This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json) Hash identifier: s8ZRTGqtK1N9NB450tyQ/1xPl9+d8ojL8FU9wNTxUQE= Subject key identifier: 97:CA:26:F2:96:5A:9D:70:BD:E1:25:06:57:EF:F6:F8:29:B9:6B:33 Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed Certificate serial: 019AF27650FCCFA34FB9C373905A90E9BA5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft Manifest number: 136D Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=) 2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: sh42WIo+cQMeU4ic+6prWWF8XgVv5EfT3Hy/L7gdVB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:50:fc:cf:a3:4f:b9:c3:73:90:5a:90:e9:ba:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=97ca26f2965a9d70bde1250657eff6f829b96b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:df:78:6b:13:e3:98:6a:f2:6e:a2:56:a1:26: 8e:1c:80:0f:04:e6:80:77:f7:bd:e0:ac:f4:3f:63: 1f:5c:d4:68:fa:9b:7b:64:40:80:34:75:99:ed:1d: 9b:1e:da:83:e3:0c:e5:f3:1e:05:89:22:68:f3:45: 1d:55:98:35:53:35:6e:da:5d:0c:eb:19:be:8e:4c: f5:33:48:ef:03:49:a6:0d:e0:64:ea:18:1f:cf:6a: bf:27:c6:c2:3b:ea:29:5f:c3:1d:61:c8:5a:c2:a7: 18:b2:22:c6:54:ca:7a:7d:f9:0d:2b:8b:6d:6f:9c: 51:d1:bb:56:b7:af:87:01:46:c7:bb:00:84:ce:c0: 75:9a:7a:d5:eb:98:61:3d:1e:b5:d5:75:1a:29:d3: a0:fe:3e:00:8a:c3:a0:b5:24:1d:66:69:ca:5c:cc: e2:b2:f3:56:ce:b3:24:f1:e4:fa:b6:8e:ba:d3:2b: c5:2f:2e:c5:80:12:60:69:3f:1e:7f:51:d2:54:52: 3b:92:9d:74:2f:4b:a7:88:2e:cd:ad:4f:61:9b:5c: 65:11:70:a6:e2:67:7a:35:5f:74:da:02:e2:71:22: e0:5b:ce:b3:8b:e9:78:6c:fa:d3:a6:c8:70:ce:b9: b9:76:ca:13:8b:eb:a8:16:ef:7f:9b:68:5f:db:3d: b0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:26:F2:96:5A:9D:70:BD:E1:25:06:57:EF:F6:F8:29:B9:6B:33 X509v3 Authority Key Identifier: keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:93:04:46:d8:46:35:ed:33:ba:e2:9c:77:e6:6c:7c:e2:80: a5:6f:c5:0a:66:4e:a1:db:66:95:b0:5e:a7:33:53:45:3d:0c: fc:b3:96:d0:14:6a:6a:8f:e2:78:c6:b8:93:a6:bc:26:27:7a: 76:64:20:a5:bc:2e:12:8d:73:a3:9f:be:6a:8f:3f:f1:11:8f: b0:ac:f0:42:a2:b5:21:c3:a1:34:27:da:1e:64:7c:4a:e2:b7: b1:6f:9d:8b:b9:85:a6:17:f9:9c:3a:c8:77:1c:d3:db:ad:c5: 30:17:a9:f5:25:81:e9:83:e1:bc:bb:17:ca:3d:a6:11:f4:1f: cf:a4:17:c7:0a:88:2c:48:d6:b8:ad:df:87:dd:7e:eb:c5:8d: 33:e1:d7:4b:0e:94:75:82:6f:c8:46:d5:9f:1a:d7:a0:50:bb: 79:c1:01:bf:46:9c:76:9c:55:87:55:6f:63:8d:c9:2b:dd:1d: 80:70:01:a0:e9:c0:7a:71:e0:36:bc:1c:55:89:16:64:8f:ed: 29:96:bc:ad:2d:0e:53:25:ca:2a:f9:3c:77:0e:bf:3f:53:49: 08:88:8f:32:15:fb:82:c8:c6:a1:64:d8:35:b2:34:a0:27:e0: 9f:b6:0f:ac:62:ac:a7:b5:a3:25:ed:aa:bf:ca:b1:c7:2d:9d: c1:af:89:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlD8z6NPucNzkFqQ6bpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzdhMDJhYTU0NmRkMWEwYTZhODJkMDVkOTBiMDkxN2Ux NTQ1ZWQwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD Eyg5N2NhMjZmMjk2NWE5ZDcwYmRlMTI1MDY1N2VmZjZmODI5Yjk2YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN94axPjmGrybqJWoSaOHIAPBOaA d/e94Kz0P2MfXNRo+pt7ZECANHWZ7R2bHtqD4wzl8x4FiSJo80UdVZg1UzVu2l0M 6xm+jkz1M0jvA0mmDeBk6hgfz2q/J8bCO+opX8MdYchawqcYsiLGVMp6ffkNK4tt b5xR0btWt6+HAUbHuwCEzsB1mnrV65hhPR611XUaKdOg/j4AisOgtSQdZmnKXMzi svNWzrMk8eT6to660yvFLy7FgBJgaT8ef1HSVFI7kp10L0uniC7NrU9hm1xlEXCm 4md6NV902gLicSLgW86zi+l4bPrTpshwzrm5dsoTi+uoFu9/m2hf2z2wBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfKJvKWWp1wveElBlfv9vgpuWszMB8GA1UdIwQY MBaAFHJ3oCqlRt0aCmqC0F2QsJF+FUXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2Yt ZjQ4OTMwZTQyNjQxLzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85N2FkN2UtZmNiZS00ZmNjLTljM2YtZjQ4OTMwZTQyNjQx LzEvY25lZ0txVkczUm9LYW9MUVhaQ3drWDRWUmUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpMERthG Ne0zuuKcd+ZsfOKApW/FCmZOodtmlbBepzNTRT0M/LOW0BRqao/ieMa4k6a8Jid6 dmQgpbwuEo1zo5++ao8/8RGPsKzwQqK1IcOhNCfaHmR8SuK3sW+di7mFphf5nDrI dxzT263FMBep9SWB6YPhvLsXyj2mEfQfz6QXxwqILEjWuK3fh91+68WNM+HXSw6U dYJvyEbVnxrXoFC7ecEBv0acdpxVh1VvY43JK90dgHABoOnAenHgNrwcVYkWZI/t KZa8rS0OUyXKKvk8dw6/P1NJCIiPMhX7gsjGoWTYNbI0oCfgn7YPrGKsp7WjJe2q v8qxxy2dwa+JkA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:09 2025 by rpki-client