This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json) Hash identifier: hsnsJA2kg8edZXqIZrb7rbbBl45jeIGghM84anjIOVk= Subject key identifier: 9E:55:15:02:DC:65:20:31:26:D2:03:19:09:24:21:9D:1E:20:61:B7 Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Certificate serial: 019AF5AE80F715BFDDAC36A6E4EB239644A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:00:45 +0000 Manifest this update: Sat 06 Dec 2025 22:00:45 +0000 Manifest next update: Sun 07 Dec 2025 22:00:45 +0000 Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: 4WF7Vj5+pcvG6AFalFkPKWHutq6cuGvcnprRCWHX+Lk=) 2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:80:f7:15:bf:dd:ac:36:a6:e4:eb:23:96:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Validity Not Before: Dec 6 22:00:45 2025 GMT Not After : Dec 7 22:00:45 2025 GMT Subject: CN=9e551502dc65203126d203190924219d1e2061b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:8c:a1:a1:f9:99:06:b6:0b:cf:4a:52:aa: 13:7b:c0:9a:3b:db:8b:54:75:01:24:1a:ca:28:e4: b5:dc:da:8b:d1:41:6a:66:c8:d5:cc:a1:50:86:e5: d8:26:db:a1:7e:78:8b:d4:ac:18:0e:eb:2a:bc:b0: 74:4d:1c:71:37:e9:cf:f5:46:cf:0a:5e:7b:02:fa: d7:70:cd:0b:5c:0e:fd:29:f2:64:51:f8:a0:8d:4f: 50:2c:59:1e:44:87:bb:c6:16:fd:f4:1d:df:e4:5c: 99:5d:a1:d9:e4:62:04:78:8b:b6:3c:f6:a4:2d:d9: a8:31:68:61:13:9a:ae:d2:10:4a:ba:cd:2a:10:91: 18:4c:69:16:47:7b:6a:6b:29:6b:02:1c:ad:20:21: ab:80:e6:81:2a:c7:52:80:cc:4c:1d:ed:d9:a5:bf: 51:f4:5b:00:2d:9e:2e:6c:17:2a:51:5b:47:2d:f3: 41:e2:b9:31:b2:28:bc:4e:27:47:90:f7:e0:f8:5a: 6e:32:d2:2c:3a:94:32:40:cd:7b:c7:5d:99:0c:ff: 5b:35:9d:cd:05:e3:2d:0f:3d:ca:89:27:ba:29:66: 15:2e:7c:c6:7c:4a:f5:12:82:cb:f0:50:53:8e:63: 91:4a:2f:b6:f1:74:92:cb:29:25:47:7c:60:4a:9b: 3a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:15:02:DC:65:20:31:26:D2:03:19:09:24:21:9D:1E:20:61:B7 X509v3 Authority Key Identifier: keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a7:c0:1d:bc:db:f7:3d:68:e8:b4:90:3c:d3:b6:ae:1e:c1: 54:e2:48:c4:8d:a1:d7:aa:bb:34:32:ea:ba:e1:fb:d9:9c:f2: 3e:40:e6:45:9a:cd:07:03:04:a0:45:75:9b:d7:65:2f:9f:02: 5e:9f:ca:1d:53:30:0b:7b:a3:7d:b5:97:bc:7c:dd:d5:69:88: b1:77:71:09:66:5f:5f:df:04:b5:07:fc:97:ce:3e:cc:01:31: ed:9d:f3:a3:3b:ed:05:00:45:b2:74:e3:c7:b5:46:ed:e2:69: 23:ad:e0:94:02:c6:92:5f:ce:a4:65:fe:be:92:0c:6d:fb:ee: d8:61:90:ca:45:54:30:4d:0b:7f:90:a8:d1:0a:5a:1f:3d:b9: cb:10:52:1e:b0:32:e3:a8:54:d5:a3:d0:70:75:dd:d7:02:d4: e7:66:4b:99:70:6e:be:d1:c5:d3:64:2d:c0:28:67:63:c8:fc: 36:df:29:c1:86:2b:d8:7a:1e:83:22:1b:03:a0:ee:28:66:e0: 60:20:c1:b7:98:6b:9b:72:f0:9c:eb:90:ec:56:bf:d7:26:35: 0b:47:50:75:a3:88:80:8a:23:d5:89:2f:29:dc:74:c6:59:96: 79:96:ec:b0:22:fd:74:8b:83:b0:bd:0c:b1:44:3f:42:ee:a1: 82:61:7e:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roD3Fb/drDam5OsjlkSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0 NTE1ZTkwHhcNMjUxMjA2MjIwMDQ1WhcNMjUxMjA3MjIwMDQ1WjAzMTEwLwYDVQQD Eyg5ZTU1MTUwMmRjNjUyMDMxMjZkMjAzMTkwOTI0MjE5ZDFlMjA2MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRKMoaH5mQa2C89KUqoTe8CaO9uL VHUBJBrKKOS13NqL0UFqZsjVzKFQhuXYJtuhfniL1KwYDusqvLB0TRxxN+nP9UbP Cl57AvrXcM0LXA79KfJkUfigjU9QLFkeRIe7xhb99B3f5FyZXaHZ5GIEeIu2PPak LdmoMWhhE5qu0hBKus0qEJEYTGkWR3tqaylrAhytICGrgOaBKsdSgMxMHe3Zpb9R 9FsALZ4ubBcqUVtHLfNB4rkxsii8TidHkPfg+FpuMtIsOpQyQM17x12ZDP9bNZ3N BeMtDz3KiSe6KWYVLnzGfEr1EoLL8FBTjmORSi+28XSSyyklR3xgSps60QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5VFQLcZSAxJtIDGQkkIZ0eIGG3MB8GA1UdIwQY MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5 LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKfAHbzb 9z1o6LSQPNO2rh7BVOJIxI2h16q7NDLquuH72ZzyPkDmRZrNBwMEoEV1m9dlL58C Xp/KHVMwC3ujfbWXvHzd1WmIsXdxCWZfX98EtQf8l84+zAEx7Z3zozvtBQBFsnTj x7VG7eJpI63glALGkl/OpGX+vpIMbfvu2GGQykVUME0Lf5Co0QpaHz25yxBSHrAy 46hU1aPQcHXd1wLU52ZLmXBuvtHF02QtwChnY8j8Nt8pwYYr2HoegyIbA6DuKGbg YCDBt5hrm3LwnOuQ7Fa/1yY1C0dQdaOIgIoj1YkvKdx0xlmWeZbssCL9dIuDsL0M sUQ/Qu6hgmF+NQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:33:58 2025 by rpki-client