This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json) Hash identifier: AZex11kjFmJtLD4t020LBbxTBXdjTibtcKOhjqbM9bE= Subject key identifier: 55:DE:4B:6A:D6:D6:46:62:8D:CD:5B:36:D9:01:85:86:1B:EE:77:83 Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Certificate serial: 019AF209382E4C1B1DA4672006F8F5CDA1E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft Manifest number: 0920 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=) 2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: xUSy7l1sEMmbByhepoplnv4ytbtz/M3hcbY0oC942w4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:38:2e:4c:1b:1d:a4:67:20:06:f8:f5:cd:a1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=55de4b6ad6d646628dcd5b36d90185861bee7783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:66:7b:e7:b8:58:8e:a0:16:b1:81:6a:ba: 87:3a:e3:ce:1f:86:b3:76:6d:2e:86:49:1c:a1:1e: 45:47:6f:21:7b:db:db:00:ad:ec:8a:33:7a:55:76: 9e:8d:35:2d:23:fe:f3:f7:ce:61:36:9f:4f:47:92: a5:00:75:2e:98:07:0e:2a:17:c1:0d:46:1f:c8:82: 90:fa:3a:d1:3d:b3:5f:49:84:b5:48:65:87:fb:37: 62:23:99:35:be:2a:16:e7:22:8a:ff:98:0e:a4:4e: 94:13:5f:9b:10:59:c4:34:ce:d7:9f:e4:55:36:1a: b4:53:7d:60:c9:36:96:b3:d3:08:24:a3:e8:5f:b4: a1:32:c2:3d:c8:9b:04:59:bc:dd:40:3f:77:50:b8: de:d6:a0:35:17:59:b8:96:9c:f2:b5:34:76:75:99: 2d:89:ca:3f:6d:69:50:ac:e1:19:1a:7a:d4:71:e5: 59:f8:90:dd:21:64:4a:ff:a7:30:86:ed:ae:35:7c: 57:28:a7:c3:36:a5:97:17:03:e5:09:2c:fe:b1:4e: c9:c5:07:05:9d:38:01:84:a8:5b:54:e4:e2:84:a9: 8b:0b:d7:b8:c1:31:14:34:64:54:46:1a:a7:ac:52: 76:fa:fa:93:29:e6:70:da:0d:d2:80:b3:93:2e:af: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DE:4B:6A:D6:D6:46:62:8D:CD:5B:36:D9:01:85:86:1B:EE:77:83 X509v3 Authority Key Identifier: keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:83:e8:84:2c:f8:f5:1f:f3:5c:84:84:85:85:a7:01:ec:f9: e8:0f:aa:92:6a:f3:ac:dd:88:2d:72:87:a3:9a:0d:0d:52:eb: 19:e1:ee:b9:c0:c2:b4:0a:0e:83:9a:d7:a3:93:fb:15:39:9d: 31:7c:2e:07:29:07:e4:17:97:4f:ee:4a:eb:64:a5:8a:18:9d: 0e:de:f4:14:ab:c3:73:6c:79:fa:4f:90:20:7b:02:a9:c4:79: 3b:ff:7f:f0:8d:77:1f:7b:9a:ee:eb:8d:8a:72:c2:b7:78:78: b8:fe:27:98:6c:6b:b8:07:1d:5e:90:63:d4:2b:f3:99:82:15: 15:aa:56:1e:39:2b:4e:5a:1a:f1:5f:e9:78:4a:7e:b3:db:00: b7:83:56:f2:71:0e:bf:6a:e1:e7:30:43:e4:3f:cb:03:42:99: f4:17:e9:b7:80:c3:33:68:89:82:82:06:b5:70:67:e1:6f:f3: fe:cf:a8:65:32:5b:1e:e3:7c:c4:ae:2f:75:ca:39:a5:98:20: 48:a4:f5:6b:33:9c:81:94:d6:60:42:ef:e9:a1:17:23:4b:0c: 40:42:86:df:3c:c2:44:df:ef:6c:43:c1:5c:c2:95:72:38:18: c2:5b:2a:c6:c4:da:71:da:95:4f:a9:cc:87:e9:a0:1b:29:91: b3:bf:be:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTguTBsdpGcgBvj1zaHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDhkYmVhNDAyM2Q2OWY0N2Y4OWJkMjA4MmZmZmIyNDY2 ZGQyYTUwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD Eyg1NWRlNGI2YWQ2ZDY0NjYyOGRjZDViMzZkOTAxODU4NjFiZWU3NzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ABme+e4WI6gFrGBarqHOuPOH4az dm0uhkkcoR5FR28he9vbAK3sijN6VXaejTUtI/7z985hNp9PR5KlAHUumAcOKhfB DUYfyIKQ+jrRPbNfSYS1SGWH+zdiI5k1vioW5yKK/5gOpE6UE1+bEFnENM7Xn+RV Nhq0U31gyTaWs9MIJKPoX7ShMsI9yJsEWbzdQD93ULje1qA1F1m4lpzytTR2dZkt ico/bWlQrOEZGnrUceVZ+JDdIWRK/6cwhu2uNXxXKKfDNqWXFwPlCSz+sU7JxQcF nTgBhKhbVOTihKmLC9e4wTEUNGRURhqnrFJ2+vqTKeZw2g3SgLOTLq9WhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXeS2rW1kZijc1bNtkBhYYb7neDMB8GA1UdIwQY MBaAFHLY2+pAI9afR/ib0ggv/7JGbdKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmIt OWVkMTgwNGYzMjgyLzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmItOWVkMTgwNGYzMjgy LzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4PohCz4 9R/zXISEhYWnAez56A+qkmrzrN2ILXKHo5oNDVLrGeHuucDCtAoOg5rXo5P7FTmd MXwuBykH5BeXT+5K62SlihidDt70FKvDc2x5+k+QIHsCqcR5O/9/8I13H3ua7uuN inLCt3h4uP4nmGxruAcdXpBj1CvzmYIVFapWHjkrTloa8V/peEp+s9sAt4NW8nEO v2rh5zBD5D/LA0KZ9Bfpt4DDM2iJgoIGtXBn4W/z/s+oZTJbHuN8xK4vdco5pZgg SKT1azOcgZTWYELv6aEXI0sMQEKG3zzCRN/vbEPBXMKVcjgYwlsqxsTacdqVT6nM h+mgGymRs7+++w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:40 2025 by rpki-client