This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json) Hash identifier: HIyMQ9lAU5FcqojZDM5OjM8d3/AF+VtXpaM0S+S790M= Subject key identifier: AE:A7:CF:08:DE:AE:E2:F1:E5:FC:70:07:4B:3A:A3:98:09:91:00:B2 Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Certificate serial: 019AF2AE118BEF649F991BC27B9E0AC39D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft Manifest number: 0BE0 Signing time: Sat 06 Dec 2025 08:01:25 +0000 Manifest this update: Sat 06 Dec 2025 08:01:25 +0000 Manifest next update: Sun 07 Dec 2025 08:01:25 +0000 Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: B9pDxz0KgAf+Z5q4UYzwBGhcCYj4XkU+P8QLHz5Go88=) 2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:11:8b:ef:64:9f:99:1b:c2:7b:9e:0a:c3:9d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Validity Not Before: Dec 6 08:01:25 2025 GMT Not After : Dec 7 08:01:25 2025 GMT Subject: CN=aea7cf08deaee2f1e5fc70074b3aa398099100b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:19:0d:7c:3a:06:c3:16:28:a1:a5:4c:a9: f9:89:35:99:cd:3b:6b:5e:6d:46:2c:77:a9:7b:85: 47:92:96:94:dd:47:41:56:2c:40:a7:b3:09:b1:98: 4c:a2:51:0f:44:e2:9b:40:1e:0c:69:9a:0e:23:2b: 16:e7:61:0f:e0:58:19:57:4b:72:7d:cf:f0:c2:8b: d6:73:fa:02:ed:e2:2a:e9:de:d7:f8:cd:38:ae:ae: 6a:7b:09:b8:70:41:f2:e7:37:80:32:35:08:71:bc: b6:f6:82:46:26:33:91:71:b8:5e:97:b0:69:b4:93: a8:b5:f3:3b:5c:86:c9:28:86:da:fb:c5:ef:4a:85: 63:2e:71:a9:2c:a0:79:b8:ae:c9:13:29:f6:6d:80: 3b:d1:4f:dd:77:55:51:9c:5a:69:73:63:64:c7:f2: ee:99:58:48:e8:eb:9e:f3:e2:38:64:db:fe:94:cc: 94:a3:e0:e8:36:fa:31:c5:50:7e:d6:76:1b:42:e6: af:ef:f2:ce:70:d9:39:e0:86:9e:55:59:ae:0d:70: 7a:80:46:c2:c0:a2:0a:4a:4d:e9:ee:dc:6e:e9:86: 62:02:e5:8f:1e:45:81:83:89:bf:e7:e1:36:f3:49: 56:21:3f:2a:bc:49:cc:07:9b:d8:57:cc:d5:ed:35: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A7:CF:08:DE:AE:E2:F1:E5:FC:70:07:4B:3A:A3:98:09:91:00:B2 X509v3 Authority Key Identifier: keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:0e:29:8c:cf:88:c8:61:da:1d:f1:7f:fa:f1:f1:3e:1f:f5: 43:6e:1d:53:af:f3:06:22:92:23:89:04:ff:a8:b2:12:ac:01: 67:7a:36:78:1d:69:fc:fc:0d:e2:55:7e:61:85:0e:59:43:91: 85:98:df:d0:12:48:b4:a8:70:f7:f5:e5:5b:6f:f6:c7:d5:5e: 95:c2:d2:ec:61:5d:bc:81:01:8e:6a:65:01:46:e7:3a:cb:1c: ee:7c:20:79:f0:dd:bd:74:af:cb:0e:37:dd:e9:4e:ea:d9:01: aa:07:7c:79:56:d5:f6:39:45:66:be:d0:33:ed:96:28:d1:9b: 5c:92:5e:7d:60:ba:26:ce:51:15:b3:49:54:c6:3f:f1:e4:5e: e6:8e:46:37:66:4d:a0:15:ae:f5:e8:2d:73:6e:4e:1d:c1:43: af:1c:55:ff:90:bf:e8:0d:23:75:7f:f9:9a:29:a0:34:bf:68: c1:da:2f:ef:4d:c9:2f:4d:dc:73:c3:94:ea:41:0c:a9:9e:42: 33:fb:38:8e:0c:ad:90:d9:d8:ea:e8:65:33:22:38:c5:c8:9c: 66:b0:26:73:08:16:04:d7:46:7e:7e:ce:82:c3:8d:6d:1a:72: 7f:ef:3d:06:38:05:89:b8:60:10:a4:52:5c:67:96:59:ff:1c: b7:8f:99:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrhGL72SfmRvCe54Kw51eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4 MmE4NDMwHhcNMjUxMjA2MDgwMTI1WhcNMjUxMjA3MDgwMTI1WjAzMTEwLwYDVQQD EyhhZWE3Y2YwOGRlYWVlMmYxZTVmYzcwMDc0YjNhYTM5ODA5OTEwMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIoZDXw6BsMWKKGlTKn5iTWZzTtr Xm1GLHepe4VHkpaU3UdBVixAp7MJsZhMolEPROKbQB4MaZoOIysW52EP4FgZV0ty fc/wwovWc/oC7eIq6d7X+M04rq5qewm4cEHy5zeAMjUIcby29oJGJjORcbhel7Bp tJOotfM7XIbJKIba+8XvSoVjLnGpLKB5uK7JEyn2bYA70U/dd1VRnFppc2Nkx/Lu mVhI6Oue8+I4ZNv+lMyUo+DoNvoxxVB+1nYbQuav7/LOcNk54IaeVVmuDXB6gEbC wKIKSk3p7txu6YZiAuWPHkWBg4m/5+E280lWIT8qvEnMB5vYV8zV7TXHuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6nzwjeruLx5fxwB0s6o5gJkQCyMB8GA1UdIwQY MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt YTAxZWVhNjVmZDMzLzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyw4pjM+I yGHaHfF/+vHxPh/1Q24dU6/zBiKSI4kE/6iyEqwBZ3o2eB1p/PwN4lV+YYUOWUOR hZjf0BJItKhw9/XlW2/2x9VelcLS7GFdvIEBjmplAUbnOssc7nwgefDdvXSvyw43 3elO6tkBqgd8eVbV9jlFZr7QM+2WKNGbXJJefWC6Js5RFbNJVMY/8eRe5o5GN2ZN oBWu9egtc25OHcFDrxxV/5C/6A0jdX/5mimgNL9owdov703JL03cc8OU6kEMqZ5C M/s4jgytkNnY6uhlMyI4xcicZrAmcwgWBNdGfn7OgsONbRpyf+89BjgFibhgEKRS XGeWWf8ct4+ZYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:36 2025 by rpki-client