This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json) Hash identifier: cdN5yhKJeyKY90nkD6GWkCL1hdT2hQJfXt9r+FWWc28= Subject key identifier: 09:97:77:FC:A4:C8:AF:60:C5:8C:75:33:27:41:9E:38:CE:24:13:F9 Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61 Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161 Certificate serial: 019AF12E4E2595A7E9C190812324F00D83B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft Manifest number: 03E7 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: EtCTXTPs4h4KuNs5lnhj6OUCjhpH2LzFvuQ2/cG3Gr4=) 2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4e:25:95:a7:e9:c1:90:81:23:24:f0:0d:83:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=099777fca4c8af60c58c753327419e38ce2413f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:36:6a:3d:5a:e7:c8:98:52:46:0d:1b:00: cc:aa:5a:ce:56:a9:1b:a9:69:46:90:0c:00:db:37: 79:36:e0:e8:8f:30:66:7e:3c:e0:14:dd:37:c1:84: dd:37:cf:30:a3:83:29:22:72:86:0d:22:8c:6b:c4: d5:9a:5f:17:1e:c1:95:0a:2b:55:17:5f:65:4a:f9: e1:44:07:3d:6c:22:61:4c:60:4a:1e:27:d8:b1:0d: ac:22:32:b3:56:3b:9f:44:b8:8c:53:34:c0:04:bf: 93:3a:9c:e5:0a:88:0a:10:a2:35:9a:a6:6d:62:5e: b7:21:62:fe:b0:ed:f9:30:70:f8:fb:99:15:cc:23: e5:86:cf:9c:12:47:63:7e:d8:5f:9b:a9:1f:e6:96: 9e:2d:b2:86:3e:36:cf:31:8e:a6:14:8a:f1:24:fc: 60:1f:54:a7:33:e4:33:20:8a:aa:4d:a4:ce:3d:99: c2:59:e8:39:41:b8:9e:d7:72:2f:9f:7a:bb:d9:ee: fd:9d:99:88:a7:da:56:8e:a7:23:15:a4:db:2d:97: f2:08:80:93:a6:b2:43:e6:e4:ce:7d:68:a8:65:9c: 87:51:17:09:e6:5a:4a:b7:02:aa:12:28:d6:cc:ae: fb:b8:b1:f7:2f:2e:af:b6:8b:9e:04:2e:75:87:a8: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:77:FC:A4:C8:AF:60:C5:8C:75:33:27:41:9E:38:CE:24:13:F9 X509v3 Authority Key Identifier: keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c7:9d:a7:9e:66:b0:37:94:21:f3:2e:f1:2a:22:07:6e:a1: c7:0e:bf:a6:8d:57:9a:5a:0d:7c:ab:bf:35:ca:af:65:fb:f1: 3e:fd:ef:23:a5:58:54:30:99:44:68:4f:63:87:f2:30:03:7a: c4:32:73:cb:45:83:42:1b:6b:9b:18:80:f8:a6:a9:7a:54:ff: e9:ac:55:9b:fe:d8:a9:32:7b:4e:99:52:bf:f8:2e:c3:04:61: 72:25:07:24:38:1a:62:d8:02:1f:a7:63:35:d1:06:5a:8d:78: f7:18:26:f1:42:f7:1a:e0:df:50:99:bf:a0:09:c7:7e:0a:41: 53:a9:58:4d:35:ee:64:25:db:07:8f:86:b8:33:34:6d:d7:40: 6a:62:3b:e0:7c:e8:68:db:ff:ec:6f:b7:e8:0c:78:fe:1e:a3: 1a:e1:b7:90:00:de:a7:d2:25:3d:dc:14:8c:d8:9d:a5:9b:fb: df:79:ff:6a:47:f4:98:6b:8e:2b:47:ab:5c:06:43:80:ec:11: a3:77:22:c7:29:5e:6a:d3:d5:73:80:1d:ec:0b:3c:fe:2f:51: d4:2f:82:07:b0:57:27:f0:12:e3:5b:62:55:d9:d0:ad:2d:14: 28:81:c6:0c:24:d8:bb:f4:79:a1:4a:20:2b:8c:ec:ce:3d:49: c2:ac:8c:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk4llafpwZCBIyTwDYO1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhM2UwOGVmM2Q3NTRiYzZhZmE5MWZhNmMxMDAyMGY1ODUw NWMxNjEwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EygwOTk3NzdmY2E0YzhhZjYwYzU4Yzc1MzMyNzQxOWUzOGNlMjQxM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkc2aj1a58iYUkYNGwDMqlrOVqkb qWlGkAwA2zd5NuDojzBmfjzgFN03wYTdN88wo4MpInKGDSKMa8TVml8XHsGVCitV F19lSvnhRAc9bCJhTGBKHifYsQ2sIjKzVjufRLiMUzTABL+TOpzlCogKEKI1mqZt Yl63IWL+sO35MHD4+5kVzCPlhs+cEkdjfthfm6kf5paeLbKGPjbPMY6mFIrxJPxg H1SnM+QzIIqqTaTOPZnCWeg5Qbie13Ivn3q72e79nZmIp9pWjqcjFaTbLZfyCICT prJD5uTOfWioZZyHURcJ5lpKtwKqEijWzK77uLH3Ly6vtoueBC51h6iueQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmXd/ykyK9gxYx1MydBnjjOJBP5MB8GA1UdIwQY MBaAFAo+CO89dUvGr6kfpsEAIPWFBcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUt NGQxZDM3ZGM4MWI0LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUtNGQxZDM3ZGM4MWI0 LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsedp55m sDeUIfMu8SoiB26hxw6/po1XmloNfKu/NcqvZfvxPv3vI6VYVDCZRGhPY4fyMAN6 xDJzy0WDQhtrmxiA+KapelT/6axVm/7YqTJ7TplSv/guwwRhciUHJDgaYtgCH6dj NdEGWo149xgm8UL3GuDfUJm/oAnHfgpBU6lYTTXuZCXbB4+GuDM0bddAamI74Hzo aNv/7G+36Ax4/h6jGuG3kADep9IlPdwUjNidpZv733n/akf0mGuOK0erXAZDgOwR o3cixyleatPVc4Ad7As8/i9R1C+CB7BXJ/AS41tiVdnQrS0UKIHGDCTYu/R5oUog K4zszj1JwqyMHg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:06 2025 by rpki-client