This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json) Hash identifier: 5sw8LzvJq1YkmKZ5vmZTdSyVnBKCUe/Uwj7ZamuNgOs= Subject key identifier: C0:F0:20:61:C2:C6:4D:D7:25:5D:9F:DA:14:CF:85:C2:F1:0E:96:95 Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9 Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9 Certificate serial: 019AF209C6A02F98DC31070CACD64987C912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:58 +0000 Manifest this update: Sat 06 Dec 2025 05:01:58 +0000 Manifest next update: Sun 07 Dec 2025 05:01:58 +0000 Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: eXm/k2oCEzUi0+iIEEW5VNg9bFEThg74ogmbNnD6Qnw=) 2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:c6:a0:2f:98:dc:31:07:0c:ac:d6:49:87:c9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9 Validity Not Before: Dec 6 05:01:58 2025 GMT Not After : Dec 7 05:01:58 2025 GMT Subject: CN=c0f02061c2c64dd7255d9fda14cf85c2f10e9695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2a:66:0d:cb:a0:3c:e5:2b:8a:60:31:cd:f4: 34:c9:cc:e7:8a:0f:e7:87:58:10:00:56:62:6f:a8: 61:85:4d:98:a9:52:21:c9:4d:ea:0f:40:5c:e6:7b: 04:7c:53:ff:5a:13:c4:52:54:af:4b:c6:4d:b3:f4: 4c:eb:47:f3:20:67:3c:ee:c3:5e:f6:15:a2:e2:d7: 39:17:39:50:7a:ca:ab:fd:ce:28:7a:a4:d9:42:97: 36:b3:e8:13:ad:e1:34:f2:44:90:92:65:c3:ef:64: 79:45:ee:7a:c0:aa:b7:74:39:0e:86:19:7c:c9:7b: a0:c3:ab:96:4f:38:dd:6b:4b:10:9a:c2:06:9b:66: ec:e7:77:5f:f2:d7:88:e7:b8:a7:6e:33:b8:6f:5b: da:54:eb:db:1c:58:65:9e:b0:e9:be:03:94:c8:85: ab:f6:5d:e8:3f:3c:9e:bf:e4:52:1a:f9:1d:46:41: 4d:30:49:c8:77:13:51:03:c8:4a:4e:fb:b2:9b:a8: 30:7c:ee:29:a5:c9:21:83:99:55:56:a7:81:fe:64: bd:8c:34:24:7d:a1:47:01:bc:60:ed:19:9d:53:bf: 8a:c0:3b:b1:7a:42:32:97:27:62:f3:9b:bb:b0:cb: 2d:8d:28:b0:1f:68:40:ab:ec:13:96:fd:6d:c3:a1: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F0:20:61:C2:C6:4D:D7:25:5D:9F:DA:14:CF:85:C2:F1:0E:96:95 X509v3 Authority Key Identifier: keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:45:bd:e0:3d:b1:62:02:5a:9e:c2:a9:1f:99:ff:21:cc: 01:f0:de:92:b2:fe:ba:8e:f4:aa:4a:78:f4:86:ef:ae:83:ae: ff:f2:dd:54:95:51:f4:99:d9:e7:95:ff:6c:a6:02:66:29:25: 1f:92:b7:dd:79:42:51:f0:7d:e7:c4:21:f9:b0:a4:51:ac:89: 3d:55:60:5d:0a:cf:64:17:bb:39:c7:fa:68:f9:80:cf:00:f7: 9f:bb:43:a1:96:c0:fc:c2:6a:43:92:a5:8c:ba:cb:3c:82:f5: 87:e1:3e:14:79:44:30:e9:fe:8a:af:38:9e:d2:7f:4d:97:02: 8b:dd:c1:8e:45:1e:3a:cb:1b:fe:a2:6d:ff:29:46:10:77:d5: c0:28:7b:7a:9d:3b:82:bf:27:8f:fe:24:4d:52:1e:fe:67:7c: 70:04:47:ac:30:b0:5f:d4:11:cd:94:f5:0d:cd:73:72:48:d1: 4f:e8:94:b0:88:5f:3d:96:e5:1b:a0:95:bc:bb:e4:55:79:70: 5a:8b:45:0d:00:0d:81:01:e7:59:96:64:3f:ec:24:e6:75:8c: 6a:c6:dd:aa:35:5b:f7:6e:92:96:c8:e1:f5:6d:bb:66:22:a3: da:a3:7b:68:2c:a5:85:cd:ea:4c:5f:dc:20:ea:f6:38:20:c3: b1:f7:8e:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcagL5jcMQcMrNZJh8kSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM4ZGFiOTBjNjE0NTBkYzhhZDY2YjQ4NWQ1MzZjYmFm OWUwZjkwHhcNMjUxMjA2MDUwMTU4WhcNMjUxMjA3MDUwMTU4WjAzMTEwLwYDVQQD EyhjMGYwMjA2MWMyYzY0ZGQ3MjU1ZDlmZGExNGNmODVjMmYxMGU5Njk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSpmDcugPOUrimAxzfQ0ycznig/n h1gQAFZib6hhhU2YqVIhyU3qD0Bc5nsEfFP/WhPEUlSvS8ZNs/RM60fzIGc87sNe 9hWi4tc5FzlQesqr/c4oeqTZQpc2s+gTreE08kSQkmXD72R5Re56wKq3dDkOhhl8 yXugw6uWTzjda0sQmsIGm2bs53df8teI57inbjO4b1vaVOvbHFhlnrDpvgOUyIWr 9l3oPzyev+RSGvkdRkFNMEnIdxNRA8hKTvuym6gwfO4ppckhg5lVVqeB/mS9jDQk faFHAbxg7RmdU7+KwDuxekIylydi85u7sMstjSiwH2hAq+wTlv1tw6EayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDwIGHCxk3XJV2f2hTPhcLxDpaVMB8GA1UdIwQY MBaAFAqzjauQxhRQ3IrWa0hdU2y6+eD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMt NDNlODExZjc3NjgxLzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMtNDNlODExZjc3Njgx LzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccBFveA9 sWICWp7CqR+Z/yHMAfDekrL+uo70qkp49IbvroOu//LdVJVR9JnZ55X/bKYCZikl H5K33XlCUfB958Qh+bCkUayJPVVgXQrPZBe7Ocf6aPmAzwD3n7tDoZbA/MJqQ5Kl jLrLPIL1h+E+FHlEMOn+iq84ntJ/TZcCi93BjkUeOssb/qJt/ylGEHfVwCh7ep07 gr8nj/4kTVIe/md8cARHrDCwX9QRzZT1Dc1zckjRT+iUsIhfPZblG6CVvLvkVXlw WotFDQANgQHnWZZkP+wk5nWMasbdqjVb926Slsjh9W27ZiKj2qN7aCylhc3qTF/c IOr2OCDDsfeO+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:51 2025 by rpki-client