This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json) Hash identifier: QPCAf3dr4MvgLd0oBKQ5VHJsvWPTWaVD4TiypnjsBlI= Subject key identifier: F3:3B:0E:72:FE:BC:18:2F:52:11:B8:1F:2A:59:FA:A9:60:8D:C2:24 Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed Certificate serial: 019B3DC763702A1AC63B836C13671A310B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft Manifest number: 1394 Signing time: Sat 20 Dec 2025 22:00:35 +0000 Manifest this update: Sat 20 Dec 2025 22:00:35 +0000 Manifest next update: Sun 21 Dec 2025 22:00:35 +0000 Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=) 2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: UMA0PcfAniSzAmQGekeOwJkCzMTjc1DTirvIz0oL26U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:63:70:2a:1a:c6:3b:83:6c:13:67:1a:31:0b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed Validity Not Before: Dec 20 22:00:35 2025 GMT Not After : Dec 21 22:00:35 2025 GMT Subject: CN=f33b0e72febc182f5211b81f2a59faa9608dc224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:17:f1:40:0a:8b:80:96:76:d3:54:9a:dc: d9:55:2b:b1:10:19:62:10:aa:a5:06:ad:f6:e9:5e: 58:68:cd:f1:a8:34:c9:86:2e:ad:24:e3:15:f7:48: 26:0a:38:51:dd:52:54:2a:2e:98:3d:e3:db:01:f2: f4:e5:de:6e:a3:f8:b9:40:43:50:fb:62:e3:1d:ac: a1:73:84:a1:04:98:2f:fa:ae:c5:2d:20:2b:63:75: 1d:17:4a:a2:0a:29:da:3c:4b:70:c8:d2:78:85:60: d7:02:fc:00:0e:84:88:6b:c6:b3:c9:77:13:14:96: d2:4e:7a:4f:dd:fe:72:1d:74:10:b7:bd:05:17:c8: f9:5f:3b:a6:67:e9:12:08:bb:b5:c2:23:c4:23:bc: 31:19:a9:b5:cb:26:e8:85:28:c3:0e:f6:d3:66:56: c3:dd:c2:53:5a:56:14:c5:0d:ed:ef:f8:e5:02:f0: 3c:fd:ec:ea:61:05:9d:58:58:ce:10:5f:21:1f:53: 4c:f2:2d:96:4f:3c:ef:fe:7b:49:22:59:09:46:9f: b0:6d:0b:bf:3d:97:ab:9d:85:c6:43:bc:07:59:ae: 9c:66:89:7b:76:d7:31:d2:8f:23:c6:f9:91:35:48: e4:f1:e7:ad:8f:8d:d7:c0:48:ba:aa:89:96:26:66: 54:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3B:0E:72:FE:BC:18:2F:52:11:B8:1F:2A:59:FA:A9:60:8D:C2:24 X509v3 Authority Key Identifier: keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:40:2d:35:4b:77:3b:24:26:86:18:f3:f2:4d:05:09:62:9c: 6c:5c:4b:da:11:42:0a:21:11:01:aa:1e:1a:ac:d1:05:2b:e4: 16:9b:96:d1:92:6e:03:4f:40:d4:c0:a6:ad:52:f4:d2:73:75: 43:7a:28:45:93:45:dd:2b:6c:eb:56:48:16:08:7d:bf:79:f4: 44:08:75:e5:53:66:ce:9a:4d:3e:81:da:91:5a:43:4b:6b:8b: 29:91:38:c8:bb:ea:9d:95:22:be:a9:8b:46:2a:ab:60:5c:47: 09:01:3f:e4:32:2a:14:43:9d:9b:57:6d:08:9b:60:86:e8:e7: 78:2e:41:f0:4d:57:98:2d:2e:d1:f7:78:b2:35:ce:e5:19:06: ad:6a:c1:98:2c:46:84:87:ff:05:ea:f4:ef:6d:dc:10:f0:53: 65:4a:92:19:a1:b2:fd:aa:d3:29:eb:7a:6d:c5:95:2f:ee:4d: c3:66:a8:87:0e:70:2c:b0:51:19:58:c4:33:60:94:be:b5:79: 91:cc:8a:58:80:0e:65:cd:1d:04:13:00:32:7a:ab:0f:31:b6: 1c:18:04:4a:52:40:73:73:de:7f:d7:78:e0:e4:e2:7f:4b:c4: 87:41:8f:a4:a5:a7:ee:af:22:8f:9a:6a:f6:ce:7b:94:2e:14: 27:6f:89:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2NwKhrGO4NsE2caMQuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux NTQ1ZWQwHhcNMjUxMjIwMjIwMDM1WhcNMjUxMjIxMjIwMDM1WjAzMTEwLwYDVQQD EyhmMzNiMGU3MmZlYmMxODJmNTIxMWI4MWYyYTU5ZmFhOTYwOGRjMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTwX8UAKi4CWdtNUmtzZVSuxEBli EKqlBq326V5YaM3xqDTJhi6tJOMV90gmCjhR3VJUKi6YPePbAfL05d5uo/i5QENQ +2LjHayhc4ShBJgv+q7FLSArY3UdF0qiCinaPEtwyNJ4hWDXAvwADoSIa8azyXcT FJbSTnpP3f5yHXQQt70FF8j5XzumZ+kSCLu1wiPEI7wxGam1yybohSjDDvbTZlbD 3cJTWlYUxQ3t7/jlAvA8/ezqYQWdWFjOEF8hH1NM8i2WTzzv/ntJIlkJRp+wbQu/ PZernYXGQ7wHWa6cZol7dtcx0o8jxvmRNUjk8eetj43XwEi6qomWJmZUgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM7DnL+vBgvUhG4HypZ+qlgjcIkMB8GA1UdIwQY MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt ZjQ4OTMwZTQyNjQxLzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkAtNUt3 OyQmhhjz8k0FCWKcbFxL2hFCCiERAaoeGqzRBSvkFpuW0ZJuA09A1MCmrVL00nN1 Q3ooRZNF3Sts61ZIFgh9v3n0RAh15VNmzppNPoHakVpDS2uLKZE4yLvqnZUivqmL RiqrYFxHCQE/5DIqFEOdm1dtCJtghujneC5B8E1XmC0u0fd4sjXO5RkGrWrBmCxG hIf/Ber0723cEPBTZUqSGaGy/arTKet6bcWVL+5Nw2aohw5wLLBRGVjEM2CUvrV5 kcyKWIAOZc0dBBMAMnqrDzG2HBgESlJAc3Pef9d44OTif0vEh0GPpKWn7q8ij5pq 9s57lC4UJ2+JXw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:04:41 2025 by rpki-client