This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json) Hash identifier: repfj7qx0ukb+/rPm0UO5xLf5ODt5h5UpxJ7vT0LwhM= Subject key identifier: 07:E9:89:2D:D6:17:1F:60:61:5A:A6:66:6F:07:39:4B:80:19:6A:0D Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Certificate serial: 019AF208E257F04C49D7A45D9CDBE0737D91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: 0tS9mpUKCCUJpdKEHSJ/40NrWPsQk8LXDjg3sitQ/pk=) 2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e2:57:f0:4c:49:d7:a4:5d:9c:db:e0:73:7d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=07e9892dd6171f60615aa6666f07394b80196a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:77:66:5a:71:9b:13:21:a0:e6:73:32:f7: 41:19:04:b5:c3:24:eb:46:48:db:67:bc:8a:5d:05: 0f:28:0c:be:a0:af:a5:13:3d:da:14:ff:fc:a5:86: 1c:59:36:c1:8a:08:62:23:3f:ea:0d:d9:95:80:53: 56:75:14:84:9a:f6:d5:db:45:ff:c4:ee:f9:ab:a3: 3a:7f:d3:f0:0d:92:c4:cc:9b:28:5b:81:67:59:44: e2:44:ea:8c:f1:f2:06:18:56:35:20:df:23:97:4f: 34:92:0e:e8:fc:84:a1:16:db:d4:ee:d0:11:99:c1: f2:07:4f:02:e2:b1:a7:16:1e:35:7d:a8:f2:3b:85: f1:69:ce:8a:7b:cb:d6:36:7d:44:54:a8:a3:2d:af: 8d:62:a8:28:48:14:47:ca:fe:d5:de:39:83:cc:bb: c1:fe:9f:d2:64:8c:ac:bb:7d:d7:92:7e:26:23:e4: 25:86:bf:13:ce:b8:2d:f1:38:7a:3e:6a:06:f6:59: 76:dc:79:a6:79:44:ae:c8:2e:25:50:53:da:1e:26: db:f0:06:9e:e6:df:55:04:b6:ae:39:f4:50:1e:2a: 0b:2d:ec:59:f0:13:a1:dc:ea:4b:9a:0f:47:fe:18: c7:14:25:e6:8c:0c:4c:26:7d:38:df:92:04:60:fd: 3f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E9:89:2D:D6:17:1F:60:61:5A:A6:66:6F:07:39:4B:80:19:6A:0D X509v3 Authority Key Identifier: keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b6:d3:88:a1:6c:16:51:1d:d3:82:48:e7:86:97:23:b1:32: 90:fa:1a:e4:75:8e:60:80:ae:3a:09:0e:2a:4f:ed:d8:0a:17: e0:09:a0:26:f4:3d:96:f5:ff:d8:e3:cc:a6:e5:60:d7:ba:a6: c9:11:cb:06:af:9c:4f:fc:76:48:b6:22:00:81:9f:95:1b:f7: 40:d0:d7:f5:02:e6:47:45:7f:0f:7c:b4:0e:f4:96:19:cf:1e: 6f:5e:e3:9d:29:e2:90:0d:90:56:cb:cc:82:ea:fd:36:5d:c5: 17:eb:f9:7f:a2:de:69:a6:4d:89:42:3b:ac:af:0e:de:42:5e: 03:47:5a:15:dc:1b:b7:f0:80:ef:b4:af:d2:15:32:8e:a7:03: 4d:35:72:a2:95:f7:b4:36:b1:69:7a:f2:45:dd:31:22:6a:97: 40:d0:3a:a8:b1:53:dd:c2:d0:e5:0b:c9:94:a8:21:6b:16:8d: 9a:00:2e:cc:86:0a:8d:11:ec:d7:c6:b5:5c:19:16:b9:a5:e5: 5f:cb:e9:e5:6d:87:99:92:be:1c:ef:5d:86:35:1a:56:a5:5d: 1b:5b:f8:ed:8e:82:a6:14:e6:02:0a:72:ce:60:34:14:bd:57: 25:6f:bb:3d:23:a7:6f:8a:9b:60:d2:dd:d9:7e:dc:96:b6:80: 2d:89:44:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOJX8ExJ16RdnNvgc32RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDI3OGJiZTVmYzJkZjczMjAzMmNkYjIzNTk2MmRiYWJl MGY2NDEwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygwN2U5ODkyZGQ2MTcxZjYwNjE1YWE2NjY2ZjA3Mzk0YjgwMTk2YTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Jd3ZlpxmxMhoOZzMvdBGQS1wyTr RkjbZ7yKXQUPKAy+oK+lEz3aFP/8pYYcWTbBighiIz/qDdmVgFNWdRSEmvbV20X/ xO75q6M6f9PwDZLEzJsoW4FnWUTiROqM8fIGGFY1IN8jl080kg7o/IShFtvU7tAR mcHyB08C4rGnFh41fajyO4Xxac6Ke8vWNn1EVKijLa+NYqgoSBRHyv7V3jmDzLvB /p/SZIysu33Xkn4mI+Qlhr8Tzrgt8Th6PmoG9ll23HmmeUSuyC4lUFPaHibb8Aae 5t9VBLauOfRQHioLLexZ8BOh3OpLmg9H/hjHFCXmjAxMJn0435IEYP0/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfpiS3WFx9gYVqmZm8HOUuAGWoNMB8GA1UdIwQY MBaAFAjSeLvl/C33MgMs2yNZYtur4PZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUt ZWY0NmRkZWVhYmY0LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUtZWY0NmRkZWVhYmY0 LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbbTiKFs FlEd04JI54aXI7EykPoa5HWOYICuOgkOKk/t2AoX4AmgJvQ9lvX/2OPMpuVg17qm yRHLBq+cT/x2SLYiAIGflRv3QNDX9QLmR0V/D3y0DvSWGc8eb17jnSnikA2QVsvM gur9Nl3FF+v5f6LeaaZNiUI7rK8O3kJeA0daFdwbt/CA77Sv0hUyjqcDTTVyopX3 tDaxaXryRd0xImqXQNA6qLFT3cLQ5QvJlKghaxaNmgAuzIYKjRHs18a1XBkWuaXl X8vp5W2HmZK+HO9dhjUaVqVdG1v47Y6CphTmAgpyzmA0FL1XJW+7PSOnb4qbYNLd 2X7clraALYlE/A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:58 2025 by rpki-client