This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json) Hash identifier: YdSMmXJEkVwjygBGYsNEo/0Kh0VHw8YgWR8SN9RG040= Subject key identifier: A5:BF:93:1E:7E:9F:D0:2A:CA:60:53:28:D1:BA:97:0C:D8:0A:F7:4B Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Certificate serial: 019B2175E7113C5F7A19AC998978E19774AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft Manifest number: 06A4 Signing time: Mon 15 Dec 2025 10:02:13 +0000 Manifest this update: Mon 15 Dec 2025 10:02:13 +0000 Manifest next update: Tue 16 Dec 2025 10:02:13 +0000 Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: WR6cA/9ri2XFu8vfVA7XqRQLIok8KqRfT4RiwHxnOws=) 2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:e7:11:3c:5f:7a:19:ac:99:89:78:e1:97:74:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Validity Not Before: Dec 15 10:02:13 2025 GMT Not After : Dec 16 10:02:13 2025 GMT Subject: CN=a5bf931e7e9fd02aca605328d1ba970cd80af74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3e:23:a6:04:5c:7b:b4:b5:e4:98:2b:66:82: 08:9d:1b:59:d6:3e:ec:af:de:d5:7d:a7:c5:42:46: 07:ff:cb:fa:04:d6:16:38:7a:28:66:77:ba:1d:59: af:fa:7b:5c:57:ba:b7:32:ea:79:50:40:53:9c:bc: 48:5a:69:41:b8:62:a7:9d:7d:0d:07:03:db:e6:10: 13:ae:d0:7d:b2:95:02:2d:6e:cd:de:56:29:e6:e6: 94:0b:3f:14:bd:a9:4e:98:64:32:0d:75:cf:ce:c5: 69:97:be:53:65:dd:c0:78:e7:4a:fa:7b:9a:54:79: 3c:80:44:a0:58:83:a3:9e:03:ea:0c:cc:4c:a9:9a: df:1b:64:95:c3:10:a6:3a:44:3f:12:1b:90:74:7f: 44:3e:2c:d1:a4:a6:79:50:6d:be:7d:5b:17:b1:fa: b4:64:1a:64:f1:14:9e:08:e4:46:ac:3c:bb:4c:22: 1d:2a:5a:b2:bb:76:ad:89:4f:e3:f6:57:35:c4:8e: 35:e9:52:11:5e:0e:25:1a:a2:99:a3:e1:6c:9d:51: 15:07:63:a7:7c:02:0a:63:ed:dc:15:00:69:ee:6f: 05:c9:c6:f0:3f:65:2d:16:d6:d7:28:52:f5:4f:07: 08:25:f4:70:75:42:cd:c5:c1:37:4d:ba:d7:2e:8d: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BF:93:1E:7E:9F:D0:2A:CA:60:53:28:D1:BA:97:0C:D8:0A:F7:4B X509v3 Authority Key Identifier: keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:49:de:d0:99:c8:fb:8f:ec:fd:c2:81:98:de:5f:79:1d:29: a7:50:a1:36:42:af:ed:e9:af:4d:42:a8:c4:c0:ea:ef:47:2b: b6:22:d7:fa:71:69:0f:e6:5f:23:02:62:a8:80:10:a1:c6:a3: dd:19:65:d8:fe:f4:ac:d9:44:c1:07:17:ea:a1:b4:ec:7a:6e: c0:37:78:a5:19:05:29:34:c2:3f:a3:d6:75:9b:07:3b:e7:eb: 0d:80:21:fc:c4:5c:cf:01:d8:7c:ab:4e:b2:e8:33:94:53:bf: 34:b6:25:28:13:71:fc:e1:ed:7e:0f:29:96:e7:6f:64:1c:d5: a9:9e:90:c5:98:7a:ab:90:52:70:31:2a:e6:b2:df:43:60:64: 80:ab:3e:fd:5d:8a:bb:ad:51:d2:0f:dc:2b:be:b3:c3:2f:04: 12:25:2e:17:81:fd:48:24:bb:71:c3:03:70:42:71:41:00:d8: 80:81:d2:89:19:78:e7:eb:03:a6:fa:0d:10:81:cb:be:f2:e2: 4d:b9:3c:66:88:85:31:de:39:78:ff:42:99:62:57:cf:f5:d1: 47:1b:a5:b4:72:9f:e6:01:d6:24:4c:d9:81:b7:1d:7a:35:6a: 94:f4:b0:97:b6:1d:93:2b:6b:4d:b3:f3:ad:3e:e4:6e:00:00: f4:3e:43:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdecRPF96GayZiXjhl3SuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj YjFkYzkwHhcNMjUxMjE1MTAwMjEzWhcNMjUxMjE2MTAwMjEzWjAzMTEwLwYDVQQD EyhhNWJmOTMxZTdlOWZkMDJhY2E2MDUzMjhkMWJhOTcwY2Q4MGFmNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9T4jpgRce7S15JgrZoIInRtZ1j7s r97VfafFQkYH/8v6BNYWOHooZne6HVmv+ntcV7q3Mup5UEBTnLxIWmlBuGKnnX0N BwPb5hATrtB9spUCLW7N3lYp5uaUCz8UvalOmGQyDXXPzsVpl75TZd3AeOdK+nua VHk8gESgWIOjngPqDMxMqZrfG2SVwxCmOkQ/EhuQdH9EPizRpKZ5UG2+fVsXsfq0 ZBpk8RSeCORGrDy7TCIdKlqyu3atiU/j9lc1xI416VIRXg4lGqKZo+FsnVEVB2On fAIKY+3cFQBp7m8FycbwP2UtFtbXKFL1TwcIJfRwdULNxcE3TbrXLo35SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKW/kx5+n9AqymBTKNG6lwzYCvdLMB8GA1UdIwQY MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0 LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokne0JnI +4/s/cKBmN5feR0pp1ChNkKv7emvTUKoxMDq70crtiLX+nFpD+ZfIwJiqIAQocaj 3Rll2P70rNlEwQcX6qG07HpuwDd4pRkFKTTCP6PWdZsHO+frDYAh/MRczwHYfKtO sugzlFO/NLYlKBNx/OHtfg8pludvZBzVqZ6QxZh6q5BScDEq5rLfQ2BkgKs+/V2K u61R0g/cK76zwy8EEiUuF4H9SCS7ccMDcEJxQQDYgIHSiRl45+sDpvoNEIHLvvLi Tbk8ZoiFMd45eP9CmWJXz/XRRxultHKf5gHWJEzZgbcdejVqlPSwl7YdkytrTbPz rT7kbgAA9D5D6w== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:27 2025 by rpki-client