This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json) Hash identifier: iMvqu4DeUVP6KJ0az/+N7LJjnEA6rCwvTOLzDNOqVew= Subject key identifier: D3:1E:75:F6:F0:A9:AF:A7:B6:F9:CA:1B:CD:FD:52:AC:34:13:B0:6D Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019AF2AD74394DEBA998F71E27446A3C4169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: s+SvKMiRwYPReB0oLTpJV2XoSm0ej7ZuUSMgX5aVg/I=) 2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=) 3: osRm_vCZFQn-IZrfa-S-ZoLyv-k.roa (hash: UdnDiufWcMmwrrv9vsKKmhqhc0AHNBah6lzkUFktmdw=) 4: wflfIOo-1t3hGXMoEB24Xbfs3KU.roa (hash: CGGLqcKnUfaBtIHUEc+dqJSotohW0vSNwSlisgSNlco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:74:39:4d:eb:a9:98:f7:1e:27:44:6a:3c:41:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=d31e75f6f0a9afa7b6f9ca1bcdfd52ac3413b06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:01:f9:4b:06:98:cb:98:e9:a9:d1:43:25:3a: aa:c7:e0:55:e7:6b:e7:0f:42:04:be:cd:7b:5f:c8: a3:29:cc:ca:49:f4:8e:25:b9:e9:26:41:c7:1a:c0: 5d:cc:8e:9e:f6:d2:8a:51:d5:5e:55:6b:24:1c:9e: df:55:ea:ea:b6:f5:37:ec:b6:94:ed:e3:63:dd:be: 54:87:d4:b1:15:42:ad:bb:1e:1a:7e:68:74:da:a4: b3:41:25:e2:8c:35:5b:ca:05:53:ad:9d:1d:06:a9: 93:e2:e7:69:14:e0:cd:68:27:84:e7:87:23:b0:7f: 1c:61:23:08:06:f5:74:a0:5f:8a:5b:18:d8:47:79: 72:ea:21:3c:38:77:60:4c:b5:df:ed:9b:29:59:bb: 84:81:de:fe:f2:d9:99:30:88:69:a8:ac:92:1c:e3: 83:e3:3f:e8:dc:a1:8c:4d:d3:0f:cc:16:d2:88:73: 43:1c:32:e7:d4:d3:19:e2:36:42:43:5a:56:64:cb: 2c:58:00:7d:00:ef:f8:7e:6b:65:76:f2:14:22:2d: 4b:04:42:2b:10:58:46:c6:9c:5e:11:2a:2c:f6:7a: e9:ca:45:cb:0e:50:28:1d:9b:bd:72:51:98:96:38: 65:2b:52:8e:63:fc:92:35:33:b6:62:ad:35:71:4e: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:75:F6:F0:A9:AF:A7:B6:F9:CA:1B:CD:FD:52:AC:34:13:B0:6D X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bb:8e:d4:cb:16:84:85:ed:1f:52:c5:f1:1b:47:f1:a1:0c: a3:88:50:50:3c:64:af:6c:78:8c:37:ed:d5:72:8e:4e:09:16: 8e:6b:9b:b4:e7:b4:87:3e:47:7d:0c:93:f0:4d:48:f6:77:15: 04:0b:74:16:68:45:98:2d:18:37:78:66:6a:93:f5:3c:72:88: 2f:04:84:3e:7c:f2:cd:cf:cb:ce:48:06:65:e3:16:2e:a1:c1: 8f:98:76:8c:fa:d2:49:91:4e:37:84:60:7a:d9:d7:6f:ef:bf: 21:a5:64:20:84:0f:79:97:e9:10:72:1e:99:28:ad:f0:4a:55: f0:5c:97:b3:06:3e:d2:e4:e9:cc:55:b9:12:01:0c:ee:14:34: 98:b8:06:bc:37:5c:b5:70:ae:7b:21:69:5f:97:01:bb:e9:76: b6:7c:3d:ad:e3:a8:ef:09:7f:55:f9:06:f3:37:74:b8:f4:c4: a7:8c:80:2f:aa:57:4b:be:d5:dd:09:53:8b:57:43:c2:c0:34: 11:ed:4d:d9:05:ed:97:c4:98:31:c8:1a:18:d6:f2:11:a0:60: 46:84:ea:db:2e:3b:fa:e6:30:d1:97:0c:4f:90:1b:e1:41:e0: b1:cc:b8:f6:73:51:74:d1:50:a9:88:cc:1e:9f:61:30:ec:3c: 03:12:52:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXQ5TeupmPceJ0RqPEFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EyhkMzFlNzVmNmYwYTlhZmE3YjZmOWNhMWJjZGZkNTJhYzM0MTNiMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QH5SwaYy5jpqdFDJTqqx+BV52vn D0IEvs17X8ijKczKSfSOJbnpJkHHGsBdzI6e9tKKUdVeVWskHJ7fVerqtvU37LaU 7eNj3b5Uh9SxFUKtux4afmh02qSzQSXijDVbygVTrZ0dBqmT4udpFODNaCeE54cj sH8cYSMIBvV0oF+KWxjYR3ly6iE8OHdgTLXf7ZspWbuEgd7+8tmZMIhpqKySHOOD 4z/o3KGMTdMPzBbSiHNDHDLn1NMZ4jZCQ1pWZMssWAB9AO/4fmtldvIUIi1LBEIr EFhGxpxeESos9nrpykXLDlAoHZu9clGYljhlK1KOY/ySNTO2Yq01cU41KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMedfbwqa+ntvnKG839Uqw0E7BtMB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7uO1MsW hIXtH1LF8RtH8aEMo4hQUDxkr2x4jDft1XKOTgkWjmubtOe0hz5HfQyT8E1I9ncV BAt0FmhFmC0YN3hmapP1PHKILwSEPnzyzc/LzkgGZeMWLqHBj5h2jPrSSZFON4Rg etnXb++/IaVkIIQPeZfpEHIemSit8EpV8FyXswY+0uTpzFW5EgEM7hQ0mLgGvDdc tXCueyFpX5cBu+l2tnw9reOo7wl/VfkG8zd0uPTEp4yAL6pXS77V3QlTi1dDwsA0 Ee1N2QXtl8SYMcgaGNbyEaBgRoTq2y47+uYw0ZcMT5Ab4UHgscy49nNRdNFQqYjM Hp9hMOw8AxJS/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:57 2025 by rpki-client