This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json) Hash identifier: OQs9mUZjcEFGvyhU8R0f3HKUUG0aHSsa1V3YbWiML58= Subject key identifier: 53:DF:07:A4:B8:FF:5D:9F:98:2A:D8:23:38:2F:53:A9:66:16:CA:54 Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25 Certificate serial: 019AF31D3142EE9EB6104D8B76E03BDBBCE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft Manifest number: 16FF Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=) 2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: 0tD5uUaWyZeoY2H/VavR0c2vmsEBW8P9dqmffuklcUw=) 3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=) 4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:31:42:ee:9e:b6:10:4d:8b:76:e0:3b:db:bc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25 Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=53df07a4b8ff5d9f982ad823382f53a96616ca54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:43:d1:99:5d:4d:c2:77:3e:f7:a1:9e:c7: 8b:b9:40:f1:38:1a:ac:99:f8:58:78:4d:e5:06:4a: 14:fb:f6:d4:4a:48:a8:ae:e8:b6:d2:fd:ee:0d:eb: 07:89:aa:f3:24:1f:05:15:dd:42:01:be:31:2f:6c: 01:20:42:65:45:59:ae:bd:be:4e:db:f4:52:66:43: e9:37:92:5d:f8:dc:22:5a:b0:63:45:3c:6e:37:18: 5d:3c:27:88:4d:0d:74:cb:d8:45:48:37:2e:e8:bf: 15:c3:07:cf:86:6b:a9:3d:1b:f4:0f:a3:a3:cc:09: 1e:37:dc:76:e5:39:63:27:92:77:56:eb:53:4b:bb: cd:67:c4:a8:59:d6:c1:9a:9b:49:c2:fd:c0:24:58: 15:80:27:13:7a:84:07:41:ff:e0:54:57:ce:b3:d4: 31:a0:cc:8d:09:b1:be:9c:16:48:3d:de:ed:42:ac: e6:c5:62:00:7f:de:5f:f4:d9:14:35:96:f2:54:4b: ba:93:3c:eb:eb:bc:5f:4f:c7:22:0c:8c:95:02:05: 6a:47:1b:93:e3:7c:da:b1:24:67:28:6c:a4:37:c8: 99:93:12:f7:e2:08:12:95:81:e8:a9:26:04:8f:bf: a3:a1:12:0b:65:b7:19:d0:eb:f0:88:75:63:67:7f: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DF:07:A4:B8:FF:5D:9F:98:2A:D8:23:38:2F:53:A9:66:16:CA:54 X509v3 Authority Key Identifier: keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:4a:81:c2:2b:55:99:94:05:ae:c4:e8:5c:0f:1a:24:12:05: 3b:b5:8c:d9:50:c8:d1:e7:38:87:ff:3c:09:13:3d:81:e2:22: 15:22:fd:04:f0:f2:4f:d1:07:05:75:10:99:c8:2a:c5:41:66: 7a:2d:94:f3:2b:af:50:bb:75:8d:e4:1c:f7:02:16:ab:07:ae: be:73:d7:e8:e4:83:77:5b:42:29:c5:95:35:4d:ed:95:7f:e2: 4f:c8:6d:4a:14:bc:15:d1:ff:b0:0e:4c:53:63:e6:bb:93:a6: e4:66:af:03:e4:40:34:79:ce:12:ee:29:af:af:13:c8:ff:c8: 0d:5a:95:24:35:6d:92:9b:3a:4e:39:cb:e3:e1:2d:29:72:6e: a3:41:bf:bb:e2:cf:f7:c7:4d:96:9a:c3:db:59:12:06:dc:42: 85:6f:54:15:75:d9:71:d3:a8:c0:be:ed:59:4a:48:5f:66:6b: 11:f3:6a:ff:cf:77:23:c7:19:c8:ff:cc:f8:78:5b:6d:9f:4a: 96:d8:46:57:89:5c:4d:30:3d:c3:3d:ae:81:f7:88:f2:df:de: 10:fb:60:38:1e:43:20:2e:85:2d:c8:a4:ec:d3:8c:1d:44:e9: 43:27:cc:bd:dd:fe:17:e3:b1:53:b7:8b:fd:4e:3a:c0:dc:9c: d0:d4:92:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTFC7p62EE2LduA727zjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5 ZTRlMjUwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD Eyg1M2RmMDdhNGI4ZmY1ZDlmOTgyYWQ4MjMzODJmNTNhOTY2MTZjYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobVD0ZldTcJ3PvehnseLuUDxOBqs mfhYeE3lBkoU+/bUSkiorui20v3uDesHiarzJB8FFd1CAb4xL2wBIEJlRVmuvb5O 2/RSZkPpN5Jd+NwiWrBjRTxuNxhdPCeITQ10y9hFSDcu6L8VwwfPhmupPRv0D6Oj zAkeN9x25TljJ5J3VutTS7vNZ8SoWdbBmptJwv3AJFgVgCcTeoQHQf/gVFfOs9Qx oMyNCbG+nBZIPd7tQqzmxWIAf95f9NkUNZbyVEu6kzzr67xfT8ciDIyVAgVqRxuT 43zasSRnKGykN8iZkxL34ggSlYHoqSYEj7+joRILZbcZ0OvwiHVjZ3/w5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPfB6S4/12fmCrYIzgvU6lmFspUMB8GA1UdIwQY MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA30qBwitV mZQFrsToXA8aJBIFO7WM2VDI0ec4h/88CRM9geIiFSL9BPDyT9EHBXUQmcgqxUFm ei2U8yuvULt1jeQc9wIWqweuvnPX6OSDd1tCKcWVNU3tlX/iT8htShS8FdH/sA5M U2Pmu5Om5GavA+RANHnOEu4pr68TyP/IDVqVJDVtkps6TjnL4+EtKXJuo0G/u+LP 98dNlprD21kSBtxChW9UFXXZcdOowL7tWUpIX2ZrEfNq/893I8cZyP/M+HhbbZ9K lthGV4lcTTA9wz2ugfeI8t/eEPtgOB5DIC6FLcik7NOMHUTpQyfMvd3+F+OxU7eL /U46wNyc0NSSFA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:52 2025 by rpki-client