This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json) Hash identifier: Wb2yt9tVmyIcVIEw2foWRgBMN3VNo4oEAfFn3FLotJA= Subject key identifier: 00:A1:CA:E4:B6:C2:14:69:F9:98:6A:BC:24:24:A6:AB:0F:9D:1B:DF Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e Certificate serial: 019AF50AD331DC7342945FF7C2E5CB6D32DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft Manifest number: 03A4 Signing time: Sat 06 Dec 2025 19:01:58 +0000 Manifest this update: Sat 06 Dec 2025 19:01:58 +0000 Manifest next update: Sun 07 Dec 2025 19:01:58 +0000 Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: rhpLtzSMjvF6/l0wCo3KFv63F/V/s10TcNyVrZkq8t0=) 2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=) 3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=) 4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:d3:31:dc:73:42:94:5f:f7:c2:e5:cb:6d:32:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e Validity Not Before: Dec 6 19:01:58 2025 GMT Not After : Dec 7 19:01:58 2025 GMT Subject: CN=00a1cae4b6c21469f9986abc2424a6ab0f9d1bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bb:a0:e5:57:40:34:ea:ce:96:57:47:57:7e: 99:ac:fd:3b:d8:59:eb:f3:a1:b1:46:12:ac:0a:36: e7:53:84:c4:d7:94:f9:39:7f:35:af:a0:ad:11:22: dc:00:de:b4:65:37:f5:11:b9:91:98:24:5e:06:7b: 42:75:ea:31:5a:62:9a:f9:e8:57:98:e5:a2:7e:da: 1f:23:b8:ea:80:d9:00:5e:57:f1:5e:fd:d8:86:6b: 1c:44:33:56:71:0a:b1:06:b6:f3:43:c4:72:51:9f: 67:fc:ea:93:90:c4:68:db:03:66:69:39:1a:9e:bc: 36:e6:49:16:0f:0a:25:d9:56:9d:b4:76:4e:85:d0: 2e:6a:b5:65:54:9a:53:0d:41:af:c4:37:3a:bf:07: d6:8c:5b:d6:32:26:33:1f:1d:8e:36:19:d3:63:d7: d2:5d:05:37:a0:df:71:c8:33:57:6d:0d:26:4f:3f: 16:77:16:e7:c1:6c:2f:b0:bd:cb:59:3f:50:8a:6e: 8c:4a:c6:ad:8e:2d:5f:11:b5:bb:11:fc:4c:a1:c9: 27:11:7e:17:4c:0a:ac:72:bd:17:37:6c:a8:64:1e: 68:07:36:e7:5f:4a:f7:13:4f:65:df:8b:81:3f:58: 82:57:9f:62:aa:3c:14:ba:0b:1a:2b:ea:bb:48:21: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A1:CA:E4:B6:C2:14:69:F9:98:6A:BC:24:24:A6:AB:0F:9D:1B:DF X509v3 Authority Key Identifier: keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f3:34:e1:0e:f8:d8:c8:3e:61:48:fb:0e:4f:f3:67:39:8d: 00:cc:bd:e4:bd:d6:8e:13:25:8f:e0:f7:01:a5:1c:0e:da:31: 7c:fe:59:73:2f:98:66:30:e5:33:16:25:a0:b8:84:95:3f:53: 5d:b1:a5:01:69:7f:1e:61:db:82:fc:2b:3c:1e:e3:00:e0:ec: dc:f3:b2:a6:70:16:65:f8:25:30:de:ed:e0:63:02:69:48:cd: 67:62:93:96:fb:93:0f:1b:c4:d8:78:a3:d0:7a:92:27:26:36: 34:71:13:a9:aa:b5:ca:50:8f:a1:c8:37:63:6a:6d:5c:50:f4: a2:76:ea:9e:e3:59:5e:c9:46:eb:85:54:05:d6:9f:5c:27:b6: 6b:f6:22:a2:4b:20:e9:e2:75:08:8c:28:4c:3b:10:5a:f2:c5: 47:62:1f:44:2b:af:a1:0f:39:92:7f:69:89:19:9e:a5:a3:08: f0:84:93:79:e3:55:83:a5:75:c0:0c:f2:e9:12:b9:9f:d0:a4: 48:06:aa:e6:21:eb:45:df:64:54:e7:c2:36:e0:6c:4b:a5:9e: fe:eb:42:2c:32:d9:50:ac:b1:23:28:54:e5:1b:0a:d1:2c:c1: 61:9a:54:4b:39:1d:a2:2c:9d:67:0a:5e:53:5d:ac:5f:25:33: 4e:a7:c0:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CtMx3HNClF/3wuXLbTLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0 MTIxMmUwHhcNMjUxMjA2MTkwMTU4WhcNMjUxMjA3MTkwMTU4WjAzMTEwLwYDVQQD EygwMGExY2FlNGI2YzIxNDY5Zjk5ODZhYmMyNDI0YTZhYjBmOWQxYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbug5VdANOrOlldHV36ZrP072Fnr 86GxRhKsCjbnU4TE15T5OX81r6CtESLcAN60ZTf1EbmRmCReBntCdeoxWmKa+ehX mOWiftofI7jqgNkAXlfxXv3YhmscRDNWcQqxBrbzQ8RyUZ9n/OqTkMRo2wNmaTka nrw25kkWDwol2VadtHZOhdAuarVlVJpTDUGvxDc6vwfWjFvWMiYzHx2ONhnTY9fS XQU3oN9xyDNXbQ0mTz8WdxbnwWwvsL3LWT9Qim6MSsatji1fEbW7EfxMocknEX4X TAqscr0XN2yoZB5oBzbnX0r3E09l34uBP1iCV59iqjwUugsaK+q7SCFquwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAChyuS2whRp+ZhqvCQkpqsPnRvfMB8GA1UdIwQY MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvM04Q74 2Mg+YUj7Dk/zZzmNAMy95L3WjhMlj+D3AaUcDtoxfP5Zcy+YZjDlMxYloLiElT9T XbGlAWl/HmHbgvwrPB7jAODs3POypnAWZfglMN7t4GMCaUjNZ2KTlvuTDxvE2Hij 0HqSJyY2NHETqaq1ylCPocg3Y2ptXFD0onbqnuNZXslG64VUBdafXCe2a/Yioksg 6eJ1CIwoTDsQWvLFR2IfRCuvoQ85kn9piRmepaMI8ISTeeNVg6V1wAzy6RK5n9Ck SAaq5iHrRd9kVOfCNuBsS6We/utCLDLZUKyxIyhU5RsK0SzBYZpUSzkdoiydZwpe U12sXyUzTqfANg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:15 2025 by rpki-client