This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json) Hash identifier: kyg8480eAcUBW2dbbL/3m77GYhkylzuHqqYLs9QF918= Subject key identifier: 8D:AC:16:74:61:04:50:01:1E:20:78:A7:2B:C6:55:80:C3:94:9E:EB Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98 Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398 Certificate serial: 019B1C85F6B3BA5D1B93644EDD7233754EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft Manifest number: 0526 Signing time: Sun 14 Dec 2025 11:01:39 +0000 Manifest this update: Sun 14 Dec 2025 11:01:39 +0000 Manifest next update: Mon 15 Dec 2025 11:01:39 +0000 Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: ju4QfBQZPg5f1ie3dL9ZXwtG3TCrBtv+pTJRSayCseo=) 2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:f6:b3:ba:5d:1b:93:64:4e:dd:72:33:75:4e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398 Validity Not Before: Dec 14 11:01:39 2025 GMT Not After : Dec 15 11:01:39 2025 GMT Subject: CN=8dac1674610450011e2078a72bc65580c3949eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:dc:e1:f7:fd:69:d1:25:38:44:bf:e6:4c: ac:35:7a:79:2a:9b:db:f6:03:cb:af:b6:e0:b7:f5: 86:d1:41:aa:6a:7b:cc:22:59:f2:de:bf:6f:56:91: a2:24:7b:b6:79:16:d9:ec:3c:ed:db:ac:d9:e2:e1: 99:85:7f:d5:a9:d8:0c:c6:03:e5:29:ca:b5:e5:02: 02:53:9b:11:1a:e3:83:fe:97:dd:5f:12:18:c1:d1: db:1c:0c:d5:7e:26:e2:19:1e:51:23:73:de:67:0e: 21:cf:a0:b6:81:f1:bc:05:01:3d:2a:9b:aa:c4:50: 29:36:43:38:f7:6d:58:f8:1f:13:ac:d9:07:84:c7: 37:9a:d1:0f:81:84:38:79:ea:1a:2e:1e:fd:aa:17: 2b:3e:01:33:31:dd:2b:56:ea:5b:d2:da:db:99:83: 22:ad:d2:f6:c4:ec:9e:c4:20:64:e4:31:1f:62:1d: 75:41:a7:ae:30:ce:94:6a:ea:1f:6a:e0:54:70:f9: 38:b3:4f:2c:f5:9f:d8:f9:f6:e7:60:f2:cb:11:31: 26:40:bd:10:6f:2c:d1:5c:9e:11:53:29:3d:16:31: 19:5b:01:65:3b:e4:0c:88:c3:00:0f:84:6b:e5:61: 12:ed:52:04:bf:a2:90:01:87:89:b1:e9:5e:26:03: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AC:16:74:61:04:50:01:1E:20:78:A7:2B:C6:55:80:C3:94:9E:EB X509v3 Authority Key Identifier: keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:56:0d:75:20:f9:82:0e:16:56:88:88:f4:1c:f9:27:d5:c3: 43:72:c9:70:45:a5:93:ee:9e:5f:82:64:9e:90:65:a1:79:9e: 33:62:64:3b:93:61:a9:67:42:d7:ad:c6:bf:ba:78:de:35:bc: f2:23:24:41:e2:f5:11:53:15:a8:60:8b:eb:44:58:dc:1e:3a: 9b:63:e4:21:16:f2:55:aa:ea:db:39:2c:bc:98:28:36:ee:54: 8b:dc:b8:96:2f:e7:76:c2:33:7f:ef:b1:d7:5a:21:1d:a5:89: b1:92:4e:b8:77:62:88:9b:ee:b6:a6:5a:ce:4c:84:94:52:5a: 89:bf:63:35:34:42:d4:38:65:b8:9e:13:52:32:32:06:a0:d9: 1f:2d:0a:26:af:8a:65:82:f1:e4:53:85:02:31:db:c3:c4:95: 74:22:ac:52:ef:27:0b:11:72:53:88:d9:ec:6e:0e:a6:98:3f: b8:65:6c:f9:0d:59:05:4c:cb:b2:e7:01:a0:31:f3:a3:6e:3c: 72:0f:7c:09:8b:9d:79:c5:80:1d:ba:bb:a8:65:aa:12:87:4c: 1f:65:41:2a:71:e4:19:95:c4:4a:40:65:83:83:25:e2:8d:66: 68:f1:b0:d4:71:c1:d7:10:72:85:12:0f:1a:02:2b:6b:ed:67: bc:d6:87:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschfazul0bk2RO3XIzdU6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy MGIzOTgwHhcNMjUxMjE0MTEwMTM5WhcNMjUxMjE1MTEwMTM5WjAzMTEwLwYDVQQD Eyg4ZGFjMTY3NDYxMDQ1MDAxMWUyMDc4YTcyYmM2NTU4MGMzOTQ5ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzbc4ff9adElOES/5kysNXp5Kpvb 9gPLr7bgt/WG0UGqanvMIlny3r9vVpGiJHu2eRbZ7Dzt26zZ4uGZhX/VqdgMxgPl Kcq15QICU5sRGuOD/pfdXxIYwdHbHAzVfibiGR5RI3PeZw4hz6C2gfG8BQE9Kpuq xFApNkM4921Y+B8TrNkHhMc3mtEPgYQ4eeoaLh79qhcrPgEzMd0rVupb0trbmYMi rdL2xOyexCBk5DEfYh11QaeuMM6UauofauBUcPk4s08s9Z/Y+fbnYPLLETEmQL0Q byzRXJ4RUyk9FjEZWwFlO+QMiMMAD4Rr5WES7VIEv6KQAYeJseleJgPUiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2sFnRhBFABHiB4pyvGVYDDlJ7rMB8GA1UdIwQY MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlYNdSD5 gg4WVoiI9Bz5J9XDQ3LJcEWlk+6eX4JknpBloXmeM2JkO5NhqWdC163Gv7p43jW8 8iMkQeL1EVMVqGCL60RY3B46m2PkIRbyVarq2zksvJgoNu5Ui9y4li/ndsIzf++x 11ohHaWJsZJOuHdiiJvutqZazkyElFJaib9jNTRC1DhluJ4TUjIyBqDZHy0KJq+K ZYLx5FOFAjHbw8SVdCKsUu8nCxFyU4jZ7G4Oppg/uGVs+Q1ZBUzLsucBoDHzo248 cg98CYudecWAHbq7qGWqEodMH2VBKnHkGZXESkBlg4Ml4o1maPGw1HHB1xByhRIP GgIra+1nvNaHcg== -----END CERTIFICATE-----Generated at Sun Dec 14 19:14:24 2025 by rpki-client