This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json) Hash identifier: dNIVrVLorcLLECfB/PJzqESZbaFOaOFM6DxedI4SRso= Subject key identifier: 59:6C:AB:3F:2E:12:B6:BC:A2:55:C9:EC:F9:3E:63:F0:12:BC:DB:77 Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698 Certificate serial: 019AF19B7EEDCBA8DE57398E5F81449241FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft Manifest number: 0652 Signing time: Sat 06 Dec 2025 03:01:30 +0000 Manifest this update: Sat 06 Dec 2025 03:01:30 +0000 Manifest next update: Sun 07 Dec 2025 03:01:30 +0000 Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=) 2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=) 3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=) 4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: AB376rQDSUvgidcAd4vYiG5hQUZ1lD4H7coO0DJz134=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7e:ed:cb:a8:de:57:39:8e:5f:81:44:92:41:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698 Validity Not Before: Dec 6 03:01:30 2025 GMT Not After : Dec 7 03:01:30 2025 GMT Subject: CN=596cab3f2e12b6bca255c9ecf93e63f012bcdb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:58:1c:bf:c6:96:77:a2:06:1f:eb:25:64: ed:58:d3:8f:6b:5f:5b:8a:5c:60:b5:ff:e0:5a:6c: 9c:7c:f7:2d:48:cb:2a:46:92:62:a8:48:42:b1:f0: 1c:b9:8a:4d:c1:32:da:1d:70:72:55:ce:64:9c:a6: 82:aa:bc:e1:36:8d:d5:8f:a1:29:aa:48:1c:42:04: 1f:b5:ae:5c:4d:30:83:44:c6:c7:20:05:e1:a2:38: a6:8d:4b:31:9f:09:59:27:d4:00:c5:a3:83:a8:97: 3a:ad:73:e1:2b:bf:61:47:1e:ae:eb:ba:45:10:29: ae:da:bb:c9:c6:82:0b:d6:ec:32:d4:07:c2:5d:35: 05:45:26:73:9b:d9:3c:e0:31:58:fb:cc:7e:c4:be: 83:06:99:51:d2:63:a8:f1:76:5d:a5:5f:f9:93:f3: 7d:b7:13:26:03:79:50:1c:8d:0b:a0:84:19:0b:c6: ed:19:7e:5c:86:27:97:19:b2:da:d3:c5:06:43:1a: 31:f2:bf:b8:d6:b1:3c:ca:f9:e5:a9:aa:8b:f3:e3: 37:17:b5:33:7f:f7:b2:37:6d:a0:d6:e7:ad:24:d5: 75:0d:2f:0d:b9:ad:97:6c:2c:ac:eb:f0:93:aa:e8: 7e:38:c6:ce:4a:87:01:59:0f:37:d9:fc:94:5b:0b: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6C:AB:3F:2E:12:B6:BC:A2:55:C9:EC:F9:3E:63:F0:12:BC:DB:77 X509v3 Authority Key Identifier: keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:22:36:38:a4:b1:18:36:b5:ec:59:f9:e3:62:4a:1a:a5:e6: 1c:62:51:4f:b2:b8:a0:7c:84:6e:1e:b6:bb:04:f8:4c:a5:ca: e8:5a:62:db:5d:05:5e:56:06:19:fd:ea:4b:a1:80:28:64:64: 58:95:26:d0:d0:63:e4:06:82:bb:1d:ee:7e:fa:e4:6c:79:1f: 48:32:3a:e3:e1:61:19:02:47:fd:51:74:93:30:5e:3f:81:10: d9:40:4b:d0:64:98:cf:88:96:04:95:e8:ea:9e:e6:f6:5e:da: 94:e2:d9:f7:b1:3a:64:bd:16:50:7f:41:15:5b:48:24:f4:a2: b5:80:f4:bd:8e:08:56:4d:db:bd:57:7e:1a:48:c1:f8:64:5f: 90:dd:a2:10:18:91:f1:d8:af:1a:cb:ee:0b:66:10:a4:80:6d: aa:8c:54:70:1b:00:eb:80:04:73:a2:4e:f9:68:a7:af:5c:5b: e7:14:17:12:f4:aa:c2:0f:45:86:ea:a8:5d:c8:50:fd:9b:6c: 3b:f7:1c:f5:e4:00:a1:bf:c7:0e:c1:6c:d1:6a:38:6b:49:82: b1:a5:a7:5e:e6:9b:b8:1c:40:87:e6:25:d0:b8:a9:38:8e:10: 3a:47:9e:a4:b8:dd:db:db:8a:4a:75:63:fa:ce:71:4b:63:17: ea:49:e7:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm37ty6jeVzmOX4FEkkH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh Mzk2OTgwHhcNMjUxMjA2MDMwMTMwWhcNMjUxMjA3MDMwMTMwWjAzMTEwLwYDVQQD Eyg1OTZjYWIzZjJlMTJiNmJjYTI1NWM5ZWNmOTNlNjNmMDEyYmNkYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FpYHL/GlneiBh/rJWTtWNOPa19b ilxgtf/gWmycfPctSMsqRpJiqEhCsfAcuYpNwTLaHXByVc5knKaCqrzhNo3Vj6Ep qkgcQgQfta5cTTCDRMbHIAXhojimjUsxnwlZJ9QAxaODqJc6rXPhK79hRx6u67pF ECmu2rvJxoIL1uwy1AfCXTUFRSZzm9k84DFY+8x+xL6DBplR0mOo8XZdpV/5k/N9 txMmA3lQHI0LoIQZC8btGX5chieXGbLa08UGQxox8r+41rE8yvnlqaqL8+M3F7Uz f/eyN22g1uetJNV1DS8Nua2XbCys6/CTquh+OMbOSocBWQ832fyUWwtn8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlsqz8uEra8olXJ7Pk+Y/ASvNt3MB8GA1UdIwQY MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2 LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyI2OKSx GDa17Fn542JKGqXmHGJRT7K4oHyEbh62uwT4TKXK6Fpi210FXlYGGf3qS6GAKGRk WJUm0NBj5AaCux3ufvrkbHkfSDI64+FhGQJH/VF0kzBeP4EQ2UBL0GSYz4iWBJXo 6p7m9l7alOLZ97E6ZL0WUH9BFVtIJPSitYD0vY4IVk3bvVd+GkjB+GRfkN2iEBiR 8divGsvuC2YQpIBtqoxUcBsA64AEc6JO+Winr1xb5xQXEvSqwg9FhuqoXchQ/Zts O/cc9eQAob/HDsFs0Wo4a0mCsaWnXuabuBxAh+Yl0LipOI4QOkeepLjd29uKSnVj +s5xS2MX6knnqA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:56 2025 by rpki-client