This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json) Hash identifier: jYJBrYg6eZxfthh/5jZQgSpIIGd2oP+e7TduHGTB/Yc= Subject key identifier: 1B:B5:3B:A0:A7:C0:B1:12:AB:C2:E7:4B:FC:AB:23:4A:F8:6A:4E:3C Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019B307A4487EEE6638DC8950D65479D9EEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 08:01:17 +0000 Manifest this update: Thu 18 Dec 2025 08:01:17 +0000 Manifest next update: Fri 19 Dec 2025 08:01:17 +0000 Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: BpKRln6p3L3PtbfA41QY9Uejsg4NlWhsImJa1ezWFIo=) 2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=) 3: osRm_vCZFQn-IZrfa-S-ZoLyv-k.roa (hash: UdnDiufWcMmwrrv9vsKKmhqhc0AHNBah6lzkUFktmdw=) 4: wflfIOo-1t3hGXMoEB24Xbfs3KU.roa (hash: CGGLqcKnUfaBtIHUEc+dqJSotohW0vSNwSlisgSNlco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:7a:44:87:ee:e6:63:8d:c8:95:0d:65:47:9d:9e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Dec 18 08:01:17 2025 GMT Not After : Dec 19 08:01:17 2025 GMT Subject: CN=1bb53ba0a7c0b112abc2e74bfcab234af86a4e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:da:47:2a:78:58:15:1a:69:49:3d:5d:ca: 94:24:5e:d2:70:ef:6a:68:19:48:66:1e:0b:b4:ac: bc:02:fd:e3:39:ef:0c:77:f0:c8:ab:89:fe:0a:e9: 36:f7:40:4f:85:4d:47:ad:9d:6b:a4:f8:06:79:dc: 48:04:e2:7a:50:1e:6c:8a:b9:9e:fb:3a:f7:de:a9: 2c:78:65:9a:eb:0d:b1:e6:4d:08:5c:9b:0d:7b:82: 58:94:ec:95:52:f3:dd:b8:11:e7:84:8b:e8:c2:7e: 38:53:06:49:e4:27:70:6b:bb:c7:5a:0b:01:47:c7: 06:db:00:d9:2d:dd:14:d8:50:a1:3c:7a:43:ae:dc: cf:31:03:70:41:6d:80:d2:8a:8e:20:19:8a:7d:3e: c0:f7:97:01:24:b7:10:7c:a2:29:f1:fb:3a:7b:25: 11:0f:6c:37:9a:9c:fb:3c:73:09:61:6d:a6:1c:88: 59:a8:ef:21:79:57:70:66:99:4b:81:cc:31:9b:24: 87:f4:61:24:18:a1:22:09:1b:31:e8:2a:b9:3d:b4: f9:46:77:74:4c:b3:7e:47:fb:d6:55:e4:3b:40:ab: 93:40:bf:1a:6e:1a:0c:d9:83:b6:eb:01:34:91:ce: 63:b3:a6:73:1b:47:81:8c:8d:dc:28:c2:86:46:53: e2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B5:3B:A0:A7:C0:B1:12:AB:C2:E7:4B:FC:AB:23:4A:F8:6A:4E:3C X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:bc:6e:dd:a1:9e:af:d7:2e:0e:92:46:4f:16:16:c6:97:b3: 31:b0:d5:31:6e:2c:fa:58:8d:e9:f6:71:77:65:c1:7c:7e:5b: a9:8b:62:fd:7f:3a:e4:d8:40:48:aa:2f:12:53:21:d4:cc:eb: 50:95:fe:f0:83:0c:c6:59:5f:d3:c3:77:02:e9:ac:89:83:57: f8:19:51:8d:7c:a2:30:89:82:5d:dc:14:a3:f1:e7:35:80:2e: 4b:14:54:ce:1c:37:1e:30:2c:14:d7:4e:92:ed:75:3e:1c:26: 6c:5c:a4:fa:df:ee:d5:a0:d1:72:64:50:39:e0:d6:59:81:bd: bb:86:6f:45:85:d0:4a:07:38:97:0c:c6:f4:90:f0:ac:95:46: 0a:21:dc:5e:b0:cb:66:b6:94:5f:ed:5c:be:cb:42:af:94:ac: cc:32:08:8b:c0:b7:8e:92:0b:55:54:0e:32:0e:ad:be:e2:82: 9a:e6:32:74:aa:ab:08:7c:29:6b:19:20:e9:e5:42:1e:13:0e: bf:7a:5a:41:2d:6f:fc:65:2d:00:f4:fd:cb:7d:fb:1c:e0:7f: 1e:ab:28:e1:0e:a6:78:50:fd:1a:c1:e4:65:4d:fc:46:68:9f: 9b:9c:6b:b3:9d:45:cb:87:19:a8:f6:f9:a2:03:9a:fc:47:0f: 55:aa:eb:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswekSH7uZjjciVDWVHnZ7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjUxMjE4MDgwMTE3WhcNMjUxMjE5MDgwMTE3WjAzMTEwLwYDVQQD EygxYmI1M2JhMGE3YzBiMTEyYWJjMmU3NGJmY2FiMjM0YWY4NmE0ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj3aRyp4WBUaaUk9XcqUJF7ScO9q aBlIZh4LtKy8Av3jOe8Md/DIq4n+Cuk290BPhU1HrZ1rpPgGedxIBOJ6UB5sirme +zr33qkseGWa6w2x5k0IXJsNe4JYlOyVUvPduBHnhIvown44UwZJ5Cdwa7vHWgsB R8cG2wDZLd0U2FChPHpDrtzPMQNwQW2A0oqOIBmKfT7A95cBJLcQfKIp8fs6eyUR D2w3mpz7PHMJYW2mHIhZqO8heVdwZplLgcwxmySH9GEkGKEiCRsx6Cq5PbT5Rnd0 TLN+R/vWVeQ7QKuTQL8abhoM2YO26wE0kc5js6ZzG0eBjI3cKMKGRlPiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu1O6CnwLESq8LnS/yrI0r4ak48MB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbxu3aGe r9cuDpJGTxYWxpezMbDVMW4s+liN6fZxd2XBfH5bqYti/X865NhASKovElMh1Mzr UJX+8IMMxllf08N3AumsiYNX+BlRjXyiMImCXdwUo/HnNYAuSxRUzhw3HjAsFNdO ku11PhwmbFyk+t/u1aDRcmRQOeDWWYG9u4ZvRYXQSgc4lwzG9JDwrJVGCiHcXrDL ZraUX+1cvstCr5SszDIIi8C3jpILVVQOMg6tvuKCmuYydKqrCHwpaxkg6eVCHhMO v3paQS1v/GUtAPT9y337HOB/Hqso4Q6meFD9GsHkZU38Rmifm5xrs51Fy4cZqPb5 ogOa/EcPVarrhw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:44:06 2025 by rpki-client