This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json) Hash identifier: PTJlj1ift6457UiNUEyZOAiOKl+dQA3F6JELAATdgMY= Subject key identifier: 2F:75:31:DA:94:57:54:B5:D5:D6:B5:DC:93:63:25:2D:AA:38:B0:EF Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24 Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24 Certificate serial: 019B31FAA61B8096BA926B25580244A5EB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 15:01:08 +0000 Manifest this update: Thu 18 Dec 2025 15:01:08 +0000 Manifest next update: Fri 19 Dec 2025 15:01:08 +0000 Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: boewrxQmom0WibILeQIGkweNVcq2443gyThdpaXxSxo=) 2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=) 3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:a6:1b:80:96:ba:92:6b:25:58:02:44:a5:eb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24 Validity Not Before: Dec 18 15:01:08 2025 GMT Not After : Dec 19 15:01:08 2025 GMT Subject: CN=2f7531da945754b5d5d6b5dc9363252daa38b0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:25:56:55:12:9a:78:bd:3d:7d:b5:f9:22: 4a:ee:a8:82:3f:44:ba:e1:cf:4a:32:15:eb:e3:55: 92:b1:e8:a7:af:53:85:80:9f:97:b1:f8:49:14:42: ed:80:59:33:06:93:04:66:48:66:a3:5d:2f:40:17: 79:63:1b:14:3b:79:dd:54:84:75:20:ad:5f:49:cc: e3:6e:61:05:52:bb:73:93:28:03:00:b9:52:fa:b6: 11:45:93:0a:24:30:ae:59:1f:47:45:50:b2:31:84: 84:fd:9d:23:77:a8:ca:9b:dd:a8:5c:18:35:b1:2e: 6b:63:5d:95:f8:21:df:a2:88:94:61:61:d8:7d:5f: 0c:00:ae:e3:75:bd:87:bf:5f:77:26:cf:5e:1f:5e: 27:58:51:12:cc:93:8a:9d:88:67:4a:23:43:f8:04: d2:a1:a2:56:d6:8f:7e:9c:66:f3:b1:7b:ad:ab:31: 70:22:f2:66:9c:49:b9:77:a4:f7:16:8b:5f:79:fe: a6:ef:45:a0:1a:47:e6:d9:5f:01:4c:4c:6a:7c:6d: 5a:2d:63:0a:87:20:d1:5a:80:1d:67:cc:bf:f6:70: 4f:3a:e0:b2:07:a5:e5:4c:1d:56:c7:8c:42:b1:b7: 0c:05:bc:dd:ad:5f:86:37:61:ed:fe:e7:b2:15:a2: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:31:DA:94:57:54:B5:D5:D6:B5:DC:93:63:25:2D:AA:38:B0:EF X509v3 Authority Key Identifier: keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f0:bb:9c:90:f4:6e:7f:c1:b8:1b:46:5d:a2:bd:df:f9:a0: 6b:f3:33:c5:d9:0b:7d:7b:7d:85:c1:42:e5:c2:4e:b8:da:6e: e5:3c:0a:a4:a2:45:37:a2:0e:ef:ae:5e:d1:41:51:0b:ff:1c: b6:dc:d8:33:a8:87:6b:ab:9f:18:01:f5:9a:4c:36:bf:c5:f5: 8f:be:50:82:9a:33:cd:82:33:96:84:f2:73:03:23:35:fe:70: aa:fa:3f:d6:49:12:ba:c2:31:fa:10:83:c7:db:a4:10:93:7f: 10:99:5b:49:66:d9:fc:fb:07:08:e9:d8:10:43:0e:9f:f4:c8: a3:ea:47:60:24:63:79:ee:8d:ee:e5:b0:c7:fd:5c:1d:90:44: 12:44:95:ec:08:fe:3f:7b:85:76:e3:d6:59:70:43:ad:88:25: 42:ca:74:4c:fc:ea:e5:8b:03:ab:65:18:6f:20:73:f1:fa:d0: e9:ab:fb:89:8e:e0:fa:43:83:48:e0:ef:72:39:61:91:dd:12: d5:76:35:8c:51:4c:0b:38:d5:d4:7d:34:88:f7:a6:fd:15:91: e8:8c:6e:a3:72:c6:d2:db:14:75:15:98:28:5d:8d:c2:6b:3c: 0f:f9:58:67:7e:ad:06:e8:bb:68:bc:89:0c:74:76:37:60:22: 3d:df:13:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+qYbgJa6kmslWAJEpesFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNTMxOGM1OGJmNWJhNzQzMjRiMjVkMDM3NDA0ZGQ4ZGRh OWZmMjQwHhcNMjUxMjE4MTUwMTA4WhcNMjUxMjE5MTUwMTA4WjAzMTEwLwYDVQQD EygyZjc1MzFkYTk0NTc1NGI1ZDVkNmI1ZGM5MzYzMjUyZGFhMzhiMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGYlVlUSmni9PX21+SJK7qiCP0S6 4c9KMhXr41WSseinr1OFgJ+XsfhJFELtgFkzBpMEZkhmo10vQBd5YxsUO3ndVIR1 IK1fSczjbmEFUrtzkygDALlS+rYRRZMKJDCuWR9HRVCyMYSE/Z0jd6jKm92oXBg1 sS5rY12V+CHfooiUYWHYfV8MAK7jdb2Hv193Js9eH14nWFESzJOKnYhnSiND+ATS oaJW1o9+nGbzsXutqzFwIvJmnEm5d6T3Fotfef6m70WgGkfm2V8BTExqfG1aLWMK hyDRWoAdZ8y/9nBPOuCyB6XlTB1Wx4xCsbcMBbzdrV+GN2Ht/ueyFaLZxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC91MdqUV1S11da13JNjJS2qOLDvMB8GA1UdIwQY MBaAFApTGMWL9bp0Mksl0DdATdjdqf8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2xNWXhZdjF1blF5U3lYUU4wQk4yTjJwX3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84NTJjZmItNDQ3MS00MjkwLTkxZjQt NmJjNDkwNWM0MmQ0LzEvQ2xNWXhZdjF1blF5U3lYUU4wQk4yTjJwX3lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84NTJjZmItNDQ3MS00MjkwLTkxZjQtNmJjNDkwNWM0MmQ0 LzEvQ2xNWXhZdjF1blF5U3lYUU4wQk4yTjJwX3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivC7nJD0 bn/BuBtGXaK93/mga/MzxdkLfXt9hcFC5cJOuNpu5TwKpKJFN6IO765e0UFRC/8c ttzYM6iHa6ufGAH1mkw2v8X1j75QgpozzYIzloTycwMjNf5wqvo/1kkSusIx+hCD x9ukEJN/EJlbSWbZ/PsHCOnYEEMOn/TIo+pHYCRjee6N7uWwx/1cHZBEEkSV7Aj+ P3uFduPWWXBDrYglQsp0TPzq5YsDq2UYbyBz8frQ6av7iY7g+kODSODvcjlhkd0S 1XY1jFFMCzjV1H00iPem/RWR6Ixuo3LG0tsUdRWYKF2Nwms8D/lYZ36tBui7aLyJ DHR2N2AiPd8Txw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:44 2025 by rpki-client