This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json) Hash identifier: tdydiEHc226l90RW4MlAan+Lul1mtsVYptDQWPeqZtU= Subject key identifier: 99:DD:A2:74:39:10:8F:1A:C4:4E:0D:E1:EC:82:13:2F:AB:D2:08:D6 Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51 Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651 Certificate serial: 019AF3C027D576A3D0C0156EB807EBA3214F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft Manifest number: 0A04 Signing time: Sat 06 Dec 2025 13:00:47 +0000 Manifest this update: Sat 06 Dec 2025 13:00:47 +0000 Manifest next update: Sun 07 Dec 2025 13:00:47 +0000 Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: JldvLpgYx04bKoHZ0teZKX7t961TbOJkeOwalQ0A0NE=) 2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:27:d5:76:a3:d0:c0:15:6e:b8:07:eb:a3:21:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651 Validity Not Before: Dec 6 13:00:47 2025 GMT Not After : Dec 7 13:00:47 2025 GMT Subject: CN=99dda27439108f1ac44e0de1ec82132fabd208d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:05:06:b3:9f:be:d6:dc:bd:52:c9:a2:db: 95:f4:ce:e7:31:1f:c6:7c:94:40:04:f2:f3:d2:05: 3d:29:7f:e0:50:19:79:6b:0c:15:d6:8b:47:92:85: 50:6c:c1:18:af:85:d8:86:7f:d3:18:ff:73:af:5e: f2:49:62:b1:b4:d6:7a:f8:55:f0:30:5e:a6:60:be: 73:ef:83:aa:c3:f4:67:98:39:8a:4a:4c:3b:de:ba: 64:c3:e3:63:e2:4f:4f:a9:ad:cb:e3:6f:52:4f:9a: 84:e8:cb:f7:81:fd:e3:63:83:0f:df:c2:f2:5f:c0: 5b:d6:44:26:24:8c:78:bc:4b:90:02:f0:25:d3:83: 08:a2:81:33:e0:c3:bd:c5:f8:26:7f:1d:ff:91:d0: 65:33:d9:08:e3:7e:7c:8e:7d:d0:a4:9b:a7:e0:01: ec:5b:3e:77:3b:ec:df:cc:80:71:a8:79:94:31:37: 90:08:d4:1e:86:1f:58:7f:86:a0:b5:e3:87:08:55: fa:06:c0:4e:4d:da:84:4f:45:ea:16:05:79:d0:83: fb:38:1d:cc:e2:0a:18:67:df:73:a2:d6:2f:a4:2c: 7f:54:29:ff:d7:4b:ba:64:0b:4d:77:97:db:54:0f: 41:72:79:09:d4:38:88:ef:3a:57:69:68:d4:76:ed: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DD:A2:74:39:10:8F:1A:C4:4E:0D:E1:EC:82:13:2F:AB:D2:08:D6 X509v3 Authority Key Identifier: keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:be:0a:8e:1f:c9:ad:db:7c:97:fe:b5:95:b3:fd:77:68:9c: e1:65:e1:bf:e4:f9:1d:40:a8:8c:d9:e2:46:fd:61:6b:1c:54: 92:e4:68:05:d1:b4:90:45:28:90:f7:fe:2d:f8:ea:e2:ab:55: d9:44:c1:2e:9c:c5:7e:cb:ab:ac:22:80:c2:bc:f4:c0:1a:73: 4b:ed:8f:58:88:b3:28:8b:7e:8e:64:9c:38:cd:0e:89:7f:44: 64:0a:54:cd:3a:01:79:23:f3:74:eb:33:b5:b2:ae:52:6f:27: 94:51:2a:e7:bf:db:f5:e6:c0:97:1b:cd:75:5f:e9:2c:42:e2: 42:e2:d9:ec:0f:85:54:87:0f:22:90:e9:aa:76:f1:b1:bc:2f: 9e:20:de:2e:87:72:9c:db:25:c3:22:ad:d7:61:bc:db:a4:41: d6:7f:2c:58:76:62:fa:d3:7b:6f:2c:0c:f3:47:22:0a:f1:5d: 2c:4a:6c:d2:9b:59:98:fa:12:57:50:8b:68:1a:e8:d4:8a:bb: 26:aa:ac:79:42:f2:2e:12:a5:8b:57:92:24:88:33:1a:f4:66: 7b:f3:c5:b2:3c:1f:5f:9a:52:6c:44:8f:1d:18:95:dc:91:f9: 86:9a:99:40:54:f3:b6:a4:ee:37:e2:e7:ad:a9:c3:ce:98:29: 1c:6c:75:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCfVdqPQwBVuuAfroyFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDZmMDMzNTM3YmJkODYzYmJjYTJiNjIwOTJkOGRlMzYx MWY2NTEwHhcNMjUxMjA2MTMwMDQ3WhcNMjUxMjA3MTMwMDQ3WjAzMTEwLwYDVQQD Eyg5OWRkYTI3NDM5MTA4ZjFhYzQ0ZTBkZTFlYzgyMTMyZmFiZDIwOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUgFBrOfvtbcvVLJotuV9M7nMR/G fJRABPLz0gU9KX/gUBl5awwV1otHkoVQbMEYr4XYhn/TGP9zr17ySWKxtNZ6+FXw MF6mYL5z74Oqw/RnmDmKSkw73rpkw+Nj4k9Pqa3L429ST5qE6Mv3gf3jY4MP38Ly X8Bb1kQmJIx4vEuQAvAl04MIooEz4MO9xfgmfx3/kdBlM9kI4358jn3QpJun4AHs Wz53O+zfzIBxqHmUMTeQCNQehh9Yf4agteOHCFX6BsBOTdqET0XqFgV50IP7OB3M 4goYZ99zotYvpCx/VCn/10u6ZAtNd5fbVA9BcnkJ1DiI7zpXaWjUdu0Z0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJndonQ5EI8axE4N4eyCEy+r0gjWMB8GA1UdIwQY MBaAFAoG8DNTe72GO7yitiCS2N42EfZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWIt MmE0ODEzYTEzMTIwLzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWItMmE0ODEzYTEzMTIw LzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhr4Kjh/J rdt8l/61lbP9d2ic4WXhv+T5HUCojNniRv1haxxUkuRoBdG0kEUokPf+Lfjq4qtV 2UTBLpzFfsurrCKAwrz0wBpzS+2PWIizKIt+jmScOM0OiX9EZApUzToBeSPzdOsz tbKuUm8nlFEq57/b9ebAlxvNdV/pLELiQuLZ7A+FVIcPIpDpqnbxsbwvniDeLody nNslwyKt12G826RB1n8sWHZi+tN7bywM80ciCvFdLEps0ptZmPoSV1CLaBro1Iq7 JqqseULyLhKli1eSJIgzGvRme/PFsjwfX5pSbESPHRiV3JH5hpqZQFTztqTuN+Ln ranDzpgpHGx1rg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:47 2025 by rpki-client