This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json) Hash identifier: sGoPgYSN4bMqggFNxf6bC+aTr39Z5XmFO2UHqCcJfbE= Subject key identifier: A8:E9:E6:11:72:3C:CD:2E:A5:AD:84:FD:49:86:CB:C8:84:B4:FA:8B Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c Certificate serial: 019B58D1E305417700F4F0784A2F740F8322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 04:01:48 +0000 Manifest this update: Fri 26 Dec 2025 04:01:48 +0000 Manifest next update: Sat 27 Dec 2025 04:01:48 +0000 Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: TtNU+ICnj8t3Jmm7tJAr5jgkc520YL1jxrcWOTKG47E=) 2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:e3:05:41:77:00:f4:f0:78:4a:2f:74:0f:83:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c Validity Not Before: Dec 26 04:01:48 2025 GMT Not After : Dec 27 04:01:48 2025 GMT Subject: CN=a8e9e611723ccd2ea5ad84fd4986cbc884b4fa8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:27:81:1e:78:6f:ad:70:5b:9a:1a:3e:29:22: b5:16:fc:5c:e6:eb:3b:19:f1:b9:20:fb:f7:a6:ba: 9f:13:8a:12:81:43:6a:84:fd:d6:f8:4e:f2:22:d4: 1e:06:a2:82:84:a9:cf:58:98:25:67:1c:6d:80:49: 73:25:c6:81:13:ac:99:57:dd:7f:78:57:07:c0:f5: 7d:88:ba:82:07:03:6d:99:96:9d:97:fe:2b:22:1b: 70:fa:ac:b9:c8:1f:35:ee:4b:d3:af:6f:95:6c:df: ec:ee:4a:12:92:2e:6b:06:65:01:f2:fd:d8:14:d2: 79:01:27:23:7c:cc:9c:96:4f:38:a2:3c:ab:84:1c: 2d:65:af:de:b7:10:e9:a8:c8:9f:e6:9a:92:15:0e: 21:61:4d:f5:df:c7:a9:59:2f:e0:b3:64:46:5a:25: 5b:c6:ff:fa:80:e1:00:47:f0:a2:cc:c1:a6:9f:73: 31:1b:1b:2a:05:ab:16:2b:27:4b:05:e8:6c:ac:2c: e6:5b:15:ad:73:69:0f:06:23:d0:61:20:df:bf:d4: cb:62:12:b5:e0:71:1d:d4:f3:87:dd:1c:2a:c9:d9: 1f:6a:79:08:19:3e:f6:e7:9d:ca:1f:ec:67:c8:5d: d2:82:40:5d:9f:78:e2:81:02:56:71:30:69:40:fb: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E9:E6:11:72:3C:CD:2E:A5:AD:84:FD:49:86:CB:C8:84:B4:FA:8B X509v3 Authority Key Identifier: keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1e:77:53:2d:4b:3a:c5:39:13:4a:d2:49:73:cf:07:fa:3f: 0f:fe:ec:14:5b:6a:20:d9:c3:b7:2a:54:3b:09:cb:56:36:de: a0:0a:6e:7e:d8:15:ec:b4:70:73:8c:6a:25:c7:1e:9f:71:4b: 4f:c3:88:1d:fa:e0:67:b3:9d:68:5d:c3:f2:25:e6:75:27:48: 35:11:13:b2:9b:17:5f:af:2a:55:ee:71:00:e0:78:20:16:56: 7a:8f:14:82:f4:1e:5f:01:60:95:2a:ab:7f:7c:3b:7a:fc:4d: f0:32:bc:45:bd:df:a0:bb:d6:0a:a7:e9:d5:d7:e7:c3:8c:4b: 38:e0:55:03:1b:c9:db:46:d6:f0:da:9b:88:c2:c7:93:58:91: 27:55:25:07:e4:2c:e1:3f:a3:b1:73:43:49:bd:f2:83:4b:a7: 7f:e4:2d:1f:f9:c2:63:13:06:b1:46:e7:78:82:b0:c1:d5:29: 6d:75:7f:51:10:4b:26:4b:eb:42:5e:ce:4d:2b:87:c0:cd:d3: 32:62:48:66:26:bd:1e:59:59:ba:49:c5:7e:ef:09:fe:0e:06: f0:ff:b1:eb:34:e5:eb:28:bd:aa:08:fc:52:2b:57:98:f5:2f: fb:0a:f6:46:6a:5f:ee:6f:83:60:b8:4e:c6:ed:71:ac:4a:45: d5:2e:2b:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0eMFQXcA9PB4Si90D4MiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWJhYzhmYjI0OTA5MDFmYTYxMDQ4MGEwNWI2NjM1OGI5 MTI0NmMwHhcNMjUxMjI2MDQwMTQ4WhcNMjUxMjI3MDQwMTQ4WjAzMTEwLwYDVQQD EyhhOGU5ZTYxMTcyM2NjZDJlYTVhZDg0ZmQ0OTg2Y2JjODg0YjRmYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiieBHnhvrXBbmho+KSK1Fvxc5us7 GfG5IPv3prqfE4oSgUNqhP3W+E7yItQeBqKChKnPWJglZxxtgElzJcaBE6yZV91/ eFcHwPV9iLqCBwNtmZadl/4rIhtw+qy5yB817kvTr2+VbN/s7koSki5rBmUB8v3Y FNJ5AScjfMyclk84ojyrhBwtZa/etxDpqMif5pqSFQ4hYU3138epWS/gs2RGWiVb xv/6gOEAR/CizMGmn3MxGxsqBasWKydLBehsrCzmWxWtc2kPBiPQYSDfv9TLYhK1 4HEd1POH3RwqydkfankIGT72553KH+xnyF3SgkBdn3jigQJWcTBpQPv7LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjp5hFyPM0upa2E/UmGy8iEtPqLMB8GA1UdIwQY MBaAFApbrI+ySQkB+mEEgKBbZjWLkSRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQt MWY2YjBiM2E3NjQ0LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQtMWY2YjBiM2E3NjQ0 LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARx53Uy1L OsU5E0rSSXPPB/o/D/7sFFtqINnDtypUOwnLVjbeoApuftgV7LRwc4xqJccen3FL T8OIHfrgZ7OdaF3D8iXmdSdINRETspsXX68qVe5xAOB4IBZWeo8UgvQeXwFglSqr f3w7evxN8DK8Rb3foLvWCqfp1dfnw4xLOOBVAxvJ20bW8NqbiMLHk1iRJ1UlB+Qs 4T+jsXNDSb3yg0unf+QtH/nCYxMGsUbneIKwwdUpbXV/URBLJkvrQl7OTSuHwM3T MmJIZia9HllZuknFfu8J/g4G8P+x6zTl6yi9qgj8UitXmPUv+wr2Rmpf7m+DYLhO xu1xrEpF1S4riw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:22 2025 by rpki-client