This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json) Hash identifier: rTXq3Gs6FaulPvcoOLqyYr4Ojlr8+G0Oa9TZ5VdILsg= Subject key identifier: C9:7D:21:7F:BF:F8:3B:99:57:A8:52:49:E2:DC:6C:0E:72:1E:33:92 Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19 Certificate serial: 019B1081B455113E5918B7A6DBF66C1B8883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft Manifest number: 14FE Signing time: Fri 12 Dec 2025 03:01:34 +0000 Manifest this update: Fri 12 Dec 2025 03:01:34 +0000 Manifest next update: Sat 13 Dec 2025 03:01:34 +0000 Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: rv5ZgWDxmXRQIDW+BUGdQIjuTBTv/8DFJvh8DVCrLNI=) 2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:b4:55:11:3e:59:18:b7:a6:db:f6:6c:1b:88:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19 Validity Not Before: Dec 12 03:01:34 2025 GMT Not After : Dec 13 03:01:34 2025 GMT Subject: CN=c97d217fbff83b9957a85249e2dc6c0e721e3392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:12:54:ef:f8:ec:84:e4:88:84:2b:53:4f: fd:ee:d1:dc:81:60:c3:9a:4b:57:3e:d5:e3:8e:d0: b7:fa:b7:88:7f:a1:47:d6:2f:3d:ca:ed:cc:fe:41: 3c:9a:20:55:43:ee:47:3f:3f:ef:d7:1e:dd:d3:9f: 16:74:90:af:a2:f8:04:6b:6b:87:6b:3d:13:50:d5: ca:a3:d6:66:0f:ed:56:e8:e5:74:f0:ef:a4:3b:81: 1a:e1:28:2e:9e:61:70:e2:0d:7b:51:d8:99:f1:02: bb:8e:d0:1c:27:db:62:84:74:03:33:9b:f3:a0:5d: 60:8f:b6:c0:95:9b:af:d9:73:79:cb:86:ff:88:4d: 86:82:fd:97:1c:16:05:9b:c2:9c:53:a7:69:09:e9: 37:9c:79:74:f1:ae:6c:05:d4:f4:22:0f:07:de:9e: c8:ba:eb:60:88:a8:23:e4:6b:4a:c3:31:de:cd:a5: e8:eb:7a:79:89:ce:37:64:71:bb:a4:f7:85:6b:18: c4:3f:93:a1:a9:dd:ff:1f:11:c2:50:bb:79:da:97: 2a:de:37:11:4f:fd:fc:e2:8f:a1:c4:a0:dc:78:0b: 40:19:ca:72:22:26:b7:61:c3:86:ee:7f:66:67:dc: 1d:93:53:9b:d8:dc:05:82:84:4e:f6:11:1e:60:3d: 7e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7D:21:7F:BF:F8:3B:99:57:A8:52:49:E2:DC:6C:0E:72:1E:33:92 X509v3 Authority Key Identifier: keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:10:e4:20:39:23:bb:7b:6c:d3:4b:65:4e:d5:81:06:5e:80: a0:44:83:22:83:d8:9b:d6:5e:8f:b2:47:b4:af:8c:44:60:98: b0:52:d3:8e:28:ae:c2:04:ef:61:6f:07:85:e4:0d:fe:90:19: 33:c9:ae:26:7d:6f:47:34:ee:2f:5d:d0:16:8a:fc:f0:95:94: c1:25:4b:e4:53:ed:07:f6:ee:c0:c3:9a:91:df:13:59:bd:9d: b2:56:fa:02:be:5f:17:28:7f:b7:ea:09:fb:43:a5:af:22:4c: 4a:f3:0a:f6:35:f3:e1:4c:48:c8:8a:71:3c:56:fe:2f:e8:83: a5:c3:1d:f7:b7:af:90:9e:ec:7b:66:b1:7a:d0:c0:5a:4f:e4: 6a:84:b3:21:72:f1:e6:a1:01:7d:36:7b:e0:3a:7c:de:7a:99: ea:47:6d:c5:c1:15:3e:3f:fe:5e:d5:cd:76:2d:38:60:34:58: b0:9b:16:6d:07:63:a4:df:3c:53:9c:67:df:a6:69:ad:cd:da: 31:d6:ff:fa:13:1c:72:ec:55:c7:e6:5a:75:d0:d9:6c:c6:82: d6:4c:e4:02:bc:2a:dd:72:c9:26:dd:47:4d:11:e1:20:ae:f9: 74:e3:88:29:df:65:c2:39:c9:ed:26:40:15:93:18:c3:a7:e1: 34:12:e1:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgbRVET5ZGLem2/ZsG4iDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3 N2ZkMTkwHhcNMjUxMjEyMDMwMTM0WhcNMjUxMjEzMDMwMTM0WjAzMTEwLwYDVQQD EyhjOTdkMjE3ZmJmZjgzYjk5NTdhODUyNDllMmRjNmMwZTcyMWUzMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQMSVO/47ITkiIQrU0/97tHcgWDD mktXPtXjjtC3+reIf6FH1i89yu3M/kE8miBVQ+5HPz/v1x7d058WdJCvovgEa2uH az0TUNXKo9ZmD+1W6OV08O+kO4Ea4SgunmFw4g17UdiZ8QK7jtAcJ9tihHQDM5vz oF1gj7bAlZuv2XN5y4b/iE2Ggv2XHBYFm8KcU6dpCek3nHl08a5sBdT0Ig8H3p7I uutgiKgj5GtKwzHezaXo63p5ic43ZHG7pPeFaxjEP5Ohqd3/HxHCULt52pcq3jcR T/384o+hxKDceAtAGcpyIia3YcOG7n9mZ9wdk1Ob2NwFgoRO9hEeYD1+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMl9IX+/+DuZV6hSSeLcbA5yHjOSMB8GA1UdIwQY MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixDkIDkj u3ts00tlTtWBBl6AoESDIoPYm9Zej7JHtK+MRGCYsFLTjiiuwgTvYW8HheQN/pAZ M8muJn1vRzTuL13QFor88JWUwSVL5FPtB/buwMOakd8TWb2dslb6Ar5fFyh/t+oJ +0OlryJMSvMK9jXz4UxIyIpxPFb+L+iDpcMd97evkJ7se2axetDAWk/kaoSzIXLx 5qEBfTZ74Dp83nqZ6kdtxcEVPj/+XtXNdi04YDRYsJsWbQdjpN88U5xn36Zprc3a Mdb/+hMccuxVx+ZaddDZbMaC1kzkArwq3XLJJt1HTRHhIK75dOOIKd9lwjnJ7SZA FZMYw6fhNBLhGA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:03:12 2025 by rpki-client