This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json) Hash identifier: 0waccJs0Nyx9CMzFlozMyf9BmZzoPqAuO4wzftEYaVk= Subject key identifier: 07:0F:39:C2:4C:66:83:2F:20:5D:37:2B:16:EC:27:48:A0:EE:59:5B Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573 Certificate serial: 019B1193F93F79D0826255870C03AC3684C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft Manifest number: 15BA Signing time: Fri 12 Dec 2025 08:01:08 +0000 Manifest this update: Fri 12 Dec 2025 08:01:08 +0000 Manifest next update: Sat 13 Dec 2025 08:01:08 +0000 Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=) 2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=) 3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: wNv9Tt5kQGA+MxOvimYFKYtIp7RhtL+J3zEr+h1hZnE=) 4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=) 5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:f9:3f:79:d0:82:62:55:87:0c:03:ac:36:84:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573 Validity Not Before: Dec 12 08:01:08 2025 GMT Not After : Dec 13 08:01:08 2025 GMT Subject: CN=070f39c24c66832f205d372b16ec2748a0ee595b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:bc:5a:e2:6a:68:bd:3d:e3:36:6e:af:63: 90:64:af:47:10:fc:49:ae:f7:eb:c8:c8:cb:f6:38: 11:1a:92:9f:37:46:d3:67:d0:92:ca:f8:cc:a5:9c: fd:52:0f:30:18:ff:ef:de:ab:c9:80:15:f9:e5:d1: 9e:0f:7c:a8:61:b1:f6:f0:60:1b:f3:42:51:f3:9b: f9:c3:3a:9e:10:6d:ac:45:1d:3a:98:95:2f:9b:04: 2c:31:26:f2:49:5a:6c:57:24:2c:8c:0c:1a:d0:b7: 83:e4:d5:f7:f9:5f:9d:58:a2:6c:c3:4b:c3:99:97: bb:80:fc:e3:b2:6a:b1:8a:42:88:2e:d4:96:42:61: 86:b7:55:2f:ce:b6:07:e7:a4:34:17:25:92:0a:a7: 4a:39:3f:70:0e:72:6f:a9:ea:5f:79:bc:07:b8:31: 97:7b:2d:b9:07:a4:28:2d:ff:ba:c2:4c:e6:26:23: a4:b3:dc:f1:c7:01:c3:45:6f:e0:3f:2b:88:09:f6: e9:1b:fa:31:25:a4:7d:1d:c3:93:e3:32:18:20:29: 32:8a:31:75:fe:df:74:aa:21:a0:a8:ca:47:2b:c2: 11:da:da:2f:59:7e:31:4e:09:f5:dc:7d:3f:f8:dc: fb:4a:0d:07:47:ea:a7:92:2e:9b:93:e0:48:7a:dd: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0F:39:C2:4C:66:83:2F:20:5D:37:2B:16:EC:27:48:A0:EE:59:5B X509v3 Authority Key Identifier: keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ed:70:65:f7:ab:f6:45:8b:37:2b:b1:57:5e:6f:02:42:90: d9:da:41:9f:90:3b:59:c3:a0:c9:74:a6:7e:06:6d:b9:6d:4a: b8:44:5b:db:c1:0b:9a:46:c6:2d:c9:53:01:48:66:57:ef:5d: 99:f2:f8:e9:88:7d:e3:7f:d0:dd:a4:c9:f9:77:04:f9:85:43: 5b:f9:0b:8a:d1:54:a4:be:5b:8d:96:82:72:97:e8:7e:59:9a: b7:a6:38:64:b9:c9:53:e7:51:12:3e:c8:a3:48:d3:a7:85:1e: ab:36:00:60:5a:14:8a:1f:7c:4d:4d:5d:bc:a8:70:0b:d8:ac: 93:8d:58:31:f9:83:e7:b3:e7:c8:f4:4b:53:b1:b1:ba:17:79: 9b:b4:90:df:1b:4c:82:ee:0d:a9:ca:08:db:7d:8a:63:67:32: 61:b2:9f:fd:95:5a:88:e8:2c:33:03:d2:6f:22:84:b6:61:23: 14:32:f4:00:01:b7:77:d8:2c:e4:77:7b:c7:93:2a:74:9d:54: 0d:1c:9b:38:37:f1:1c:1c:07:2f:02:d8:ca:99:d7:81:2a:28: 35:04:dc:c6:58:f0:0f:76:bc:04:60:ec:2d:91:e5:d1:47:f6: 4e:9c:0d:d5:81:cb:09:e8:bd:89:22:de:7a:2b:47:da:f9:f4: 50:d2:db:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk/k/edCCYlWHDAOsNoTDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjkzZDYyYmViNzViYjQyMzJkY2QwNTJkMjcwMjc2ZDM2 Zjg1NzMwHhcNMjUxMjEyMDgwMTA4WhcNMjUxMjEzMDgwMTA4WjAzMTEwLwYDVQQD EygwNzBmMzljMjRjNjY4MzJmMjA1ZDM3MmIxNmVjMjc0OGEwZWU1OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl268WuJqaL094zZur2OQZK9HEPxJ rvfryMjL9jgRGpKfN0bTZ9CSyvjMpZz9Ug8wGP/v3qvJgBX55dGeD3yoYbH28GAb 80JR85v5wzqeEG2sRR06mJUvmwQsMSbySVpsVyQsjAwa0LeD5NX3+V+dWKJsw0vD mZe7gPzjsmqxikKILtSWQmGGt1UvzrYH56Q0FyWSCqdKOT9wDnJvqepfebwHuDGX ey25B6QoLf+6wkzmJiOks9zxxwHDRW/gPyuICfbpG/oxJaR9HcOT4zIYICkyijF1 /t90qiGgqMpHK8IR2tovWX4xTgn13H0/+Nz7Sg0HR+qnki6bk+BIet2NvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcPOcJMZoMvIF03KxbsJ0ig7llbMB8GA1UdIwQY MBaAFAn5PWK+t1u0Iy3NBS0nAnbTb4VzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgt YmYzNGQwMWY4YjBhLzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83MDVhYWQtNTliMi00NzRlLWEzZDgtYmYzNGQwMWY4YjBh LzEvQ2ZrOVlyNjNXN1FqTGMwRkxTY0NkdE52aFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie1wZfer 9kWLNyuxV15vAkKQ2dpBn5A7WcOgyXSmfgZtuW1KuERb28ELmkbGLclTAUhmV+9d mfL46Yh943/Q3aTJ+XcE+YVDW/kLitFUpL5bjZaCcpfoflmat6Y4ZLnJU+dREj7I o0jTp4UeqzYAYFoUih98TU1dvKhwC9isk41YMfmD57PnyPRLU7Gxuhd5m7SQ3xtM gu4NqcoI232KY2cyYbKf/ZVaiOgsMwPSbyKEtmEjFDL0AAG3d9gs5Hd7x5MqdJ1U DRybODfxHBwHLwLYypnXgSooNQTcxljwD3a8BGDsLZHl0Uf2TpwN1YHLCei9iSLe eitH2vn0UNLbCg== -----END CERTIFICATE-----Generated at Fri Dec 12 11:37:58 2025 by rpki-client