This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json) Hash identifier: MDIx9s/6KV4KD7mVIQJYgBHaT605Nhjrg3kQ91YtCHI= Subject key identifier: E6:23:D5:54:52:3C:D5:E7:D3:48:95:36:A1:C5:B9:FC:35:AA:AF:5A Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Certificate serial: 019B378F34E88EF5AD87AB96D395ACB1AB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft Manifest number: 141F Signing time: Fri 19 Dec 2025 17:01:30 +0000 Manifest this update: Fri 19 Dec 2025 17:01:30 +0000 Manifest next update: Sat 20 Dec 2025 17:01:30 +0000 Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: kfjUgKq9zAWiMUELfxBTg63NieDcwLmyDw94nav84QA=) 2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:34:e8:8e:f5:ad:87:ab:96:d3:95:ac:b1:ab:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Validity Not Before: Dec 19 17:01:30 2025 GMT Not After : Dec 20 17:01:30 2025 GMT Subject: CN=e623d554523cd5e7d3489536a1c5b9fc35aaaf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:81:53:c3:29:23:a9:59:de:62:96:e4:1b: 17:e3:39:e4:1c:d4:34:f4:fe:bf:8f:8c:04:6d:f7: 18:6e:9a:be:81:72:6c:da:d7:c9:08:8b:ea:0b:0b: 6b:ec:50:d3:cc:9b:dd:67:93:63:d2:5c:a9:fb:23: 92:e7:bb:7e:98:79:c2:8e:a7:64:0c:74:1a:b3:bf: dc:69:01:24:60:cc:6a:ad:e4:5e:c8:94:f0:41:fc: 21:22:49:c2:da:f9:80:dc:13:dc:40:fb:9b:84:04: 9e:0b:2b:41:db:4a:5a:4f:0c:4d:36:96:21:f1:eb: e2:ce:19:03:ac:98:16:8a:f0:10:60:b0:40:56:3e: 2e:48:87:f6:66:d3:7f:5c:05:56:01:97:10:a4:08: b2:90:6e:c5:78:ac:0e:8e:52:35:3e:8b:43:2c:63: 04:a6:fb:c6:a8:68:5b:6b:50:2b:42:f4:bd:98:ec: 95:24:f9:9c:03:f5:bd:46:84:c4:ff:35:c8:9e:32: 08:3e:27:21:f4:88:13:eb:31:c4:c8:2f:c4:25:91: e7:8f:82:ff:d4:87:62:c3:4c:49:b8:0e:c0:4e:e0: 6a:3e:21:90:53:79:bd:bd:a0:0f:51:2b:a4:0e:cf: 33:6f:bc:75:df:c4:1f:d3:5b:d2:45:59:d3:b0:8c: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:23:D5:54:52:3C:D5:E7:D3:48:95:36:A1:C5:B9:FC:35:AA:AF:5A X509v3 Authority Key Identifier: keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1b:ba:ac:8a:fb:70:7f:16:79:ba:ce:ea:89:c7:39:d4:b7: 36:bb:df:5d:53:d9:73:41:aa:e3:dd:78:9b:62:1a:4b:5f:2d: b5:7c:f3:35:9d:b0:79:ab:99:b3:c5:b8:b8:a4:93:d4:5f:d3: 75:d1:6e:6d:0c:30:90:b7:ee:71:2a:0d:df:61:4f:43:32:d3: 78:d8:e9:ba:00:ef:d3:1d:39:b4:6f:82:9a:e2:5d:46:42:b1: 7d:ae:98:0e:8c:cf:58:30:57:08:dc:73:39:4a:a3:3f:8b:bd: f6:3b:2e:c4:f3:7c:4f:fd:3d:4d:2d:93:10:48:3d:05:2c:17: 2a:48:4b:58:79:f0:1f:e9:35:d1:14:d0:6e:18:a1:09:40:31: f1:1a:c7:1f:e3:e2:cf:b3:3b:0e:20:b8:e9:25:b6:c4:bd:d0: 73:5f:45:2f:ed:0e:60:80:6e:3b:e9:b0:f0:22:83:1c:86:2f: 06:47:46:f9:a7:e1:11:e7:ba:35:10:7f:37:17:28:75:20:8f: 7b:4e:ae:c9:52:04:0b:2c:04:2d:23:e9:bb:26:c7:4f:be:0f: c3:9a:18:ac:ac:33:f6:c1:48:88:a8:01:95:72:54:42:f8:ef: b3:d9:ca:21:00:fc:8e:f4:19:3a:29:a2:4d:f4:3b:2c:5d:a6: ef:d5:7d:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jzTojvWth6uW05WssatlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjBmMTJmMTE1YWQ0MGYyYzJiNGFhZDQ1NGQyZTQzNjEx YzlhMDYwHhcNMjUxMjE5MTcwMTMwWhcNMjUxMjIwMTcwMTMwWjAzMTEwLwYDVQQD EyhlNjIzZDU1NDUyM2NkNWU3ZDM0ODk1MzZhMWM1YjlmYzM1YWFhZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UiBU8MpI6lZ3mKW5BsX4znkHNQ0 9P6/j4wEbfcYbpq+gXJs2tfJCIvqCwtr7FDTzJvdZ5Nj0lyp+yOS57t+mHnCjqdk DHQas7/caQEkYMxqreReyJTwQfwhIknC2vmA3BPcQPubhASeCytB20paTwxNNpYh 8evizhkDrJgWivAQYLBAVj4uSIf2ZtN/XAVWAZcQpAiykG7FeKwOjlI1PotDLGME pvvGqGhba1ArQvS9mOyVJPmcA/W9RoTE/zXInjIIPich9IgT6zHEyC/EJZHnj4L/ 1Idiw0xJuA7ATuBqPiGQU3m9vaAPUSukDs8zb7x138Qf01vSRVnTsIx3jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYj1VRSPNXn00iVNqHFufw1qq9aMB8GA1UdIwQY MBaAFAiw8S8RWtQPLCtKrUVNLkNhHJoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4Mjkt NDhkZWExMDIxYTY5LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4MjktNDhkZWExMDIxYTY5 LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRu6rIr7 cH8WebrO6onHOdS3NrvfXVPZc0Gq4914m2IaS18ttXzzNZ2weauZs8W4uKST1F/T ddFubQwwkLfucSoN32FPQzLTeNjpugDv0x05tG+CmuJdRkKxfa6YDozPWDBXCNxz OUqjP4u99jsuxPN8T/09TS2TEEg9BSwXKkhLWHnwH+k10RTQbhihCUAx8RrHH+Pi z7M7DiC46SW2xL3Qc19FL+0OYIBuO+mw8CKDHIYvBkdG+afhEee6NRB/NxcodSCP e06uyVIECywELSPpuybHT74Pw5oYrKwz9sFIiKgBlXJUQvjvs9nKIQD8jvQZOimi TfQ7LF2m79V9bg== -----END CERTIFICATE-----Generated at Fri Dec 19 19:47:32 2025 by rpki-client