This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json) Hash identifier: yHcwxVjwaemLXLs8V1+YbFYnQl99UNjSwht7mkSc5TA= Subject key identifier: 20:92:5F:44:DB:3E:C7:46:1C:E2:4D:5C:C3:2D:1A:C3:A5:7F:96:D4 Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a Certificate serial: 019B35320D6318F44494EFACE420168F52AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft Manifest number: 075E Signing time: Fri 19 Dec 2025 06:00:31 +0000 Manifest this update: Fri 19 Dec 2025 06:00:31 +0000 Manifest next update: Sat 20 Dec 2025 06:00:31 +0000 Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: DZhJ9elIyRrkN5fZV3Jx3IYoq6SOWFIHvncRd1GzZy4=) 2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:0d:63:18:f4:44:94:ef:ac:e4:20:16:8f:52:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a Validity Not Before: Dec 19 06:00:31 2025 GMT Not After : Dec 20 06:00:31 2025 GMT Subject: CN=20925f44db3ec7461ce24d5cc32d1ac3a57f96d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:27:1e:d2:60:03:63:0e:c7:47:98:26:ff: 66:cc:15:9b:ec:36:bf:9f:28:ba:85:73:d7:6b:32: a6:dc:cc:3c:8e:71:2f:22:c8:c6:2b:24:e8:d2:ad: c5:5f:ef:b7:61:f7:a7:01:9d:22:d0:5c:0a:95:7b: e1:f4:35:4b:ff:13:6a:31:f5:a3:c2:10:e2:97:44: 36:5f:6a:8a:b9:e8:4b:f3:91:b5:4e:18:32:82:83: 40:94:eb:36:e0:16:26:f7:b3:6c:93:a6:53:44:07: 18:cc:3b:5d:00:b1:d2:b5:9e:3d:70:c0:55:58:aa: db:2d:d4:c0:a2:04:3b:fb:5c:58:7a:0c:9a:92:db: 82:c0:a4:9a:d3:0f:b4:be:d6:b7:23:09:3c:c4:75: 1e:14:56:91:7e:11:e8:7c:c7:5d:49:0a:25:88:37: c9:8a:a0:0b:f2:5e:5f:f8:22:83:b3:5c:8c:76:78: 04:9a:d9:34:36:22:3d:64:43:27:71:c8:5a:2d:cc: 37:d4:8f:9f:02:7a:6a:5e:53:67:b5:df:2c:e0:68: a4:26:e1:91:bb:24:25:6a:0a:c1:c9:f6:de:55:d5: e2:78:e0:7c:f7:f4:4f:fb:41:7e:b1:bf:16:12:0a: 0e:1a:4a:75:1b:e4:c6:ae:89:f7:23:6d:5a:6b:55: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:5F:44:DB:3E:C7:46:1C:E2:4D:5C:C3:2D:1A:C3:A5:7F:96:D4 X509v3 Authority Key Identifier: keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ef:d3:95:99:3d:06:06:76:3b:af:f6:2a:d3:87:43:c6:f9: 79:0d:d7:4c:9a:6f:4b:99:2f:2d:5b:6e:d2:68:96:2e:cc:83: 5d:30:ed:0b:f8:ad:19:b7:20:a1:90:16:29:15:4c:f1:a3:2a: 46:a4:04:a0:ae:37:46:2b:6a:24:81:8c:f7:7b:1b:66:b9:75: 62:b8:95:f5:38:51:c1:37:78:5b:8a:55:fb:20:7f:32:22:f7: e6:66:d6:d3:8d:0d:be:e3:34:4d:af:6d:20:6a:b6:17:10:26: 27:d3:af:44:24:26:8e:2e:84:19:ca:c3:e4:ab:cc:53:f6:a8: fd:2a:cb:8d:57:ad:4d:90:69:1c:52:44:3b:dd:51:5a:30:cf: 30:ed:90:c6:63:5b:d3:7e:dc:dd:42:f7:30:ea:ef:99:97:5b: 3a:c8:37:a3:19:d7:19:9f:ac:72:af:b3:6b:71:18:00:18:9d: f7:58:15:90:3e:7d:e5:36:00:4c:64:78:32:50:5c:73:4e:e6: 9e:26:e9:e4:27:7e:8b:e1:06:59:4a:36:8d:a2:f1:9d:7b:2d: 15:54:51:eb:ec:7a:2e:7a:11:35:37:f2:77:1c:55:cb:17:b1: 51:f5:2d:23:66:1a:3d:90:d9:7d:de:c1:52:9b:f4:0d:2a:ec: 5f:2c:89:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mg1jGPRElO+s5CAWj1KuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4 NjU3OWEwHhcNMjUxMjE5MDYwMDMxWhcNMjUxMjIwMDYwMDMxWjAzMTEwLwYDVQQD EygyMDkyNWY0NGRiM2VjNzQ2MWNlMjRkNWNjMzJkMWFjM2E1N2Y5NmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiAnHtJgA2MOx0eYJv9mzBWb7Da/ nyi6hXPXazKm3Mw8jnEvIsjGKyTo0q3FX++3YfenAZ0i0FwKlXvh9DVL/xNqMfWj whDil0Q2X2qKuehL85G1ThgygoNAlOs24BYm97Nsk6ZTRAcYzDtdALHStZ49cMBV WKrbLdTAogQ7+1xYegyaktuCwKSa0w+0vta3Iwk8xHUeFFaRfhHofMddSQoliDfJ iqAL8l5f+CKDs1yMdngEmtk0NiI9ZEMncchaLcw31I+fAnpqXlNntd8s4GikJuGR uyQlagrByfbeVdXieOB89/RP+0F+sb8WEgoOGkp1G+TGron3I21aa1X5YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCSX0TbPsdGHOJNXMMtGsOlf5bUMB8GA1UdIwQY MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4 LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+/TlZk9 BgZ2O6/2KtOHQ8b5eQ3XTJpvS5kvLVtu0miWLsyDXTDtC/itGbcgoZAWKRVM8aMq RqQEoK43RitqJIGM93sbZrl1YriV9ThRwTd4W4pV+yB/MiL35mbW040NvuM0Ta9t IGq2FxAmJ9OvRCQmji6EGcrD5KvMU/ao/SrLjVetTZBpHFJEO91RWjDPMO2QxmNb 037c3UL3MOrvmZdbOsg3oxnXGZ+scq+za3EYABid91gVkD595TYATGR4MlBcc07m nibp5Cd+i+EGWUo2jaLxnXstFVRR6+x6LnoRNTfydxxVyxexUfUtI2YaPZDZfd7B Upv0DSrsXyyJxw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:48 2025 by rpki-client