This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json) Hash identifier: BgiO/SL6qpo3OCBk4AJCNRdtrwk+16eW27hzCvh0YdM= Subject key identifier: DD:E4:3D:45:25:7D:85:F4:D5:BC:4D:E1:98:CA:55:45:21:9E:2C:B0 Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019B3268DB05CD18BE7C4C654DA4423DAE09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 17:01:31 +0000 Manifest this update: Thu 18 Dec 2025 17:01:31 +0000 Manifest next update: Fri 19 Dec 2025 17:01:31 +0000 Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: GTIrRRKxxsF4SyBfvomNgNtLvPExgpot33xheMUXsDE=) 2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=) 3: osRm_vCZFQn-IZrfa-S-ZoLyv-k.roa (hash: UdnDiufWcMmwrrv9vsKKmhqhc0AHNBah6lzkUFktmdw=) 4: wflfIOo-1t3hGXMoEB24Xbfs3KU.roa (hash: CGGLqcKnUfaBtIHUEc+dqJSotohW0vSNwSlisgSNlco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:db:05:cd:18:be:7c:4c:65:4d:a4:42:3d:ae:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Dec 18 17:01:31 2025 GMT Not After : Dec 19 17:01:31 2025 GMT Subject: CN=dde43d45257d85f4d5bc4de198ca5545219e2cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:c9:06:96:9b:fd:86:90:e5:bf:b6:53:d8: d7:da:99:6b:f9:9b:ec:29:b0:0b:37:a0:4b:93:d6: 54:70:65:be:fd:9a:c0:40:aa:f6:93:a4:3f:e6:15: f7:16:ce:36:bc:47:4a:16:a5:d4:00:80:81:1e:62: 30:0d:13:39:07:48:4d:fb:9b:ad:5c:f2:5f:84:a8: 51:60:81:f3:4b:06:e0:27:e6:ac:7c:84:88:f0:40: 48:55:3c:5d:26:1b:ea:d3:47:7e:b7:53:27:19:5a: 69:08:1e:84:c0:5d:ea:c9:35:6f:9b:ff:fe:dd:a0: 3f:41:d5:f0:08:2b:98:53:c0:7d:c0:c9:78:91:d0: e6:98:93:5e:a9:00:1e:f5:c5:f4:37:db:b4:65:c6: 21:0a:30:d7:4d:62:c5:b5:43:1b:67:d2:27:5d:0f: ce:bb:1a:36:13:5d:3a:aa:04:9e:62:9f:32:f0:dd: 46:6e:10:02:2b:7e:70:4d:3e:e2:13:9e:fc:60:fe: 7f:b9:11:f7:ab:e5:46:d0:75:5a:fa:a1:4a:b0:80: 6e:09:31:1c:60:b8:fc:97:85:9c:b3:64:25:8a:fa: 87:68:9c:17:98:16:86:92:b6:51:fd:73:15:12:b1: d5:ea:a8:50:63:0a:ab:3e:d2:0d:83:fa:7e:d5:d6: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E4:3D:45:25:7D:85:F4:D5:BC:4D:E1:98:CA:55:45:21:9E:2C:B0 X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:59:f7:83:c3:62:d0:86:ef:f6:ce:8b:9b:1c:c9:8a:e7:54: b4:f6:f9:8a:06:f9:36:84:24:63:fc:49:15:40:7f:22:48:06: 9d:86:8b:a1:53:96:08:64:cc:fd:21:50:a4:2a:22:b8:f1:2d: 69:ca:e9:09:bb:71:bd:e6:8b:46:03:eb:2b:60:38:0d:10:80: c0:b0:3e:6c:79:49:9d:b5:67:dd:05:02:86:67:01:06:5a:99: ed:c3:d4:e0:cc:5b:96:d7:a9:e0:60:ed:03:19:b8:8a:51:31: 45:48:d8:4b:e3:ba:56:73:25:78:da:c5:09:c8:94:4e:4b:85: 27:bb:9e:55:60:d4:2b:7a:2d:c3:08:dc:59:ac:62:b9:ee:46: 50:c8:35:39:cf:8d:6e:e8:c4:fa:bd:ad:2e:1f:12:e5:18:5d: f2:87:fb:0a:8e:68:ea:cc:a4:53:0a:e8:07:53:11:99:16:fe: 79:82:df:28:b6:56:87:59:fd:72:cb:29:9e:0c:f4:12:ac:7b: 3b:6f:ff:d8:ad:c8:33:d5:f6:b3:90:5e:79:41:d1:98:fa:6e: 16:86:7f:90:2f:a6:27:78:17:f4:02:43:84:6e:7d:e8:f7:71: c3:a2:47:c2:27:c1:95:2f:d6:9d:d5:47:97:8a:9d:03:a0:ce: 58:67:22:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaNsFzRi+fExlTaRCPa4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjUxMjE4MTcwMTMxWhcNMjUxMjE5MTcwMTMxWjAzMTEwLwYDVQQD EyhkZGU0M2Q0NTI1N2Q4NWY0ZDViYzRkZTE5OGNhNTU0NTIxOWUyY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNzJBpab/YaQ5b+2U9jX2plr+Zvs KbALN6BLk9ZUcGW+/ZrAQKr2k6Q/5hX3Fs42vEdKFqXUAICBHmIwDRM5B0hN+5ut XPJfhKhRYIHzSwbgJ+asfISI8EBIVTxdJhvq00d+t1MnGVppCB6EwF3qyTVvm//+ 3aA/QdXwCCuYU8B9wMl4kdDmmJNeqQAe9cX0N9u0ZcYhCjDXTWLFtUMbZ9InXQ/O uxo2E106qgSeYp8y8N1GbhACK35wTT7iE578YP5/uRH3q+VG0HVa+qFKsIBuCTEc YLj8l4Wcs2QlivqHaJwXmBaGkrZR/XMVErHV6qhQYwqrPtINg/p+1dZPJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3kPUUlfYX01bxN4ZjKVUUhniywMB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANln3g8Ni 0Ibv9s6LmxzJiudUtPb5igb5NoQkY/xJFUB/IkgGnYaLoVOWCGTM/SFQpCoiuPEt acrpCbtxveaLRgPrK2A4DRCAwLA+bHlJnbVn3QUChmcBBlqZ7cPU4Mxbltep4GDt Axm4ilExRUjYS+O6VnMleNrFCciUTkuFJ7ueVWDUK3otwwjcWaxiue5GUMg1Oc+N bujE+r2tLh8S5Rhd8of7Co5o6sykUwroB1MRmRb+eYLfKLZWh1n9csspngz0Eqx7 O2//2K3IM9X2s5BeeUHRmPpuFoZ/kC+mJ3gX9AJDhG596Pdxw6JHwifBlS/WndVH l4qdA6DOWGcifA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:00 2025 by rpki-client