This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft File: CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json) Hash identifier: pVXVYbWVXwc9gxmSmIaQapwzh+VAu5a625fS3Wc1QUg= Subject key identifier: A1:C9:A2:50:D5:98:9D:53:8B:C9:67:1C:1B:4D:C4:87:AE:90:09:0C Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Certificate serial: 019B318CFA65E4CFC5D322AE99F9CA26096A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft Manifest number: 1145 Signing time: Thu 18 Dec 2025 13:01:21 +0000 Manifest this update: Thu 18 Dec 2025 13:01:21 +0000 Manifest next update: Fri 19 Dec 2025 13:01:21 +0000 Files and hashes: 1: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: aS88eEH80MyCes9M2C4XYQiAA7qtBS44b1plk+Q1r8c=) 2: JoXcYev6DySlst62DTDcDz1JN0Q.roa (hash: PRhyl4bdJivpbrgVw6w06UO6PZN+9+qwU0T6MPbrnFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:fa:65:e4:cf:c5:d3:22:ae:99:f9:ca:26:09:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Validity Not Before: Dec 18 13:01:21 2025 GMT Not After : Dec 19 13:01:21 2025 GMT Subject: CN=a1c9a250d5989d538bc9671c1b4dc487ae90090c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:1f:1f:ac:67:45:fe:fc:74:23:5d:bd:d1: 5a:1a:46:77:3f:84:ce:94:a9:07:b8:05:c1:b2:5f: 52:9c:ca:a0:6a:c3:4f:c4:2f:27:3c:af:25:56:40: be:bd:85:bc:c6:ef:a8:ec:ab:e2:c5:af:6a:f0:63: b1:e7:5e:1f:0a:9b:7e:cb:dd:74:4f:41:72:9c:59: 73:fa:54:91:bf:a0:f6:b5:7f:46:be:24:9d:33:28: 83:ae:fc:e6:9e:2b:24:d5:e0:c6:24:4f:01:23:e4: 74:3d:8f:4b:21:e4:5a:24:6a:68:6f:59:3f:5c:47: 9f:e7:cc:fe:b9:bd:fd:e4:fa:3e:6b:40:33:0d:b1: 22:64:82:98:90:b8:bb:79:40:f4:17:2c:e3:e9:26: fc:6a:4e:58:cf:2f:fb:05:15:f9:72:28:3f:38:46: 5b:d4:72:86:c7:09:c9:bb:b8:b1:51:dd:65:c8:2c: 85:cb:c8:e8:6e:6e:5c:5d:4b:9a:da:d0:c7:16:01: 25:98:07:ad:23:c0:ec:b6:fc:b5:65:cc:15:7d:49: e8:be:f9:2e:0c:ba:d1:b6:14:bb:7f:e8:a3:69:76: 5a:d3:4d:57:cc:6a:c1:a0:11:af:9b:60:38:d7:72: fb:f3:bc:b8:59:92:86:74:77:40:e4:14:1b:51:46: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:A2:50:D5:98:9D:53:8B:C9:67:1C:1B:4D:C4:87:AE:90:09:0C X509v3 Authority Key Identifier: keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:09:33:cb:53:43:fd:f8:06:db:eb:ec:8f:73:11:16:04:4b: 78:25:ec:b8:18:f5:69:13:84:fe:35:34:06:33:fd:10:fc:3a: a6:b9:57:74:77:79:b1:4a:1a:ba:08:1d:46:a8:f7:09:c1:36: 05:a2:b0:96:e2:9a:54:7e:3e:07:e0:c7:73:bc:f7:4a:aa:95: 60:52:5d:5f:a1:f8:d6:f4:11:2b:f7:4b:46:3c:67:41:13:91: 97:12:62:96:a3:7f:24:7e:45:c3:2d:56:70:9b:97:79:53:92: b5:59:c5:83:7b:8a:d1:5a:69:a6:39:1b:40:0f:a4:62:c7:89: f1:b7:b7:03:89:98:6a:e6:d8:62:5c:df:ec:91:c2:8d:60:1d: fb:b1:61:e1:c3:c3:2c:85:7e:da:21:6d:7b:29:53:81:f8:52: 48:8f:c5:41:e1:08:ee:41:9b:12:22:10:4c:cd:81:de:56:8f: be:f9:9f:ec:fe:7d:c2:19:ec:7a:83:95:71:3e:bf:de:8d:0e: 3f:75:86:1c:da:3e:6b:ad:7a:3a:3d:94:b4:5d:e0:19:b0:9f: 0a:06:70:c6:de:ec:86:d2:c3:f5:9f:7a:e2:dd:89:41:40:c4: d9:5a:54:2e:62:e1:a5:65:13:3a:a0:af:69:b7:8e:ae:52:e3: 58:a1:74:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjPpl5M/F0yKumfnKJglqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx YjRjMjgwHhcNMjUxMjE4MTMwMTIxWhcNMjUxMjE5MTMwMTIxWjAzMTEwLwYDVQQD EyhhMWM5YTI1MGQ1OTg5ZDUzOGJjOTY3MWMxYjRkYzQ4N2FlOTAwOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjsfH6xnRf78dCNdvdFaGkZ3P4TO lKkHuAXBsl9SnMqgasNPxC8nPK8lVkC+vYW8xu+o7Kvixa9q8GOx514fCpt+y910 T0FynFlz+lSRv6D2tX9GviSdMyiDrvzmnisk1eDGJE8BI+R0PY9LIeRaJGpob1k/ XEef58z+ub395Po+a0AzDbEiZIKYkLi7eUD0Fyzj6Sb8ak5Yzy/7BRX5cig/OEZb 1HKGxwnJu7ixUd1lyCyFy8jobm5cXUua2tDHFgElmAetI8Dstvy1ZcwVfUnovvku DLrRthS7f+ijaXZa001XzGrBoBGvm2A413L787y4WZKGdHdA5BQbUUbhLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHJolDVmJ1Ti8lnHBtNxIeukAkMMB8GA1UdIwQY MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt Mjg0YzgyZGVjN2M2LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2 LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwkzy1ND /fgG2+vsj3MRFgRLeCXsuBj1aROE/jU0BjP9EPw6prlXdHd5sUoauggdRqj3CcE2 BaKwluKaVH4+B+DHc7z3SqqVYFJdX6H41vQRK/dLRjxnQRORlxJilqN/JH5Fwy1W cJuXeVOStVnFg3uK0VpppjkbQA+kYseJ8be3A4mYaubYYlzf7JHCjWAd+7Fh4cPD LIV+2iFteylTgfhSSI/FQeEI7kGbEiIQTM2B3laPvvmf7P59whnseoOVcT6/3o0O P3WGHNo+a616Oj2UtF3gGbCfCgZwxt7shtLD9Z964t2JQUDE2VpULmLhpWUTOqCv abeOrlLjWKF0jw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:11:14 2025 by rpki-client