This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json) Hash identifier: Q8MixK4/zIAuZtUNJOHpKm8qs/bVO7XXfSiykih1qPA= Subject key identifier: 4B:90:57:C5:FE:04:5A:71:33:9E:A5:69:B4:DA:88:B3:E6:C6:9F:03 Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08 Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108 Certificate serial: 019AF1D23EF4C6AEA7F87E8F1B99529D3FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft Manifest number: 1365 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: ChQU4vgT9XPMmFDOmpVcQUZR7bQ6lICQ4o/tdDzB4ns=) 2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3e:f4:c6:ae:a7:f8:7e:8f:1b:99:52:9d:3f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=4b9057c5fe045a71339ea569b4da88b3e6c69f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:d3:dd:de:cf:21:dd:9f:db:90:8d:52:50: e2:ae:a8:11:85:ca:2b:1e:b4:ee:6b:06:6d:ab:1b: 78:98:c3:8f:cf:ef:0a:49:0a:94:16:f9:c9:53:1f: 81:33:54:86:ce:86:f3:a6:66:f4:19:57:6c:f0:f5: d6:65:f7:22:01:b9:3c:dd:b8:22:17:2c:00:a3:0d: 97:eb:f6:29:64:ad:c3:c7:7f:46:b9:b4:a1:96:e4: 0e:f0:04:73:20:47:29:bf:a5:74:d1:ea:56:87:84: b0:5a:9e:a4:b1:d9:cf:30:a9:45:ea:39:28:b6:87: e3:f2:96:01:01:48:e2:cf:23:69:6c:7c:4b:42:a6: 28:d7:80:c1:42:4c:ae:8e:a4:86:bf:5e:de:49:4c: 2d:6a:38:bc:56:a3:6d:ca:02:35:2f:10:b8:c3:bd: 26:b0:9b:18:4b:2c:47:88:76:fc:cc:39:10:dc:58: 2a:ea:98:86:3a:70:b8:6a:40:d4:44:62:18:df:56: 18:01:61:b4:5e:8d:49:55:e4:49:7c:a0:ec:52:2e: 45:82:df:b5:a5:a7:57:6e:dc:17:1f:d1:79:96:78: fc:f2:91:b4:a8:7c:b2:30:a2:a7:32:67:43:fe:8a: e5:bf:7c:f6:83:76:a4:8d:2c:c0:56:12:c9:5a:26: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:90:57:C5:FE:04:5A:71:33:9E:A5:69:B4:DA:88:B3:E6:C6:9F:03 X509v3 Authority Key Identifier: keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:5f:8c:7c:73:74:e2:f2:15:30:47:c6:45:7d:0b:8c:c2:50: b4:66:d5:e2:65:8a:54:b1:0a:ad:91:49:78:57:91:ab:7e:7a: ef:70:ee:82:6f:fd:19:82:d1:df:c8:09:c4:fa:b6:b2:46:e2: a7:3c:98:13:28:a6:e2:4d:5f:41:7e:44:ae:6e:18:71:35:1c: 99:91:71:db:8b:a8:39:a1:94:15:a1:00:b1:d5:b7:75:92:f4: 45:ef:6b:44:0b:df:e1:75:c6:68:5a:00:f9:cc:ad:75:53:c6: 88:c7:8c:ef:2c:28:f4:b6:ea:35:52:d2:8c:7c:bd:c4:2d:4a: b1:0e:4e:65:4d:52:91:b2:f5:81:d3:45:11:e5:89:db:a1:94: b1:ff:72:15:51:ca:fd:66:f4:f4:4d:74:e1:a5:2e:06:71:15: dc:12:2e:35:d4:50:28:54:3b:c1:0a:d7:ed:4e:42:1e:37:83: 68:e9:9a:9a:2d:4f:7c:7f:06:56:c6:48:66:dd:39:c5:cf:fd: fa:28:4b:0e:90:d2:52:11:f4:de:a5:10:7a:0b:ed:96:bf:f5: e5:19:bd:43:67:6c:cc:60:65:35:02:4d:15:3b:0d:c0:43:ae: 72:46:08:21:e5:df:fc:82:69:8c:46:49:f0:44:7b:55:5a:4c: 37:f4:76:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j70xq6n+H6PG5lSnT+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDFmMWY4YjQxZDc0ZjdkODY2YjFlNWFkZmQxOGFmZTIw MjcxMDgwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg0YjkwNTdjNWZlMDQ1YTcxMzM5ZWE1NjliNGRhODhiM2U2YzY5ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT/T3d7PId2f25CNUlDirqgRhcor HrTuawZtqxt4mMOPz+8KSQqUFvnJUx+BM1SGzobzpmb0GVds8PXWZfciAbk83bgi FywAow2X6/YpZK3Dx39GubShluQO8ARzIEcpv6V00epWh4SwWp6ksdnPMKlF6jko tofj8pYBAUjizyNpbHxLQqYo14DBQkyujqSGv17eSUwtaji8VqNtygI1LxC4w70m sJsYSyxHiHb8zDkQ3Fgq6piGOnC4akDURGIY31YYAWG0Xo1JVeRJfKDsUi5Fgt+1 padXbtwXH9F5lnj88pG0qHyyMKKnMmdD/orlv3z2g3akjSzAVhLJWibA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuQV8X+BFpxM56labTaiLPmxp8DMB8GA1UdIwQY MBaAFAjR8fi0HXT32Gax5a39GK/iAnEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmIt ZGY1Y2I5ZjBlM2E0LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmItZGY1Y2I5ZjBlM2E0 LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV+MfHN0 4vIVMEfGRX0LjMJQtGbV4mWKVLEKrZFJeFeRq35673Dugm/9GYLR38gJxPq2skbi pzyYEyim4k1fQX5Erm4YcTUcmZFx24uoOaGUFaEAsdW3dZL0Re9rRAvf4XXGaFoA +cytdVPGiMeM7ywo9LbqNVLSjHy9xC1KsQ5OZU1SkbL1gdNFEeWJ26GUsf9yFVHK /Wb09E104aUuBnEV3BIuNdRQKFQ7wQrX7U5CHjeDaOmami1PfH8GVsZIZt05xc/9 +ihLDpDSUhH03qUQegvtlr/15Rm9Q2dszGBlNQJNFTsNwEOuckYIIeXf/IJpjEZJ 8ER7VVpMN/R2LA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:31 2025 by rpki-client