This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json) Hash identifier: t9p35WLQqhDpIP0GIzbUAxsmtHUn5ZN+QcVua1158ZY= Subject key identifier: D0:9A:72:6C:A2:59:2D:31:71:5D:ED:2F:95:42:8B:10:D0:26:BB:8C Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Certificate serial: 019AF3897D777EF2AD9300E2E1D81A257F77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft Manifest number: 04F0 Signing time: Sat 06 Dec 2025 12:01:05 +0000 Manifest this update: Sat 06 Dec 2025 12:01:05 +0000 Manifest next update: Sun 07 Dec 2025 12:01:05 +0000 Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: uGbjUT2toS/ZsTtpVrF7RmodhAT20wqMRDcNBqMkyqY=) 2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:7d:77:7e:f2:ad:93:00:e2:e1:d8:1a:25:7f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Validity Not Before: Dec 6 12:01:05 2025 GMT Not After : Dec 7 12:01:05 2025 GMT Subject: CN=d09a726ca2592d31715ded2f95428b10d026bb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:72:a5:d3:2e:a1:df:5b:cd:5b:de:2a:b3: 32:09:5f:ea:b7:ad:74:54:0c:aa:00:b0:65:97:c9: f3:b8:09:f4:93:19:c1:3f:ec:37:85:23:aa:db:92: 4f:5b:ff:1a:d7:62:ef:ec:6e:be:66:5c:70:3d:2e: 7d:e5:3e:e1:4b:a9:f7:1b:09:02:8f:26:c7:9f:ec: 98:01:0e:b0:2d:91:c3:56:3c:91:c5:cd:0d:a2:43: 7d:f2:b4:80:40:e1:c4:f8:f7:a0:87:6b:c4:34:5d: a3:e4:43:52:62:91:6b:0e:74:00:04:4f:0a:01:47: 8d:00:4e:97:8b:b8:b5:7f:db:ba:46:19:8a:f1:bf: c8:31:98:25:6c:b4:16:e4:4d:bd:b4:aa:82:a5:01: 1c:8e:0b:d3:f8:25:66:8c:e1:20:9c:0a:e4:6a:12: 81:b4:39:01:de:0e:2d:cf:48:bd:34:fc:57:8f:f9: d5:c4:7d:7d:3e:09:a6:33:45:c2:bf:50:5a:32:41: 3e:42:a8:85:93:5d:e8:62:4f:fd:7c:f0:d3:95:a9: f9:f5:05:fc:e7:76:68:e5:70:d4:b8:f5:70:de:0d: 36:a9:d6:da:24:93:01:f3:7a:eb:74:e8:d5:71:c3: a2:d3:54:a9:09:aa:35:fc:ef:a4:2a:a0:88:0b:86: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9A:72:6C:A2:59:2D:31:71:5D:ED:2F:95:42:8B:10:D0:26:BB:8C X509v3 Authority Key Identifier: keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9d:ee:5e:02:32:ec:03:ee:c7:68:54:2d:0d:0f:5a:5a:3e: 9d:de:8f:82:e8:8f:3b:4a:a7:13:d1:04:21:e0:db:ef:c0:e1: 18:41:70:51:73:8d:91:b9:e3:d2:d0:52:bf:bd:50:ed:03:b1: 88:59:60:4c:1d:53:15:68:eb:33:0c:e1:ed:bf:0b:38:74:1c: 97:90:24:af:52:c0:2f:a2:3b:c3:28:23:7d:09:ed:2c:2a:42: cb:e7:b8:30:2c:4c:6a:81:d4:43:17:12:09:08:e3:4a:15:7c: fc:5a:2f:09:ce:06:57:af:a7:8d:38:ad:21:5e:36:43:9b:1b: 8e:50:af:25:06:18:88:b8:2b:0d:e2:42:1c:4d:bf:89:7a:ea: c7:03:44:91:ce:46:86:57:cc:34:ef:1c:72:87:2a:26:83:42: 12:2c:be:a4:3a:8e:4f:91:4b:74:0d:b8:9a:65:5e:d3:43:49: fe:6d:3d:6b:e0:98:49:11:5a:11:1d:f4:dd:59:2d:f9:88:04: 35:4d:29:77:28:81:48:b2:49:9c:13:55:cf:69:00:2b:b7:60: 58:c0:39:df:28:48:a6:36:a3:e8:85:a5:46:89:c9:33:00:29: 14:7b:b1:75:57:13:64:5d:dd:aa:f5:83:f4:db:35:02:e9:4b: e3:d8:f0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziX13fvKtkwDi4dgaJX93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1 ZjkyNjgwHhcNMjUxMjA2MTIwMTA1WhcNMjUxMjA3MTIwMTA1WjAzMTEwLwYDVQQD EyhkMDlhNzI2Y2EyNTkyZDMxNzE1ZGVkMmY5NTQyOGIxMGQwMjZiYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApydypdMuod9bzVveKrMyCV/qt610 VAyqALBll8nzuAn0kxnBP+w3hSOq25JPW/8a12Lv7G6+ZlxwPS595T7hS6n3GwkC jybHn+yYAQ6wLZHDVjyRxc0NokN98rSAQOHE+Pegh2vENF2j5ENSYpFrDnQABE8K AUeNAE6Xi7i1f9u6RhmK8b/IMZglbLQW5E29tKqCpQEcjgvT+CVmjOEgnArkahKB tDkB3g4tz0i9NPxXj/nVxH19PgmmM0XCv1BaMkE+QqiFk13oYk/9fPDTlan59QX8 53Zo5XDUuPVw3g02qdbaJJMB83rrdOjVccOi01SpCao1/O+kKqCIC4ZurQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCacmyiWS0xcV3tL5VCixDQJruMMB8GA1UdIwQY MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt ZjZjMTZhY2ExNzVlLzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZ3uXgIy 7APux2hULQ0PWlo+nd6PguiPO0qnE9EEIeDb78DhGEFwUXONkbnj0tBSv71Q7QOx iFlgTB1TFWjrMwzh7b8LOHQcl5Akr1LAL6I7wygjfQntLCpCy+e4MCxMaoHUQxcS CQjjShV8/FovCc4GV6+njTitIV42Q5sbjlCvJQYYiLgrDeJCHE2/iXrqxwNEkc5G hlfMNO8ccocqJoNCEiy+pDqOT5FLdA24mmVe00NJ/m09a+CYSRFaER303Vkt+YgE NU0pdyiBSLJJnBNVz2kAK7dgWMA53yhIpjaj6IWlRonJMwApFHuxdVcTZF3dqvWD 9Ns1AulL49jwhA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:43 2025 by rpki-client