This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json) Hash identifier: EEg5/2oZodKkC1oU2Gl1hPtvNmE/DU02r4V1C9sw94U= Subject key identifier: 73:7E:5C:C6:06:5D:F5:BD:AF:A5:22:D8:C3:D1:95:1F:38:94:63:37 Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e Certificate serial: 019AF5E5A4DFE8ACA6B6B4F9D1730FDAF936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 23:00:59 +0000 Manifest this update: Sat 06 Dec 2025 23:00:59 +0000 Manifest next update: Sun 07 Dec 2025 23:00:59 +0000 Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: UmYRotGDXR+GgQGTsMbDj5rpSqWFsjrv3ggrfpAcvB4=) 2: O47iRpmVJrN5kyLHejtw1EVG-MI.roa (hash: YFHAgBAtSXAS/PD/F6eJBYD3guMI7Imk/Lvqn022i00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a4:df:e8:ac:a6:b6:b4:f9:d1:73:0f:da:f9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e Validity Not Before: Dec 6 23:00:59 2025 GMT Not After : Dec 7 23:00:59 2025 GMT Subject: CN=737e5cc6065df5bdafa522d8c3d1951f38946337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:0c:a3:e2:46:0d:ab:f9:08:48:4f:76:92:cf: e6:18:08:d7:25:8d:b4:e5:42:b8:00:d4:d8:02:00: 2b:e4:9d:98:65:01:75:f9:49:05:b5:1a:df:27:97: c1:d5:85:b3:e9:51:43:e5:88:a4:50:c9:51:83:9e: f9:df:16:4f:a3:e4:45:df:59:f0:f2:4f:c3:f6:a3: cf:12:49:fb:fd:08:8d:88:43:7a:9b:3f:99:72:9c: f9:78:b0:a7:e5:2b:fb:67:13:41:d9:36:ad:56:e6: 78:9e:23:9d:5d:d4:06:84:29:07:17:6f:a8:95:65: 44:9a:58:03:77:94:aa:b7:b6:d2:e4:1a:77:1b:db: 6a:ea:df:35:7d:07:0c:d9:88:57:8e:b9:49:e2:70: 2e:e7:e1:9d:b0:d4:79:64:9c:24:72:61:61:a8:e3: a2:7d:64:72:0a:16:d3:63:7a:8f:0e:9c:b8:35:f5: 54:48:f5:b4:5b:ed:10:f4:5d:55:35:6c:ce:17:c7: 4d:3d:2c:1a:8d:7b:c2:80:01:60:cb:00:c4:56:04: 6b:41:bf:08:a5:cb:c6:bf:86:9e:92:20:60:9f:d2: 5c:65:21:a2:85:cb:c1:7d:a2:fc:cb:67:77:49:f7: 25:98:d8:47:4d:a6:19:1f:c9:9b:ba:2a:57:07:ee: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:5C:C6:06:5D:F5:BD:AF:A5:22:D8:C3:D1:95:1F:38:94:63:37 X509v3 Authority Key Identifier: keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:ab:d5:4b:9f:6c:13:1b:66:8d:39:6b:ec:2f:6b:8d:78:2e: 23:69:97:f4:74:ef:6b:62:01:18:8e:0f:37:62:fd:d0:78:0e: 85:42:6e:d3:fa:37:6e:99:55:46:76:2f:65:79:7d:0b:e6:60: 24:f2:45:39:b9:30:b6:17:7a:41:6d:19:18:f5:ba:b7:a9:ac: 44:2a:2c:7d:81:98:63:0d:17:71:8c:7f:e8:8d:61:55:fc:e2: 77:ef:66:7e:7d:0d:eb:dc:c4:7c:69:4c:45:29:62:cd:4f:5c: 98:b5:f5:fc:c5:d7:48:a7:2f:89:22:48:01:1c:a9:06:ef:e5: 80:fd:56:c0:24:67:3c:ae:fd:17:18:0b:d6:79:b0:c3:b0:2e: 8e:2c:89:56:fd:6e:70:9b:b6:0c:58:2b:8d:05:16:a8:d6:6e: 2e:eb:e1:f2:3e:85:4c:d9:06:e0:7b:d0:d0:e5:ba:c3:27:7c: 5b:f2:15:7c:41:dd:bf:bc:92:c4:56:f9:ce:66:e5:c7:20:fa: da:cc:0b:c0:6c:60:93:61:4d:bd:c2:8f:b9:1e:0d:cd:c7:6e: 60:42:32:86:36:31:a1:a3:f9:5e:04:a4:4b:be:1e:6c:7a:86: a9:98:22:1d:43:92:e7:4e:ab:93:ff:db:18:ef:5c:de:29:62: 96:7c:92:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15aTf6KymtrT50XMP2vk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTk3ODZmMjI2Y2I2ZDQ5MGJmYjU0Mjk0ZTYxMWE3ZDUx YThmMWUwHhcNMjUxMjA2MjMwMDU5WhcNMjUxMjA3MjMwMDU5WjAzMTEwLwYDVQQD Eyg3MzdlNWNjNjA2NWRmNWJkYWZhNTIyZDhjM2QxOTUxZjM4OTQ2MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ayj4kYNq/kISE92ks/mGAjXJY20 5UK4ANTYAgAr5J2YZQF1+UkFtRrfJ5fB1YWz6VFD5YikUMlRg5753xZPo+RF31nw 8k/D9qPPEkn7/QiNiEN6mz+Zcpz5eLCn5Sv7ZxNB2TatVuZ4niOdXdQGhCkHF2+o lWVEmlgDd5Sqt7bS5Bp3G9tq6t81fQcM2YhXjrlJ4nAu5+GdsNR5ZJwkcmFhqOOi fWRyChbTY3qPDpy4NfVUSPW0W+0Q9F1VNWzOF8dNPSwajXvCgAFgywDEVgRrQb8I pcvGv4aekiBgn9JcZSGihcvBfaL8y2d3SfclmNhHTaYZH8mbuipXB+72EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN+XMYGXfW9r6Ui2MPRlR84lGM3MB8GA1UdIwQY MBaAFAhZeG8ibLbUkL+1QpTmEafVGo8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt NTJmZTQ0MzQzNTBlLzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl LzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA16vVS59s ExtmjTlr7C9rjXguI2mX9HTva2IBGI4PN2L90HgOhUJu0/o3bplVRnYvZXl9C+Zg JPJFObkwthd6QW0ZGPW6t6msRCosfYGYYw0XcYx/6I1hVfzid+9mfn0N69zEfGlM RSlizU9cmLX1/MXXSKcviSJIARypBu/lgP1WwCRnPK79FxgL1nmww7AujiyJVv1u cJu2DFgrjQUWqNZuLuvh8j6FTNkG4HvQ0OW6wyd8W/IVfEHdv7ySxFb5zmblxyD6 2swLwGxgk2FNvcKPuR4NzcduYEIyhjYxoaP5XgSkS74ebHqGqZgiHUOS506rk//b GO9c3ililnyS5Q== -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:34 2025 by rpki-client