This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json) Hash identifier: Cfhp0lHWs6W7pY12jmlCclBVSv3rI0JKAOwcIobcwtk= Subject key identifier: 8E:6B:89:F6:F8:78:4E:72:38:61:14:3D:87:23:53:31:B2:AF:0E:C3 Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d Certificate serial: 019AF31B5A54162F9228F7A3996D9C31AEA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: 1OOgCvrkMSPlJGXfwud-L77F8RQ.roa (hash: OfGMkg4R8dFeR/FCs55Nk0J17chraeTKhOgexIz+stY=) 2: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: 7l87bsjVn9ajr7MMxbPYt+yU5KLAnOrk2yM3HToP02U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5a:54:16:2f:92:28:f7:a3:99:6d:9c:31:ae:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=8e6b89f6f8784e723861143d87235331b2af0ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:34:c0:2c:b2:a3:2b:b0:59:8d:46:8b:97: 0c:9b:c5:05:5a:c7:70:fb:f8:3a:b3:d2:06:7e:a1: 5a:5e:0e:5d:cd:cd:0a:c9:cf:33:3c:c1:3e:96:d2: 8a:9b:54:ec:b6:d4:af:05:8a:00:e7:28:38:b0:99: 0b:3f:ee:44:f0:a7:b2:1d:6b:39:f3:15:13:7d:a0: fb:a6:97:c3:88:ba:0a:7c:74:77:93:52:13:5a:e1: b9:b6:0f:c8:a5:b4:3f:a1:20:8f:b1:a8:08:ae:82: 29:e9:de:1d:37:f3:0a:ee:ef:9a:8c:d6:02:93:28: e9:ad:d0:bf:3a:6b:85:d1:fa:d0:7c:82:02:7d:1c: 97:8d:07:81:0b:83:1a:af:e8:c3:12:41:53:4f:4d: 86:11:90:5f:3e:88:c6:2a:94:5b:42:40:fd:d7:4c: a5:ca:55:dc:5a:d0:57:26:b3:0d:6e:a2:32:4c:db: f0:7b:45:ec:2f:bd:e1:50:05:d3:75:a6:58:83:2d: 58:ee:5c:25:7e:aa:ab:84:46:b1:13:b9:78:fd:1a: 0a:4b:40:5a:9a:5e:e3:1a:72:50:ac:f6:c9:ba:ba: 3c:ec:28:81:dd:28:10:2c:0a:a1:72:ce:6d:94:63: 1c:f7:68:09:40:7b:ba:da:bd:e9:26:a5:d6:3d:4e: d3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6B:89:F6:F8:78:4E:72:38:61:14:3D:87:23:53:31:B2:AF:0E:C3 X509v3 Authority Key Identifier: keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5c:45:a9:08:41:a4:f2:84:73:10:fa:ea:ad:79:03:2d:f9: 4e:43:bf:44:0d:b0:b9:62:6e:b3:9e:7a:af:5a:e6:9e:1a:b7: de:d4:6c:e3:bd:c1:8f:2e:4e:9e:c0:7e:f7:f6:0d:d7:5d:a8: 8d:3a:ac:da:13:8f:eb:4d:f0:02:c5:5f:39:a1:c2:3d:89:50: b6:b7:c9:a5:3e:b7:9f:12:42:32:19:e1:99:71:cc:9a:af:b4: 53:0b:f2:49:87:06:d3:77:d6:de:dd:bf:33:9b:43:e7:6e:45: 5e:3e:fd:2f:23:f3:9a:37:00:3f:93:22:a0:dc:40:ef:40:2c: 9d:f0:b8:92:19:8e:ff:a2:b5:11:26:2d:63:44:e8:3c:2e:de: ef:b6:ff:04:57:5f:b9:72:ce:a3:14:1c:0d:50:2e:55:e5:6f: 42:c2:29:4a:61:1f:a7:b1:03:b4:1e:cc:67:b7:c3:8e:0b:e3: d7:7b:94:77:0d:56:92:29:d9:83:3b:fe:90:08:83:0b:ba:69: c8:86:04:18:c0:d5:b5:3f:59:6b:0b:60:ff:cb:5a:42:ab:2d: d4:e0:2a:cd:a2:45:2f:de:48:95:fb:e2:39:0f:33:72:8c:98: 15:7c:01:89:28:07:a1:7c:b1:a7:c7:ed:f7:dd:63:29:4c:03: 52:82:03:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1pUFi+SKPejmW2cMa6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm ZGNmNmQwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD Eyg4ZTZiODlmNmY4Nzg0ZTcyMzg2MTE0M2Q4NzIzNTMzMWIyYWYwZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Y0wCyyoyuwWY1Gi5cMm8UFWsdw +/g6s9IGfqFaXg5dzc0Kyc8zPME+ltKKm1TsttSvBYoA5yg4sJkLP+5E8KeyHWs5 8xUTfaD7ppfDiLoKfHR3k1ITWuG5tg/IpbQ/oSCPsagIroIp6d4dN/MK7u+ajNYC kyjprdC/OmuF0frQfIICfRyXjQeBC4Mar+jDEkFTT02GEZBfPojGKpRbQkD910yl ylXcWtBXJrMNbqIyTNvwe0XsL73hUAXTdaZYgy1Y7lwlfqqrhEaxE7l4/RoKS0Ba ml7jGnJQrPbJuro87CiB3SgQLAqhcs5tlGMc92gJQHu62r3pJqXWPU7TSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5rifb4eE5yOGEUPYcjUzGyrw7DMB8GA1UdIwQY MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt MDlmNzNjMzU0ZTdjLzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1xFqQhB pPKEcxD66q15Ay35TkO/RA2wuWJus556r1rmnhq33tRs473Bjy5OnsB+9/YN112o jTqs2hOP603wAsVfOaHCPYlQtrfJpT63nxJCMhnhmXHMmq+0UwvySYcG03fW3t2/ M5tD525FXj79LyPzmjcAP5MioNxA70AsnfC4khmO/6K1ESYtY0ToPC7e77b/BFdf uXLOoxQcDVAuVeVvQsIpSmEfp7EDtB7MZ7fDjgvj13uUdw1WkinZgzv+kAiDC7pp yIYEGMDVtT9Zawtg/8taQqst1OAqzaJFL95IlfviOQ8zcoyYFXwBiSgHoXyxp8ft 991jKUwDUoIDrg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:43 2025 by rpki-client