This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json) Hash identifier: cL9fdbhOeRrFOXgLr5lB7TLDmoVhKkuqrGl2Al5+f3I= Subject key identifier: 3A:C3:C2:54:5C:BF:84:52:19:58:63:B2:A4:2A:DC:F2:49:6F:A1:09 Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Certificate serial: 019B0DB6A730BFB87AEB45DEB9DE509B7B3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 14:00:32 +0000 Manifest this update: Thu 11 Dec 2025 14:00:32 +0000 Manifest next update: Fri 12 Dec 2025 14:00:32 +0000 Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: LKUMMYtT4EgH1vto9Bi7jQnIuMaqkRIekIoi/S/IkxQ=) 2: UDoG0VyGiTlw2cE_bk01kxTEOgk.roa (hash: xsTPKmGopDqXIX9OmyZyFM17NRbHEv2ddzZ5w1gDheM=) 3: w7idwTdXPoOWVZlR9CoFAbQi8hM.roa (hash: ilsj5ZYvMhkJ++mzc4MatQJ2qPuYOf+lvnTyvWyEf1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:a7:30:bf:b8:7a:eb:45:de:b9:de:50:9b:7b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Validity Not Before: Dec 11 14:00:32 2025 GMT Not After : Dec 12 14:00:32 2025 GMT Subject: CN=3ac3c2545cbf8452195863b2a42adcf2496fa109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:25:93:ce:15:39:ac:82:eb:4b:35:46:94: 61:96:54:20:1a:78:eb:20:61:84:54:ad:8e:4d:5d: 98:c7:92:34:87:e8:30:49:15:7e:72:bc:af:9c:f1: 9b:2d:d2:ed:4e:ad:78:0a:69:36:38:aa:af:66:86: 76:8e:6b:bd:d6:e3:fc:51:70:5a:ab:7d:88:34:3a: 75:76:57:54:ab:70:2e:13:cd:1f:32:fd:a0:2c:3f: a2:ec:b8:7f:c3:33:2f:8a:f2:28:09:dc:50:e1:3e: 68:28:53:dc:ec:a1:e0:b4:3c:ba:b2:33:8d:ad:06: 0a:da:74:0e:5b:9e:7a:fd:4a:bb:2e:59:31:e5:9c: 3b:42:22:7c:0c:69:ce:9f:7f:b3:87:ab:79:9a:53: ab:55:9f:2c:32:62:c6:60:bb:68:54:70:40:93:aa: 00:08:a7:cc:10:a3:dc:a0:71:42:66:06:f6:58:71: 95:9c:c4:9b:74:fc:79:62:b4:98:11:d1:a7:21:a3: 73:e8:ac:96:e9:4c:ad:6a:b5:11:c7:52:85:8e:bf: 0c:99:6e:f3:1e:72:75:93:58:a6:14:77:ad:0b:df: 3c:7b:08:08:da:27:76:9e:eb:91:61:42:80:6c:ab: cc:4b:ca:00:3c:e3:d9:e4:04:99:4f:db:14:73:47: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C3:C2:54:5C:BF:84:52:19:58:63:B2:A4:2A:DC:F2:49:6F:A1:09 X509v3 Authority Key Identifier: keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:39:d8:f0:c6:82:d5:8c:50:37:11:86:fa:44:0f:f7:75:6d: 12:5e:3c:e5:4e:a6:d7:db:39:b6:0c:c5:5b:68:aa:39:ae:cb: ed:3f:d6:b9:06:be:33:d5:28:3c:c3:b1:9d:ab:81:48:ff:02: d2:4e:27:36:7d:ae:79:74:d9:e2:ec:c1:a3:42:0d:93:98:fe: de:4b:55:b2:e2:cb:7c:04:6c:0d:84:14:db:be:5f:ce:5d:c5: 13:7f:ad:d5:2c:33:5c:cf:8a:e2:19:4a:c2:2b:75:45:bb:38: a5:c5:84:48:76:31:2b:ba:a1:00:1c:97:40:20:86:f5:d7:2f: 09:5b:2e:ae:c0:52:3f:42:9a:e5:d7:ed:c3:46:e3:63:40:3f: 90:f3:5a:5d:a1:4f:ef:0d:c6:75:bd:1d:75:ec:99:09:7f:3e: 98:e2:91:c9:66:39:e7:69:38:9f:08:d0:ee:fe:b0:01:a2:88: 15:f2:f6:7f:6e:06:9d:83:bc:fc:79:20:e9:25:dd:c1:7e:6c: 94:2d:86:89:97:f3:53:77:a9:63:77:38:06:b9:b8:bd:3f:99: 84:8e:ec:78:33:02:a8:ef:83:e6:4e:b5:ca:fd:99:c4:d7:9b: 30:b3:80:f0:d9:12:88:b4:cb:e1:b7:2f:e0:be:4d:d8:99:1d: 8a:37:0c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtqcwv7h660Xeud5Qm3s8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy MjdkOTUwHhcNMjUxMjExMTQwMDMyWhcNMjUxMjEyMTQwMDMyWjAzMTEwLwYDVQQD EygzYWMzYzI1NDVjYmY4NDUyMTk1ODYzYjJhNDJhZGNmMjQ5NmZhMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA0lk84VOayC60s1RpRhllQgGnjr IGGEVK2OTV2Yx5I0h+gwSRV+cryvnPGbLdLtTq14Cmk2OKqvZoZ2jmu91uP8UXBa q32INDp1dldUq3AuE80fMv2gLD+i7Lh/wzMvivIoCdxQ4T5oKFPc7KHgtDy6sjON rQYK2nQOW556/Uq7Llkx5Zw7QiJ8DGnOn3+zh6t5mlOrVZ8sMmLGYLtoVHBAk6oA CKfMEKPcoHFCZgb2WHGVnMSbdPx5YrSYEdGnIaNz6KyW6UytarURx1KFjr8MmW7z HnJ1k1imFHetC988ewgI2id2nuuRYUKAbKvMS8oAPOPZ5ASZT9sUc0eW/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrDwlRcv4RSGVhjsqQq3PJJb6EJMB8GA1UdIwQY MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It NzExNjk1NjdlMzljLzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTnY8MaC 1YxQNxGG+kQP93VtEl485U6m19s5tgzFW2iqOa7L7T/WuQa+M9UoPMOxnauBSP8C 0k4nNn2ueXTZ4uzBo0INk5j+3ktVsuLLfARsDYQU275fzl3FE3+t1SwzXM+K4hlK wit1Rbs4pcWESHYxK7qhAByXQCCG9dcvCVsursBSP0Ka5dftw0bjY0A/kPNaXaFP 7w3Gdb0ddeyZCX8+mOKRyWY552k4nwjQ7v6wAaKIFfL2f24GnYO8/Hkg6SXdwX5s lC2GiZfzU3epY3c4Brm4vT+ZhI7seDMCqO+D5k61yv2ZxNebMLOA8NkSiLTL4bcv 4L5N2JkdijcMhw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:28:23 2025 by rpki-client