This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: nu/Bhn6YmJODJECgK+NigHjMPuUjzn+Drw4b75+qu5U= Subject key identifier: 81:B9:2F:DB:EA:48:6D:6B:87:CC:B3:CC:2E:99:29:ED:EE:79:31:06 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019AF352D1C62573FE1FB81E9D376B7DC7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 11:01:22 +0000 Manifest this update: Sat 06 Dec 2025 11:01:22 +0000 Manifest next update: Sun 07 Dec 2025 11:01:22 +0000 Files and hashes: 1: 0TepxYDRCJ_5cWsq1YkkvURL6hE.roa (hash: jbUg3WZRyt3dAqtU/8wDqNaiICIVnpJ/MOPNwEWZYpE=) 2: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: wm5bVZ3chhpRLb3nhCcWO1+m+ZNfKIKxtnwsYciP+q4=) 3: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: dISl5Ukw4YQJK0H6aBRNMVHoUHY.roa (hash: HAxvloz4GQvfIeGFIns8AnRlOc6klJKO+6R8zX7/dw8=) 8: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 9: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) 11: zJBCvHs2wbJWJ0A5Rejmy7Aa7ak.roa (hash: KV1JiCfLEP0rU5d+WXfKUjD5DQXv37b4kuNAfak9GSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d1:c6:25:73:fe:1f:b8:1e:9d:37:6b:7d:c7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Dec 6 11:01:22 2025 GMT Not After : Dec 7 11:01:22 2025 GMT Subject: CN=81b92fdbea486d6b87ccb3cc2e9929edee793106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:38:3e:dd:48:6e:d7:8d:f3:f6:91:7d:b5: 08:9d:60:96:bd:c7:fb:b3:86:a0:5d:34:45:0b:a2: 9d:63:d5:0a:90:1c:ee:86:4f:f0:85:39:dd:53:8a: 46:98:4c:f5:4c:71:cf:df:22:c2:c4:21:2d:37:02: e0:b2:57:58:27:30:7e:85:d8:78:20:61:ff:d4:0d: e1:a1:a7:a8:57:96:f3:30:99:c0:17:b6:90:5f:55: 1f:8d:63:f8:12:d5:a4:cd:97:60:b1:b0:7f:c6:4f: 19:c9:15:5b:09:18:ca:66:9d:e6:1b:e0:d1:a1:9c: 41:6e:ea:2e:08:e4:b2:18:60:4b:b2:7e:0a:74:32: e6:78:7a:ac:99:25:10:e8:87:56:ed:59:77:eb:2a: 33:e2:3b:37:eb:d6:1f:fe:6d:45:ad:02:a7:a8:8d: 30:f2:41:20:aa:35:08:91:19:dc:5a:f0:6f:ab:04: 47:67:80:24:30:c2:ea:6c:22:9a:fa:e2:ee:a1:c8: 92:24:9c:0f:7d:11:e3:75:9b:e4:2b:b8:c8:2f:04: 29:de:05:41:f8:c1:73:dd:1b:72:2f:ab:db:dc:15: 95:95:20:e4:2d:44:5d:5b:4b:7c:3e:e9:88:d4:67: 99:da:87:19:d8:bd:e5:53:cb:82:85:59:86:b7:ab: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B9:2F:DB:EA:48:6D:6B:87:CC:B3:CC:2E:99:29:ED:EE:79:31:06 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:73:fa:70:8d:da:64:a8:0a:cd:64:83:1e:c5:67:63:b1:b5: 51:3d:68:5f:56:10:9d:b0:51:de:3e:06:0f:ea:82:28:eb:6a: 9c:bb:2f:6e:f3:e2:d1:32:5a:1c:50:c1:4a:bc:cb:1a:76:7b: 91:0c:d1:87:d3:d7:de:47:86:d1:d5:51:16:35:bf:4b:32:8b: 02:5b:3e:dc:2e:6d:b3:be:e3:d9:4b:2a:b6:4d:04:4f:82:f6: b3:3c:84:d8:e2:fc:1b:c4:68:10:ce:41:e9:01:5b:66:30:6f: fa:d1:d6:b0:7c:ec:08:92:34:f4:b8:17:bf:14:90:aa:5a:99: cd:b2:9f:fa:5b:a7:7d:dd:df:39:e0:20:ae:ce:8b:6a:c5:dc: 82:c1:97:b7:cb:f7:5c:10:4b:6d:0d:38:72:8d:10:5d:4b:ed: c8:f3:16:e7:c5:02:46:b0:d2:ac:e7:21:1b:e8:68:98:1c:e1: 5b:cf:31:95:d1:9f:34:e1:24:de:38:cc:c7:5d:f0:94:34:ca: d5:de:d7:89:52:3c:34:29:73:5b:6a:f6:23:2b:d1:94:05:6b: 29:ce:1c:6a:a7:6b:a3:8d:69:d5:b5:82:11:6e:6a:14:46:cd: 9a:43:92:33:49:5e:33:ff:0c:25:db:06:91:78:85:0d:91:ce: 3f:0c:17:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtHGJXP+H7genTdrfcfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUxMjA2MTEwMTIyWhcNMjUxMjA3MTEwMTIyWjAzMTEwLwYDVQQD Eyg4MWI5MmZkYmVhNDg2ZDZiODdjY2IzY2MyZTk5MjllZGVlNzkzMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiY4Pt1IbteN8/aRfbUInWCWvcf7 s4agXTRFC6KdY9UKkBzuhk/whTndU4pGmEz1THHP3yLCxCEtNwLgsldYJzB+hdh4 IGH/1A3hoaeoV5bzMJnAF7aQX1UfjWP4EtWkzZdgsbB/xk8ZyRVbCRjKZp3mG+DR oZxBbuouCOSyGGBLsn4KdDLmeHqsmSUQ6IdW7Vl36yoz4js369Yf/m1FrQKnqI0w 8kEgqjUIkRncWvBvqwRHZ4AkMMLqbCKa+uLuociSJJwPfRHjdZvkK7jILwQp3gVB +MFz3RtyL6vb3BWVlSDkLURdW0t8PumI1GeZ2ocZ2L3lU8uChVmGt6sP4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIG5L9vqSG1rh8yzzC6ZKe3ueTEGMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHP6cI3a ZKgKzWSDHsVnY7G1UT1oX1YQnbBR3j4GD+qCKOtqnLsvbvPi0TJaHFDBSrzLGnZ7 kQzRh9PX3keG0dVRFjW/SzKLAls+3C5ts77j2Usqtk0ET4L2szyE2OL8G8RoEM5B 6QFbZjBv+tHWsHzsCJI09LgXvxSQqlqZzbKf+lunfd3fOeAgrs6LasXcgsGXt8v3 XBBLbQ04co0QXUvtyPMW58UCRrDSrOchG+homBzhW88xldGfNOEk3jjMx13wlDTK 1d7XiVI8NClzW2r2IyvRlAVrKc4caqdro41p1bWCEW5qFEbNmkOSM0leM/8MJdsG kXiFDZHOPwwXOA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:39 2025 by rpki-client