This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft File: CGKC51Eob7vsx16m7cwlQZLFXHY.mft (raw, json) Hash identifier: XlCq2hmGVYbsu5eO2oqVGdO0K4G73kc+6WTviQ5vYe4= Subject key identifier: 03:F1:25:07:86:97:85:16:7D:95:0A:54:3F:EA:22:7C:27:78:FE:9E Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76 Certificate serial: 019AF2090F9E70F22DA855D8A04711B6DD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: 660TeS3Zn3DLQGxj61zAMaI5cys.roa (hash: /OIs6zbcslTXyME8vlZ0u2I1w3H0JKAUoh5g6JxOOP4=) 2: CGKC51Eob7vsx16m7cwlQZLFXHY.crl (hash: W2EFlIxkIl3w1vV5cWuBMnMD7omPUm9/auqCT5EwgBo=) 3: KooPuekVUAdlKPtxN-pIrWZJGfI.roa (hash: IrfdSHL+ZRO1mnii3eZrt4lHidhpYe4uCjXuV308boU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0f:9e:70:f2:2d:a8:55:d8:a0:47:11:b6:dd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76 Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=03f12507869785167d950a543fea227c2778fe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:e4:77:f7:8f:3d:cd:7d:9d:27:7a:55:05: d9:7e:12:10:42:e6:13:88:2a:3b:19:d7:0f:40:63: 4e:b7:0e:e4:bb:47:f9:c8:06:eb:e8:77:6e:49:94: 41:a3:aa:e8:fd:ae:8c:62:96:cf:33:6c:c4:3b:08: 12:ef:d1:c4:25:d8:f4:34:ee:9b:dc:6c:8e:e9:a1: 04:76:ce:0f:2f:ae:46:5f:0f:48:1d:45:1e:00:3d: bd:c0:ca:ae:9c:1c:9d:16:fc:a7:0d:44:d7:c2:c2: 24:05:01:e3:fe:14:22:1e:29:f2:3e:a2:83:85:59: 47:a4:d4:e6:02:a3:cd:39:57:97:90:1f:c8:08:57: 9b:7f:87:5b:a1:2c:6b:fe:0c:f3:8e:5a:e3:ff:11: 5e:92:7b:5d:37:f6:cc:ac:8e:db:5e:5e:29:36:38: 82:32:29:4b:b0:a5:ca:d3:f8:f6:81:19:8a:67:7a: 1c:94:db:8e:94:58:80:fc:c6:23:ed:01:9d:b5:14: 79:0c:99:84:e1:13:1c:db:f3:d3:0b:de:a4:87:ce: 98:06:f5:9b:ce:d4:86:40:d0:1e:b3:ea:8c:2b:eb: 37:ef:c2:1e:ff:93:20:ce:ba:3a:e5:eb:b1:be:76: c7:61:90:d3:89:eb:af:e6:84:54:ac:ee:21:70:b2: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F1:25:07:86:97:85:16:7D:95:0A:54:3F:EA:22:7C:27:78:FE:9E X509v3 Authority Key Identifier: keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:df:cc:eb:c9:a7:90:7d:54:88:1b:3d:07:2f:5f:66:0b:f3: 28:f5:75:40:1d:90:8e:b7:ce:6f:05:ae:79:43:f0:a4:22:8f: e6:4a:57:ad:24:81:7f:e1:45:9b:dd:06:64:ee:42:41:e4:4b: 65:82:ab:70:53:b0:c2:00:f9:ab:09:77:94:61:a6:9c:39:fc: 3d:0a:45:b4:14:6e:e0:8d:af:2c:fc:15:e2:2a:58:76:6b:ae: 87:ff:87:60:95:54:f7:79:87:54:11:5c:61:ee:6a:87:c9:e0: 80:e1:72:2e:3b:81:1a:b2:21:07:fd:51:cd:05:1b:f3:b7:37: 3b:26:a8:f5:39:67:be:62:e8:4b:e5:4c:ea:dc:7f:9a:cb:27: e1:fb:c1:81:c9:6a:be:d9:11:43:60:30:a0:db:89:3a:50:1a: 51:d9:11:5a:75:20:f0:1d:92:63:a5:0b:2b:23:cf:4a:38:51: 39:cd:f7:30:2b:47:0b:ef:39:2c:2e:1c:db:29:19:e7:9e:9f: 97:a5:75:6f:ac:1b:a9:f5:f5:3f:a0:41:76:b0:72:c1:ed:c8: e2:f1:a4:9d:57:d8:7a:e7:91:7c:69:7d:34:b2:19:cb:fc:d4: c1:4f:9f:f6:7f:ec:16:8c:66:46:84:12:cc:2b:b4:e7:18:6b: 9c:18:1d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ+ecPItqFXYoEcRtt1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjI4MmU3NTEyODZmYmJlY2M3NWVhNmVkY2MyNTQxOTJj NTVjNzYwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EygwM2YxMjUwNzg2OTc4NTE2N2Q5NTBhNTQzZmVhMjI3YzI3NzhmZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxPkd/ePPc19nSd6VQXZfhIQQuYT iCo7GdcPQGNOtw7ku0f5yAbr6HduSZRBo6ro/a6MYpbPM2zEOwgS79HEJdj0NO6b 3GyO6aEEds4PL65GXw9IHUUeAD29wMqunBydFvynDUTXwsIkBQHj/hQiHinyPqKD hVlHpNTmAqPNOVeXkB/ICFebf4dboSxr/gzzjlrj/xFekntdN/bMrI7bXl4pNjiC MilLsKXK0/j2gRmKZ3oclNuOlFiA/MYj7QGdtRR5DJmE4RMc2/PTC96kh86YBvWb ztSGQNAes+qMK+s378Ie/5Mgzro65euxvnbHYZDTieuv5oRUrO4hcLKASQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPxJQeGl4UWfZUKVD/qInwneP6eMB8GA1UdIwQY MBaAFAhigudRKG+77Mdepu3MJUGSxVx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUt NmIwNGFhZGVlZjEwLzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZDg1OTgtZTllMi00NzA5LWI1MzUtNmIwNGFhZGVlZjEw LzEvQ0dLQzUxRW9iN3ZzeDE2bTdjd2xRWkxGWEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN/M68mn kH1UiBs9By9fZgvzKPV1QB2QjrfObwWueUPwpCKP5kpXrSSBf+FFm90GZO5CQeRL ZYKrcFOwwgD5qwl3lGGmnDn8PQpFtBRu4I2vLPwV4ipYdmuuh/+HYJVU93mHVBFc Ye5qh8nggOFyLjuBGrIhB/1RzQUb87c3Oyao9TlnvmLoS+VM6tx/mssn4fvBgclq vtkRQ2AwoNuJOlAaUdkRWnUg8B2SY6ULKyPPSjhROc33MCtHC+85LC4c2ykZ556f l6V1b6wbqfX1P6BBdrBywe3I4vGknVfYeueRfGl9NLIZy/zUwU+f9n/sFoxmRoQS zCu05xhrnBgdxA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:29 2025 by rpki-client