This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json) Hash identifier: djmsjtVOnk2pJV0L06km1K2cHrWq62LUrp+EYnei9eg= Subject key identifier: CC:AF:FB:C0:02:88:78:0D:79:E4:D6:8C:E8:AD:B5:8D:2C:51:F7:93 Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59 Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59 Certificate serial: 019AF2E449FAD93597DC2878E9E5CA72581D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft Manifest number: 0133 Signing time: Sat 06 Dec 2025 09:00:38 +0000 Manifest this update: Sat 06 Dec 2025 09:00:38 +0000 Manifest next update: Sun 07 Dec 2025 09:00:38 +0000 Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: xXxp27wAMtcvGo43TTuhu6Wl9lqj+sMgs8UXfzMleeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:49:fa:d9:35:97:dc:28:78:e9:e5:ca:72:58:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59 Validity Not Before: Dec 6 09:00:38 2025 GMT Not After : Dec 7 09:00:38 2025 GMT Subject: CN=ccaffbc00288780d79e4d68ce8adb58d2c51f793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:56:17:26:9e:d8:1b:e5:8c:d0:a7:e4:05: ce:04:36:35:56:31:25:c8:8c:48:6c:3b:f3:90:a0: c6:19:cc:2a:48:b1:78:fe:a5:d2:3b:81:d0:03:b7: 43:e3:6e:d0:59:84:de:1f:85:1d:9d:36:34:52:12: d9:95:19:2a:7f:45:29:3a:2e:7f:3b:1b:f6:d8:bd: 5b:a9:c9:12:02:23:c3:52:28:93:dc:36:03:98:01: a6:21:22:65:8b:29:96:27:47:14:e7:ad:55:cf:de: 4f:40:51:df:c3:15:68:4d:b6:de:46:20:a3:89:fd: 76:71:67:94:c4:e7:b8:1f:20:7a:af:f7:50:e4:d6: 59:36:99:3b:1c:aa:fa:fa:58:4e:74:97:8b:a7:97: 5c:b2:9d:63:66:e5:73:da:12:d7:31:7b:f4:93:1a: 1b:f9:c1:cb:c6:be:ed:1c:24:72:3f:da:77:b4:06: ef:d0:78:c6:f8:43:ac:f4:03:1f:9f:23:a7:9a:1a: d8:c2:ec:45:89:ce:8a:53:29:22:bd:ee:64:35:c1: 79:c7:7d:b5:8a:47:53:86:f6:95:13:40:7f:50:14: 6f:ac:a2:99:f7:79:77:cd:8f:e3:3a:aa:30:9c:d2: 06:a6:19:f7:c2:26:c5:10:c8:21:b9:5a:fc:cb:67: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AF:FB:C0:02:88:78:0D:79:E4:D6:8C:E8:AD:B5:8D:2C:51:F7:93 X509v3 Authority Key Identifier: keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:4b:08:39:1a:d5:c7:f5:c2:12:fb:bc:c2:27:73:66:e1: 44:c3:5c:d7:81:cf:1b:3d:0d:98:b5:74:b0:9b:9b:d2:0c:2a: 33:ed:fe:5b:3f:23:48:27:81:44:02:81:13:07:a0:2f:e2:ce: 2e:3e:5b:4b:5d:67:c8:d7:a8:a9:dc:88:b7:99:b4:f8:a5:56: f8:82:ac:a8:20:19:73:ba:6e:2f:48:8e:1f:38:eb:9e:31:d7: ad:db:1f:8e:00:73:50:3f:2f:f0:22:b1:eb:71:7e:cd:00:db: 04:39:0a:fa:c7:da:a0:72:21:02:2d:7c:5e:1a:b9:c6:c7:91: fd:87:c1:4d:6d:f9:6b:72:2c:02:28:c3:20:84:a1:e3:56:50: b4:f7:60:1a:5a:31:fe:f7:fe:4d:0d:9e:e4:1a:95:89:8e:a4: c0:f3:88:ca:8e:ca:ca:ff:49:df:92:db:1a:14:14:e6:6b:86: 79:1e:f3:51:99:bf:93:ff:26:e9:22:90:7e:ac:0a:82:e9:87: 2e:40:34:a9:68:58:3b:93:6c:95:ed:25:39:21:fd:e2:2c:61: 2a:ca:46:33:3c:68:48:f5:80:67:f7:8b:90:41:66:05:32:51: 56:37:de:ca:fa:84:ef:0f:83:d7:e5:54:04:b9:46:5f:74:0b: cf:a5:d3:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5En62TWX3Ch46eXKclgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NmE4N2JiZjkxYWU2OGRmOTJlOGQ1ZDJmNGE4NDlhYjhj MmVkNTkwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD EyhjY2FmZmJjMDAyODg3ODBkNzllNGQ2OGNlOGFkYjU4ZDJjNTFmNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVhWFyae2BvljNCn5AXOBDY1VjEl yIxIbDvzkKDGGcwqSLF4/qXSO4HQA7dD427QWYTeH4UdnTY0UhLZlRkqf0UpOi5/ Oxv22L1bqckSAiPDUiiT3DYDmAGmISJliymWJ0cU561Vz95PQFHfwxVoTbbeRiCj if12cWeUxOe4HyB6r/dQ5NZZNpk7HKr6+lhOdJeLp5dcsp1jZuVz2hLXMXv0kxob +cHLxr7tHCRyP9p3tAbv0HjG+EOs9AMfnyOnmhrYwuxFic6KUykive5kNcF5x321 ikdThvaVE0B/UBRvrKKZ93l3zY/jOqownNIGphn3wibFEMghuVr8y2cl9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyv+8ACiHgNeeTWjOittY0sUfeTMB8GA1UdIwQY MBaAFAhqh7v5GuaN+S6NXS9KhJq4wu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hN2MxNTEtNzRmOS00MWRhLThmNzIt MWE4NWE2OGQxYTc3LzEvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hN2MxNTEtNzRmOS00MWRhLThmNzItMWE4NWE2OGQxYTc3 LzEvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixVLCDka 1cf1whL7vMInc2bhRMNc14HPGz0NmLV0sJub0gwqM+3+Wz8jSCeBRAKBEwegL+LO Lj5bS11nyNeoqdyIt5m0+KVW+IKsqCAZc7puL0iOHzjrnjHXrdsfjgBzUD8v8CKx 63F+zQDbBDkK+sfaoHIhAi18Xhq5xseR/YfBTW35a3IsAijDIISh41ZQtPdgGlox /vf+TQ2e5BqViY6kwPOIyo7Kyv9J35LbGhQU5muGeR7zUZm/k/8m6SKQfqwKgumH LkA0qWhYO5Nsle0lOSH94ixhKspGMzxoSPWAZ/eLkEFmBTJRVjfeyvqE7w+D1+VU BLlGX3QLz6XTcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:07 2025 by rpki-client