This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json) Hash identifier: pxYUWhnaWumyqT78cg5LLFIrOOaq9ddpiPSAP/9API4= Subject key identifier: 69:94:E9:87:E0:F2:60:A2:6D:56:1E:2B:01:3A:6B:77:DA:4D:54:F7 Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b Certificate serial: 019AF2E45973388E8A80D3085CFD7459CD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 09:00:42 +0000 Manifest this update: Sat 06 Dec 2025 09:00:42 +0000 Manifest next update: Sun 07 Dec 2025 09:00:42 +0000 Files and hashes: 1: 4AzH-iJI8sWiTUYTC8VHHmS8UpU.asa (hash: dwBM8qAJmwUvx2ChQXvyI7QlD+6hPqiqi5rWx3oHZos=) 2: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: z2xbZElo0nT/Tol2oaG/zTNdjyxtPP5PI2O4KX1UUkE=) 3: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:59:73:38:8e:8a:80:d3:08:5c:fd:74:59:cd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b Validity Not Before: Dec 6 09:00:42 2025 GMT Not After : Dec 7 09:00:42 2025 GMT Subject: CN=6994e987e0f260a26d561e2b013a6b77da4d54f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:c1:8e:49:20:fe:8d:75:68:db:83:ed:d0: f5:35:ea:4d:98:b5:d0:6b:f9:49:ff:d7:68:9b:d9: ab:08:f7:e8:05:3b:af:e1:91:45:5a:7d:f6:47:ac: a3:00:90:9a:ef:33:40:6d:ab:ca:2b:98:2b:ce:d5: 5c:d3:90:2e:fd:0f:72:f9:af:6b:ce:58:95:14:fe: ed:56:f4:97:b9:d0:df:8d:a2:61:94:ad:03:8f:4b: 13:16:0a:5f:a6:03:0b:5d:e1:98:1f:9f:2b:4e:94: 59:4a:4a:6c:62:f9:47:f9:86:f4:c2:78:02:a3:8b: 82:a1:54:10:86:a8:38:b5:d1:45:a9:05:29:4e:78: 49:e7:ef:a1:e0:69:07:3c:7f:5c:ec:2b:21:68:cf: 33:6d:da:57:8a:89:7b:c7:d8:e9:cb:ee:5f:71:de: 51:ce:46:58:a0:17:93:74:d8:61:cc:da:da:4d:71: 6d:49:c5:5d:65:38:8b:3e:69:89:5e:0b:fb:f5:62: c4:f9:45:33:d0:82:71:f6:1b:a1:22:76:41:9f:c6: cc:4c:69:13:eb:5a:2e:02:79:08:b0:2a:8c:8a:bd: 04:f8:ce:53:02:12:0f:40:a3:43:7a:7a:f8:e7:40: df:93:60:df:08:9d:bc:7f:55:58:cf:1b:0d:3c:94: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:E9:87:E0:F2:60:A2:6D:56:1E:2B:01:3A:6B:77:DA:4D:54:F7 X509v3 Authority Key Identifier: keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:58:9e:0f:e2:9e:3e:50:de:65:42:50:05:17:42:49:03:49: f9:53:6c:d5:6c:2b:99:e0:36:71:1d:aa:e1:50:7e:91:ba:8a: b9:6d:bf:3a:2c:6e:b9:c0:c3:6e:2a:f2:4c:1f:5f:03:d6:0d: 6c:17:36:fb:56:a6:fb:2f:da:45:9c:07:1c:e3:7e:27:75:77: 15:9c:af:32:57:fd:b5:d7:8f:2e:dc:cd:4e:2d:cf:c6:1c:3b: 0a:fb:98:7c:74:58:12:c7:df:12:8c:44:5a:8a:42:55:f1:03: 53:66:ba:0e:38:00:86:ec:ea:5f:64:0d:43:74:86:29:eb:61: e3:fa:76:53:0d:11:f5:3d:8b:1f:3a:4d:24:04:09:59:69:18: 4d:97:cd:77:74:c7:de:3d:a7:93:69:4e:8f:f9:8f:f1:2f:47: 11:67:7f:a5:a1:42:33:0c:0c:ac:48:c5:96:3b:57:ea:39:e5: 4a:b1:cd:68:5c:f1:39:ea:0f:d9:29:ef:f4:cb:9f:37:a5:ba: 6b:1e:e7:a6:99:c4:f9:d7:cc:10:7a:30:94:c5:a2:a9:ab:d4: f3:d1:dd:32:63:b3:7d:43:ab:5c:c4:91:a3:a3:84:c8:85:e7: 29:43:9b:14:f6:ba:c2:9b:bd:f3:31:c1:c4:ef:13:02:1b:30: 99:60:4a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5FlzOI6KgNMIXP10Wc0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YmY1OTg5OWI3YWNhMzBhM2M3ZDVkYjkzYjIxMmQ5ODcw OWM4OWIwHhcNMjUxMjA2MDkwMDQyWhcNMjUxMjA3MDkwMDQyWjAzMTEwLwYDVQQD Eyg2OTk0ZTk4N2UwZjI2MGEyNmQ1NjFlMmIwMTNhNmI3N2RhNGQ1NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNPBjkkg/o11aNuD7dD1NepNmLXQ a/lJ/9dom9mrCPfoBTuv4ZFFWn32R6yjAJCa7zNAbavKK5grztVc05Au/Q9y+a9r zliVFP7tVvSXudDfjaJhlK0Dj0sTFgpfpgMLXeGYH58rTpRZSkpsYvlH+Yb0wngC o4uCoVQQhqg4tdFFqQUpTnhJ5++h4GkHPH9c7CshaM8zbdpXiol7x9jpy+5fcd5R zkZYoBeTdNhhzNraTXFtScVdZTiLPmmJXgv79WLE+UUz0IJx9huhInZBn8bMTGkT 61ouAnkIsCqMir0E+M5TAhIPQKNDenr450Dfk2DfCJ28f1VYzxsNPJSMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmU6Yfg8mCibVYeKwE6a3faTVT3MB8GA1UdIwQY MBaAFAi/WYmbesowo8fV25OyEtmHCcibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0w5WmladDZ5akNqeDlYYms3SVMyWWNKeUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZTE2NzctZDkyNy00NGM2LWE5MDkt M2IyYjUxYTVlM2RhLzEvQ0w5WmladDZ5akNqeDlYYms3SVMyWWNKeUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jZTE2NzctZDkyNy00NGM2LWE5MDktM2IyYjUxYTVlM2Rh LzEvQ0w5WmladDZ5akNqeDlYYms3SVMyWWNKeUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelieD+Ke PlDeZUJQBRdCSQNJ+VNs1WwrmeA2cR2q4VB+kbqKuW2/OixuucDDbiryTB9fA9YN bBc2+1am+y/aRZwHHON+J3V3FZyvMlf9tdePLtzNTi3Pxhw7CvuYfHRYEsffEoxE WopCVfEDU2a6DjgAhuzqX2QNQ3SGKeth4/p2Uw0R9T2LHzpNJAQJWWkYTZfNd3TH 3j2nk2lOj/mP8S9HEWd/paFCMwwMrEjFljtX6jnlSrHNaFzxOeoP2Snv9MufN6W6 ax7nppnE+dfMEHowlMWiqavU89HdMmOzfUOrXMSRo6OEyIXnKUObFPa6wpu98zHB xO8TAhswmWBKXg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:32 2025 by rpki-client