This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json) Hash identifier: JvdVtSyG3q1vLU1MobDUPDduLBmDPw2qExytj3wjJwU= Subject key identifier: 1E:F0:D2:2F:E1:2E:30:84:46:42:23:2E:56:2E:82:E7:2B:43:93:1D Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9 Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9 Certificate serial: 019B0F00F2B09C2606AFCC18AEE76506E080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 20:01:18 +0000 Manifest this update: Thu 11 Dec 2025 20:01:18 +0000 Manifest next update: Fri 12 Dec 2025 20:01:18 +0000 Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: UZnJiZPfhyCHJnIYP+Ew3OqgKJQbfcFG3LBU85V5xe8=) 2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:f2:b0:9c:26:06:af:cc:18:ae:e7:65:06:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9 Validity Not Before: Dec 11 20:01:18 2025 GMT Not After : Dec 12 20:01:18 2025 GMT Subject: CN=1ef0d22fe12e30844642232e562e82e72b43931d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:35:b7:cc:6a:f2:76:eb:90:a0:9e:82:5c: a0:32:97:30:21:b9:0d:c0:a6:15:e6:37:72:bc:d3: 67:89:15:ec:fc:bd:70:fd:c9:c4:66:d5:29:b1:f2: 12:48:be:7d:8b:f0:da:c9:49:ae:d5:21:98:34:8d: 07:30:01:34:e6:d0:4c:8c:c1:bf:19:64:1b:0c:25: 4a:4f:7b:b4:51:06:5c:c3:00:6a:b1:a9:c5:a7:04: 82:76:81:15:03:2b:23:d0:22:40:81:61:15:f3:17: 87:c4:e9:8c:7f:a9:26:f7:21:f3:af:76:3f:c5:26: 15:2e:56:96:ea:8a:fd:ca:ca:e3:b5:b7:2c:89:31: 63:91:69:b5:e1:8a:5b:d0:44:34:93:f6:94:a8:af: e5:a8:13:25:37:4f:fa:42:e6:0b:61:d3:ce:97:8c: 2c:2c:bf:91:eb:47:27:f6:29:fc:e4:0e:b0:97:36: 27:d1:e7:b3:09:b4:eb:38:4a:31:fa:dd:9f:e1:4e: 55:0b:a5:58:ed:d6:71:4b:a2:c5:7c:9d:15:52:2c: 36:5a:12:8d:33:dc:a5:22:46:d1:06:49:e3:db:cc: 99:7a:ff:ad:19:e1:2c:dd:56:54:3c:ab:84:a0:d6: a9:8d:2c:3d:44:3d:71:f7:50:6e:a8:09:cb:3e:d5: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:D2:2F:E1:2E:30:84:46:42:23:2E:56:2E:82:E7:2B:43:93:1D X509v3 Authority Key Identifier: keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:82:4f:28:ff:f3:91:0c:37:1a:8f:8b:03:ee:8b:c8:2b:de: 55:3d:f4:df:79:d9:3f:7e:2c:20:e3:68:27:b4:4b:43:06:ad: 9a:80:f1:0d:a6:3d:f5:8b:aa:51:60:7b:e3:89:a8:9f:f1:74: e3:1f:0f:08:3d:86:f4:3b:d7:73:e5:42:5b:e7:33:fa:ff:61: f1:92:76:a8:70:91:3b:c5:3b:ae:0f:6b:45:82:68:f3:bc:2f: 4d:e6:b3:5f:c3:69:0b:75:b0:e8:b2:33:1b:52:01:cf:d9:40: e8:85:7f:86:4f:82:d5:e6:61:f6:57:a4:2c:38:41:30:60:45: ba:59:71:76:3f:20:75:22:e3:13:3c:25:7e:4c:5b:42:da:31: 8a:8d:71:0c:53:7a:e9:13:6a:88:8f:cf:3e:24:07:43:99:dc: fa:d4:5d:ff:9d:e5:bc:d0:98:a5:59:51:d5:59:af:bf:d1:1b: 19:3a:96:95:99:43:41:f2:b2:e9:1d:06:84:5a:24:21:f4:b0: bf:9f:19:59:2a:41:5d:3f:97:85:07:e6:1c:76:81:c5:fc:3c: 1e:f4:98:96:6a:0c:47:04:a8:f0:c2:dd:17:eb:37:c6:44:87: 23:52:b0:27:86:f2:61:9f:73:6b:2c:85:15:ae:5b:d5:94:ab: 7d:7c:f8:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAPKwnCYGr8wYrudlBuCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM4ZGFiOTBjNjE0NTBkYzhhZDY2YjQ4NWQ1MzZjYmFm OWUwZjkwHhcNMjUxMjExMjAwMTE4WhcNMjUxMjEyMjAwMTE4WjAzMTEwLwYDVQQD EygxZWYwZDIyZmUxMmUzMDg0NDY0MjIzMmU1NjJlODJlNzJiNDM5MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwas1t8xq8nbrkKCeglygMpcwIbkN wKYV5jdyvNNniRXs/L1w/cnEZtUpsfISSL59i/DayUmu1SGYNI0HMAE05tBMjMG/ GWQbDCVKT3u0UQZcwwBqsanFpwSCdoEVAysj0CJAgWEV8xeHxOmMf6km9yHzr3Y/ xSYVLlaW6or9ysrjtbcsiTFjkWm14Ypb0EQ0k/aUqK/lqBMlN0/6QuYLYdPOl4ws LL+R60cn9in85A6wlzYn0eezCbTrOEox+t2f4U5VC6VY7dZxS6LFfJ0VUiw2WhKN M9ylIkbRBknj28yZev+tGeEs3VZUPKuEoNapjSw9RD1x91BuqAnLPtUDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7w0i/hLjCERkIjLlYugucrQ5MdMB8GA1UdIwQY MBaAFAqzjauQxhRQ3IrWa0hdU2y6+eD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMt NDNlODExZjc3NjgxLzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMtNDNlODExZjc3Njgx LzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIJPKP/z kQw3Go+LA+6LyCveVT3033nZP34sIONoJ7RLQwatmoDxDaY99YuqUWB744mon/F0 4x8PCD2G9DvXc+VCW+cz+v9h8ZJ2qHCRO8U7rg9rRYJo87wvTeazX8NpC3Ww6LIz G1IBz9lA6IV/hk+C1eZh9lekLDhBMGBFullxdj8gdSLjEzwlfkxbQtoxio1xDFN6 6RNqiI/PPiQHQ5nc+tRd/53lvNCYpVlR1Vmvv9EbGTqWlZlDQfKy6R0GhFokIfSw v58ZWSpBXT+XhQfmHHaBxfw8HvSYlmoMRwSo8MLdF+s3xkSHI1KwJ4byYZ9zayyF Fa5b1ZSrfXz46Q== -----END CERTIFICATE-----Generated at Fri Dec 12 05:13:53 2025 by rpki-client