This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json) Hash identifier: E7Cp6rqSC3OyX+Oh9FpQ1+CWCnqrJYI63jZ76P+9FV0= Subject key identifier: 79:80:CB:AB:21:A2:15:4B:A3:EA:7A:80:37:ED:06:E0:72:CE:FB:88 Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Certificate serial: 019B1A5FC41C84705A46A4A49ADE0634886C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft Manifest number: 14BE Signing time: Sun 14 Dec 2025 01:00:42 +0000 Manifest this update: Sun 14 Dec 2025 01:00:42 +0000 Manifest next update: Mon 15 Dec 2025 01:00:42 +0000 Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: DqZZBGyCsKLc5WU45v82hBmZvlknmXB8Cjl7/9Pq/3w=) 2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:c4:1c:84:70:5a:46:a4:a4:9a:de:06:34:88:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Validity Not Before: Dec 14 01:00:42 2025 GMT Not After : Dec 15 01:00:42 2025 GMT Subject: CN=7980cbab21a2154ba3ea7a8037ed06e072cefb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:50:76:fd:7e:db:22:8f:78:ba:b9:b0:f8: 14:3b:5c:31:0d:a0:f6:c4:75:76:4a:f0:8d:1c:26: be:bf:fa:63:17:2f:2d:86:b2:49:17:d9:1a:92:3f: 6d:a5:4f:f2:8e:eb:3d:e3:63:48:28:5c:d7:6d:f2: c4:e2:0d:d9:fb:42:6d:e6:a4:06:a1:e7:01:45:15: e7:23:86:e6:3e:bd:7a:56:61:4c:97:d1:89:cb:b1: f8:7a:30:04:7c:97:2d:f1:e0:dc:66:36:ff:cb:3e: a9:4c:fe:7a:99:cf:a2:2d:05:61:38:54:85:02:92: 38:79:0a:7d:6f:0a:85:64:b9:f3:0b:0c:e2:90:02: 8d:32:d3:6d:5c:b5:72:70:0f:07:33:1e:6e:dd:a2: b0:1d:7e:ae:98:12:8e:47:9d:23:a7:00:ca:d7:1d: f5:36:b8:02:d1:fc:11:9b:b4:96:73:24:43:9b:57: 40:85:d7:7b:6b:41:55:2d:70:f2:01:a6:ed:1d:28: 4f:77:d9:c3:a4:b5:c3:e3:81:40:2c:79:29:6c:2e: d7:2b:1f:bf:5e:2a:23:d4:b0:94:c4:a5:7e:3a:db: 93:27:3c:82:d9:b1:52:87:bf:d1:2f:44:08:51:e5: 32:42:73:da:7c:05:ce:9f:ad:16:54:51:8b:a6:22: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:80:CB:AB:21:A2:15:4B:A3:EA:7A:80:37:ED:06:E0:72:CE:FB:88 X509v3 Authority Key Identifier: keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:47:a0:6b:3e:17:6f:aa:42:b3:29:d6:75:d9:5c:2a:1e:e2: 05:63:50:2c:6a:54:dc:3e:4d:c7:51:d6:cf:74:57:94:78:6c: 00:0d:26:4b:6a:7f:3f:02:23:ca:8d:99:6a:ea:2d:52:a1:0e: f6:7a:16:69:3f:31:9c:b8:e5:91:43:2b:e2:ca:3b:e0:ab:1c: ce:9f:58:5e:08:27:cc:79:42:3c:f3:74:9c:92:20:48:0c:df: 08:f7:c3:c3:e4:dd:b3:cf:7c:73:e4:27:ae:74:db:97:17:87: 07:27:44:8b:b6:11:bf:60:73:f4:32:1a:ff:77:b2:17:30:5b: ee:68:83:08:a4:4f:1e:79:6e:f3:77:53:2d:e8:30:7c:40:73: f9:fe:e5:06:49:92:00:72:b7:34:36:9f:37:41:3c:2b:28:6c: ac:3b:4f:38:92:6e:26:24:0c:22:e2:97:f5:97:77:dd:47:a2: fa:77:e1:66:a6:60:0a:63:31:85:53:db:9e:75:2a:b3:7d:cb: dc:49:4e:0d:46:ec:16:18:d8:fe:19:97:c8:61:65:c2:3f:07: 11:94:c5:30:1d:3d:94:19:e5:b0:d4:68:4f:ee:08:e6:6a:66: ae:95:94:6a:07:a6:23:22:d3:0b:eb:4e:27:29:1c:2e:0b:93: 8a:78:1c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX8QchHBaRqSkmt4GNIhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5 NjdmMDIwHhcNMjUxMjE0MDEwMDQyWhcNMjUxMjE1MDEwMDQyWjAzMTEwLwYDVQQD Eyg3OTgwY2JhYjIxYTIxNTRiYTNlYTdhODAzN2VkMDZlMDcyY2VmYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR5Qdv1+2yKPeLq5sPgUO1wxDaD2 xHV2SvCNHCa+v/pjFy8thrJJF9kakj9tpU/yjus942NIKFzXbfLE4g3Z+0Jt5qQG oecBRRXnI4bmPr16VmFMl9GJy7H4ejAEfJct8eDcZjb/yz6pTP56mc+iLQVhOFSF ApI4eQp9bwqFZLnzCwzikAKNMtNtXLVycA8HMx5u3aKwHX6umBKOR50jpwDK1x31 NrgC0fwRm7SWcyRDm1dAhdd7a0FVLXDyAabtHShPd9nDpLXD44FALHkpbC7XKx+/ Xioj1LCUxKV+OtuTJzyC2bFSh7/RL0QIUeUyQnPafAXOn60WVFGLpiJ/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmAy6shohVLo+p6gDftBuByzvuIMB8GA1UdIwQY MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEegaz4X b6pCsynWddlcKh7iBWNQLGpU3D5Nx1HWz3RXlHhsAA0mS2p/PwIjyo2ZauotUqEO 9noWaT8xnLjlkUMr4so74Ksczp9YXggnzHlCPPN0nJIgSAzfCPfDw+Tds898c+Qn rnTblxeHBydEi7YRv2Bz9DIa/3eyFzBb7miDCKRPHnlu83dTLegwfEBz+f7lBkmS AHK3NDafN0E8KyhsrDtPOJJuJiQMIuKX9Zd33Uei+nfhZqZgCmMxhVPbnnUqs33L 3ElODUbsFhjY/hmXyGFlwj8HEZTFMB09lBnlsNRoT+4I5mpmrpWUagemIyLTC+tO JykcLguTingcOg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:46:39 2025 by rpki-client