This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json) Hash identifier: N3Q3hK/s+/2ALmWGCf6IjQseBr4sRaO9PSlVBjyE0ww= Subject key identifier: 29:14:E9:97:35:91:95:EC:5D:26:55:82:D4:CD:3C:94:CC:89:98:FC Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16 Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16 Certificate serial: 019AF19B8413F397B8D81BBC40CE2D7B753F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft Manifest number: 081F Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: Bd7FcffIWEfbujnp9WS-BYRh8lY.roa (hash: 1aqbGtOUu0Pm7rzIGfOGmwYKjDdAbGNYXLp563xVUt0=) 2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: gBBh2cZNmr8d8R215DNWKtUIy8ZX1CLmM4AMw/7kDiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:84:13:f3:97:b8:d8:1b:bc:40:ce:2d:7b:75:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16 Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=2914e997359195ec5d265582d4cd3c94cc8998fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6d:b5:8d:56:53:65:c1:42:f5:e7:b9:46:33: d5:98:3b:5a:f3:7f:6f:2a:3a:61:5e:10:27:f6:e7: 7e:40:b5:97:91:d0:39:d0:51:6d:6f:d6:54:51:a5: bc:f7:40:e2:c4:87:bc:7a:95:31:18:35:2c:94:70: d9:37:55:89:b0:50:99:03:70:89:63:24:06:41:b4: d6:3e:df:d4:5d:56:b9:63:3c:ef:95:7e:b2:18:cd: 4b:b4:f8:7d:bc:2a:06:a5:1d:0d:a3:bc:48:98:bc: 6a:f0:08:80:0d:ab:da:83:2b:de:5f:35:39:1e:6c: 46:32:cc:a3:ec:1a:59:2b:8f:86:cd:ea:48:34:32: 02:37:23:d5:b7:d8:82:98:f3:95:73:23:2b:34:2f: 4a:2e:35:0d:ac:c3:ad:1f:08:05:d0:55:77:e6:4c: ba:44:e6:bd:24:03:d7:c1:fa:90:f7:66:d3:b9:a7: a7:a4:c7:ca:c2:e3:4b:51:ac:fc:b3:b7:ef:45:5a: 68:4d:41:c3:ea:c6:39:8f:b8:cc:4b:04:31:37:53: e5:94:90:85:a7:3b:bd:14:bb:33:67:81:4b:b5:59: 57:6a:a7:13:78:48:83:e7:99:da:d0:9e:ea:92:d8: a0:41:1c:59:68:61:d2:b3:f5:b1:e4:d3:62:c9:93: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:E9:97:35:91:95:EC:5D:26:55:82:D4:CD:3C:94:CC:89:98:FC X509v3 Authority Key Identifier: keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:aa:72:95:c7:f6:bc:6f:d8:85:ee:b6:ad:fb:e7:d3:a6:f9: e7:db:fd:e4:d9:4e:10:81:54:79:4c:13:d2:bf:16:c5:30:e0: 03:ae:b5:8c:bd:52:02:ac:bb:f4:5e:4a:4b:8e:f0:60:92:72: a9:8b:49:24:82:f8:c3:43:3e:1d:03:34:fd:96:87:c5:d0:2a: e8:45:99:65:43:cc:ab:7b:58:2a:05:af:4c:db:70:b2:8d:39: 3e:ae:b1:8d:9a:7e:7d:eb:0f:c5:fc:5d:19:fb:d1:fa:20:81: a2:da:63:c6:2e:07:45:d1:5d:0d:f8:7e:c1:49:39:b7:48:ac: a1:cc:29:8a:02:80:10:d5:1b:14:a1:33:61:b6:12:9a:51:b0: 26:6c:bb:74:60:77:ac:6d:d3:c6:92:d8:a2:0c:43:de:15:1e: 8b:e6:e0:d8:21:64:4a:76:26:2d:c9:61:24:2b:d9:4c:43:f9: d8:44:17:ce:e2:a9:11:36:6f:93:50:00:ac:f4:52:5c:8d:8a: 01:da:72:f5:70:ab:1e:92:ea:7f:f2:00:1b:e1:72:9b:6d:fb: f8:06:5a:ae:5c:0f:37:1b:a2:3f:14:fa:39:e0:67:e8:82:ec: 05:8f:4e:3c:cc:3a:c4:09:13:75:6d:b3:1c:30:6c:1a:28:b4: 55:58:a0:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4QT85e42Bu8QM4te3U/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWRhYWQzZDI3ZGJjZjk0ZDMwMDZmYmZiYTdlMWRkZDVk MjlmMTYwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EygyOTE0ZTk5NzM1OTE5NWVjNWQyNjU1ODJkNGNkM2M5NGNjODk5OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl221jVZTZcFC9ee5RjPVmDta839v KjphXhAn9ud+QLWXkdA50FFtb9ZUUaW890DixIe8epUxGDUslHDZN1WJsFCZA3CJ YyQGQbTWPt/UXVa5YzzvlX6yGM1LtPh9vCoGpR0No7xImLxq8AiADavagyveXzU5 HmxGMsyj7BpZK4+GzepINDICNyPVt9iCmPOVcyMrNC9KLjUNrMOtHwgF0FV35ky6 ROa9JAPXwfqQ92bTuaenpMfKwuNLUaz8s7fvRVpoTUHD6sY5j7jMSwQxN1PllJCF pzu9FLszZ4FLtVlXaqcTeEiD55na0J7qktigQRxZaGHSs/Wx5NNiyZMjNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkU6Zc1kZXsXSZVgtTNPJTMiZj8MB8GA1UdIwQY MBaAFAkdqtPSfbz5TTAG+/un4d3V0p8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGIt ZWIzN2U3NzZkZGQyLzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGItZWIzN2U3NzZkZGQy LzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqpylcf2 vG/Yhe62rfvn06b559v95NlOEIFUeUwT0r8WxTDgA661jL1SAqy79F5KS47wYJJy qYtJJIL4w0M+HQM0/ZaHxdAq6EWZZUPMq3tYKgWvTNtwso05Pq6xjZp+fesPxfxd GfvR+iCBotpjxi4HRdFdDfh+wUk5t0isocwpigKAENUbFKEzYbYSmlGwJmy7dGB3 rG3TxpLYogxD3hUei+bg2CFkSnYmLclhJCvZTEP52EQXzuKpETZvk1AArPRSXI2K Adpy9XCrHpLqf/IAG+Fym237+AZarlwPNxuiPxT6OeBn6ILsBY9OPMw6xAkTdW2z HDBsGii0VVigaw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:47 2025 by rpki-client