This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json) Hash identifier: zwusXtn6ZonqDxywGTy1MZ3Nn+jkfUPux5nxyGQ+GH0= Subject key identifier: DE:34:84:60:E6:68:2F:27:6D:48:64:11:7A:45:3E:1F:74:00:80:B3 Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Certificate serial: 019B24E3CFBB5DA3225DAFA449D2899B0B51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft Manifest number: 0BFA Signing time: Tue 16 Dec 2025 02:01:08 +0000 Manifest this update: Tue 16 Dec 2025 02:01:08 +0000 Manifest next update: Wed 17 Dec 2025 02:01:08 +0000 Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: Ce9FOCsGGcSwQ/LE6Aw+KN0tPbJXhvVGiQEXXExzzGo=) 2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:cf:bb:5d:a3:22:5d:af:a4:49:d2:89:9b:0b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843 Validity Not Before: Dec 16 02:01:08 2025 GMT Not After : Dec 17 02:01:08 2025 GMT Subject: CN=de348460e6682f276d4864117a453e1f740080b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:99:9f:b2:47:5e:9c:bc:d9:19:6f:68:d4: f1:a5:42:1d:03:47:a2:1c:1c:43:1a:b9:97:f3:32: 9f:d8:02:e6:e4:85:c0:06:4b:0a:03:5a:2f:46:81: 25:72:31:e1:4a:04:88:51:b4:4b:35:4c:da:8c:3d: 7d:98:5d:52:0d:12:df:5a:7d:4b:ec:da:dc:19:01: e5:70:4d:33:5e:63:be:b5:8f:e5:94:2a:3f:82:03: de:87:f1:21:48:b7:9c:ef:c5:91:e4:be:83:be:1a: 9e:62:c3:a7:be:63:2e:0d:5b:e6:48:2f:61:50:43: 8c:c4:13:3a:6a:5d:79:e0:cd:2f:ab:6c:e7:95:90: b3:c8:12:07:d4:db:20:73:f7:11:0d:23:e3:12:0d: 48:5e:63:4c:b1:2f:8a:c8:a7:e4:49:da:25:2c:4e: 53:67:4d:b3:8b:10:49:07:2d:63:03:b1:95:cc:ea: 1d:92:b8:b9:eb:ab:d9:ef:09:89:2e:bf:a1:e9:d6: 4e:c3:78:b4:1b:e0:81:e0:20:6d:9b:37:f6:9d:15: b2:fb:27:68:6e:e1:07:ff:41:6a:34:c5:b4:20:d6: a4:45:19:0e:b1:1a:c5:e3:2d:98:0b:76:17:46:6d: a1:44:ee:42:7a:cd:92:40:c4:2f:da:5b:d4:3f:fd: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:34:84:60:E6:68:2F:27:6D:48:64:11:7A:45:3E:1F:74:00:80:B3 X509v3 Authority Key Identifier: keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:88:7d:af:ec:17:ee:a1:ad:49:b7:a8:e5:19:7a:ed:47: 02:9f:0a:7c:8e:84:74:72:34:35:09:36:da:29:fc:42:39:44: 10:a1:fe:52:02:65:3f:93:e9:a0:c4:55:87:dd:99:0a:77:23: 03:1e:bc:14:b7:da:31:45:b5:bc:11:f5:fc:3c:6f:04:8d:46: da:ba:6d:6c:05:7f:92:b0:07:df:fe:fe:0f:69:41:39:31:d7: a5:ff:b6:3b:9f:21:b2:13:c7:4a:e7:db:1d:58:bd:95:20:55: a0:c7:11:df:bc:fe:9a:66:8b:2d:5d:dc:c1:45:79:81:1b:6a: 58:6d:67:33:1f:2f:21:3b:0d:2c:d4:6a:3e:94:41:46:fc:34: 27:a2:cf:0c:40:b3:0d:06:fc:2f:96:a6:14:b0:f8:ae:c2:5b: 01:5c:14:97:9b:2d:fb:52:30:41:15:78:57:1a:75:89:ce:ef: 55:8b:65:8b:76:47:29:2b:69:d0:ea:27:77:6b:7e:bd:ab:a7: 9f:bd:67:0a:21:ca:13:2a:8a:1e:9a:14:17:06:c3:00:71:dd: 9b:0d:f2:b5:05:e2:c4:c3:dd:f0:44:87:6b:d7:e2:d7:95:f8: e0:45:f7:ba:14:78:df:87:c7:c1:1b:f5:60:1d:fa:bd:74:6c: 49:b5:27:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk48+7XaMiXa+kSdKJmwtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTllMmVlOGJjZWE2ZDViOTE5YzRhMzNkMjZkOWJiZjk4 MmE4NDMwHhcNMjUxMjE2MDIwMTA4WhcNMjUxMjE3MDIwMTA4WjAzMTEwLwYDVQQD EyhkZTM0ODQ2MGU2NjgyZjI3NmQ0ODY0MTE3YTQ1M2UxZjc0MDA4MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x2Zn7JHXpy82RlvaNTxpUIdA0ei HBxDGrmX8zKf2ALm5IXABksKA1ovRoElcjHhSgSIUbRLNUzajD19mF1SDRLfWn1L 7NrcGQHlcE0zXmO+tY/llCo/ggPeh/EhSLec78WR5L6DvhqeYsOnvmMuDVvmSC9h UEOMxBM6al154M0vq2znlZCzyBIH1Nsgc/cRDSPjEg1IXmNMsS+KyKfkSdolLE5T Z02zixBJBy1jA7GVzOodkri566vZ7wmJLr+h6dZOw3i0G+CB4CBtmzf2nRWy+ydo buEH/0FqNMW0INakRRkOsRrF4y2YC3YXRm2hRO5Ces2SQMQv2lvUP/39XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN40hGDmaC8nbUhkEXpFPh90AICzMB8GA1UdIwQY MBaAFAmp4u6LzqbVuRnEoz0m2bv5gqhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQt YTAxZWVhNjVmZDMzLzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81OGQxNWItOWYwMi00MmM0LWIwMmQtYTAxZWVhNjVmZDMz LzEvQ2FuaTdvdk9wdFc1R2NTalBTYlp1X21DcUVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxqIfa/s F+6hrUm3qOUZeu1HAp8KfI6EdHI0NQk22in8QjlEEKH+UgJlP5PpoMRVh92ZCncj Ax68FLfaMUW1vBH1/DxvBI1G2rptbAV/krAH3/7+D2lBOTHXpf+2O58hshPHSufb HVi9lSBVoMcR37z+mmaLLV3cwUV5gRtqWG1nMx8vITsNLNRqPpRBRvw0J6LPDECz DQb8L5amFLD4rsJbAVwUl5st+1IwQRV4Vxp1ic7vVYtli3ZHKStp0Oond2t+vaun n71nCiHKEyqKHpoUFwbDAHHdmw3ytQXixMPd8ESHa9fi15X44EX3uhR434fHwRv1 YB36vXRsSbUnfA== -----END CERTIFICATE-----Generated at Tue Dec 16 07:08:16 2025 by rpki-client