This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json) Hash identifier: 6n3d5OSe6Pr7rYZqDYfCY2F2VWI/V/vFrywduPjQe50= Subject key identifier: 38:01:CD:B8:19:1E:71:76:0B:F4:B6:53:BC:3C:FF:80:61:C3:08:EF Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Certificate serial: 019B10816084E422B1B3F04CA0256209A74E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 03:01:12 +0000 Manifest this update: Fri 12 Dec 2025 03:01:12 +0000 Manifest next update: Sat 13 Dec 2025 03:01:12 +0000 Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=) 2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: +MOviLaqhrjYtZRKOcaTRNeYO8xoDnuOUABW0c9Y4Ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:60:84:e4:22:b1:b3:f0:4c:a0:25:62:09:a7:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe Validity Not Before: Dec 12 03:01:12 2025 GMT Not After : Dec 13 03:01:12 2025 GMT Subject: CN=3801cdb8191e71760bf4b653bc3cff8061c308ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:8a:8d:78:ed:80:19:52:39:eb:6b:cd:13: 05:9d:9a:c5:13:e9:72:ad:43:d9:6b:9b:58:f1:ae: 1a:14:4c:17:ab:cb:a9:f4:ad:ca:50:93:a1:2b:ef: be:4e:4e:18:35:12:ea:98:11:f6:00:8b:7c:bb:c3: bd:37:69:a4:e7:e7:0a:44:02:10:bc:83:dd:f7:0c: 44:6d:2e:9b:aa:b7:77:9e:79:e5:50:29:cf:4b:b2: 2c:25:33:06:f1:f7:40:24:92:86:b6:f9:01:7e:10: 95:c6:cf:13:bb:b4:db:45:ee:00:80:a5:c4:9b:1b: 2c:ce:96:82:ab:8e:27:6d:dc:51:c6:31:81:41:68: 08:2c:66:67:ab:1d:c6:0b:12:02:3f:66:59:93:c9: ec:b3:a5:43:72:a7:86:e4:9f:0a:bc:23:87:d2:4f: 21:b7:b8:50:c7:b3:d0:17:ef:cf:1b:94:bf:a8:5f: 6e:81:39:d6:ec:fd:3a:0b:06:ea:28:af:3d:a8:01: 3b:b0:50:f0:32:2b:57:43:f2:12:9f:08:c0:e7:7d: 3e:c9:a2:77:83:4c:10:be:21:4f:ab:51:c1:98:27: b1:bb:e0:c0:59:19:50:1d:68:50:6e:e6:6b:e7:07: 7a:80:8e:a5:ee:48:6f:06:c8:01:dc:2b:dd:dc:25: 7a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:01:CD:B8:19:1E:71:76:0B:F4:B6:53:BC:3C:FF:80:61:C3:08:EF X509v3 Authority Key Identifier: keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d5:62:1c:17:3e:70:52:bc:51:15:e4:24:0d:9f:39:d7:c9: 6c:52:b0:f3:fc:51:03:c3:12:64:d3:6e:df:31:af:11:d4:64: 52:14:6c:26:d5:1e:29:65:a7:24:39:e5:7d:00:71:8c:18:68: f1:fb:0c:aa:70:76:94:47:82:2f:6f:45:29:ac:e9:ac:ef:0a: 1e:36:1b:a2:95:de:e4:7b:5c:f1:31:8c:14:08:e6:84:0a:3d: 39:d1:30:ab:96:a0:5a:2d:5d:12:fb:a4:4c:7a:0c:1a:f1:04: d8:fb:30:12:50:43:c9:3f:a7:3e:06:96:08:db:80:fa:78:b0: d9:8a:fa:53:4c:4a:5f:64:9a:c6:c2:b4:96:69:80:43:8a:86: ab:99:6d:68:e4:da:5e:0b:64:0e:a1:77:80:8c:4a:6a:9b:79: e6:37:07:8e:79:4f:ea:97:7f:12:1d:4a:73:eb:ee:39:d7:3f: 28:a6:bf:fb:aa:1d:c1:20:97:30:6b:c8:37:05:8d:7d:97:68: 96:58:39:2a:9b:ea:fe:2d:0a:b9:59:7c:3b:2b:2d:55:2b:6b: a4:cc:cb:1b:09:f5:5f:23:14:25:65:c7:7d:9c:4e:fe:b1:5e: e7:73:f8:f0:24:ef:ac:5d:d6:b0:f1:15:c2:c2:f5:ba:15:5b: 58:d8:11:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgWCE5CKxs/BMoCViCadOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzBiYzM0YjhmNGZjYmMyYmY1MjNiYmRiZTlhMDQ0YTI0 NDVmYmUwHhcNMjUxMjEyMDMwMTEyWhcNMjUxMjEzMDMwMTEyWjAzMTEwLwYDVQQD EygzODAxY2RiODE5MWU3MTc2MGJmNGI2NTNiYzNjZmY4MDYxYzMwOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSyKjXjtgBlSOetrzRMFnZrFE+ly rUPZa5tY8a4aFEwXq8up9K3KUJOhK+++Tk4YNRLqmBH2AIt8u8O9N2mk5+cKRAIQ vIPd9wxEbS6bqrd3nnnlUCnPS7IsJTMG8fdAJJKGtvkBfhCVxs8Tu7TbRe4AgKXE mxsszpaCq44nbdxRxjGBQWgILGZnqx3GCxICP2ZZk8nss6VDcqeG5J8KvCOH0k8h t7hQx7PQF+/PG5S/qF9ugTnW7P06CwbqKK89qAE7sFDwMitXQ/ISnwjA530+yaJ3 g0wQviFPq1HBmCexu+DAWRlQHWhQbuZr5wd6gI6l7khvBsgB3Cvd3CV6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgBzbgZHnF2C/S2U7w8/4BhwwjvMB8GA1UdIwQY MBaAFAgwvDS49Py8K/Uju9vpoESiRF++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUt MDEzYzFmMDFlZGI5LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8zZmEzNmQtOGZhZi00YmRjLWFkOWUtMDEzYzFmMDFlZGI5 LzEvQ0RDOE5MajBfTHdyOVNPNzItbWdSS0pFWDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNViHBc+ cFK8URXkJA2fOdfJbFKw8/xRA8MSZNNu3zGvEdRkUhRsJtUeKWWnJDnlfQBxjBho 8fsMqnB2lEeCL29FKazprO8KHjYbopXe5Htc8TGMFAjmhAo9OdEwq5agWi1dEvuk THoMGvEE2PswElBDyT+nPgaWCNuA+niw2Yr6U0xKX2SaxsK0lmmAQ4qGq5ltaOTa XgtkDqF3gIxKapt55jcHjnlP6pd/Eh1Kc+vuOdc/KKa/+6odwSCXMGvINwWNfZdo llg5Kpvq/i0KuVl8OystVStrpMzLGwn1XyMUJWXHfZxO/rFe53P48CTvrF3WsPEV wsL1uhVbWNgRFw== -----END CERTIFICATE-----Generated at Fri Dec 12 12:38:24 2025 by rpki-client