This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json) Hash identifier: XUhLEezn/AH+e3ox5EpGBTNggX91ea/V5yNlZA5XrKo= Subject key identifier: E7:59:68:B4:32:1D:4A:D0:70:C7:9D:2F:92:87:7A:39:AF:A7:81:37 Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d Certificate serial: 019AF19A94D462E15515902ED29B59707FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft Manifest number: 0AC0 Signing time: Sat 06 Dec 2025 03:00:30 +0000 Manifest this update: Sat 06 Dec 2025 03:00:30 +0000 Manifest next update: Sun 07 Dec 2025 03:00:30 +0000 Files and hashes: 1: 4bMtkdss6ipZLuaULzydMUpyiaQ.roa (hash: ftsUwXeTU/zCajSXbJ3x6QJLG4thVRnSbA76L16HZhs=) 2: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: /Brap4VRqETa7Fi9obuJ0sIaX30+Ss3R0BgDbhGSfp0=) 3: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (hash: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=) 4: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (hash: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:94:d4:62:e1:55:15:90:2e:d2:9b:59:70:7f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d Validity Not Before: Dec 6 03:00:30 2025 GMT Not After : Dec 7 03:00:30 2025 GMT Subject: CN=e75968b4321d4ad070c79d2f92877a39afa78137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:08:97:8b:39:e1:d7:f2:2c:45:d4:42:0d: 5a:3b:8c:a0:cb:4e:e5:a4:69:d5:19:c8:d5:44:15: f7:7e:88:cf:5e:f6:e4:cf:01:d2:4e:fe:6b:48:0e: 7e:85:26:24:9c:f8:3e:61:b8:af:b6:13:b4:32:4f: f8:1d:23:0d:e9:5a:f9:7f:21:a4:0e:fb:3f:6f:d5: 64:43:10:a6:23:2a:e4:7e:e5:6c:6e:e5:ee:b2:56: 63:8f:11:07:5b:7c:64:30:fb:d3:a5:01:50:c1:cf: d5:14:0d:c4:30:e0:d6:5a:94:44:a3:67:ca:ae:97: 82:a0:76:8f:b9:8d:40:f2:12:a4:08:7d:95:4f:aa: a6:cc:4a:6d:7a:b9:88:68:26:e0:76:03:5b:d7:47: d6:e9:1a:5e:ef:cb:91:0a:2b:7b:f4:03:56:ae:a1: fe:42:62:2f:64:a3:56:90:7d:58:84:12:ee:1d:f8: 60:7a:4a:12:fc:59:38:83:f4:18:8c:ff:05:a5:ec: 7d:56:d9:5b:8e:a9:fd:04:ff:a1:4c:8e:58:e6:fa: b1:b0:22:c5:2b:3f:69:57:e4:46:dd:70:3c:bc:62: cb:30:c0:18:51:f8:e1:7e:67:84:46:36:ef:7d:dd: 7b:68:e9:c2:aa:ef:23:f4:f5:9e:68:ac:c6:b1:29: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:59:68:B4:32:1D:4A:D0:70:C7:9D:2F:92:87:7A:39:AF:A7:81:37 X509v3 Authority Key Identifier: keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9e:7f:71:91:47:19:3c:2a:49:ef:28:14:67:ea:8b:4e:49: 6c:19:e0:df:f3:10:82:15:63:1d:5a:dd:15:ec:f0:15:9d:28: 0e:93:c0:73:b0:f0:03:a6:b5:b5:ef:03:c8:78:d3:ba:73:5f: c6:fd:92:9b:c5:fc:2f:94:74:7f:19:fe:af:9a:ad:52:88:a7: 72:f9:11:29:65:d0:00:74:f4:6c:51:68:d1:9b:22:f3:07:4c: fa:10:c1:98:81:7c:f1:2b:c1:7d:8a:42:9b:fd:6b:e7:bc:e3: 6a:0b:aa:17:60:9c:a7:d7:53:12:c6:88:52:b1:04:e4:b7:0a: f5:9c:12:a3:36:16:d6:e5:28:c2:0b:b1:1b:3f:24:d2:a7:82: 5a:ed:0c:ea:70:91:b7:6c:b3:7c:6e:80:4c:c8:cf:c7:15:0f: d5:ec:66:39:d2:d8:55:01:97:1d:50:44:9f:60:d3:33:6c:82: c9:25:98:69:cd:8a:32:3f:8c:3c:8b:55:0a:7d:35:b9:bf:fc: c8:c5:a6:e6:e8:80:e0:fd:97:69:c8:70:4a:af:b2:d1:58:6c: 69:ac:55:0e:21:72:10:53:b8:6d:f7:8f:90:2b:36:63:bf:c9: a3:f4:0f:23:7d:5f:a5:ea:9f:fd:4a:dc:9d:bb:74:fe:a6:ca: cb:b1:7a:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpTUYuFVFZAu0ptZcH+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWM4YzdmMzM0MDUzYzhhOTBhMzQwODAwOWVmM2QzYjdh ODJlM2QwHhcNMjUxMjA2MDMwMDMwWhcNMjUxMjA3MDMwMDMwWjAzMTEwLwYDVQQD EyhlNzU5NjhiNDMyMWQ0YWQwNzBjNzlkMmY5Mjg3N2EzOWFmYTc4MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WIIl4s54dfyLEXUQg1aO4ygy07l pGnVGcjVRBX3fojPXvbkzwHSTv5rSA5+hSYknPg+YbivthO0Mk/4HSMN6Vr5fyGk Dvs/b9VkQxCmIyrkfuVsbuXuslZjjxEHW3xkMPvTpQFQwc/VFA3EMODWWpREo2fK rpeCoHaPuY1A8hKkCH2VT6qmzEptermIaCbgdgNb10fW6Rpe78uRCit79ANWrqH+ QmIvZKNWkH1YhBLuHfhgekoS/Fk4g/QYjP8Fpex9Vtlbjqn9BP+hTI5Y5vqxsCLF Kz9pV+RG3XA8vGLLMMAYUfjhfmeERjbvfd17aOnCqu8j9PWeaKzGsSlO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdZaLQyHUrQcMedL5KHejmvp4E3MB8GA1UdIwQY MBaAFAicjH8zQFPIqQo0CACe89O3qC49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYt NmY3MDA5YmVlOTE1LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYtNmY3MDA5YmVlOTE1 LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ5/cZFH GTwqSe8oFGfqi05JbBng3/MQghVjHVrdFezwFZ0oDpPAc7DwA6a1te8DyHjTunNf xv2Sm8X8L5R0fxn+r5qtUoincvkRKWXQAHT0bFFo0Zsi8wdM+hDBmIF88SvBfYpC m/1r57zjaguqF2Ccp9dTEsaIUrEE5LcK9ZwSozYW1uUowguxGz8k0qeCWu0M6nCR t2yzfG6ATMjPxxUP1exmOdLYVQGXHVBEn2DTM2yCySWYac2KMj+MPItVCn01ub/8 yMWm5uiA4P2XachwSq+y0VhsaaxVDiFyEFO4bfePkCs2Y7/Jo/QPI31fpeqf/Urc nbt0/qbKy7F6sA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:40 2025 by rpki-client