This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json) Hash identifier: czODTgFcUh9gk+223lj90Lc5jDwytEQS8fgl8d1AcbY= Subject key identifier: 43:04:51:65:5C:99:E2:A4:34:C1:E9:B3:95:EB:EE:2E:ED:CD:E2:BC Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae Certificate serial: 019AF2AE0D938847752CF802DB4FFC31E4B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft Manifest number: 06A8 Signing time: Sat 06 Dec 2025 08:01:24 +0000 Manifest this update: Sat 06 Dec 2025 08:01:24 +0000 Manifest next update: Sun 07 Dec 2025 08:01:24 +0000 Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: sIY5TWEvdNyclHHPcB5kJ6Wg1ujatI6/fOgsnlP/UdY=) 2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:0d:93:88:47:75:2c:f8:02:db:4f:fc:31:e4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae Validity Not Before: Dec 6 08:01:24 2025 GMT Not After : Dec 7 08:01:24 2025 GMT Subject: CN=430451655c99e2a434c1e9b395ebee2eedcde2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:1a:9f:0b:48:db:c1:13:95:36:7c:7e:80: d7:f5:78:8c:a5:e5:f6:07:c1:72:bd:3c:f4:db:fe: 82:09:d3:33:32:9c:27:63:a9:c8:ee:e0:8c:82:d7: 90:84:89:ab:4b:dd:ce:3a:f4:88:b7:fd:ba:fe:bb: ec:14:66:e4:80:b7:bc:c1:fe:ec:fe:f1:74:63:a3: 73:2c:31:5a:e2:09:5c:82:ca:b8:36:5c:4d:2a:e0: 19:09:0b:0b:cc:75:01:ef:b9:70:d5:d3:cc:40:f8: f4:54:0b:87:fb:6d:2f:58:3b:60:65:5d:e8:6d:91: 3e:e5:a9:14:ba:a4:9a:71:e2:99:d7:6a:95:e7:60: dd:66:06:75:bd:8f:d6:b9:37:8e:7b:dc:87:68:a9: 69:7c:18:a5:43:83:72:2a:00:5d:92:a0:32:90:49: 57:95:fb:af:d7:72:95:95:46:fe:0f:6f:b8:26:6d: 33:5e:de:f1:1c:54:79:86:d6:c4:a8:6f:08:fd:9a: 1c:9e:1f:84:68:8f:d9:6a:66:d1:50:70:0f:33:d6: 88:73:fb:a6:25:cd:2a:5b:8e:f3:12:de:34:22:42: b9:21:d3:e4:f5:56:d9:5e:73:ba:ad:25:c2:9f:ac: de:82:5c:a0:6d:7c:43:d2:23:9d:c4:a0:d8:56:1b: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:51:65:5C:99:E2:A4:34:C1:E9:B3:95:EB:EE:2E:ED:CD:E2:BC X509v3 Authority Key Identifier: keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:41:9b:17:5a:d3:db:64:08:16:15:45:ed:27:77:9b:58:00: e7:7c:8f:85:83:82:d3:6e:90:f2:57:e7:53:f4:b0:02:19:1e: 57:1b:e4:98:8f:06:b6:19:9f:9f:35:48:c2:8e:0e:5b:c9:19: 1f:ee:25:b8:32:09:f2:f9:75:ef:fa:4b:50:b2:6e:be:5f:df: d2:d0:7f:1a:85:dc:ef:ca:b2:18:3e:2e:fa:8e:d5:18:72:17: 73:8e:23:9c:63:ec:41:63:96:35:72:c0:91:f1:33:d4:18:0c: 2d:5a:64:5b:65:32:d9:43:a9:cf:f0:3d:1c:bc:66:40:93:71: f1:e1:8d:5d:e6:b4:9f:89:bf:3b:ee:b6:f2:98:95:2e:06:72: 55:87:31:f1:2a:0d:e6:ff:a7:e1:ad:cf:d4:95:9d:7e:f1:3a: 7f:a6:67:28:31:da:e9:31:48:93:90:d9:ea:3f:b1:97:f0:f8: eb:86:6a:ce:a0:1c:62:32:1d:fe:d1:2a:17:ed:fe:36:39:36: 15:2c:df:b1:6a:09:f8:fa:b5:ea:c1:ee:bd:a0:f0:22:d5:69: ff:b9:3c:71:0d:de:47:c6:cb:ba:58:c9:e4:ca:6f:4d:a5:cb: c0:96:c9:15:96:00:b8:d0:56:17:3e:bc:b3:3b:36:31:8c:8e: 6f:ca:ba:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrg2TiEd1LPgC20/8MeS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjZjOGY0NmZjODBkMmY4NzdjMzVmZDI4ZDhhMDY1MWI3 MDgwYWUwHhcNMjUxMjA2MDgwMTI0WhcNMjUxMjA3MDgwMTI0WjAzMTEwLwYDVQQD Eyg0MzA0NTE2NTVjOTllMmE0MzRjMWU5YjM5NWViZWUyZWVkY2RlMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2sanwtI28ETlTZ8foDX9XiMpeX2 B8FyvTz02/6CCdMzMpwnY6nI7uCMgteQhImrS93OOvSIt/26/rvsFGbkgLe8wf7s /vF0Y6NzLDFa4glcgsq4NlxNKuAZCQsLzHUB77lw1dPMQPj0VAuH+20vWDtgZV3o bZE+5akUuqSaceKZ12qV52DdZgZ1vY/WuTeOe9yHaKlpfBilQ4NyKgBdkqAykElX lfuv13KVlUb+D2+4Jm0zXt7xHFR5htbEqG8I/Zocnh+EaI/ZambRUHAPM9aIc/um Jc0qW47zEt40IkK5IdPk9VbZXnO6rSXCn6zeglygbXxD0iOdxKDYVhv3dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMEUWVcmeKkNMHps5Xr7i7tzeK8MB8GA1UdIwQY MBaAFAn2yPRvyA0vh3w1/SjYoGUbcICuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEt ZWU3M2M4ZTcwNDdkLzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEtZWU3M2M4ZTcwNDdk LzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0GbF1rT 22QIFhVF7Sd3m1gA53yPhYOC026Q8lfnU/SwAhkeVxvkmI8GthmfnzVIwo4OW8kZ H+4luDIJ8vl17/pLULJuvl/f0tB/GoXc78qyGD4u+o7VGHIXc44jnGPsQWOWNXLA kfEz1BgMLVpkW2Uy2UOpz/A9HLxmQJNx8eGNXea0n4m/O+628piVLgZyVYcx8SoN 5v+n4a3P1JWdfvE6f6ZnKDHa6TFIk5DZ6j+xl/D464ZqzqAcYjId/tEqF+3+Njk2 FSzfsWoJ+Pq16sHuvaDwItVp/7k8cQ3eR8bLuljJ5MpvTaXLwJbJFZYAuNBWFz68 szs2MYyOb8q6ow== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:52 2025 by rpki-client