This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json) Hash identifier: gUTJ7Ib6VErg9CP7JcMbyFv4TbEBWuPDjO7DXk3Mgzw= Subject key identifier: 9E:A9:19:F8:BA:38:A1:A7:08:77:CF:B0:63:39:68:B8:B7:73:70:A7 Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Certificate serial: 019AF6F91096F71F935E258CD7905CC95355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 04:01:49 +0000 Manifest this update: Sun 07 Dec 2025 04:01:49 +0000 Manifest next update: Mon 08 Dec 2025 04:01:49 +0000 Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: u0DS6Tzo02CA2HP/sbaib07ZLo6yZNYJI9EJdisSka0=) 2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:10:96:f7:1f:93:5e:25:8c:d7:90:5c:c9:53:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Validity Not Before: Dec 7 04:01:49 2025 GMT Not After : Dec 8 04:01:49 2025 GMT Subject: CN=9ea919f8ba38a1a70877cfb0633968b8b77370a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:55:b6:9f:a5:b2:64:b8:a7:51:4d:d9:71: 15:e2:0d:86:53:ec:7b:7a:68:7e:c2:1d:97:b6:97: fe:65:58:ee:23:0a:8f:1f:9e:d0:1a:1c:d4:84:f4: ce:a8:66:69:ec:64:7e:47:ad:11:ec:1f:db:a6:e8: 12:e3:47:d1:d6:d4:92:07:8b:eb:e5:72:b3:d6:b3: 2d:c2:49:68:ea:f7:5f:8c:c3:dc:ef:37:81:74:ba: 84:e7:86:a9:61:64:fe:fb:18:21:2c:8c:5c:e8:9c: a4:09:f7:ba:03:ef:0f:78:de:f3:fe:c1:66:2e:17: 6f:bb:71:cb:48:db:3b:19:e5:c7:b8:d4:04:04:c5: b6:58:87:be:4e:ee:9f:60:66:19:5d:19:d6:4c:ad: cc:98:f6:f0:e2:d9:41:4d:00:8d:b0:00:51:a7:17: fe:ea:63:d7:8c:eb:7a:f1:2b:e3:bc:61:7e:84:91: 26:ea:6e:21:2f:52:ab:2d:d3:94:fb:58:23:21:56: eb:73:41:e3:1e:d4:98:c8:e7:25:ce:e8:96:30:ca: df:92:59:ea:e7:cb:09:67:dd:94:a1:1c:35:bc:02: 92:fa:51:80:a7:92:ea:b8:cd:63:93:9c:aa:d3:d4: 0b:3e:5a:c2:bd:cb:1e:ca:f7:9d:9e:99:19:9a:17: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:19:F8:BA:38:A1:A7:08:77:CF:B0:63:39:68:B8:B7:73:70:A7 X509v3 Authority Key Identifier: keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cb:62:9f:2c:80:e5:19:62:f8:1c:cf:a4:b9:b7:67:02:79: 45:45:ff:7f:a0:55:8f:f3:a9:30:5e:e7:e3:ae:70:37:87:66: 7b:14:7a:7b:64:70:b4:20:29:f3:2f:3b:d2:72:f2:f0:f5:8f: ee:24:cf:68:8e:38:cd:a9:2b:e4:b4:a6:5c:5f:41:38:20:44: f8:45:d1:5d:9b:5a:a6:66:a2:c2:58:35:de:a2:28:d8:69:c0: 2c:24:d3:d6:74:b7:10:55:ce:db:2a:1f:f2:a0:1c:d1:7a:60: 0c:27:29:0c:38:ab:98:3a:1b:57:8f:f2:05:f4:5d:7a:9f:9e: 64:ab:5b:d8:6a:53:4d:53:3a:32:8a:d7:f0:b5:61:8b:33:09: 90:82:29:ef:80:02:83:03:dd:1a:9a:4f:7b:7b:f7:93:75:15: ad:6b:15:31:9c:fe:01:26:73:fa:63:89:a3:f4:89:76:95:7d: 78:75:c2:06:2f:44:fb:74:7c:6c:96:e5:b7:88:7d:54:d2:e5: 25:db:c8:50:eb:fe:b1:8b:74:8e:3a:f9:fb:11:8d:79:72:73: 30:31:b6:74:64:be:a1:a7:07:eb:c9:45:9d:a4:00:cd:79:c6: 32:db:44:69:c4:a7:a5:d9:6b:bb:df:c2:b5:ea:84:5b:44:ce: e5:67:17:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+RCW9x+TXiWM15BcyVNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2 N2NhM2YwHhcNMjUxMjA3MDQwMTQ5WhcNMjUxMjA4MDQwMTQ5WjAzMTEwLwYDVQQD Eyg5ZWE5MTlmOGJhMzhhMWE3MDg3N2NmYjA2MzM5NjhiOGI3NzM3MGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVtVtp+lsmS4p1FN2XEV4g2GU+x7 emh+wh2Xtpf+ZVjuIwqPH57QGhzUhPTOqGZp7GR+R60R7B/bpugS40fR1tSSB4vr 5XKz1rMtwklo6vdfjMPc7zeBdLqE54apYWT++xghLIxc6JykCfe6A+8PeN7z/sFm Lhdvu3HLSNs7GeXHuNQEBMW2WIe+Tu6fYGYZXRnWTK3MmPbw4tlBTQCNsABRpxf+ 6mPXjOt68SvjvGF+hJEm6m4hL1KrLdOU+1gjIVbrc0HjHtSYyOclzuiWMMrfklnq 58sJZ92UoRw1vAKS+lGAp5LquM1jk5yq09QLPlrCvcseyvednpkZmhe77QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6pGfi6OKGnCHfPsGM5aLi3c3CnMB8GA1UdIwQY MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkstinyyA 5Rli+BzPpLm3ZwJ5RUX/f6BVj/OpMF7n465wN4dmexR6e2RwtCAp8y870nLy8PWP 7iTPaI44zakr5LSmXF9BOCBE+EXRXZtapmaiwlg13qIo2GnALCTT1nS3EFXO2yof 8qAc0XpgDCcpDDirmDobV4/yBfRdep+eZKtb2GpTTVM6MorX8LVhizMJkIIp74AC gwPdGppPe3v3k3UVrWsVMZz+ASZz+mOJo/SJdpV9eHXCBi9E+3R8bJblt4h9VNLl JdvIUOv+sYt0jjr5+xGNeXJzMDG2dGS+oacH68lFnaQAzXnGMttEacSnpdlru9/C teqEW0TO5WcXqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:38:08 2025 by rpki-client