This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json) Hash identifier: EVcv55/eJk7a/ws6fR4kScB2OIBfePBJPp+LiIp41Q8= Subject key identifier: A4:16:D5:AA:18:4F:15:6B:5C:59:73:80:5E:B0:C4:69:27:70:67:D6 Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a Certificate serial: 019AF5775C56DA42BEB6E501BF7D2D7677F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft Manifest number: 073D Signing time: Sat 06 Dec 2025 21:00:31 +0000 Manifest this update: Sat 06 Dec 2025 21:00:31 +0000 Manifest next update: Sun 07 Dec 2025 21:00:31 +0000 Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: bYgpOKHlRTLWJ/hYavjKie0vDiU9LHt8yqGpzP7gIWA=) 2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:5c:56:da:42:be:b6:e5:01:bf:7d:2d:76:77:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a Validity Not Before: Dec 6 21:00:31 2025 GMT Not After : Dec 7 21:00:31 2025 GMT Subject: CN=a416d5aa184f156b5c5973805eb0c469277067d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:45:26:f7:69:0b:e7:88:25:ff:d3:ab:0f: c6:f3:d9:62:b3:17:4e:c5:26:ff:eb:08:2d:7a:14: b6:9e:65:cb:06:a1:c1:9a:90:68:6a:e8:53:5d:76: 68:4b:b2:8a:bd:e1:af:b5:05:32:a7:96:f7:95:2a: ec:50:53:6b:d3:2a:ae:ec:28:cf:c9:35:4f:e8:1f: 6c:e6:b6:f9:bd:4a:0b:3c:f0:3f:9f:d8:b0:f6:63: 8e:37:1d:e7:6a:3e:ad:31:76:80:f6:01:91:40:e4: c7:0e:c2:d0:cf:19:cd:1a:fb:91:28:6a:2d:f9:91: b7:46:2f:23:4c:c8:a8:cb:d8:94:20:11:72:ff:1c: 76:76:4a:4c:8d:95:1b:70:2e:a0:51:2c:c7:c4:f8: 04:e7:38:a6:59:26:63:0b:d5:6e:ab:c5:04:3e:1d: 47:a7:e5:b3:04:65:5e:d7:07:51:3c:34:f7:52:1e: 8f:85:71:e0:89:91:9b:2c:c6:88:bd:4d:4b:4d:d5: b9:ae:fd:56:92:7f:3d:16:41:b4:d8:d5:b8:05:4a: 02:3e:68:8d:de:1a:b7:1c:b3:ab:d1:e1:8d:b1:fa: 64:b6:b1:93:94:90:e7:fd:1e:de:ae:72:14:02:16: 6c:31:aa:af:bc:1b:1a:ee:b2:32:a3:94:5b:e8:38: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:16:D5:AA:18:4F:15:6B:5C:59:73:80:5E:B0:C4:69:27:70:67:D6 X509v3 Authority Key Identifier: keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:71:f3:15:30:dc:5e:8b:9a:33:fe:60:77:8b:d5:a7:87:7a: ff:d1:9c:30:8b:d5:0b:8f:87:57:76:22:99:19:db:cf:e1:11: 8d:17:cf:66:0f:9a:65:05:19:6d:50:fd:95:a5:6e:58:a0:9a: 5b:96:57:d3:0f:79:3b:c6:13:97:6c:81:ef:68:d4:ff:f9:b7: 83:5b:4d:ad:e9:57:70:25:86:6f:c3:0e:eb:8c:82:eb:67:9c: d9:33:5e:42:be:cc:ff:3e:fd:b2:99:b6:cb:3d:8e:b9:b6:9f: 20:5f:c0:71:25:69:36:d2:22:5a:1e:d3:c2:9c:21:53:03:a2: 2c:c2:59:4f:7b:dd:ab:1d:e9:31:6d:fd:fb:3d:02:38:07:32: 18:0d:be:bf:6c:6f:44:96:24:b1:4e:b2:71:9f:ed:6a:6c:24: b5:95:8b:51:07:c5:a2:53:d5:77:45:e3:c9:30:4e:f4:6a:eb: 67:aa:b0:50:bc:f3:f1:32:72:cf:38:2b:43:4e:03:15:31:29: 25:17:fe:65:d2:91:7a:10:6b:9a:c2:83:1c:35:99:bd:aa:4f: 18:27:da:2c:89:f0:cd:1f:1f:06:16:5b:57:c0:22:cc:07:8d: a1:c4:9d:1f:81:0a:eb:db:94:05:fc:98:cb:72:ba:f2:60:78: 7e:9b:d8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1xW2kK+tuUBv30tdnfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4 NjU3OWEwHhcNMjUxMjA2MjEwMDMxWhcNMjUxMjA3MjEwMDMxWjAzMTEwLwYDVQQD EyhhNDE2ZDVhYTE4NGYxNTZiNWM1OTczODA1ZWIwYzQ2OTI3NzA2N2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMBFJvdpC+eIJf/Tqw/G89lisxdO xSb/6wgtehS2nmXLBqHBmpBoauhTXXZoS7KKveGvtQUyp5b3lSrsUFNr0yqu7CjP yTVP6B9s5rb5vUoLPPA/n9iw9mOONx3naj6tMXaA9gGRQOTHDsLQzxnNGvuRKGot +ZG3Ri8jTMioy9iUIBFy/xx2dkpMjZUbcC6gUSzHxPgE5zimWSZjC9Vuq8UEPh1H p+WzBGVe1wdRPDT3Uh6PhXHgiZGbLMaIvU1LTdW5rv1Wkn89FkG02NW4BUoCPmiN 3hq3HLOr0eGNsfpktrGTlJDn/R7ernIUAhZsMaqvvBsa7rIyo5Rb6DjwiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQW1aoYTxVrXFlzgF6wxGkncGfWMB8GA1UdIwQY MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4 LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnHzFTDc XouaM/5gd4vVp4d6/9GcMIvVC4+HV3YimRnbz+ERjRfPZg+aZQUZbVD9laVuWKCa W5ZX0w95O8YTl2yB72jU//m3g1tNrelXcCWGb8MO64yC62ec2TNeQr7M/z79spm2 yz2OubafIF/AcSVpNtIiWh7TwpwhUwOiLMJZT3vdqx3pMW39+z0COAcyGA2+v2xv RJYksU6ycZ/tamwktZWLUQfFolPVd0XjyTBO9GrrZ6qwULzz8TJyzzgrQ04DFTEp JRf+ZdKRehBrmsKDHDWZvapPGCfaLInwzR8fBhZbV8AizAeNocSdH4EK69uUBfyY y3K68mB4fpvYxA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:15:57 2025 by rpki-client