This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft File: CNXrapaGTfosUbLiVsUYCrkiKc0.mft (raw, json) Hash identifier: IHm5pSnsUAcFCZi4NItwhGVyn6pk39co5iFjlp6Os/A= Subject key identifier: A6:B5:B2:69:DE:FB:80:DD:33:1B:E7:2A:72:56:57:13:E5:9C:68:36 Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Certificate serial: 019AF3894A614B5FE5D54922C67D60834A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft Manifest number: 0457 Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (hash: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=) 2: CNXrapaGTfosUbLiVsUYCrkiKc0.crl (hash: LIRMqLFocDwqnK8ZPI1p+Ohv2INUezlH+X8rw9aE+ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4a:61:4b:5f:e5:d5:49:22:c6:7d:60:83:4a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=a6b5b269defb80dd331be72a72565713e59c6836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d2:00:39:c9:89:db:1a:1e:c3:9c:c8:78:24: 20:d3:1a:82:f2:47:1c:97:f0:d7:bf:87:df:e6:65: 3c:60:33:99:a1:10:a8:dd:1f:05:79:9d:7a:75:6c: 76:69:e4:b3:9d:0b:b6:a3:72:71:19:e9:86:2d:13: 95:2e:07:10:50:6e:d8:52:78:cd:77:3f:0e:69:49: 12:1a:18:bd:25:94:eb:d9:ef:e2:12:2d:e5:35:53: 16:85:88:b1:79:1a:bb:1a:b9:06:77:ac:40:68:bd: b9:5b:0e:9b:45:36:fb:d3:46:cd:d0:38:2c:05:a2: 15:7d:b6:75:6b:fc:74:1b:f7:58:ca:a8:1c:00:f2: 1a:10:a1:b4:73:9e:7f:63:06:5e:19:97:7c:96:b0: 70:30:ea:bd:0a:79:bb:3a:c0:a4:0a:b7:be:b7:6b: f9:a8:52:d0:32:81:4b:a4:8f:56:ad:a7:80:28:fd: fd:03:fb:0b:a4:b7:c7:88:77:11:30:87:9d:20:14: cf:cb:75:a5:7b:cc:a0:a8:d4:81:af:ee:20:19:1b: 7f:d7:d3:26:54:5d:a0:9b:02:71:ef:b6:67:b6:cc: 30:4f:8e:3b:43:06:d6:c2:d9:13:47:88:7d:22:4d: 57:11:c8:47:f0:55:79:8c:02:e2:c5:bf:4e:ab:72: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:B2:69:DE:FB:80:DD:33:1B:E7:2A:72:56:57:13:E5:9C:68:36 X509v3 Authority Key Identifier: keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5c:0d:e6:59:cb:24:f2:82:5b:4d:d0:97:ed:ed:f7:5a:9c: f3:c8:ba:06:eb:de:e5:79:71:5b:4d:58:e7:6c:f5:1e:91:fc: f0:08:c0:18:7d:18:e4:a6:6a:58:d9:a3:db:bd:0f:9a:e5:f6: 78:98:82:40:d1:9e:31:d0:b2:6f:ae:97:9a:5b:15:5c:3d:5c: 9a:3a:d0:75:7c:88:f6:c0:38:55:85:59:c7:ea:e5:29:b9:1b: 1b:21:d9:8c:99:03:3a:27:a0:dd:e3:d6:d6:7e:66:09:f4:c1: bd:60:8f:a7:24:24:dd:30:bd:81:f2:5b:60:f3:e9:47:d8:32: 6c:2c:cc:dc:42:fe:3f:49:58:26:4d:8d:1b:34:4b:77:c0:09: 2a:a6:70:96:1a:20:60:5f:f8:99:5d:96:0e:52:8f:42:c8:8a: 84:f3:89:60:0f:42:3a:78:88:a5:27:e6:04:6e:3e:89:2b:78: 85:ee:02:4e:38:d0:90:76:ed:a0:64:97:6d:77:b6:56:f0:2e: 6f:9f:6f:ba:ab:84:a4:06:9c:13:97:a1:1f:45:b2:68:18:16: 65:29:fa:e7:0a:81:af:44:2d:16:ca:32:b6:f8:cf:0d:0c:30: 03:07:ee:12:f1:0d:ff:57:6e:56:b8:4a:0f:0a:27:1c:d0:cd: b6:2d:5e:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUphS1/l1Ukixn1gg0oeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDVlYjZhOTY4NjRkZmEyYzUxYjJlMjU2YzUxODBhYjky MjI5Y2QwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD EyhhNmI1YjI2OWRlZmI4MGRkMzMxYmU3MmE3MjU2NTcxM2U1OWM2ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9IAOcmJ2xoew5zIeCQg0xqC8kcc l/DXv4ff5mU8YDOZoRCo3R8FeZ16dWx2aeSznQu2o3JxGemGLROVLgcQUG7YUnjN dz8OaUkSGhi9JZTr2e/iEi3lNVMWhYixeRq7GrkGd6xAaL25Ww6bRTb700bN0Dgs BaIVfbZ1a/x0G/dYyqgcAPIaEKG0c55/YwZeGZd8lrBwMOq9Cnm7OsCkCre+t2v5 qFLQMoFLpI9WraeAKP39A/sLpLfHiHcRMIedIBTPy3Wle8ygqNSBr+4gGRt/19Mm VF2gmwJx77ZntswwT447QwbWwtkTR4h9Ik1XEchH8FV5jALixb9Oq3KkNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa1smne+4DdMxvnKnJWVxPlnGg2MB8GA1UdIwQY MBaAFAjV62qWhk36LFGy4lbFGAq5IinNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUt YmI2ODI5MzYwY2VlLzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi80YTU4YmMtMjQwMy00MTQ0LWJiNWUtYmI2ODI5MzYwY2Vl LzEvQ05YcmFwYUdUZm9zVWJMaVZzVVlDcmtpS2MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVwN5lnL JPKCW03Ql+3t91qc88i6Buve5XlxW01Y52z1HpH88AjAGH0Y5KZqWNmj270PmuX2 eJiCQNGeMdCyb66XmlsVXD1cmjrQdXyI9sA4VYVZx+rlKbkbGyHZjJkDOieg3ePW 1n5mCfTBvWCPpyQk3TC9gfJbYPPpR9gybCzM3EL+P0lYJk2NGzRLd8AJKqZwlhog YF/4mV2WDlKPQsiKhPOJYA9COniIpSfmBG4+iSt4he4CTjjQkHbtoGSXbXe2VvAu b59vuquEpAacE5ehH0WyaBgWZSn65wqBr0QtFsoytvjPDQwwAwfuEvEN/1duVrhK DwonHNDNti1emA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:28 2025 by rpki-client