This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json) Hash identifier: 7TE1nceAbnSjpxzA3MmyQHPdY++9QPxp8DpL3HMLRhg= Subject key identifier: 2B:F4:D6:79:08:BB:02:A2:76:19:BF:B4:1A:97:B9:EF:44:98:11:1C Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80 Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980 Certificate serial: 019B2D78BDCB5F753A11D2C6C830FEBE07EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 18:00:46 +0000 Manifest this update: Wed 17 Dec 2025 18:00:46 +0000 Manifest next update: Thu 18 Dec 2025 18:00:46 +0000 Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: 3ADw3Ir2CiEmeNplTCH0urJx530EdWrhFqvjfqvtxpM=) 2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:bd:cb:5f:75:3a:11:d2:c6:c8:30:fe:be:07:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980 Validity Not Before: Dec 17 18:00:46 2025 GMT Not After : Dec 18 18:00:46 2025 GMT Subject: CN=2bf4d67908bb02a27619bfb41a97b9ef4498111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:92:9f:44:fd:6f:95:b1:d5:91:ad:f4:43: b4:51:2e:86:80:90:aa:60:9a:4e:94:cd:e9:e0:88: dc:63:2e:6b:02:e6:d4:27:8a:e9:7a:f3:55:6a:ce: 6b:d9:49:55:85:ff:74:de:e7:11:e9:15:6e:0d:8d: 48:b9:a0:58:fe:13:54:63:cb:50:28:05:8d:b0:c7: 0f:6a:c2:f0:1b:f1:02:7a:d9:f5:55:6e:46:f8:a1: aa:ff:9e:9b:aa:00:3e:07:28:21:c6:69:8a:05:d8: eb:f6:41:b7:a7:52:1e:0f:f3:ca:ef:c5:37:99:dd: 2e:86:20:79:ce:e5:c0:9e:c8:61:29:82:4c:95:f0: 54:25:ae:8e:ba:84:2b:9a:93:88:c6:ce:74:04:03: 3e:e0:42:a3:87:40:68:45:52:3e:06:be:04:b9:78: b5:c7:e4:84:7a:0b:4e:a7:90:c1:06:7f:88:4d:d0: 7f:83:1e:0f:05:12:42:32:f5:9a:9f:1a:8c:77:d7: ac:0b:9a:7f:45:84:4d:6d:ae:50:7f:08:a5:c9:9d: 97:dd:05:f9:69:35:c9:bc:fb:d7:b1:41:58:69:6f: 8c:f5:ff:ca:b3:34:7f:93:43:eb:9f:d6:47:2f:eb: 48:49:ec:0e:8c:28:50:7e:6f:1a:4c:4b:c4:15:ab: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F4:D6:79:08:BB:02:A2:76:19:BF:B4:1A:97:B9:EF:44:98:11:1C X509v3 Authority Key Identifier: keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6e:b8:3d:2c:07:8e:fe:50:2f:af:80:83:67:03:9f:4d:be: ca:8e:68:9a:7a:71:d8:1a:11:8c:98:02:d0:a5:0c:fe:5e:2d: 8d:51:d4:f7:14:95:42:88:28:28:59:34:9d:74:29:bc:f4:5d: 21:f9:44:16:ae:cd:63:62:9a:8f:e8:36:ca:00:92:9c:ce:e3: 4e:e7:e9:da:2f:e2:7d:cc:e9:90:79:07:9c:b8:cc:75:36:9b: 54:03:09:78:d1:10:a4:8a:f5:0c:6d:2e:51:76:d8:5d:a7:da: f9:e0:60:17:ce:6d:95:3f:5d:bd:ea:a0:64:ea:42:80:bc:99: 36:95:0e:13:90:76:ea:6a:83:a9:ed:41:10:6f:13:e7:fe:cc: a3:c8:8f:3e:61:e5:98:4b:de:3c:00:00:5a:38:09:4d:88:97: 2b:cb:a9:fd:da:4c:a8:e6:38:df:61:15:12:28:16:97:3e:76: 63:f0:8e:a4:6b:5e:e7:f6:2b:87:59:7f:ad:06:24:19:30:e7: 1d:8a:9f:26:6b:44:4e:96:85:03:65:de:4e:e5:db:6b:9d:02: d3:d8:f7:7f:b7:c9:56:d8:2b:47:b7:f5:16:f7:e8:ac:2e:32: 19:c5:ce:04:da:8d:df:56:ef:76:9c:35:36:9c:34:95:92:31: 50:08:03:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteL3LX3U6EdLGyDD+vgfvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0 Mzg5ODAwHhcNMjUxMjE3MTgwMDQ2WhcNMjUxMjE4MTgwMDQ2WjAzMTEwLwYDVQQD EygyYmY0ZDY3OTA4YmIwMmEyNzYxOWJmYjQxYTk3YjllZjQ0OTgxMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCuSn0T9b5Wx1ZGt9EO0US6GgJCq YJpOlM3p4IjcYy5rAubUJ4rpevNVas5r2UlVhf903ucR6RVuDY1IuaBY/hNUY8tQ KAWNsMcPasLwG/ECetn1VW5G+KGq/56bqgA+ByghxmmKBdjr9kG3p1IeD/PK78U3 md0uhiB5zuXAnshhKYJMlfBUJa6OuoQrmpOIxs50BAM+4EKjh0BoRVI+Br4EuXi1 x+SEegtOp5DBBn+ITdB/gx4PBRJCMvWanxqMd9esC5p/RYRNba5QfwilyZ2X3QX5 aTXJvPvXsUFYaW+M9f/KszR/k0Prn9ZHL+tISewOjChQfm8aTEvEFau/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv01nkIuwKidhm/tBqXue9EmBEcMB8GA1UdIwQY MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0 LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG64PSwH jv5QL6+Ag2cDn02+yo5omnpx2BoRjJgC0KUM/l4tjVHU9xSVQogoKFk0nXQpvPRd IflEFq7NY2Kaj+g2ygCSnM7jTufp2i/ifczpkHkHnLjMdTabVAMJeNEQpIr1DG0u UXbYXafa+eBgF85tlT9dveqgZOpCgLyZNpUOE5B26mqDqe1BEG8T5/7Mo8iPPmHl mEvePAAAWjgJTYiXK8up/dpMqOY432EVEigWlz52Y/COpGte5/Yrh1l/rQYkGTDn HYqfJmtETpaFA2XeTuXba50C09j3f7fJVtgrR7f1FvforC4yGcXOBNqN31bvdpw1 Npw0lZIxUAgDkQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:14:12 2025 by rpki-client