This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json) Hash identifier: TEKA86atGJ9h+0VARGYEcrbFwAQKQdMfvNnujoFu3xw= Subject key identifier: F5:10:AE:9B:2F:23:81:BD:F3:E9:FE:AF:4C:BA:8D:02:A9:77:89:A2 Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Certificate serial: 019AF49B9C7AC7D9BD8D1D0AFCC721007ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:00:30 +0000 Manifest this update: Sat 06 Dec 2025 17:00:30 +0000 Manifest next update: Sun 07 Dec 2025 17:00:30 +0000 Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: KuCVO5XqZRbuQ8J5pFpMpfuAWlvM6kiTMruUbnpObgw=) 2: UDoG0VyGiTlw2cE_bk01kxTEOgk.roa (hash: xsTPKmGopDqXIX9OmyZyFM17NRbHEv2ddzZ5w1gDheM=) 3: w7idwTdXPoOWVZlR9CoFAbQi8hM.roa (hash: ilsj5ZYvMhkJ++mzc4MatQJ2qPuYOf+lvnTyvWyEf1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:9c:7a:c7:d9:bd:8d:1d:0a:fc:c7:21:00:7a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Validity Not Before: Dec 6 17:00:30 2025 GMT Not After : Dec 7 17:00:30 2025 GMT Subject: CN=f510ae9b2f2381bdf3e9feaf4cba8d02a97789a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:e0:02:bd:23:3e:89:15:dc:c1:0f:f4:f6: 45:5b:e6:1e:e7:53:eb:d7:13:6c:83:d3:b7:b5:e5: af:83:d0:3b:a7:7b:4a:7a:0b:37:21:b1:6d:44:79: 3a:a1:26:f8:13:de:4c:51:04:e4:cb:06:30:0e:a6: 2d:e5:95:96:db:5b:ef:95:eb:29:bf:ea:83:ec:3c: 62:37:09:94:37:d7:cc:a9:9c:a3:bd:6b:36:a5:c5: 4f:b9:8b:b5:c3:f0:5b:b1:04:f6:4d:3d:42:a8:fb: 3b:1c:54:89:4e:33:a3:2a:0c:87:f7:b8:56:ca:d3: ff:fb:42:71:7c:8a:6f:9d:af:28:0f:5a:b8:bc:92: b1:d5:c6:37:56:18:11:a2:e7:28:b0:3b:2d:73:66: 18:8a:75:29:7d:00:3d:10:57:f5:ed:72:e5:58:9f: 10:69:40:6d:37:dd:4d:2c:52:26:01:af:67:15:54: 06:5e:d6:fe:b7:b3:8c:64:82:33:cd:c9:3a:85:3c: 5c:b0:2a:43:ca:d1:8c:0a:17:6c:c6:d1:c7:a4:6f: 7e:8e:ff:2a:47:df:72:2c:47:a8:df:06:10:9d:fd: f1:9a:11:d6:0e:ca:82:e7:ff:6e:fc:99:8b:c0:61: 0c:12:3f:99:6c:af:93:09:43:c1:05:66:ce:9b:43: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:AE:9B:2F:23:81:BD:F3:E9:FE:AF:4C:BA:8D:02:A9:77:89:A2 X509v3 Authority Key Identifier: keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:38:c5:ea:9a:f1:ce:51:32:7d:05:2d:23:6f:df:ea:f1: 12:4a:49:36:5f:57:e9:44:9a:7d:21:3a:1c:f6:e6:01:c6:07: 3d:9b:c6:5a:e3:ee:72:5b:5a:d6:3b:4d:e1:40:aa:9c:73:9c: 37:f7:29:51:43:c6:e6:66:ae:e0:10:c9:91:15:5a:9a:7b:21: 42:4c:74:c1:8d:ad:15:b9:a8:7a:d8:ac:ba:47:12:3a:11:5f: 33:11:0e:d8:c8:37:47:d3:23:3f:b4:42:8b:ed:b3:a4:63:0d: 38:9e:7d:e6:b2:a8:6a:41:04:80:fa:6d:4d:4a:00:d1:11:d6: d5:fd:a9:32:75:d1:da:38:6d:f1:61:89:ef:8a:54:f7:ba:bc: 7f:b7:31:83:50:fd:c5:b2:5a:4a:40:18:86:ce:57:06:8d:ff: ad:b7:e6:c9:5f:7d:7d:d1:23:d9:28:a0:a8:54:d9:b4:ad:8c: 72:73:04:50:23:80:ea:ec:d4:22:76:fd:5a:74:0c:64:76:cc: 8d:7d:ae:f4:d5:e4:7e:dc:0e:cc:e4:71:66:29:d3:21:1e:9c: 48:f3:1f:68:dc:82:a2:6a:89:70:d9:ab:05:ba:dc:3c:90:be: 84:aa:ae:f5:7b:96:0b:b1:5b:54:bf:30:90:18:6c:a4:15:90: 69:8c:a9:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m5x6x9m9jR0K/MchAHrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy MjdkOTUwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjA3MTcwMDMwWjAzMTEwLwYDVQQD EyhmNTEwYWU5YjJmMjM4MWJkZjNlOWZlYWY0Y2JhOGQwMmE5Nzc4OWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJrgAr0jPokV3MEP9PZFW+Ye51Pr 1xNsg9O3teWvg9A7p3tKegs3IbFtRHk6oSb4E95MUQTkywYwDqYt5ZWW21vvlesp v+qD7DxiNwmUN9fMqZyjvWs2pcVPuYu1w/BbsQT2TT1CqPs7HFSJTjOjKgyH97hW ytP/+0JxfIpvna8oD1q4vJKx1cY3VhgRoucosDstc2YYinUpfQA9EFf17XLlWJ8Q aUBtN91NLFImAa9nFVQGXtb+t7OMZIIzzck6hTxcsCpDytGMChdsxtHHpG9+jv8q R99yLEeo3wYQnf3xmhHWDsqC5/9u/JmLwGEMEj+ZbK+TCUPBBWbOm0NJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUQrpsvI4G98+n+r0y6jQKpd4miMB8GA1UdIwQY MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It NzExNjk1NjdlMzljLzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqk4xeqa 8c5RMn0FLSNv3+rxEkpJNl9X6USafSE6HPbmAcYHPZvGWuPuclta1jtN4UCqnHOc N/cpUUPG5mau4BDJkRVamnshQkx0wY2tFbmoetisukcSOhFfMxEO2Mg3R9MjP7RC i+2zpGMNOJ595rKoakEEgPptTUoA0RHW1f2pMnXR2jht8WGJ74pU97q8f7cxg1D9 xbJaSkAYhs5XBo3/rbfmyV99fdEj2SigqFTZtK2McnMEUCOA6uzUInb9WnQMZHbM jX2u9NXkftwOzORxZinTIR6cSPMfaNyComqJcNmrBbrcPJC+hKqu9XuWC7FbVL8w kBhspBWQaYypEg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:37 2025 by rpki-client