This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json) Hash identifier: NRnONJSYxwZVsEMbjO/AOGlPbgR4uM37Nj7v/w/24WA= Subject key identifier: 91:CD:98:71:23:FD:BB:9F:75:41:3E:F6:3E:71:B9:7E:C2:66:03:E8 Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Certificate serial: 019AF3C074433A2A2EF79EE6AD44FEC8011D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft Manifest number: 0302 Signing time: Sat 06 Dec 2025 13:01:07 +0000 Manifest this update: Sat 06 Dec 2025 13:01:07 +0000 Manifest next update: Sun 07 Dec 2025 13:01:07 +0000 Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: WAGKBCDdU6jU1meS0mQfv1y9q5/gd7dvcVaUhQtUflk=) 2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:74:43:3a:2a:2e:f7:9e:e6:ad:44:fe:c8:01:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Validity Not Before: Dec 6 13:01:07 2025 GMT Not After : Dec 7 13:01:07 2025 GMT Subject: CN=91cd987123fdbb9f75413ef63e71b97ec26603e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:91:db:54:4e:11:53:93:e7:4d:ae:10:11:c4: c3:42:91:f8:54:28:f5:63:79:c6:e1:23:b4:81:bd: 34:24:74:52:07:aa:2d:ba:31:b5:47:d1:a8:91:a1: ed:d8:36:7b:f4:fd:fa:d9:07:fc:8e:47:60:e4:55: 8b:72:2b:96:28:46:4d:b2:e9:18:77:04:41:70:db: b6:e7:00:e2:ad:30:c8:08:46:e4:7b:34:9c:5b:9a: 16:ea:b3:66:ea:08:88:db:37:a1:b4:70:f7:1c:cb: da:57:9c:9d:39:d4:e2:a6:23:33:87:f3:3d:86:01: 82:28:e1:62:a3:fd:d7:33:1e:d0:cf:88:ce:73:96: 5b:f6:58:f8:98:a6:97:e3:16:4a:79:48:be:07:b8: f7:df:97:04:0b:37:65:ae:77:5a:26:07:78:7a:41: e2:46:80:5e:d0:08:d9:86:56:6a:cd:14:5c:19:d5: 31:3c:7d:ef:2c:6a:a2:a8:6e:c1:e5:28:57:32:49: 71:71:32:ba:79:94:1c:8b:b4:91:c3:be:d1:b0:29: fa:65:1a:fb:7e:c2:54:c0:68:44:4d:4c:d7:7b:c5: b9:48:d3:90:37:a8:b3:58:54:9c:85:ce:aa:1a:ed: 8d:26:7f:bd:55:18:31:1f:ae:af:ac:bc:12:09:4b: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:98:71:23:FD:BB:9F:75:41:3E:F6:3E:71:B9:7E:C2:66:03:E8 X509v3 Authority Key Identifier: keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:31:5a:24:13:8c:ab:a5:36:53:91:94:24:a6:13:6c:33:ee: 5f:d8:0b:e0:41:4e:76:f8:ff:d1:43:3a:28:83:7d:f0:f7:0e: 57:61:7c:ac:fe:51:7f:06:10:00:37:07:16:0f:bd:2b:24:40: 14:80:fd:0a:d7:aa:d7:44:47:ce:2a:fe:12:e8:8c:d1:59:b2: cf:28:d8:0b:3b:bb:67:d8:3b:75:12:1b:90:d5:15:cc:84:aa: 1f:e1:2e:a8:a4:8a:fe:b6:ce:a2:3f:29:1c:cf:0f:8e:60:d5: 26:d7:c9:18:7d:18:3f:01:29:40:56:a2:1c:98:6e:cc:de:2e: 4d:b7:17:e8:a9:5c:ab:c0:18:cf:47:d8:ab:6d:f9:2c:7e:b0: 14:07:a5:c5:c0:4d:49:6b:78:6c:67:b1:b9:88:a9:57:5f:44: 9d:0c:b2:3b:40:c5:92:db:39:fa:60:56:e2:4c:23:44:1a:77: 2a:57:80:90:46:6b:8b:ae:63:7c:62:24:00:ba:01:7b:95:0f: e8:1b:ce:8f:e7:0f:d8:c3:fe:4d:dc:f9:65:03:80:a1:22:5b: 0c:7e:30:f9:75:b2:14:5f:db:ad:d6:64:5d:81:c7:0c:7a:71: 05:54:64:88:df:31:d7:ee:29:d8:6e:07:34:94:0d:38:e2:17: a3:2a:c6:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHRDOiou957mrUT+yAEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm MjZmNjUwHhcNMjUxMjA2MTMwMTA3WhcNMjUxMjA3MTMwMTA3WjAzMTEwLwYDVQQD Eyg5MWNkOTg3MTIzZmRiYjlmNzU0MTNlZjYzZTcxYjk3ZWMyNjYwM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspHbVE4RU5PnTa4QEcTDQpH4VCj1 Y3nG4SO0gb00JHRSB6otujG1R9GokaHt2DZ79P362Qf8jkdg5FWLciuWKEZNsukY dwRBcNu25wDirTDICEbkezScW5oW6rNm6giI2zehtHD3HMvaV5ydOdTipiMzh/M9 hgGCKOFio/3XMx7Qz4jOc5Zb9lj4mKaX4xZKeUi+B7j335cECzdlrndaJgd4ekHi RoBe0AjZhlZqzRRcGdUxPH3vLGqiqG7B5ShXMklxcTK6eZQci7SRw77RsCn6ZRr7 fsJUwGhETUzXe8W5SNOQN6izWFSchc6qGu2NJn+9VRgxH66vrLwSCUuC1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHNmHEj/bufdUE+9j5xuX7CZgPoMB8GA1UdIwQY MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt YWZiNTAwYTQ0ODJhLzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTFaJBOM q6U2U5GUJKYTbDPuX9gL4EFOdvj/0UM6KIN98PcOV2F8rP5RfwYQADcHFg+9KyRA FID9Cteq10RHzir+EuiM0VmyzyjYCzu7Z9g7dRIbkNUVzISqH+EuqKSK/rbOoj8p HM8PjmDVJtfJGH0YPwEpQFaiHJhuzN4uTbcX6Klcq8AYz0fYq235LH6wFAelxcBN SWt4bGexuYipV19EnQyyO0DFkts5+mBW4kwjRBp3KleAkEZri65jfGIkALoBe5UP 6BvOj+cP2MP+Tdz5ZQOAoSJbDH4w+XWyFF/brdZkXYHHDHpxBVRkiN8x1+4p2G4H NJQNOOIXoyrG3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:45 2025 by rpki-client