This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft File: CRiOI1NxcPsuRX8xLVRflL2d1-4.mft (raw, json) Hash identifier: wKcul+CYP8PIXz1ouXjzIiPsuYjBCfkoKQ3y0LRC7EU= Subject key identifier: 3E:CA:9C:47:E1:7C:A0:86:44:3C:CB:93:4E:41:1C:49:8A:2A:DB:0B Authority key identifier: 09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE Certificate issuer: /CN=09188e23537170fb2e457f312d545f94bd9dd7ee Certificate serial: 019AF3F775CAC191A65F20DD6347E2C7E22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft Manifest number: 90 Signing time: Sat 06 Dec 2025 14:01:12 +0000 Manifest this update: Sat 06 Dec 2025 14:01:12 +0000 Manifest next update: Sun 07 Dec 2025 14:01:12 +0000 Files and hashes: 1: A0XZ01XiZ_dD4RFgEp2-voPmlc8.roa (hash: gtIaaWoptBm+CPJmcGJG/IY/H9h8R350lE5kH246vNI=) 2: CRiOI1NxcPsuRX8xLVRflL2d1-4.crl (hash: Blg/bcHc1cT7ACsyEubVZx46kvPzjN5GJdNuuM0NUpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:75:ca:c1:91:a6:5f:20:dd:63:47:e2:c7:e2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09188e23537170fb2e457f312d545f94bd9dd7ee Validity Not Before: Dec 6 14:01:12 2025 GMT Not After : Dec 7 14:01:12 2025 GMT Subject: CN=3eca9c47e17ca086443ccb934e411c498a2adb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:2c:3a:7f:33:5b:5e:48:4c:bd:d7:5a:de: 73:a7:53:29:23:82:04:6d:67:64:e6:b3:48:68:7f: 1a:b9:a7:a7:52:a9:59:88:39:e7:65:d6:4b:3c:8a: d9:f2:b0:e4:34:0b:af:41:d4:a0:a7:79:bb:47:39: aa:af:99:95:27:2d:2e:48:ff:f4:d6:6c:21:52:9d: d0:cf:d6:37:32:2e:85:8d:79:ca:22:bd:dd:31:04: 6b:00:fb:18:35:dc:3f:fd:6b:99:cc:a7:a0:73:03: e8:c7:3c:b1:45:6e:0c:3e:7d:16:cc:04:3c:e4:d3: c6:a6:1e:26:0e:e4:72:55:5a:52:27:10:79:f9:1a: f8:02:d4:85:a1:90:9f:2c:fa:26:45:8b:e7:17:30: 80:53:33:6e:17:5d:06:25:2f:2d:cb:a3:b4:22:9e: f4:14:21:d5:bf:dc:48:92:5b:53:db:31:a5:5a:25: 8c:e0:ec:fc:b6:08:28:f9:f0:35:0f:86:f8:12:52: 14:41:d7:5f:9f:10:a5:9e:18:4b:11:23:f4:f2:89: 4f:77:24:52:8e:e9:00:3d:9b:01:b5:99:b0:49:4b: b8:f8:f9:8a:ca:88:ac:b7:b6:7c:e8:42:72:35:31: e7:d0:7e:8c:83:1e:ac:85:9e:e2:aa:e3:13:cf:96: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CA:9C:47:E1:7C:A0:86:44:3C:CB:93:4E:41:1C:49:8A:2A:DB:0B X509v3 Authority Key Identifier: keyid:09:18:8E:23:53:71:70:FB:2E:45:7F:31:2D:54:5F:94:BD:9D:D7:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRiOI1NxcPsuRX8xLVRflL2d1-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/33970f-fa9a-4d11-9766-a844aab0511c/1/CRiOI1NxcPsuRX8xLVRflL2d1-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:77:a4:97:6b:4e:9c:bf:13:ec:90:c2:73:bb:d5:42:f5:86: