This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json) Hash identifier: Pk8qQdL4/UIKcw9Mi3kETmGTr9Dhhwe+RparuIQMIXE= Subject key identifier: 80:9B:D0:9F:F8:2F:49:8F:EE:2C:DF:69:32:EC:AE:1A:37:46:76:82 Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Certificate serial: 019B210774F882AF31DE3BA3C45A4033D1B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft Manifest number: 059D Signing time: Mon 15 Dec 2025 08:01:35 +0000 Manifest this update: Mon 15 Dec 2025 08:01:35 +0000 Manifest next update: Tue 16 Dec 2025 08:01:35 +0000 Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=) 2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: Sm/hZqGXiz18F4tzrK/0X1gfVWvgK6PcKemyz24B9Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:74:f8:82:af:31:de:3b:a3:c4:5a:40:33:d1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Validity Not Before: Dec 15 08:01:35 2025 GMT Not After : Dec 16 08:01:35 2025 GMT Subject: CN=809bd09ff82f498fee2cdf6932ecae1a37467682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:70:9d:ae:8a:ca:b0:65:19:ad:8f:d2:91: c9:cd:73:0b:17:10:25:7c:14:f0:ff:91:4a:8d:dd: 85:60:1f:3a:5e:25:9d:01:38:42:22:24:66:dd:83: 07:8b:81:8b:53:7c:d1:b5:40:dd:7f:0a:8f:fb:e1: 26:3a:c1:70:cc:22:c0:3c:48:6d:61:15:04:77:6c: 34:af:db:6c:42:a3:30:47:c1:12:6f:87:90:bc:5b: 46:cf:11:54:f9:e3:c7:c8:56:a2:50:16:30:84:26: 75:da:a5:c9:85:bc:07:d6:1b:d1:6f:c1:0c:e7:8d: da:96:fd:86:cc:f4:c5:60:da:97:37:38:1b:82:4f: dd:2a:3f:bc:5a:6c:b1:c2:f3:9e:13:26:ad:ee:bd: 9a:0f:d3:c5:59:8d:e6:da:33:4c:18:e6:0a:97:65: 73:74:d6:35:bc:a2:3b:4b:4e:72:26:d8:9b:93:bf: 80:3e:fd:68:90:e0:fe:3b:41:3e:22:76:d5:44:4e: 4a:8d:9f:2f:91:66:29:fa:e5:f2:57:41:9d:15:6f: 8b:64:95:2c:70:2d:df:f6:24:03:10:dc:f8:44:27: 3b:60:13:08:38:25:5a:4d:fe:d1:4b:df:ba:98:86: ce:4d:dd:ab:07:92:e7:10:f0:50:9a:5d:09:6d:6a: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9B:D0:9F:F8:2F:49:8F:EE:2C:DF:69:32:EC:AE:1A:37:46:76:82 X509v3 Authority Key Identifier: keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:12:07:d0:5c:bb:4b:66:38:bc:cc:23:3e:5c:1b:d2:3b:ad: 83:24:4d:d7:8e:8b:30:bc:8e:52:ca:59:28:7a:e7:52:d0:36: 23:28:d0:30:ae:88:c5:de:a3:15:ba:97:05:44:ae:f7:e9:75: 4b:ec:99:98:0d:be:34:23:89:9a:b7:0e:d8:32:4d:d1:97:2a: 84:59:5d:2e:1e:d4:2e:f8:d7:9a:85:9e:42:ba:dd:05:d1:b8: 91:42:e1:2d:48:76:88:15:9d:2c:09:06:df:ae:63:b1:77:c7: 8a:2e:58:78:43:a5:a6:0a:17:f5:32:d1:10:54:6a:6d:9c:de: 84:1c:06:49:af:07:6c:da:f5:b8:6c:76:64:f4:6e:95:25:eb: 93:30:cc:ff:9e:d6:58:bf:6b:98:33:ca:ed:fb:51:83:08:16: f9:93:0a:4c:ab:f5:21:4b:0e:e6:85:f6:eb:2e:77:dd:7d:a1: 4f:bd:00:b1:71:48:a9:ff:06:5a:5b:4a:16:a5:2d:6d:d3:65: ec:99:72:68:3b:ef:60:8b:74:17:cd:80:fe:f6:98:9d:9b:61: ec:5c:85:74:09:5f:ca:89:13:e6:40:86:17:0d:f1:26:3b:94: e5:6c:db:ce:c1:9a:95:09:7b:6c:e2:38:74:c6:38:08:b7:f6: d6:ac:76:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB3T4gq8x3jujxFpAM9GyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw ZTZjZDgwHhcNMjUxMjE1MDgwMTM1WhcNMjUxMjE2MDgwMTM1WjAzMTEwLwYDVQQD Eyg4MDliZDA5ZmY4MmY0OThmZWUyY2RmNjkzMmVjYWUxYTM3NDY3NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOlwna6KyrBlGa2P0pHJzXMLFxAl fBTw/5FKjd2FYB86XiWdAThCIiRm3YMHi4GLU3zRtUDdfwqP++EmOsFwzCLAPEht YRUEd2w0r9tsQqMwR8ESb4eQvFtGzxFU+ePHyFaiUBYwhCZ12qXJhbwH1hvRb8EM 543alv2GzPTFYNqXNzgbgk/dKj+8WmyxwvOeEyat7r2aD9PFWY3m2jNMGOYKl2Vz dNY1vKI7S05yJtibk7+APv1okOD+O0E+InbVRE5KjZ8vkWYp+uXyV0GdFW+LZJUs cC3f9iQDENz4RCc7YBMIOCVaTf7RS9+6mIbOTd2rB5LnEPBQml0JbWplFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICb0J/4L0mP7izfaTLsrho3RnaCMB8GA1UdIwQY MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt ZDIyNTAzMmQxODU4LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4 LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRIH0Fy7 S2Y4vMwjPlwb0jutgyRN146LMLyOUspZKHrnUtA2IyjQMK6Ixd6jFbqXBUSu9+l1 S+yZmA2+NCOJmrcO2DJN0ZcqhFldLh7ULvjXmoWeQrrdBdG4kULhLUh2iBWdLAkG 365jsXfHii5YeEOlpgoX9TLREFRqbZzehBwGSa8HbNr1uGx2ZPRulSXrkzDM/57W WL9rmDPK7ftRgwgW+ZMKTKv1IUsO5oX26y533X2hT70AsXFIqf8GWltKFqUtbdNl 7JlyaDvvYIt0F82A/vaYnZth7FyFdAlfyokT5kCGFw3xJjuU5WzbzsGalQl7bOI4 dMY4CLf21qx24w== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:10 2025 by rpki-client