This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json) Hash identifier: pbEFCzRMUR5EgPRE6EkR694EGofPeNNRSIUXnCdEXoc= Subject key identifier: 42:EE:8A:9C:79:8C:B4:3D:70:74:C2:35:48:D7:92:DA:73:80:97:14 Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Certificate serial: 019B31C3E2B3EF48DF3C5C4D484DEE110F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft Manifest number: 12D6 Signing time: Thu 18 Dec 2025 14:01:19 +0000 Manifest this update: Thu 18 Dec 2025 14:01:19 +0000 Manifest next update: Fri 19 Dec 2025 14:01:19 +0000 Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: /1EuJCc7viI4jNTXBv5xQ8dnbEA/Usn3iI3wFEJvKW4=) 2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:e2:b3:ef:48:df:3c:5c:4d:48:4d:ee:11:0f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Validity Not Before: Dec 18 14:01:19 2025 GMT Not After : Dec 19 14:01:19 2025 GMT Subject: CN=42ee8a9c798cb43d7074c23548d792da73809714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:79:18:0c:0f:d9:cf:10:19:5c:60:d6:e0: 7b:6b:38:58:43:2a:bf:d9:fa:85:c7:68:65:54:e3: 5f:74:3b:d3:15:d7:b1:13:84:29:b2:d3:56:7a:b0: 5f:3e:6e:79:4e:a8:d1:18:d2:5b:ac:9f:d2:ef:04: ec:08:fc:ff:6c:81:ce:a2:91:f3:e6:d9:92:be:7a: 88:69:0d:62:4f:77:09:cd:67:ef:43:3d:1f:e8:ed: b2:ba:e4:f2:54:b4:a9:e5:26:1a:6f:9b:33:7a:bf: 79:a3:42:54:95:3b:70:8e:77:56:8f:33:fe:b1:0e: 13:55:46:62:0e:b5:38:bb:0e:e6:1c:64:53:50:8c: 44:1b:f5:62:d7:7d:e2:03:bd:1f:bf:03:61:e8:71: a3:05:71:49:9c:16:0d:24:92:8e:ed:2f:82:c2:69: 7a:9d:bf:88:a9:ea:24:cd:08:21:19:26:f0:0f:a3: fb:65:1f:35:1b:d8:d9:cf:8f:cf:1e:58:55:08:11: c1:c7:e2:1c:b9:f3:ad:26:72:9d:17:c4:cf:5a:51: fa:31:e3:30:23:d3:68:d3:37:ae:fe:54:79:c7:31: 49:0f:d9:7f:9b:03:df:ad:e0:e2:12:da:ba:d3:f0: aa:c4:eb:11:64:69:a1:cf:bc:56:92:cc:cc:87:75: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EE:8A:9C:79:8C:B4:3D:70:74:C2:35:48:D7:92:DA:73:80:97:14 X509v3 Authority Key Identifier: keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9a:e5:c8:64:d0:60:87:52:57:63:b6:ac:b7:94:ac:3c:1e: 5d:45:b7:13:83:c2:6e:8d:67:3c:26:37:a0:33:39:a1:a2:37: 63:4c:37:bc:a7:f8:28:e0:be:34:b0:df:46:3f:39:b0:5a:2f: 25:c6:9b:e9:f6:05:87:51:d2:1c:29:13:02:09:80:47:3d:e6: 9f:88:13:3c:d8:ab:78:66:76:b3:e4:5c:cd:7d:0c:32:56:33: fd:96:48:4c:c7:fe:b1:8e:aa:f0:7f:cc:c7:9e:b1:b7:e7:a2: 4e:66:6b:5e:37:45:86:ce:01:49:5e:cc:90:8f:b8:41:7e:56: 59:a4:0d:b3:a8:ab:dd:57:a3:d9:57:29:07:76:55:5c:2e:1c: b1:9a:3e:15:15:a6:78:ce:72:db:c7:16:f4:a7:39:a7:e0:57: 7c:4b:87:ea:a5:16:b7:8e:e3:70:f6:73:96:49:74:58:96:01: 06:a6:e1:bf:08:cb:b6:8f:7a:b9:5f:2f:1b:d7:62:aa:b0:64: ad:45:ce:a4:58:39:7f:e8:78:cf:3c:15:54:fd:d8:bd:68:71: ca:c6:fc:eb:3d:f5:b4:39:33:84:91:10:7a:cb:92:b3:d3:05: eb:c0:0c:f8:33:ad:ed:47:27:61:ed:dc:1c:1a:9a:37:e0:84: 88:36:39:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw+Kz70jfPFxNSE3uEQ90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj NTNiMDUwHhcNMjUxMjE4MTQwMTE5WhcNMjUxMjE5MTQwMTE5WjAzMTEwLwYDVQQD Eyg0MmVlOGE5Yzc5OGNiNDNkNzA3NGMyMzU0OGQ3OTJkYTczODA5NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW15GAwP2c8QGVxg1uB7azhYQyq/ 2fqFx2hlVONfdDvTFdexE4QpstNWerBfPm55TqjRGNJbrJ/S7wTsCPz/bIHOopHz 5tmSvnqIaQ1iT3cJzWfvQz0f6O2yuuTyVLSp5SYab5szer95o0JUlTtwjndWjzP+ sQ4TVUZiDrU4uw7mHGRTUIxEG/Vi133iA70fvwNh6HGjBXFJnBYNJJKO7S+Cwml6 nb+IqeokzQghGSbwD6P7ZR81G9jZz4/PHlhVCBHBx+IcufOtJnKdF8TPWlH6MeMw I9No0zeu/lR5xzFJD9l/mwPfreDiEtq60/CqxOsRZGmhz7xWkszMh3W3AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELuipx5jLQ9cHTCNUjXktpzgJcUMB8GA1UdIwQY MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5rlyGTQ YIdSV2O2rLeUrDweXUW3E4PCbo1nPCY3oDM5oaI3Y0w3vKf4KOC+NLDfRj85sFov Jcab6fYFh1HSHCkTAgmARz3mn4gTPNireGZ2s+RczX0MMlYz/ZZITMf+sY6q8H/M x56xt+eiTmZrXjdFhs4BSV7MkI+4QX5WWaQNs6ir3Vej2VcpB3ZVXC4csZo+FRWm eM5y28cW9Kc5p+BXfEuH6qUWt47jcPZzlkl0WJYBBqbhvwjLto96uV8vG9diqrBk rUXOpFg5f+h4zzwVVP3YvWhxysb86z31tDkzhJEQesuSs9MF68AM+DOt7UcnYe3c HBqaN+CEiDY5Mg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:39:10 2025 by rpki-client