This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json) Hash identifier: W/+E+gvaVU8P1tD5C9IOse3VT+I/jqlOHrqB+tm/Zkw= Subject key identifier: 9E:4F:E3:46:AA:55:4F:CE:7B:5E:6A:91:45:D9:9D:16:F3:07:B9:30 Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Certificate serial: 019AF19B36C20DD44558D43473A32E1BC8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=) 2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: 8CY03m/DBagXXVhMohUZjRg+/Y2esmKUPogwD9n3C64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:c2:0d:d4:45:58:d4:34:73:a3:2e:1b:c8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=9e4fe346aa554fce7b5e6a9145d99d16f307b930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:1a:69:87:f3:08:e7:ea:63:26:53:e7:69: 8a:cc:22:44:95:26:6e:b5:32:9b:19:8d:93:0f:db: 3c:45:aa:31:ee:7b:76:30:e2:98:73:3b:25:50:f7: a7:2c:53:37:e0:e9:31:0c:ba:c5:65:c4:17:52:7b: 3e:3d:32:95:16:c4:8d:12:ce:94:4e:ff:73:06:89: ea:ec:59:a2:dd:ca:62:84:c9:b6:00:08:b8:c5:7e: fb:b5:87:7c:25:52:2c:b1:1c:b4:0d:45:db:96:b7: 54:f1:22:b2:27:45:dc:15:24:77:5a:46:39:4b:58: 12:69:4a:7e:5f:28:3f:ab:5b:c7:0b:22:dc:e1:99: 93:14:ad:69:23:91:4d:00:bb:1b:64:f5:9b:39:89: 06:d7:68:e4:dc:51:8b:4d:4a:39:88:38:eb:3d:e8: 04:ae:88:19:d0:18:c1:00:61:6b:78:aa:6e:7b:2f: d7:5c:b5:57:06:9c:3a:45:7b:8d:0c:ec:ba:a4:9f: ad:03:03:f5:e1:98:18:00:86:74:01:b7:fc:77:b6: 7d:6f:ce:76:51:d7:fc:1d:00:ce:93:7d:ac:d9:31: 32:25:94:a5:c8:3e:13:85:5d:5d:ff:95:ae:18:29: 8a:af:31:ca:1e:88:81:c6:3b:9b:a1:4a:07:06:b4: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4F:E3:46:AA:55:4F:CE:7B:5E:6A:91:45:D9:9D:16:F3:07:B9:30 X509v3 Authority Key Identifier: keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0b:ea:5e:9b:d0:7b:1f:b8:bc:05:ef:cc:79:ed:30:53:f5: 64:fc:d0:aa:1f:58:55:7f:ba:83:c2:ca:09:4b:0e:00:57:a3: 5e:e3:97:da:c3:8c:c9:a2:c5:cd:14:c7:0d:cc:3e:1a:e3:68: 35:2e:c5:c4:b6:98:db:f5:8d:4f:e0:4e:e7:fc:ec:fe:62:f9: b4:39:99:31:02:bb:de:28:4e:c2:2b:00:88:9b:8a:ad:5e:4e: 20:f3:93:8d:04:4a:d2:6a:84:e4:10:90:01:d8:bd:aa:ff:55: bf:13:ba:a1:13:69:2a:70:53:01:ac:07:84:ed:ab:45:08:da: 00:0f:e9:26:b5:40:54:7b:1e:89:72:f8:ae:e8:c5:86:3a:12: c4:d7:2c:73:b3:2f:8d:d2:e6:02:ea:58:48:6d:a1:43:5e:28: fb:48:0a:e2:91:06:24:27:03:13:ea:c1:3b:4d:fa:d3:76:6a: 5d:0a:e9:8d:55:8d:83:40:a6:c2:49:77:0f:d6:e1:cd:25:2a: 2f:28:f1:a6:47:7b:68:70:c3:1c:c3:83:d4:d2:37:79:5c:62: 0d:eb:16:ec:5f:28:0d:0c:80:5c:0e:95:41:fa:7b:bd:d3:0f: 45:85:81:c0:0d:16:c0:8c:bc:5b:d8:f2:2d:aa:a0:79:b2:94: 61:bd:fa:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzbCDdRFWNQ0c6MuG8j5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0 NDVmYmUwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg5ZTRmZTM0NmFhNTU0ZmNlN2I1ZTZhOTE0NWQ5OWQxNmYzMDdiOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOkaaYfzCOfqYyZT52mKzCJElSZu tTKbGY2TD9s8Raox7nt2MOKYczslUPenLFM34OkxDLrFZcQXUns+PTKVFsSNEs6U Tv9zBonq7Fmi3cpihMm2AAi4xX77tYd8JVIssRy0DUXblrdU8SKyJ0XcFSR3WkY5 S1gSaUp+Xyg/q1vHCyLc4ZmTFK1pI5FNALsbZPWbOYkG12jk3FGLTUo5iDjrPegE rogZ0BjBAGFreKpuey/XXLVXBpw6RXuNDOy6pJ+tAwP14ZgYAIZ0Abf8d7Z9b852 Udf8HQDOk32s2TEyJZSlyD4ThV1d/5WuGCmKrzHKHoiBxjuboUoHBrTPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5P40aqVU/Oe15qkUXZnRbzB7kwMB8GA1UdIwQY MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5 LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwvqXpvQ ex+4vAXvzHntMFP1ZPzQqh9YVX+6g8LKCUsOAFejXuOX2sOMyaLFzRTHDcw+GuNo NS7FxLaY2/WNT+BO5/zs/mL5tDmZMQK73ihOwisAiJuKrV5OIPOTjQRK0mqE5BCQ Adi9qv9VvxO6oRNpKnBTAawHhO2rRQjaAA/pJrVAVHseiXL4rujFhjoSxNcsc7Mv jdLmAupYSG2hQ14o+0gK4pEGJCcDE+rBO03603ZqXQrpjVWNg0Cmwkl3D9bhzSUq Lyjxpkd7aHDDHMOD1NI3eVxiDesW7F8oDQyAXA6VQfp7vdMPRYWBwA0WwIy8W9jy LaqgebKUYb369g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:57 2025 by rpki-client