This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json) Hash identifier: JF8Wmhh1LYTa1gLSKILCc0XTadQlyt8E3aT+Mwff7/8= Subject key identifier: F1:89:18:2D:95:87:B2:8A:32:D8:92:B1:CC:70:52:6E:A3:34:88:B5 Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Certificate serial: 019AF540827AF9A9A4F6ECF8FC36BC24082F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft Manifest number: 11C7 Signing time: Sat 06 Dec 2025 20:00:36 +0000 Manifest this update: Sat 06 Dec 2025 20:00:36 +0000 Manifest next update: Sun 07 Dec 2025 20:00:36 +0000 Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: LDJNezNJNj9hAT2eleXjL4awJDM4mOBmEOP0GDO3/lA=) 2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:82:7a:f9:a9:a4:f6:ec:f8:fc:36:bc:24:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Validity Not Before: Dec 6 20:00:36 2025 GMT Not After : Dec 7 20:00:36 2025 GMT Subject: CN=f189182d9587b28a32d892b1cc70526ea33488b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:d0:55:ef:50:d2:12:c6:dd:49:64:0a:1c: 69:10:8b:d2:2f:67:8c:00:14:c2:2b:e3:24:cd:d1: 26:14:99:83:ce:de:d2:75:c0:cd:40:d9:30:11:ac: 8a:f3:2f:f4:eb:75:02:48:3c:29:e3:6b:8b:d1:4b: 0e:ea:d4:d4:12:c5:50:19:7c:a9:84:9a:0f:37:1d: b9:9c:34:9a:52:ba:10:b2:17:d2:88:58:77:43:21: dc:65:fb:2a:d3:2f:b4:84:ee:ab:23:0d:6b:a2:6e: 45:a7:f8:1d:b7:d7:ec:a5:ec:e5:0c:0e:0b:ba:64: b2:63:f0:c2:8c:b0:db:1d:32:7e:64:15:af:d8:18: 42:4c:fa:c4:52:25:06:a2:60:eb:74:d5:2c:36:f6: ed:90:63:b2:64:fb:64:88:6e:00:61:37:b0:83:54: 0b:b9:e7:9e:ac:81:54:a1:12:83:53:26:e1:a3:75: 7e:5c:35:84:be:27:4d:34:01:7f:e9:77:a3:64:19: 31:6e:33:9c:4d:c8:50:d9:5b:44:bc:c8:18:5d:4e: 71:ad:dc:5b:77:7d:f8:41:c9:8b:ba:be:45:be:89: 48:3a:83:a2:fa:71:17:a1:13:30:d1:5f:6b:15:15: e5:04:00:e2:4d:53:94:03:38:10:78:7c:16:f9:cb: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:89:18:2D:95:87:B2:8A:32:D8:92:B1:CC:70:52:6E:A3:34:88:B5 X509v3 Authority Key Identifier: keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:14:22:dc:90:b8:46:63:54:49:ce:d3:0d:6b:5f:64:2e:08: 74:16:27:74:08:c6:ee:5b:d6:f4:67:7c:60:85:92:6d:35:d5: 8e:cc:b4:6b:86:83:a2:89:34:47:b3:78:2c:7f:b1:92:be:e1: 9c:ec:0b:08:f0:7e:41:b5:e1:e6:38:e3:92:4b:d8:7e:04:00: d9:d4:ec:a7:dc:e6:d4:6b:13:5e:ed:6e:05:aa:d3:95:9a:27: 0b:70:c7:35:02:d7:ea:60:00:e3:88:3f:1f:3f:63:28:b2:4d: 9d:5b:f6:41:6d:35:3f:3b:1d:ba:cd:0e:48:26:e5:3f:75:a2: 55:a9:ed:e1:41:d8:38:fd:1c:5d:ae:4c:d1:81:c5:66:cb:ef: fb:43:d1:cc:00:aa:f4:88:5f:2b:63:af:54:58:de:62:3a:a1: 7c:42:b5:67:43:9b:dc:6c:cd:c2:48:e2:b3:91:64:41:02:43: 78:07:cf:0a:95:84:ab:ad:89:e9:56:38:45:64:df:7a:e6:7a: 5c:d0:90:74:55:a7:41:66:3d:e8:4e:f5:88:37:b7:94:50:b5: 66:9f:ea:e3:ee:aa:0a:58:fa:49:04:59:26:fe:99:34:fc:2e: f1:db:a7:a8:a0:97:65:b4:8d:91:33:81:90:34:6d:82:eb:f4: d7:23:8c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QIJ6+amk9uz4/Da8JAgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm OGMxNGQwHhcNMjUxMjA2MjAwMDM2WhcNMjUxMjA3MjAwMDM2WjAzMTEwLwYDVQQD EyhmMTg5MTgyZDk1ODdiMjhhMzJkODkyYjFjYzcwNTI2ZWEzMzQ4OGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCnQVe9Q0hLG3UlkChxpEIvSL2eM ABTCK+MkzdEmFJmDzt7SdcDNQNkwEayK8y/063UCSDwp42uL0UsO6tTUEsVQGXyp hJoPNx25nDSaUroQshfSiFh3QyHcZfsq0y+0hO6rIw1rom5Fp/gdt9fspezlDA4L umSyY/DCjLDbHTJ+ZBWv2BhCTPrEUiUGomDrdNUsNvbtkGOyZPtkiG4AYTewg1QL ueeerIFUoRKDUybho3V+XDWEvidNNAF/6XejZBkxbjOcTchQ2VtEvMgYXU5xrdxb d334QcmLur5FvolIOoOi+nEXoRMw0V9rFRXlBADiTVOUAzgQeHwW+cs6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGJGC2Vh7KKMtiSscxwUm6jNIi1MB8GA1UdIwQY MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxQi3JC4 RmNUSc7TDWtfZC4IdBYndAjG7lvW9Gd8YIWSbTXVjsy0a4aDook0R7N4LH+xkr7h nOwLCPB+QbXh5jjjkkvYfgQA2dTsp9zm1GsTXu1uBarTlZonC3DHNQLX6mAA44g/ Hz9jKLJNnVv2QW01Pzsdus0OSCblP3WiVant4UHYOP0cXa5M0YHFZsvv+0PRzACq 9IhfK2OvVFjeYjqhfEK1Z0Ob3GzNwkjis5FkQQJDeAfPCpWEq62J6VY4RWTfeuZ6 XNCQdFWnQWY96E71iDe3lFC1Zp/q4+6qClj6SQRZJv6ZNPwu8dunqKCXZbSNkTOB kDRtguv01yOMig== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:12 2025 by rpki-client