This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json) Hash identifier: PQ08+EyxSbjOSAV3k8a6Jk2R14i/S5zJgcm3PXMYCHM= Subject key identifier: E3:F8:32:39:D6:DF:36:13:5E:CA:94:1F:22:7A:B9:2A:C6:6C:CD:A6 Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Certificate serial: 019B33B1AE6E2DCB11D68A20D5B3D0160A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft Manifest number: 12D7 Signing time: Thu 18 Dec 2025 23:00:41 +0000 Manifest this update: Thu 18 Dec 2025 23:00:41 +0000 Manifest next update: Fri 19 Dec 2025 23:00:41 +0000 Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: Y0WtkXddTQoO2J29m/jNT66ZaD/67UyNEsDcT4hSHEs=) 2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:ae:6e:2d:cb:11:d6:8a:20:d5:b3:d0:16:0a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Validity Not Before: Dec 18 23:00:41 2025 GMT Not After : Dec 19 23:00:41 2025 GMT Subject: CN=e3f83239d6df36135eca941f227ab92ac66ccda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:3e:b3:f2:df:ae:4e:86:05:86:46:21:66: 93:20:4a:c2:db:c8:8d:9c:e8:c0:df:c9:68:9e:5e: 2e:57:aa:cc:59:ae:01:d8:9d:be:ea:67:60:50:9d: d4:c9:7b:e9:ad:a0:0d:95:b0:6f:e2:9c:53:14:49: de:36:06:62:39:3f:ff:44:fd:46:79:f8:73:b5:31: 32:8c:b5:74:7b:9f:27:bc:eb:e9:19:15:67:45:d2: 0f:2e:5d:09:5e:c5:87:b1:0d:c2:ab:59:ed:3c:45: 9b:78:ae:f0:67:5f:93:c5:9a:88:20:c4:20:9e:d5: 27:3b:3c:f7:c3:b3:4c:4c:7c:b6:e8:83:61:39:4c: a5:8b:16:39:0f:a4:6a:d2:3b:03:a7:00:4e:6b:88: 03:11:74:ea:32:fb:2b:8b:20:54:31:ef:e3:e6:88: 8e:60:09:f0:c5:79:02:cc:87:9e:d5:97:a5:33:28: 65:ed:c0:71:88:36:d7:1a:cc:de:c5:86:09:30:3b: ca:4f:ac:51:42:3b:03:02:42:3b:77:02:39:d5:16: 68:5d:1e:ad:c7:91:62:e4:af:47:c9:3f:8d:1c:07: 75:5f:52:ac:a3:ea:e4:47:df:30:25:c6:c6:af:08: 74:27:82:b2:1c:41:5c:1b:97:b9:81:e1:5b:ca:19: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:32:39:D6:DF:36:13:5E:CA:94:1F:22:7A:B9:2A:C6:6C:CD:A6 X509v3 Authority Key Identifier: keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ab:24:c7:5f:6f:9a:d1:e4:08:1b:2b:5a:3d:a9:5d:5e:bf: 53:80:4d:ef:ef:ea:a5:bb:1e:0f:42:a2:b7:18:c9:fd:08:15: 70:34:c4:a0:84:36:74:8f:96:17:ce:2e:8c:c5:b1:27:05:e9: eb:8d:3b:88:5f:55:b4:69:4b:08:df:e7:8f:94:22:f8:0f:5e: 16:08:71:ad:31:c8:cb:3b:39:25:38:cd:7e:04:ce:3f:fe:50: e0:4b:32:2d:9b:8a:db:8b:8a:c6:ec:79:69:31:e9:c1:f6:72: 56:bd:19:d8:b7:e9:82:41:cb:3e:d8:b7:81:cb:44:fe:1e:38: e5:5f:ef:5d:90:ca:a6:64:64:67:f9:6f:24:7c:39:52:a2:82: 0d:e8:99:ab:50:e3:8d:dc:df:d8:76:b1:fb:b4:f9:ad:33:ba: 43:df:46:d1:8f:98:fe:74:58:d1:a4:39:f3:5e:07:b4:96:32: 04:90:49:77:2b:dc:25:c6:09:bb:2b:ab:26:e7:9b:88:f6:49: 8d:bf:80:df:56:c1:87:e9:0a:92:1a:0f:ce:33:52:db:98:72: c4:2b:6c:81:e2:39:cd:0c:c2:96:dd:94:e8:eb:3d:ce:af:47: 61:d3:64:20:bf:2d:e5:0f:0d:da:91:a4:a7:e7:91:c5:7b:9c: 3d:e2:60:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsa5uLcsR1oog1bPQFgplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj NTNiMDUwHhcNMjUxMjE4MjMwMDQxWhcNMjUxMjE5MjMwMDQxWjAzMTEwLwYDVQQD EyhlM2Y4MzIzOWQ2ZGYzNjEzNWVjYTk0MWYyMjdhYjkyYWM2NmNjZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst4+s/Lfrk6GBYZGIWaTIErC28iN nOjA38lonl4uV6rMWa4B2J2+6mdgUJ3UyXvpraANlbBv4pxTFEneNgZiOT//RP1G efhztTEyjLV0e58nvOvpGRVnRdIPLl0JXsWHsQ3Cq1ntPEWbeK7wZ1+TxZqIIMQg ntUnOzz3w7NMTHy26INhOUylixY5D6Rq0jsDpwBOa4gDEXTqMvsriyBUMe/j5oiO YAnwxXkCzIee1ZelMyhl7cBxiDbXGszexYYJMDvKT6xRQjsDAkI7dwI51RZoXR6t x5Fi5K9HyT+NHAd1X1Kso+rkR98wJcbGrwh0J4KyHEFcG5e5geFbyhmqcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOP4MjnW3zYTXsqUHyJ6uSrGbM2mMB8GA1UdIwQY MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6skx19v mtHkCBsrWj2pXV6/U4BN7+/qpbseD0KitxjJ/QgVcDTEoIQ2dI+WF84ujMWxJwXp 6407iF9VtGlLCN/nj5Qi+A9eFghxrTHIyzs5JTjNfgTOP/5Q4EsyLZuK24uKxux5 aTHpwfZyVr0Z2LfpgkHLPti3gctE/h445V/vXZDKpmRkZ/lvJHw5UqKCDeiZq1Dj jdzf2Hax+7T5rTO6Q99G0Y+Y/nRY0aQ5814HtJYyBJBJdyvcJcYJuyurJuebiPZJ jb+A31bBh+kKkhoPzjNS25hyxCtsgeI5zQzClt2U6Os9zq9HYdNkIL8t5Q8N2pGk p+eRxXucPeJgQw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:41:06 2025 by rpki-client