This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json) Hash identifier: wIc+UGerOwveQlu7aNFWo7zoAjgy6hVhhftjkvIIPng= Subject key identifier: 1B:40:92:39:9C:DF:C5:C2:84:28:13:AD:74:08:2B:29:B6:D8:52:8E Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5 Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5 Certificate serial: 019AF19B74349E72E659A1A5093277055578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft Manifest number: 0CC4 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=) 2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=) 3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: zbyUPZE5DqIYW5Fw0PFrXV7K7cXoperFX16td+Ue+PY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:74:34:9e:72:e6:59:a1:a5:09:32:77:05:55:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=1b4092399cdfc5c2842813ad74082b29b6d8528e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:ec:19:69:ab:07:e0:4f:91:d6:37:95:44: 0b:2f:52:15:4a:b2:d5:6b:6c:f2:38:64:e3:19:45: 80:be:20:fe:0a:06:41:f7:5d:30:41:63:0a:7a:0e: 9d:76:17:c9:4f:63:af:9e:8e:80:22:75:d8:24:ea: 27:35:40:94:94:92:1a:42:97:ad:fa:56:2a:9d:8d: 8c:95:92:ad:1f:08:04:ef:c2:c9:b1:f3:66:78:24: 8a:8b:91:f1:b7:65:b6:b7:c1:63:f5:c9:f6:0a:59: ff:fc:f2:05:f4:50:c5:28:34:ef:d5:8c:1b:9e:f7: d6:4f:0c:cb:7c:07:33:25:d6:00:bd:58:21:42:e3: 74:a3:c4:ca:70:be:81:17:ac:e5:66:d5:7b:2f:2f: 78:5e:a1:b9:62:08:b5:d7:60:8f:d4:84:fc:08:85: 93:6a:e7:07:21:f2:90:68:66:e1:1c:a8:b7:04:0c: ef:7a:50:5a:d1:2f:11:53:9e:6d:bf:f7:b0:56:fe: 6d:01:a7:64:cb:34:b4:c9:94:ae:de:79:88:5f:1e: 37:14:46:c1:17:1d:32:12:2d:53:54:df:75:c4:ac: ba:4a:d5:a0:c5:43:6c:d0:aa:3b:03:e6:6c:77:d5: 36:65:ae:ba:c2:1f:4e:07:cc:d1:3a:ac:45:e8:94: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:40:92:39:9C:DF:C5:C2:84:28:13:AD:74:08:2B:29:B6:D8:52:8E X509v3 Authority Key Identifier: keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:89:dd:1f:a9:f3:30:a2:f8:37:fc:15:40:d2:b5:fa:f7:50: 26:c0:95:67:a9:4f:67:d4:88:31:9f:a5:e5:7b:13:a1:cd:d8: 2e:33:f4:58:15:21:f5:ed:83:8c:e0:ef:b1:02:0f:90:2b:ac: 0a:2b:10:dd:3a:09:7b:4e:55:1e:f5:a9:05:98:2f:89:b1:49: 60:e3:1b:84:8b:01:ae:f3:e5:d0:85:e2:a0:e5:f0:83:18:aa: ca:d0:c5:85:98:d3:d1:f7:28:c5:48:11:3a:a2:db:92:01:0b: 0f:e3:e8:94:47:fc:df:cb:d7:3c:a5:e5:2f:10:c2:bd:b3:2f: 53:89:88:7c:98:ff:ff:8d:4b:ae:82:29:bd:e4:a2:87:e1:4c: 16:2c:3a:d6:a1:f0:76:6b:09:83:97:75:88:42:c7:4b:bd:13: 46:55:fd:f5:31:ce:6b:46:07:35:8a:3b:06:5f:c9:a8:4f:d4: b2:83:9b:35:63:a5:31:98:21:c2:46:f0:e8:30:47:1f:a9:6b: 5a:57:d8:46:1d:d9:4c:d9:6e:1a:fa:bf:f0:0c:89:46:00:04: 85:c1:22:77:c9:21:38:c6:f3:be:2f:4a:e3:a6:91:2d:2d:a5: 26:2c:d7:29:ff:28:e1:b0:e1:6c:05:ca:2a:a5:5f:5c:0a:9a: a8:05:a0:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3Q0nnLmWaGlCTJ3BVV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDFhNjM0YmJiN2FlZmFkODdkMTIxYTVmZTU0NTY0ODcz OGM4YzUwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD EygxYjQwOTIzOTljZGZjNWMyODQyODEzYWQ3NDA4MmIyOWI2ZDg1MjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshPsGWmrB+BPkdY3lUQLL1IVSrLV a2zyOGTjGUWAviD+CgZB910wQWMKeg6ddhfJT2Ovno6AInXYJOonNUCUlJIaQpet +lYqnY2MlZKtHwgE78LJsfNmeCSKi5Hxt2W2t8Fj9cn2Cln//PIF9FDFKDTv1Ywb nvfWTwzLfAczJdYAvVghQuN0o8TKcL6BF6zlZtV7Ly94XqG5Ygi112CP1IT8CIWT aucHIfKQaGbhHKi3BAzvelBa0S8RU55tv/ewVv5tAadkyzS0yZSu3nmIXx43FEbB Fx0yEi1TVN91xKy6StWgxUNs0Ko7A+Zsd9U2Za66wh9OB8zROqxF6JQOLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtAkjmc38XChCgTrXQIKym22FKOMB8GA1UdIwQY MBaAFAnRpjS7t6762H0SGl/lRWSHOMjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjIt NWU1YjhiMjgwNTlhLzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yNjQwZGYtYjVkMS00YzAwLWIyZjItNWU1YjhiMjgwNTlh LzEvQ2RHbU5MdTNydnJZZlJJYVgtVkZaSWM0eU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIndH6nz MKL4N/wVQNK1+vdQJsCVZ6lPZ9SIMZ+l5XsToc3YLjP0WBUh9e2DjODvsQIPkCus CisQ3ToJe05VHvWpBZgvibFJYOMbhIsBrvPl0IXioOXwgxiqytDFhZjT0fcoxUgR OqLbkgELD+PolEf838vXPKXlLxDCvbMvU4mIfJj//41LroIpveSih+FMFiw61qHw dmsJg5d1iELHS70TRlX99THOa0YHNYo7Bl/JqE/UsoObNWOlMZghwkbw6DBHH6lr WlfYRh3ZTNluGvq/8AyJRgAEhcEid8khOMbzvi9K46aRLS2lJizXKf8o4bDhbAXK KqVfXAqaqAWgMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:25 2025 by rpki-client