This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json) Hash identifier: 3VKQc0U8Raz7hpfAJE4S/QyG2jiKraB22Fh3xo/xEms= Subject key identifier: BC:B3:C5:3F:7C:AC:59:35:9B:13:55:B2:A7:20:C0:15:E4:AA:A6:57 Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4 Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4 Certificate serial: 019AF1647767E26F320452CAD079552AC302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft Manifest number: 0FA5 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: OF9poRRw24Cm9OqTVlkvdG0ixedYzz4C4b7pZRoLcaE=) 2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:77:67:e2:6f:32:04:52:ca:d0:79:55:2a:c3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4 Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=bcb3c53f7cac59359b1355b2a720c015e4aaa657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:ae:4f:b8:b5:42:94:bc:92:cc:83:f6:3a: df:76:ff:98:40:f3:90:fc:b6:00:90:0d:c1:60:fb: 94:1d:4a:02:bf:e6:f2:19:b0:7d:49:a2:8e:29:c6: 16:30:7c:74:b6:e1:70:da:42:1b:15:d3:e6:10:98: 60:7d:64:72:6c:fd:74:d4:7d:75:48:d7:40:bf:cc: f0:07:13:d1:76:e0:84:d5:34:27:1a:42:05:8b:50: 93:29:14:3f:de:93:18:0d:04:73:ac:55:ed:91:3a: f7:19:c3:86:a8:c7:61:b8:5f:65:f3:b5:b8:e2:27: 50:da:c1:36:b7:2d:58:d3:5f:fb:89:5b:52:40:bc: 9b:a3:ad:b2:2c:73:59:fc:ea:d4:ed:45:d4:32:e4: ab:5b:f0:3a:81:2d:8c:73:f8:88:dd:9e:ec:ce:2c: 22:5b:c9:37:38:ff:57:94:4f:30:34:72:8d:43:17: 94:89:b8:66:9a:4a:ec:0a:83:cc:9a:b9:11:6f:6e: 93:ea:8b:b2:9b:50:d2:25:c5:cc:c0:f0:34:b0:45: fe:1c:65:52:39:fb:91:b8:ca:bd:85:0f:98:71:d7: 04:5f:6a:f8:cc:80:bb:e9:d8:85:de:0d:1b:f8:04: b5:03:50:aa:dd:86:ef:26:1f:f2:70:d9:3a:10:e8: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:C5:3F:7C:AC:59:35:9B:13:55:B2:A7:20:C0:15:E4:AA:A6:57 X509v3 Authority Key Identifier: keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:c4:c3:cd:de:bb:e8:aa:ab:d4:26:09:4d:8b:f0:f2:b4: 09:09:3a:8b:78:3e:8c:bb:3e:bb:50:db:b0:63:95:31:a3:72: c4:8a:b3:4c:1c:2d:bd:85:51:9e:66:77:8d:a3:04:e2:bc:e7: b6:b9:f2:14:5b:b2:05:5a:e4:ce:1e:5b:98:49:3c:a7:b4:f0: 02:a8:59:c6:c4:97:c7:79:bd:66:db:03:11:55:68:5f:3c:7d: 52:68:fb:af:df:9f:83:cf:af:0a:5c:22:a0:90:57:b5:fa:a7: ed:d4:1d:5a:18:14:35:ec:16:0d:f1:b0:f5:b7:b7:66:29:82: 5c:02:72:62:33:a2:80:2d:6f:df:4c:98:09:8e:c5:32:88:31: c4:d7:97:3d:cf:03:b9:9f:07:dd:fb:f3:dc:80:91:fb:2a:44: ef:33:da:38:d6:91:4a:19:f5:a5:48:1e:b4:e6:45:41:ac:52: b8:1d:8d:a0:b0:65:e8:c8:8e:b0:33:53:4d:85:4d:26:c3:00: c8:00:88:70:94:bb:0a:c8:62:41:5a:82:7c:cf:b0:5a:34:a1: 41:ab:e1:e7:79:68:31:e9:6a:8f:33:7a:00:bc:2c:ea:b0:ca: df:d0:c2:33:07:f4:32:ae:8d:67:55:6a:b9:34:e8:a2:9e:9a: 7d:3f:f7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHdn4m8yBFLK0HlVKsMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjY0ODM1ZjhhYWZlNjE0OTcxZmZhODY4M2Y5Zjc0YmY0 ZDBmZjQwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EyhiY2IzYzUzZjdjYWM1OTM1OWIxMzU1YjJhNzIwYzAxNWU0YWFhNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvGuT7i1QpS8ksyD9jrfdv+YQPOQ /LYAkA3BYPuUHUoCv+byGbB9SaKOKcYWMHx0tuFw2kIbFdPmEJhgfWRybP101H11 SNdAv8zwBxPRduCE1TQnGkIFi1CTKRQ/3pMYDQRzrFXtkTr3GcOGqMdhuF9l87W4 4idQ2sE2ty1Y01/7iVtSQLybo62yLHNZ/OrU7UXUMuSrW/A6gS2Mc/iI3Z7sziwi W8k3OP9XlE8wNHKNQxeUibhmmkrsCoPMmrkRb26T6ouym1DSJcXMwPA0sEX+HGVS OfuRuMq9hQ+YcdcEX2r4zIC76diF3g0b+AS1A1Cq3YbvJh/ycNk6EOj2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyzxT98rFk1mxNVsqcgwBXkqqZXMB8GA1UdIwQY MBaAFAhmSDX4qv5hSXH/qGg/n3S/TQ/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2Et MDc1N2E2ZDI4MjI0LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZWYzYjUtYTg0OC00M2Q1LTg3M2EtMDc1N2E2ZDI4MjI0 LzEvQ0daSU5maXFfbUZKY2Ytb2FELWZkTDlORF9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtzEw83e u+iqq9QmCU2L8PK0CQk6i3g+jLs+u1DbsGOVMaNyxIqzTBwtvYVRnmZ3jaME4rzn trnyFFuyBVrkzh5bmEk8p7TwAqhZxsSXx3m9ZtsDEVVoXzx9Umj7r9+fg8+vClwi oJBXtfqn7dQdWhgUNewWDfGw9be3ZimCXAJyYjOigC1v30yYCY7FMogxxNeXPc8D uZ8H3fvz3ICR+ypE7zPaONaRShn1pUgetOZFQaxSuB2NoLBl6MiOsDNTTYVNJsMA yACIcJS7CshiQVqCfM+wWjShQavh53loMelqjzN6ALws6rDK39DCMwf0Mq6NZ1Vq uTToop6afT/3Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:44 2025 by rpki-client