This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json) Hash identifier: /4rHNPiIcDNdE5mByS/j6EiBW4oR480Tt+0/qdHO0MU= Subject key identifier: AC:A7:83:76:68:05:C8:8B:7C:90:DF:9A:00:60:7F:24:F0:45:53:29 Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08 Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708 Certificate serial: 019AF42DECE81D61F5448DD7A0B7AB9867BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft Manifest number: 0BDE Signing time: Sat 06 Dec 2025 15:00:41 +0000 Manifest this update: Sat 06 Dec 2025 15:00:41 +0000 Manifest next update: Sun 07 Dec 2025 15:00:41 +0000 Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=) 2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: BAdJnRyGRpvFf6gYaqbFs0ZxhthKy2NoykcehSHbW6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ec:e8:1d:61:f5:44:8d:d7:a0:b7:ab:98:67:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708 Validity Not Before: Dec 6 15:00:41 2025 GMT Not After : Dec 7 15:00:41 2025 GMT Subject: CN=aca783766805c88b7c90df9a00607f24f0455329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:fa:f6:c1:9a:5c:9e:5a:d4:06:66:09:27: 90:8a:b3:32:11:02:9c:c9:29:a8:d7:fe:86:77:8a: 48:07:22:c9:06:f1:b6:d0:58:d2:56:bc:5b:b8:99: 6c:8b:16:9a:b8:d1:bc:95:43:fd:44:fb:da:49:f6: 0f:27:47:71:13:bd:da:bf:07:32:58:68:d6:57:2f: c0:92:c3:65:24:40:48:75:21:27:46:eb:0f:5a:1a: b4:4c:5d:47:30:07:4b:b2:9b:ec:a1:96:dd:a8:82: 6e:7d:6f:47:8b:53:5c:d6:cd:af:cc:05:ea:fe:d3: ad:62:e5:2b:2b:c4:ea:2b:97:f3:97:08:5c:cb:4f: 69:35:21:66:96:bb:79:c1:03:c6:38:c7:58:49:17: 73:1c:f2:9c:73:f0:79:04:57:56:b1:62:ff:a3:86: a0:e8:0c:2e:4e:c1:d5:ae:f0:88:f3:da:08:25:14: 7d:0c:1e:11:eb:d4:69:eb:67:3e:94:b5:77:b2:74: 5f:0b:77:21:a6:87:24:1a:25:66:82:88:ba:05:4a: 99:32:ab:0f:6b:12:6f:00:aa:fa:2d:2b:3f:8a:d8: a8:6d:92:17:ab:b0:d2:2b:6c:b6:4a:a3:3d:dc:ed: 11:78:e0:57:49:02:6e:48:fa:30:dd:fa:89:2a:c8: d2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A7:83:76:68:05:C8:8B:7C:90:DF:9A:00:60:7F:24:F0:45:53:29 X509v3 Authority Key Identifier: keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:18:1a:3d:21:fb:12:ee:97:d7:6f:ba:0f:2a:73:d1:53:f7: 83:6d:49:3e:8e:38:64:bf:3f:88:eb:5a:9d:da:c0:51:d1:9e: 62:8d:2c:65:1e:ac:f7:7d:1b:c7:bf:b8:2d:e2:19:2a:e0:24: a6:6b:fb:93:25:e6:29:ee:a3:7a:81:a1:25:67:01:f2:7c:28: 28:21:6b:54:2d:38:1d:1b:f2:fb:7d:f1:1f:5a:15:93:1f:18: 45:f8:7a:e7:d0:36:41:de:70:30:9f:f7:a3:a0:d8:22:96:66: e6:ef:5d:cd:0d:49:a7:b2:8f:ef:e9:be:5d:23:73:67:95:4b: 7f:4a:d9:4c:38:7e:7c:55:b0:a9:52:f0:95:bb:ef:86:d7:35: 5a:9b:4a:43:7a:51:4f:ce:31:21:fe:20:cb:f8:92:c3:e6:3d: ab:7c:9f:b6:41:6f:9e:fe:4f:7a:68:d1:3d:4b:3b:cf:34:cc: 10:f4:5e:b2:ab:97:bf:30:98:3d:4f:3f:6e:57:37:4d:8d:c9: 42:e5:53:a8:63:b4:55:19:b6:17:35:1c:ac:64:09:ee:e6:ed: 93:0c:64:70:4d:2d:24:66:b4:5b:0e:0c:85:f8:47:03:73:7f: b4:3a:dd:a4:3e:c0:a7:cf:51:6a:fe:79:9d:e2:2b:f2:b7:ad: 83:2a:c2:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LezoHWH1RI3XoLermGe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzlmOWEwMDI3OGU2OWQxYjNkZGRhYTBiZjBjZDE3ZDJl NjY3MDgwHhcNMjUxMjA2MTUwMDQxWhcNMjUxMjA3MTUwMDQxWjAzMTEwLwYDVQQD EyhhY2E3ODM3NjY4MDVjODhiN2M5MGRmOWEwMDYwN2YyNGYwNDU1MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcr69sGaXJ5a1AZmCSeQirMyEQKc ySmo1/6Gd4pIByLJBvG20FjSVrxbuJlsixaauNG8lUP9RPvaSfYPJ0dxE73avwcy WGjWVy/AksNlJEBIdSEnRusPWhq0TF1HMAdLspvsoZbdqIJufW9Hi1Nc1s2vzAXq /tOtYuUrK8TqK5fzlwhcy09pNSFmlrt5wQPGOMdYSRdzHPKcc/B5BFdWsWL/o4ag 6AwuTsHVrvCI89oIJRR9DB4R69Rp62c+lLV3snRfC3chpockGiVmgoi6BUqZMqsP axJvAKr6LSs/itiobZIXq7DSK2y2SqM93O0ReOBXSQJuSPow3fqJKsjSVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyng3ZoBciLfJDfmgBgfyTwRVMpMB8GA1UdIwQY MBaAFAo5+aACeOadGz3dqgvwzRfS5mcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hOWFmMGUtZTkxYS00ZjFjLWI3MmMt MWUyYjFjODdkMzE3LzEvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9hOWFmMGUtZTkxYS00ZjFjLWI3MmMtMWUyYjFjODdkMzE3 LzEvQ2puNW9BSjQ1cDBiUGQycUNfRE5GOUxtWndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRgaPSH7 Eu6X12+6Dypz0VP3g21JPo44ZL8/iOtandrAUdGeYo0sZR6s930bx7+4LeIZKuAk pmv7kyXmKe6jeoGhJWcB8nwoKCFrVC04HRvy+33xH1oVkx8YRfh659A2Qd5wMJ/3 o6DYIpZm5u9dzQ1Jp7KP7+m+XSNzZ5VLf0rZTDh+fFWwqVLwlbvvhtc1WptKQ3pR T84xIf4gy/iSw+Y9q3yftkFvnv5PemjRPUs7zzTMEPResquXvzCYPU8/blc3TY3J QuVTqGO0VRm2FzUcrGQJ7ubtkwxkcE0tJGa0Ww4MhfhHA3N/tDrdpD7Ap89Rav55 neIr8retgyrCmA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:40:45 2025 by rpki-client