:69:46:4f:0b:25:3e:df:f5:f3:ba:74:c1:d5: b5:54:88:09:04:de:20:34:b1:8a:1e:0a:34:3e:ff: 98:ad:ba:32:2a:c9:65:2a:74:7d:be:cb:7b:bc:48: a9:44:2f:22:e3:b8:87:2b:51:e9:83:54:49:e8:d7: cc:13:d9:fe:13:3b:30:11:7f:c2:87:81:0e:08:70: 1a:35:cd:91:d7:a4:75:84:1d:d7:76:f9:dd:0d:89: 0d:30:a9:a9:ec:ed:b9:da:3f:1e:19:07:af:60:04: d4:e1:c3:7c:62:51:52:4b:9e:57:c3:75:e9:d1:19: 35:5d:d0:c3:06:4f:d0:3e:10:5f:1c:d8:f9:00:5b: af:db:f9:8a:22:7e:58:b0:bf:ef:6a:bd:73:06:ce: d8:82:9b:53:5e:15:82:16:6d:f1:99:de:f6:c5:7b: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5F:52:59:02:76:B6:1D:BC:0D:A3:4D:F6:AB:4D:5D:BA:92:61:0E X509v3 Authority Key Identifier: keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c3:76:60:1f:04:60:a1:89:dc:a9:4f:4c:25:c1:07:ca:a5: 04:7a:46:f6:11:c6:79:80:ac:99:97:45:54:b9:73:cd:f5:da: 2d:a4:43:36:38:09:33:01:b4:28:bb:87:8c:21:47:68:db:d9: b0:ae:f8:25:7f:7d:47:eb:ed:8b:46:4d:81:8c:b9:9e:59:42: 95:6d:b0:ef:11:9a:10:f4:d4:cd:f6:b3:4e:ae:16:af:7d:a8: 6f:bd:18:b9:13:4d:b0:ed:54:47:5c:58:5e:3b:19:19:95:1e: 47:86:f0:17:d5:87:c1:ae:95:c2:b8:9f:4d:f3:b6:33:fb:77: 3c:90:f8:a0:e8:3d:2b:f7:73:e7:be:c7:f9:da:3c:3c:be:02: cc:91:e4:77:ae:d7:fc:09:7b:db:a8:ec:25:8e:56:51:e3:74: a4:a7:36:d0:b9:08:c6:df:ca:81:1f:25:db:2e:94:be:3a:8d: 55:09:ac:22:08:78:b1:3a:75:50:b5:e4:fe:db:3d:0f:bc:02: 94:ba:14:d6:72:59:8a:34:1d:d3:3c:b9:53:54:87:da:70:67: 0c:6c:35:e0:aa:43:21:dc:a4:ad:7b:a2:a9:ab:f8:04:67:15: cd:2a:69:1a:9f:6a:cc:cf:cc:f8:01:64:f5:f0:09:2c:53:78: 2d:04:d4:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVZpQbn1TNPVk8V3wuGZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3 N2ZkMTkwHhcNMjUxMjE4MTIwMDUyWhcNMjUxMjE5MTIwMDUyWjAzMTEwLwYDVQQD EyhiNjVmNTI1OTAyNzZiNjFkYmMwZGEzNGRmNmFiNGQ1ZGJhOTI2MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uClefiDbPtcm2WOazEhQgLnsZRX WaCTLv8L8rip4/KsCsZtjHr06aRXgeFVPDW4z0ILmC1OWFd87vVJiHgmX+yk4BVU vhaKjMalHPEBylf6259LHJvaxvahX2lGTwslPt/187p0wdW1VIgJBN4gNLGKHgo0 Pv+YrboyKsllKnR9vst7vEipRC8i47iHK1Hpg1RJ6NfME9n+EzswEX/Ch4EOCHAa Nc2R16R1hB3XdvndDYkNMKmp7O252j8eGQevYATU4cN8YlFSS55Xw3Xp0Rk1XdDD Bk/QPhBfHNj5AFuv2/mKIn5YsL/var1zBs7YgptTXhWCFm3xmd72xXt5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZfUlkCdrYdvA2jTfarTV26kmEOMB8GA1UdIwQY MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8N2YB8E YKGJ3KlPTCXBB8qlBHpG9hHGeYCsmZdFVLlzzfXaLaRDNjgJMwG0KLuHjCFHaNvZ sK74JX99R+vti0ZNgYy5nllClW2w7xGaEPTUzfazTq4Wr32ob70YuRNNsO1UR1xY XjsZGZUeR4bwF9WHwa6VwrifTfO2M/t3PJD4oOg9K/dz577H+do8PL4CzJHkd67X /Al726jsJY5WUeN0pKc20LkIxt/KgR8l2y6UvjqNVQmsIgh4sTp1ULXk/ts9D7wC lLoU1nJZijQd0zy5U1SH2nBnDGw14KpDIdykrXuiqav4BGcVzSppGp9qzM/M+AFk 9fAJLFN4LQTUAw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:26:36 2025 by rpki-client