This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json) Hash identifier: H360dPfLIHCnWpPpxWFGVgvNZmuaNtf/WuJOJwHNvJs= Subject key identifier: 4F:E0:7D:D8:15:C4:01:30:73:45:A6:1C:16:58:63:12:D5:85:EC:C1 Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce Certificate serial: 019AF49C011B25B9489F1D47F44C905631AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft Manifest number: 051B Signing time: Sat 06 Dec 2025 17:00:55 +0000 Manifest this update: Sat 06 Dec 2025 17:00:55 +0000 Manifest next update: Sun 07 Dec 2025 17:00:55 +0000 Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: wYBUz4BM4Nukl1uAGVCxwVH7gKV5hWkUkyyHQPXawrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:01:1b:25:b9:48:9f:1d:47:f4:4c:90:56:31:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce Validity Not Before: Dec 6 17:00:55 2025 GMT Not After : Dec 7 17:00:55 2025 GMT Subject: CN=4fe07dd815c401307345a61c16586312d585ecc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:6b:d6:12:9f:9a:e3:43:a6:8f:e6:1f:94: b8:21:18:0c:ba:53:e8:e4:93:3d:e0:de:c9:b1:4a: 56:bc:84:f5:3c:78:c8:02:d8:80:af:57:81:26:b9: 59:4a:8e:75:ee:33:5e:bc:80:9f:af:a4:d3:43:73: a1:58:4f:eb:b9:8b:99:39:d1:ac:e0:c2:e3:31:86: 6c:c8:c1:bf:9e:1c:50:4f:20:15:bd:d1:e8:1b:6e: e9:28:2d:5c:64:2d:61:e4:34:59:30:6a:5a:d0:a2: 8e:1e:69:f6:6d:1b:70:05:ff:b7:dc:47:62:34:4f: d9:6e:58:30:c2:15:92:48:93:b4:6a:59:cf:bd:53: 4f:30:1f:e6:55:aa:25:3a:a3:25:5d:52:6c:ac:6b: 9e:60:f8:d6:55:6b:36:56:8e:42:80:3a:2e:6c:2b: c4:8a:5f:77:7d:24:7d:f4:b5:42:51:69:f5:a3:33: 18:48:3c:d7:12:68:e7:14:be:45:d9:c7:2a:fb:9c: 24:6e:0c:5f:f2:2d:ff:3e:8d:11:7b:cb:17:cf:b4: 58:31:c0:19:b1:f7:ee:c0:9c:2c:3a:14:40:33:ca: 1c:87:69:f8:f4:16:20:95:d9:cb:de:d9:2c:3d:18: 6b:9b:65:f2:1d:de:49:60:2d:71:e2:be:5b:f1:82: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E0:7D:D8:15:C4:01:30:73:45:A6:1C:16:58:63:12:D5:85:EC:C1 X509v3 Authority Key Identifier: keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d7:8f:86:8d:96:15:03:6a:5f:46:12:7a:16:8c:b3:14:e5: 45:96:10:d1:32:d7:86:a1:bc:0e:2c:8e:1c:ec:5e:80:fb:f2: 2d:e8:ec:68:4f:0d:c8:b7:c7:9c:f6:09:3f:b2:5b:e0:43:a8: b8:e9:7c:c7:86:65:b6:02:1c:28:b7:79:65:b5:3d:7c:c1:7f: 25:52:8b:9c:12:9c:81:e5:c1:89:3f:af:dd:67:91:59:2e:2e: de:64:58:19:27:46:31:94:77:b5:d3:27:ba:2f:5f:bc:ec:2e: 52:88:b1:34:9f:e1:b2:86:54:83:08:c3:ae:a7:b3:5f:41:a3: 86:dc:01:25:89:2f:67:5a:ff:ab:b1:ba:fb:cf:a8:cc:f1:c1: 9e:6b:aa:b3:c1:b8:a5:79:65:20:c9:4b:38:0d:67:53:59:ad: 1e:6e:bc:e1:8a:1d:a0:93:29:51:04:9d:bd:52:5a:7a:e7:8f: 38:44:9d:21:de:bd:5f:82:3c:4e:e8:e8:dc:1a:ab:6f:61:1d: 9a:9e:70:f6:bf:0a:9b:b7:72:9f:90:1e:cd:70:51:26:63:db: 10:58:dd:ca:98:74:c5:25:91:f5:18:2a:ac:ca:b9:d6:9b:88: 57:16:15:94:8d:26:cf:e2:87:e6:57:c9:59:49:aa:d7:9e:9b: 69:98:ba:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAEbJblInx1H9EyQVjGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWE4ZWZhZmE3ODU0MDEwMTJjNDU5MGRhNjM0NDBhMzQ1 NmQwY2UwHhcNMjUxMjA2MTcwMDU1WhcNMjUxMjA3MTcwMDU1WjAzMTEwLwYDVQQD Eyg0ZmUwN2RkODE1YzQwMTMwNzM0NWE2MWMxNjU4NjMxMmQ1ODVlY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw59r1hKfmuNDpo/mH5S4IRgMulPo 5JM94N7JsUpWvIT1PHjIAtiAr1eBJrlZSo517jNevICfr6TTQ3OhWE/ruYuZOdGs 4MLjMYZsyMG/nhxQTyAVvdHoG27pKC1cZC1h5DRZMGpa0KKOHmn2bRtwBf+33Edi NE/ZblgwwhWSSJO0alnPvVNPMB/mVaolOqMlXVJsrGueYPjWVWs2Vo5CgDoubCvE il93fSR99LVCUWn1ozMYSDzXEmjnFL5F2ccq+5wkbgxf8i3/Po0Re8sXz7RYMcAZ sffuwJwsOhRAM8och2n49BYgldnL3tksPRhrm2XyHd5JYC1x4r5b8YJ26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/gfdgVxAEwc0WmHBZYYxLVhezBMB8GA1UdIwQY MBaAFHCajvr6eFQBASxFkNpjRAo0VtDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0pxTy12cDRWQUVCTEVXUTJtTkVDalJXME00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mYjVhNGYtMTk4Yi00NzExLTlhNzMt YzAyOTQ1YjQ4M2VlLzEvY0pxTy12cDRWQUVCTEVXUTJtTkVDalJXME00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mYjVhNGYtMTk4Yi00NzExLTlhNzMtYzAyOTQ1YjQ4M2Vl LzEvY0pxTy12cDRWQUVCTEVXUTJtTkVDalJXME00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdePho2W FQNqX0YSehaMsxTlRZYQ0TLXhqG8DiyOHOxegPvyLejsaE8NyLfHnPYJP7Jb4EOo uOl8x4ZltgIcKLd5ZbU9fMF/JVKLnBKcgeXBiT+v3WeRWS4u3mRYGSdGMZR3tdMn ui9fvOwuUoixNJ/hsoZUgwjDrqezX0GjhtwBJYkvZ1r/q7G6+8+ozPHBnmuqs8G4 pXllIMlLOA1nU1mtHm684YodoJMpUQSdvVJaeuePOESdId69X4I8Tujo3Bqrb2Ed mp5w9r8Km7dyn5AezXBRJmPbEFjdyph0xSWR9RgqrMq51puIVxYVlI0mz+KH5lfJ WUmq156baZi67Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:28:11 2025 by rpki-client