This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft File: CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json) Hash identifier: TFccgVdnBS29XsvAfw5Ps/8eYU1kPksx+hizyjA4W74= Subject key identifier: 2A:B4:1B:02:73:31:7F:15:CC:25:07:69:13:88:F3:0F:25:58:37:02 Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1 Certificate issuer: /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1 Certificate serial: 019B3BA218C5A650B530E7D68DAD8CE7A1D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft Manifest number: 1749 Signing time: Sat 20 Dec 2025 12:00:37 +0000 Manifest this update: Sat 20 Dec 2025 12:00:37 +0000 Manifest next update: Sun 21 Dec 2025 12:00:37 +0000 Files and hashes: 1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: cxzxsZTZtaQ8PCc/gPOawvYC1AxQxs7oSWuBk+TOdGU=) 2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:18:c5:a6:50:b5:30:e7:d6:8d:ad:8c:e7:a1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1 Validity Not Before: Dec 20 12:00:37 2025 GMT Not After : Dec 21 12:00:37 2025 GMT Subject: CN=2ab41b0273317f15cc2507691388f30f25583702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:31:15:25:e7:a6:0c:7f:8c:14:78:45:10: fa:da:04:49:4d:10:79:22:ad:ed:49:be:c5:8d:8f: c2:99:8a:9e:4c:d0:3e:eb:37:2d:87:7c:89:64:e3: ac:e6:1f:21:12:c6:e8:8b:ee:a4:9c:80:21:7c:0b: 29:91:e4:16:bf:c1:d2:1b:68:7c:36:22:27:40:58: 5f:d7:1f:8e:dd:78:d1:f9:d0:bf:b9:69:51:1b:bf: 1c:62:1b:e8:4c:33:9e:bb:ac:35:0c:23:cb:91:f5: 1e:e0:b3:51:41:67:b5:8d:8c:5c:5c:3b:5a:3e:4a: ad:51:d7:b7:76:f9:a9:76:f3:ee:7f:a7:db:b1:e5: 19:3f:fa:c5:ae:51:1f:eb:75:22:ca:46:58:c2:d0: 4c:25:39:bd:7e:bc:e2:87:c4:46:01:38:a6:3b:bd: 4d:be:cc:62:72:f1:aa:e7:65:67:d4:31:95:0c:89: 53:2e:43:10:3d:36:d2:7a:b5:0f:15:d9:ce:04:16: ca:90:ae:b9:ad:d1:e9:07:61:b9:b2:e0:d4:99:41: 39:6a:5c:4e:d8:cf:d3:8e:a5:91:eb:eb:ca:36:66: 05:40:ce:b4:7b:69:df:88:68:d5:b7:35:f3:cb:3f: 3a:0f:81:6e:f1:ca:f4:13:fc:25:8e:d5:41:36:ac: c8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:1B:02:73:31:7F:15:CC:25:07:69:13:88:F3:0F:25:58:37:02 X509v3 Authority Key Identifier: keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2b:0f:a0:c6:1c:2b:b1:c8:06:c2:82:56:c0:24:51:3f:0d: d3:11:3a:ca:a7:5a:43:1c:cc:bc:f2:ac:54:83:47:2a:bf:1b: b7:1a:d3:03:b5:38:ec:1e:87:88:38:cb:d8:a5:f2:64:e0:03: 41:b5:66:6e:d1:ea:f1:f6:2f:05:92:19:9d:87:08:22:c9:f1: a5:36:ba:53:08:db:e9:df:ea:e2:f5:ae:58:f6:25:89:77:1f: 23:a9:c5:b8:b3:7b:a1:8e:13:26:14:f4:07:fb:28:b7:c8:73: ae:84:68:9b:94:0f:4d:d5:ec:63:b9:70:6b:63:cd:1e:4e:8e: 68:35:11:f3:5f:51:43:fe:05:1e:3c:7a:a7:ea:f9:4f:49:66: 32:ee:e8:78:0d:c0:40:c7:93:24:1b:6b:11:fc:1b:10:28:3e: 46:87:71:96:f2:95:33:85:cf:f0:a1:95:11:8d:5e:b5:cb:7d: 8a:3b:81:70:f1:ff:70:ca:d0:ac:ed:82:65:d3:75:35:ae:5f: 4c:8b:26:e9:ba:51:c2:c8:8b:50:c4:b2:6e:98:c4:34:21:5f: 30:0f:3e:ad:04:23:4c:77:43:5f:49:d3:c0:8d:0b:d7:c8:b7: 34:e4:e1:9e:2d:ef:5f:9d:51:b6:16:e4:14:86:23:07:70:cd: bf:97:45:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ohjFplC1MOfWja2M56HRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjZhZjQyNWFiM2QzOWQ3MzM3YzJiMTI1ZDM5NTkzYWQ5 MWMxZDEwHhcNMjUxMjIwMTIwMDM3WhcNMjUxMjIxMTIwMDM3WjAzMTEwLwYDVQQD EygyYWI0MWIwMjczMzE3ZjE1Y2MyNTA3NjkxMzg4ZjMwZjI1NTgzNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ukxFSXnpgx/jBR4RRD62gRJTRB5 Iq3tSb7FjY/CmYqeTNA+6zcth3yJZOOs5h8hEsboi+6knIAhfAspkeQWv8HSG2h8 NiInQFhf1x+O3XjR+dC/uWlRG78cYhvoTDOeu6w1DCPLkfUe4LNRQWe1jYxcXDta PkqtUde3dvmpdvPuf6fbseUZP/rFrlEf63UiykZYwtBMJTm9frzih8RGATimO71N vsxicvGq52Vn1DGVDIlTLkMQPTbSerUPFdnOBBbKkK65rdHpB2G5suDUmUE5alxO 2M/TjqWR6+vKNmYFQM60e2nfiGjVtzXzyz86D4Fu8cr0E/wljtVBNqzIcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCq0GwJzMX8VzCUHaROI8w8lWDcCMB8GA1UdIwQY MBaAFAhmr0Jas9OdczfCsSXTlZOtkcHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMt YjdlYjEyOTk4YjM1LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zOWI4YWQtZTY1My00Y2NkLTgyOGMtYjdlYjEyOTk4YjM1 LzEvQ0dhdlFscXowNTF6TjhLeEpkT1ZrNjJSd2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSsPoMYc K7HIBsKCVsAkUT8N0xE6yqdaQxzMvPKsVINHKr8btxrTA7U47B6HiDjL2KXyZOAD QbVmbtHq8fYvBZIZnYcIIsnxpTa6Uwjb6d/q4vWuWPYliXcfI6nFuLN7oY4TJhT0 B/sot8hzroRom5QPTdXsY7lwa2PNHk6OaDUR819RQ/4FHjx6p+r5T0lmMu7oeA3A QMeTJBtrEfwbECg+RodxlvKVM4XP8KGVEY1etct9ijuBcPH/cMrQrO2CZdN1Na5f TIsm6bpRwsiLUMSybpjENCFfMA8+rQQjTHdDX0nTwI0L18i3NOThni3vX51Rthbk FIYjB3DNv5dFvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:32 2025 by rpki-client