This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json) Hash identifier: hluuRpqUqdvKfOssHwNt952KjCIEoSq8KdwzjkvEpxA= Subject key identifier: 08:01:FB:DD:F8:79:C0:7F:8D:C3:EE:25:E3:2C:91:C3:84:4F:D3:24 Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Certificate serial: 019AF1D18A156474689FE1E73DB47CAAB254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft Manifest number: 14A9 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: MrcDRLMKCkZhO9OAcWMEOIHcelDqtmyx930UoESJTx0=) 2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8a:15:64:74:68:9f:e1:e7:3d:b4:7c:aa:b2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=0801fbddf879c07f8dc3ee25e32c91c3844fd324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:98:f8:6a:42:08:40:74:8b:e0:df:82:da: 08:f7:e9:fa:ea:d4:0f:c2:39:5c:92:f1:98:a0:8d: e9:56:89:8a:90:4c:cf:55:3f:9a:7c:b8:3b:93:1c: e9:ec:41:e0:54:1d:76:07:93:64:38:bf:a1:8f:79: d6:83:44:2f:16:00:2b:b4:dc:d4:9e:4f:bf:c0:6a: fa:73:1d:7e:6f:85:4a:2a:45:cd:5b:3e:6d:c2:a4: e5:e0:53:8c:d3:62:3a:60:2c:ca:c2:ea:a4:e6:5a: d3:e7:b5:3f:d3:f1:7e:92:26:03:c3:70:d0:d1:5e: ad:bf:2c:30:4b:fd:d6:a3:62:05:55:09:bb:9c:b2: ec:ef:d6:30:4e:62:67:ae:e4:20:39:82:c5:49:01: 26:54:b8:6a:f7:30:c1:fd:0c:a6:8a:25:b8:1a:a1: 3c:60:82:4e:fa:39:d3:d0:86:cc:28:61:c4:56:0d: 69:a3:8a:c0:81:04:9f:dd:a2:6c:79:cd:ce:f3:7a: 4f:83:8d:22:80:b1:f4:07:12:94:dd:b0:4c:8d:e4: ed:6a:32:3e:ff:a8:ee:be:9c:1e:8b:68:a5:10:b2: da:ef:98:bf:3b:85:cb:bc:ea:83:1a:f5:8b:26:55: 07:77:4e:a7:e3:45:0e:67:c0:be:cd:d1:c6:30:da: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:01:FB:DD:F8:79:C0:7F:8D:C3:EE:25:E3:2C:91:C3:84:4F:D3:24 X509v3 Authority Key Identifier: keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9d:2c:fc:d2:99:eb:30:91:72:64:19:bd:08:83:3e:86:29: 93:7d:25:a1:05:6d:10:12:1a:c6:c8:c1:f4:7e:e4:2b:66:a2: ad:ed:04:bd:20:31:91:23:ab:1e:6a:6c:48:af:fd:85:8a:09: 08:1a:f1:42:8e:4b:8a:a4:8f:11:4a:69:11:13:ff:d0:40:a3: 32:06:9a:77:83:25:f9:85:f9:a9:78:42:8d:f2:c0:9e:2c:03: 83:80:92:b8:2f:41:8b:f2:5c:22:6d:6c:5a:0d:23:99:44:bc: f3:62:6d:b1:31:1d:63:f3:29:fe:f5:3b:66:b2:ce:97:3a:cc: c9:39:00:34:26:13:4e:24:4e:c0:bc:49:1e:9d:21:2b:bb:a0: 6b:21:71:2b:97:c5:c9:e6:03:58:48:c5:0f:99:88:f6:a6:af: 8f:c5:75:c7:62:b6:89:14:00:e8:81:aa:0a:77:30:80:7d:9e: c7:9a:37:9f:0c:ac:25:7c:e2:7f:f7:21:62:c0:7f:0b:70:30: ef:24:be:5e:d9:cc:38:76:4f:cb:46:f2:76:33:58:0a:c1:2d: 46:21:fa:77:cb:69:b4:3d:06:7a:7b:b7:26:ce:8c:7d:a5:11: a4:08:cd:09:b0:c4:c2:a7:4a:ba:ed:d3:81:a2:f5:14:93:4c: 09:1f:7c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YoVZHRon+HnPbR8qrJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5 NjdmMDIwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD EygwODAxZmJkZGY4NzljMDdmOGRjM2VlMjVlMzJjOTFjMzg0NGZkMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt6Y+GpCCEB0i+DfgtoI9+n66tQP wjlckvGYoI3pVomKkEzPVT+afLg7kxzp7EHgVB12B5NkOL+hj3nWg0QvFgArtNzU nk+/wGr6cx1+b4VKKkXNWz5twqTl4FOM02I6YCzKwuqk5lrT57U/0/F+kiYDw3DQ 0V6tvywwS/3Wo2IFVQm7nLLs79YwTmJnruQgOYLFSQEmVLhq9zDB/QymiiW4GqE8 YIJO+jnT0IbMKGHEVg1po4rAgQSf3aJsec3O83pPg40igLH0BxKU3bBMjeTtajI+ /6juvpwei2ilELLa75i/O4XLvOqDGvWLJlUHd06n40UOZ8C+zdHGMNpInQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgB+934ecB/jcPuJeMskcOET9MkMB8GA1UdIwQY MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZ0s/NKZ 6zCRcmQZvQiDPoYpk30loQVtEBIaxsjB9H7kK2aire0EvSAxkSOrHmpsSK/9hYoJ CBrxQo5LiqSPEUppERP/0ECjMgaad4Ml+YX5qXhCjfLAniwDg4CSuC9Bi/JcIm1s Wg0jmUS882JtsTEdY/Mp/vU7ZrLOlzrMyTkANCYTTiROwLxJHp0hK7ugayFxK5fF yeYDWEjFD5mI9qavj8V1x2K2iRQA6IGqCncwgH2ex5o3nwysJXzif/chYsB/C3Aw 7yS+XtnMOHZPy0bydjNYCsEtRiH6d8tptD0Genu3Js6MfaURpAjNCbDEwqdKuu3T gaL1FJNMCR98FA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:10 2025 by rpki-client