a3:57:1f:41:89:9f:77:14:ee:2a:8a:16:77:44:5d:39:d9:fd: 7a:bb:ac:8d:e2:ab:7c:33:36:34:89:38:8a:95:10:5d:4f:93: 86:32:c2:c0:72:66:ff:3c:3d:b7:73:a5:31:f7:a9:d4:ab:d3: f1:32:33:56:9f:42:15:fc:db:26:ee:a4:0c:e4:17:76:fc:34: e9:3d:0c:23:36:da:dd:5f:34:eb:bd:57:37:8a:d8:79:44:52: af:66:7c:60:3c:a8:40:f4:7d:1c:7f:e6:b7:61:a0:a6:aa:4c: dc:8c:80:1c:be:15:ae:92:9f:2c:d9:77:f9:82:10:45:8b:9b: 63:57:3a:8c:22:b0:34:2f:b9:65:ce:e1:ab:15:47:0c:62:cb: 8a:5d:b6:94:af:2e:24:8e:91:74:70:8b:67:53:e6:f3:ce:6d: 4b:2b:3c:90:75:2d:bd:d2:6f:64:fe:7a:9d:75:d4:1c:8b:7a: ef:80:f7:04:55:e8:33:08:7f:1e:8c:71:f2:45:3f:d5:34:ba: 1f:09:06:bc:85:4b:ce:12:b2:47:3a:41:59:29:40:fb:75:e3: 83:30:9a:c8:c2:b6:a5:7f:cb:b5:ec:75:87:e0:df:22:db:90: 41:71:88:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93XKwZGmXyDdY0fix+IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTg4ZTIzNTM3MTcwZmIyZTQ1N2YzMTJkNTQ1Zjk0YmQ5 ZGQ3ZWUwHhcNMjUxMjA2MTQwMTEyWhcNMjUxMjA3MTQwMTEyWjAzMTEwLwYDVQQD EygzZWNhOWM0N2UxN2NhMDg2NDQzY2NiOTM0ZTQxMWM0OThhMmFkYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzEsOn8zW15ITL3XWt5zp1MpI4IE bWdk5rNIaH8auaenUqlZiDnnZdZLPIrZ8rDkNAuvQdSgp3m7Rzmqr5mVJy0uSP/0 1mwhUp3Qz9Y3Mi6FjXnKIr3dMQRrAPsYNdw//WuZzKegcwPoxzyxRW4MPn0WzAQ8 5NPGph4mDuRyVVpSJxB5+Rr4AtSFoZCfLPomRYvnFzCAUzNuF10GJS8ty6O0Ip70 FCHVv9xIkltT2zGlWiWM4Oz8tggo+fA1D4b4ElIUQddfnxClnhhLESP08olPdyRS jukAPZsBtZmwSUu4+PmKyoist7Z86EJyNTHn0H6Mgx6shZ7iquMTz5bf6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7KnEfhfKCGRDzLk05BHEmKKtsLMB8GA1UdIwQY MBaAFAkYjiNTcXD7LkV/MS1UX5S9ndfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMzk3MGYtZmE5YS00ZDExLTk3NjYt YTg0NGFhYjA1MTFjLzEvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMzk3MGYtZmE5YS00ZDExLTk3NjYtYTg0NGFhYjA1MTFj LzEvQ1JpT0kxTnhjUHN1Ulg4eExWUmZsTDJkMS00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3ekl2tO nL8T7JDCc7vVQvWGo1cfQYmfdxTuKooWd0RdOdn9erusjeKrfDM2NIk4ipUQXU+T hjLCwHJm/zw9t3OlMfep1KvT8TIzVp9CFfzbJu6kDOQXdvw06T0MIzba3V80671X N4rYeURSr2Z8YDyoQPR9HH/mt2GgpqpM3IyAHL4VrpKfLNl3+YIQRYubY1c6jCKw NC+5Zc7hqxVHDGLLil22lK8uJI6RdHCLZ1Pm885tSys8kHUtvdJvZP56nXXUHIt6 74D3BFXoMwh/Hoxx8kU/1TS6HwkGvIVLzhKyRzpBWSlA+3XjgzCayMK2pX/Ltex1 h+DfItuQQXGI2w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:44:30 2025 by rpki-client