This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json) Hash identifier: l1N2Pr2WIv7Q8VFwGiwjPdc4TlD0Y6xHd8jNrvKTPn4= Subject key identifier: E3:86:F6:9B:BD:C2:E0:5D:F5:AA:BD:58:3C:58:F0:F8:E4:DA:C0:BD Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57 Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057 Certificate serial: 019B2F6762EF298D1788FE2FF0E01DB5FCB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft Manifest number: 117C Signing time: Thu 18 Dec 2025 03:01:03 +0000 Manifest this update: Thu 18 Dec 2025 03:01:03 +0000 Manifest next update: Fri 19 Dec 2025 03:01:03 +0000 Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=) 2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: zjZMmJ3xDsUF2/pAf38mTxCj0+c0MEnHrF78rqDb8y4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:62:ef:29:8d:17:88:fe:2f:f0:e0:1d:b5:fc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057 Validity Not Before: Dec 18 03:01:03 2025 GMT Not After : Dec 19 03:01:03 2025 GMT Subject: CN=e386f69bbdc2e05df5aabd583c58f0f8e4dac0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:1f:32:f9:27:15:44:49:9d:af:f0:73:a7: b5:10:84:52:c5:b4:26:72:7c:df:9f:a6:fd:ee:69: 2f:ae:05:4b:4f:df:80:29:b9:40:0d:d4:93:b9:99: 5e:72:84:96:99:eb:cd:a2:35:31:89:d6:e6:a8:70: 57:92:b3:f1:58:c7:66:74:2d:c9:f9:d9:74:bc:01: fb:31:ee:dc:dc:a5:30:ad:da:dc:dd:04:4e:67:ed: 52:21:ef:30:8f:df:3a:a1:88:5e:9e:be:09:7a:e8: b7:7b:a8:f4:86:c3:e7:f2:d0:24:17:ca:a0:d7:bc: d5:de:96:49:78:9a:b5:a6:07:ce:7e:b7:59:57:9d: 5f:99:50:fa:78:82:ba:1b:89:5c:70:58:a5:40:18: 03:82:57:82:8a:51:87:45:54:d8:db:26:85:f1:89: fc:c4:32:a5:91:3c:71:52:fc:37:bf:5d:58:dd:27: 14:bf:0e:38:45:6e:13:78:f4:0d:fa:1b:7f:b1:46: cd:fa:e9:53:02:44:13:3e:e8:a5:21:df:58:05:46: 8e:22:18:9e:96:cb:fe:27:53:05:67:2d:c3:7c:d6: c8:32:1b:4d:6a:8a:c2:d0:00:b1:5f:9c:36:7d:31: a5:fb:8c:40:70:14:dc:7d:c7:1c:aa:7d:60:ac:b4: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:F6:9B:BD:C2:E0:5D:F5:AA:BD:58:3C:58:F0:F8:E4:DA:C0:BD X509v3 Authority Key Identifier: keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:89:cb:41:ef:29:1b:79:85:31:9e:1a:6f:3d:41:21:38:c1: f0:cf:09:26:49:12:74:92:9e:4d:fc:f6:e8:8f:be:45:b7:a3: dd:82:2f:2b:b9:0e:dc:76:0e:45:ed:89:87:2e:2b:da:f3:dc: 25:bf:4c:33:c6:99:13:cb:65:e9:a3:e9:74:9e:57:87:d5:85: a0:06:2c:cd:64:e2:95:26:7c:c8:59:14:45:14:ae:36:00:aa: 09:6b:a7:11:84:22:80:cb:f9:7b:8f:bf:04:5e:19:39:2c:70: 0a:e7:11:c5:d5:80:06:17:3f:a0:d7:fc:e7:54:b2:f0:fa:17: 45:35:3a:3c:95:1e:f8:64:cd:7f:c6:7e:de:c2:f6:6e:9e:32: db:1d:e6:fe:c9:28:a1:91:b3:f6:bb:b4:3b:10:a4:f1:9d:dc: df:94:4a:81:49:6e:cb:fe:8c:b9:dc:71:f2:2e:61:5a:74:6e: 5f:ca:ee:5d:36:41:c8:2e:0c:ca:d7:a7:4d:f1:a9:48:0c:a2: 6d:8b:2b:02:c0:74:6f:13:b5:50:7d:e2:4f:20:d9:a3:a3:e3: a1:cb:45:bc:0d:e9:da:2b:b6:35:89:cc:e2:96:35:5e:da:28: 0f:cd:30:c5:89:40:d1:ba:31:95:ba:38:ed:66:6c:7a:21:9b: ee:cd:c0:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2LvKY0XiP4v8OAdtfyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYWUxYTYwNThiYmRjZDA4MzUwNjhlM2I0ZjlkZTUxZjJi ZDkwNTcwHhcNMjUxMjE4MDMwMTAzWhcNMjUxMjE5MDMwMTAzWjAzMTEwLwYDVQQD EyhlMzg2ZjY5YmJkYzJlMDVkZjVhYWJkNTgzYzU4ZjBmOGU0ZGFjMGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBMfMvknFURJna/wc6e1EIRSxbQm cnzfn6b97mkvrgVLT9+AKblADdSTuZlecoSWmevNojUxidbmqHBXkrPxWMdmdC3J +dl0vAH7Me7c3KUwrdrc3QROZ+1SIe8wj986oYhenr4Jeui3e6j0hsPn8tAkF8qg 17zV3pZJeJq1pgfOfrdZV51fmVD6eIK6G4lccFilQBgDgleCilGHRVTY2yaF8Yn8 xDKlkTxxUvw3v11Y3ScUvw44RW4TePQN+ht/sUbN+ulTAkQTPuilId9YBUaOIhie lsv+J1MFZy3DfNbIMhtNaorC0ACxX5w2fTGl+4xAcBTcfcccqn1grLT1KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOG9pu9wuBd9aq9WDxY8Pjk2sC9MB8GA1UdIwQY MBaAFAquGmBYu9zQg1Bo47T53lHyvZBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAt YjIyNDdiM2E1MmQ4LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAtYjIyNDdiM2E1MmQ4 LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeonLQe8p G3mFMZ4abz1BITjB8M8JJkkSdJKeTfz26I++Rbej3YIvK7kO3HYORe2Jhy4r2vPc Jb9MM8aZE8tl6aPpdJ5Xh9WFoAYszWTilSZ8yFkURRSuNgCqCWunEYQigMv5e4+/ BF4ZOSxwCucRxdWABhc/oNf851Sy8PoXRTU6PJUe+GTNf8Z+3sL2bp4y2x3m/sko oZGz9ru0OxCk8Z3c35RKgUluy/6Mudxx8i5hWnRuX8ruXTZByC4MytenTfGpSAyi bYsrAsB0bxO1UH3iTyDZo6PjoctFvA3p2iu2NYnM4pY1XtooD80wxYlA0boxlbo4 7WZseiGb7s3ASQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:46 2025 by rpki-client