This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json) Hash identifier: PLEjngcMoKCtbom+CBJUNcIZH+ehKcmoYIX0EBfdF5U= Subject key identifier: D8:64:80:FD:B9:67:B4:E2:A0:67:82:A3:C1:1B:82:EB:97:0A:E3:92 Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Certificate serial: 019AF2094DC5DABA9BDDEA5E458A4432F6DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft Manifest number: 12B5 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: ZloHRZD4I2lXi+aih4U7dXS5efmk6prDDEorGsoYUk0=) 2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4d:c5:da:ba:9b:dd:ea:5e:45:8a:44:32:f6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=d86480fdb967b4e2a06782a3c11b82eb970ae392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:68:7b:b2:d0:a9:f2:c0:c8:87:8c:3c:d2: cf:e1:b2:d9:d4:d6:44:d6:b9:ce:ae:ef:d2:da:fb: 02:ef:ac:5b:1f:95:84:4a:c1:d7:0f:33:a6:6f:64: 26:c4:7e:1e:53:02:5e:4d:9f:9f:2d:de:95:2e:d4: d4:83:84:31:0e:0e:c7:d5:bf:ee:80:80:a7:dc:a7: 3d:63:44:9c:bf:12:b4:72:e3:6e:f8:79:70:79:e9: 41:cd:ef:84:8b:83:c8:b8:8c:f8:c6:cd:07:b2:ea: 08:82:01:40:15:f2:1c:2e:83:9b:8a:d7:e8:37:58: 48:a9:9f:29:a8:d6:79:9e:cb:72:a6:b2:ee:4b:9b: 96:00:b0:32:04:37:2b:05:ab:99:2f:0a:1e:61:68: eb:d0:7b:9a:71:ef:9b:e5:6f:d5:92:2f:f2:1d:2e: 73:43:76:e3:16:db:64:68:52:f3:61:4c:3f:01:54: 2d:56:f1:f0:46:08:fb:54:3f:43:78:25:a4:ca:fe: 00:4a:e7:c0:68:87:c3:32:fd:07:18:0d:81:d0:18: f0:e4:d5:f2:a9:23:6d:2b:fd:61:33:ad:6b:8b:91: 84:9f:b0:b2:fc:87:96:90:20:97:a5:34:3e:ea:9a: ff:33:41:3d:95:f1:c4:eb:8d:e5:90:5e:c2:4c:42: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:64:80:FD:B9:67:B4:E2:A0:67:82:A3:C1:1B:82:EB:97:0A:E3:92 X509v3 Authority Key Identifier: keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:c1:68:cd:96:36:a2:ce:e1:1d:e5:19:b7:13:fc:ad:f4: cf:52:43:c4:80:75:8d:c2:4a:ad:aa:be:f0:fe:9d:5d:3b:94: dc:ec:16:89:cc:1e:5e:71:72:62:61:6f:d1:b0:cd:08:a0:3d: 23:e7:57:98:39:6a:9f:18:27:37:66:20:75:8e:8a:f4:d6:ea: 08:cc:d0:48:86:d3:1b:61:12:e8:1b:49:dc:09:9c:ac:f7:85: 45:d7:b4:8c:16:e4:fb:da:6f:7d:6d:47:48:d3:bf:db:c2:22: eb:37:91:41:a8:cb:7c:81:63:ba:e2:1b:58:54:8b:e8:f8:66: 12:0b:51:6e:f5:c0:dc:3a:ef:66:db:d8:67:88:fb:a0:b3:6e: 77:45:15:af:68:e7:8e:3d:ef:45:68:05:f0:c3:49:64:2f:54: 7a:ea:5c:5c:d2:71:59:6d:a8:82:1b:24:2f:92:b2:89:40:45: ea:a0:6a:8a:8e:74:b6:1f:ba:09:ca:15:20:5a:25:04:6c:88: e5:62:5e:66:3b:36:2d:fe:77:e6:7c:cc:50:85:ff:21:db:10: 73:ec:94:e4:2a:d7:29:8e:fa:c3:4b:df:1d:c3:91:9b:8c:99: 88:83:4c:21:cc:00:b3:e6:5c:cc:51:8a:2a:60:5f:83:7c:de: fb:07:fa:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU3F2rqb3epeRYpEMvbcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj NTNiMDUwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EyhkODY0ODBmZGI5NjdiNGUyYTA2NzgyYTNjMTFiODJlYjk3MGFlMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUFoe7LQqfLAyIeMPNLP4bLZ1NZE 1rnOru/S2vsC76xbH5WESsHXDzOmb2QmxH4eUwJeTZ+fLd6VLtTUg4QxDg7H1b/u gICn3Kc9Y0ScvxK0cuNu+HlweelBze+Ei4PIuIz4xs0HsuoIggFAFfIcLoObitfo N1hIqZ8pqNZ5nstyprLuS5uWALAyBDcrBauZLwoeYWjr0Huace+b5W/Vki/yHS5z Q3bjFttkaFLzYUw/AVQtVvHwRgj7VD9DeCWkyv4ASufAaIfDMv0HGA2B0Bjw5NXy qSNtK/1hM61ri5GEn7Cy/IeWkCCXpTQ+6pr/M0E9lfHE643lkF7CTEKaBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhkgP25Z7TioGeCo8EbguuXCuOSMB8GA1UdIwQY MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjbBaM2W NqLO4R3lGbcT/K30z1JDxIB1jcJKraq+8P6dXTuU3OwWicweXnFyYmFv0bDNCKA9 I+dXmDlqnxgnN2YgdY6K9NbqCMzQSIbTG2ES6BtJ3AmcrPeFRde0jBbk+9pvfW1H SNO/28Ii6zeRQajLfIFjuuIbWFSL6PhmEgtRbvXA3DrvZtvYZ4j7oLNud0UVr2jn jj3vRWgF8MNJZC9UeupcXNJxWW2oghskL5KyiUBF6qBqio50th+6CcoVIFolBGyI 5WJeZjs2Lf535nzMUIX/IdsQc+yU5CrXKY76w0vfHcORm4yZiINMIcwAs+ZczFGK KmBfg3ze+wf6RA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:18 2025 by rpki-client