This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json) Hash identifier: hBvYoUTwHZe/66CH2RLJ6p2efTOp+Op4frDfvotva4o= Subject key identifier: 69:B5:B5:81:C5:43:DC:85:9B:F4:B2:1F:AB:E3:12:8E:8B:E7:95:03 Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c Certificate serial: 019AF3F75C5C4CD8DC1E1BD16DD7FC04281C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft Manifest number: 12AC Signing time: Sat 06 Dec 2025 14:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:01:05 +0000 Manifest next update: Sun 07 Dec 2025 14:01:05 +0000 Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=) 2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: /drlNYWcEOeX/MXY2k6A7RgTkXzvk43YlBZOlIgjeA8=) 3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5c:5c:4c:d8:dc:1e:1b:d1:6d:d7:fc:04:28:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c Validity Not Before: Dec 6 14:01:05 2025 GMT Not After : Dec 7 14:01:05 2025 GMT Subject: CN=69b5b581c543dc859bf4b21fabe3128e8be79503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:34:23:d0:c9:d6:e7:5b:29:48:a0:34:5a: 4a:2b:cd:81:83:c6:51:28:d9:72:36:c6:b9:a5:3e: cc:d1:73:21:54:25:9b:b9:5d:1f:ef:f1:62:74:ff: 76:4f:e1:a8:0e:e9:a9:e4:e9:a0:73:c9:fb:93:a0: 6c:1f:4e:3c:17:09:75:09:0a:db:53:cf:f5:b5:a1: 91:e7:61:c9:cd:be:be:ab:48:5c:e9:76:b5:6b:78: 41:fa:7e:27:6b:04:0a:f6:e0:49:cc:8f:55:8c:6c: 75:0e:10:78:e3:6f:3a:88:9e:9e:13:a5:63:55:76: 45:08:50:1b:d7:8c:1b:9f:c9:37:0e:29:8f:b2:5a: b7:d0:64:9e:64:e4:c3:7f:9b:00:3b:76:d6:cd:79: 96:88:22:9f:86:85:f6:ae:68:f8:93:04:27:1d:4b: 93:9d:6b:4f:cd:72:09:8e:37:6f:5e:33:2e:41:b1: 1b:a6:f7:af:82:b0:7d:1b:5f:89:c4:8b:3c:65:59: 11:6d:2c:fa:24:99:d9:b6:b6:26:a0:72:d7:22:d7: b4:13:5f:18:e7:74:3e:be:ef:9d:ca:1f:ce:94:a6: 5e:ca:88:d1:52:93:6d:1e:d3:66:cb:60:86:43:b4: 69:92:d5:17:6f:83:c8:5d:5b:58:64:bc:ac:86:54: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B5:B5:81:C5:43:DC:85:9B:F4:B2:1F:AB:E3:12:8E:8B:E7:95:03 X509v3 Authority Key Identifier: keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ba:da:cb:d2:4a:2e:25:fb:c3:0b:54:85:91:b0:d4:f5:5d: ad:21:c1:e6:0b:0c:0c:cf:68:03:db:8e:5d:ed:e1:90:6d:85: 18:cd:fd:93:80:2b:a3:b8:6c:a5:de:8e:5e:05:57:04:ac:f6: f2:e5:c1:b1:03:35:f2:cd:a2:8e:49:41:62:3a:53:86:cd:07: ad:8e:92:3a:5b:af:49:29:dc:ba:57:c2:b7:d0:03:17:f1:f5: 97:ef:fe:87:ce:e8:60:40:5d:1c:a6:65:d2:5f:55:17:63:3f: ef:b1:9a:2f:82:a5:11:25:52:d4:1c:a5:eb:64:53:d7:5e:48: df:6c:15:2e:54:cf:71:f3:03:3e:26:57:10:9b:32:1c:47:f8: ce:3e:4b:0d:7f:2d:a8:cc:71:90:db:a7:66:3c:ba:ec:31:42: e1:4b:00:9f:98:eb:10:3e:23:fa:a1:5e:d4:ee:b4:ea:0e:9d: 0c:b3:03:84:26:87:e7:54:b6:10:5f:b4:99:23:30:f3:c7:a0: 28:30:a6:74:58:e4:be:85:f4:b0:d2:64:a4:d7:66:24:ad:29: f0:a4:ec:37:60:e8:dc:06:a3:cd:2e:d2:be:d9:80:97:53:da: 49:b2:31:6d:ad:eb:0b:df:bd:5d:82:4f:3d:58:00:79:fa:b7: 99:72:e8:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91xcTNjcHhvRbdf8BCgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5 ODNmNWMwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD Eyg2OWI1YjU4MWM1NDNkYzg1OWJmNGIyMWZhYmUzMTI4ZThiZTc5NTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q00I9DJ1udbKUigNFpKK82Bg8ZR KNlyNsa5pT7M0XMhVCWbuV0f7/FidP92T+GoDump5Omgc8n7k6BsH048Fwl1CQrb U8/1taGR52HJzb6+q0hc6Xa1a3hB+n4nawQK9uBJzI9VjGx1DhB44286iJ6eE6Vj VXZFCFAb14wbn8k3DimPslq30GSeZOTDf5sAO3bWzXmWiCKfhoX2rmj4kwQnHUuT nWtPzXIJjjdvXjMuQbEbpvevgrB9G1+JxIs8ZVkRbSz6JJnZtrYmoHLXIte0E18Y 53Q+vu+dyh/OlKZeyojRUpNtHtNmy2CGQ7RpktUXb4PIXVtYZLyshlSPKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm1tYHFQ9yFm/SyH6vjEo6L55UDMB8GA1UdIwQY MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLray9JK LiX7wwtUhZGw1PVdrSHB5gsMDM9oA9uOXe3hkG2FGM39k4Aro7hspd6OXgVXBKz2 8uXBsQM18s2ijklBYjpThs0HrY6SOluvSSnculfCt9ADF/H1l+/+h87oYEBdHKZl 0l9VF2M/77GaL4KlESVS1Byl62RT115I32wVLlTPcfMDPiZXEJsyHEf4zj5LDX8t qMxxkNunZjy67DFC4UsAn5jrED4j+qFe1O606g6dDLMDhCaH51S2EF+0mSMw88eg KDCmdFjkvoX0sNJkpNdmJK0p8KTsN2Do3AajzS7SvtmAl1PaSbIxba3rC9+9XYJP PVgAefq3mXLoDA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:52 2025 by rpki-client