This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft File: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft (raw, json) Hash identifier: OEnwu/5lWS/aLhQq5M6NEORgUh6J07Ntmv34oqde4u4= Subject key identifier: B9:6E:A1:E6:DF:6A:C4:09:0C:E7:CF:F8:49:36:0A:93:72:61:55:2F Authority key identifier: 08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59 Certificate issuer: /CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59 Certificate serial: 019B5B2D2DD0EE0772E777C328F14FBE0B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft Manifest number: 0169 Signing time: Fri 26 Dec 2025 15:00:46 +0000 Manifest this update: Fri 26 Dec 2025 15:00:46 +0000 Manifest next update: Sat 27 Dec 2025 15:00:46 +0000 Files and hashes: 1: CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl (hash: pKkxRN2VgAoq5yVS7XkXBNrs+YotcmpfUQOskn4t0T8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:2d:2d:d0:ee:07:72:e7:77:c3:28:f1:4f:be:0b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086a87bbf91ae68df92e8d5d2f4a849ab8c2ed59 Validity Not Before: Dec 26 15:00:46 2025 GMT Not After : Dec 27 15:00:46 2025 GMT Subject: CN=b96ea1e6df6ac4090ce7cff849360a937261552f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:44:a6:11:16:52:6d:98:ca:db:92:a4:17: ef:b4:10:b9:3a:ff:96:5c:de:5a:d8:46:28:ae:4f: 88:0c:9f:4d:17:04:6c:a8:93:c7:f6:1a:d9:d2:e2: 44:5d:40:cc:81:ba:99:69:ef:e4:2e:30:83:a5:72: a4:3b:34:f0:c1:71:c6:3f:57:0a:c5:86:9a:77:e2: f5:26:7d:e1:08:24:23:79:fd:ca:98:89:d5:c9:86: 60:63:f6:bb:cf:b1:bc:3e:87:f0:ed:29:0e:e3:58: 3d:54:9c:64:20:e8:e0:1b:74:c0:92:15:aa:36:67: 49:fa:a2:4e:c3:da:3d:a8:92:86:ec:05:f3:67:19: 2f:de:8c:67:90:6d:e6:dd:49:1c:d8:8f:ec:bc:00: bc:70:12:68:61:b4:d2:23:8b:4b:e5:1c:19:29:3b: e8:68:40:25:2b:cb:a4:cc:53:a6:8e:fb:a7:0e:f4: 1a:87:27:b9:70:77:03:2a:d6:ef:e7:89:fd:11:c1: 77:58:5d:f8:dc:12:2a:97:8f:8a:4d:e4:84:c0:27: 5c:58:fc:6f:a9:cc:6d:fd:fc:c0:c5:d3:cc:71:79: 13:02:a4:19:2e:94:fe:e8:b1:b9:7a:88:cb:74:53: 3b:cd:20:b7:f8:00:a3:3c:8b:ef:43:02:21:12:50: 60:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6E:A1:E6:DF:6A:C4:09:0C:E7:CF:F8:49:36:0A:93:72:61:55:2F X509v3 Authority Key Identifier: keyid:08:6A:87:BB:F9:1A:E6:8D:F9:2E:8D:5D:2F:4A:84:9A:B8:C2:ED:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a7c151-74f9-41da-8f72-1a85a68d1a77/1/CGqHu_ka5o35Lo1dL0qEmrjC7Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:f9:69:8f:68:65:cc:f6:9e:bd:55:3a:87:5e:fe:74:37: 77:59:87:d1:8d:67:12:c2:9c:ff:a6:18:88:5c:c2:e8:19:2a: cd:e4:d3:60:5f:2e:13:34:15:41:c8:16:b5:24:dd:6d:d8:9d: 96:b3:94:6b:7e:dc:22:67:27:63:63:dd:fc:cb:f8:f5:28:35: 98:c8:82:4a:bb:29:8f:1f:57:5f:f1:90:39:82:8d:f3:33:ee: 32:96:a4:f7:49:6b:19:0a:07:ef:6c:b8:0b:b6:f7:dd:6b:9e: a2:53:cd:2c:17:e4:67:97:8e:dc:99:c8:81:b0:3d:04:98:f7: e6:38:73:80:1e:92:79:90:df:4a:03:86:0e:16:ff:5b:58:e7: d6:e6:f6:47:1f:83:53:9a:b7:67:43:5b:ae:fb:8d:c2:fd:b0: 6c:7a:8c:cc:71:83:ad:b6:74:fa:c0:7a:df:87:f1:9f:21:a2: 3b:ce:29:93:ed:2e:6a:f3:8c:09:86:0d:db:c6:e6:4b:e0:38: ca:9f:db:2c:f9:aa:bf:4e:c7:7b:91:46:af:f7:b3:2a:87:dd: 85:c9:23:bc:77:2b:a0:f7:8a:46:8b:20:d0:5e:ab:9c:c4:ca: 8c:55:93:38:55:75:f9:30:0f:8b:cd:37:96:70:d6:d9:e8:2b: 8b:50:80:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbLS3Q7gdy53fDKPFPvgsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NmE4N2JiZjkxYWU2OGRmOTJlOGQ1ZDJmNGE4NDlhYjhj MmVkNTkwHhcNMjUxMjI2MTUwMDQ2WhcNMjUxMjI3MTUwMDQ2WjAzMTEwLwYDVQQD EyhiOTZlYTFlNmRmNmFjNDA5MGNlN2NmZjg0OTM2MGE5MzcyNjE1NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi95EphEWUm2YytuSpBfvtBC5Ov+W XN5a2EYork+IDJ9NFwRsqJPH9hrZ0uJEXUDMgbqZae/kLjCDpXKkOzTwwXHGP1cK xYaad+L1Jn3hCCQjef3KmInVyYZgY/a7z7G8Pofw7SkO41g9VJxkIOjgG3TAkhWq NmdJ+qJOw9o9qJKG7AXzZxkv3oxnkG3m3Ukc2I/svAC8cBJoYbTSI4tL5RwZKTvo aEAlK8ukzFOmjvunDvQahye5cHcDKtbv54n9EcF3WF343BIql4+KTeSEwCdcWPxv qcxt/fzAxdPMcXkTAqQZLpT+6LG5eojLdFM7zSC3+ACjPIvvQwIhElBg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLluoebfasQJDOfP+Ek2CpNyYVUvMB8GA1UdIwQY MBaAFAhqh7v5GuaN+S6NXS9KhJq4wu1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hN2MxNTEtNzRmOS00MWRhLThmNzIt MWE4NWE2OGQxYTc3LzEvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hN2MxNTEtNzRmOS00MWRhLThmNzItMWE4NWE2OGQxYTc3 LzEvQ0dxSHVfa2E1bzM1TG8xZEwwcUVtcmpDN1ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6b5aY9o Zcz2nr1VOode/nQ3d1mH0Y1nEsKc/6YYiFzC6BkqzeTTYF8uEzQVQcgWtSTdbdid lrOUa37cImcnY2Pd/Mv49Sg1mMiCSrspjx9XX/GQOYKN8zPuMpak90lrGQoH72y4 C7b33WueolPNLBfkZ5eO3JnIgbA9BJj35jhzgB6SeZDfSgOGDhb/W1jn1ub2Rx+D U5q3Z0NbrvuNwv2wbHqMzHGDrbZ0+sB634fxnyGiO84pk+0uavOMCYYN28bmS+A4 yp/bLPmqv07He5FGr/ezKofdhckjvHcroPeKRosg0F6rnMTKjFWTOFV1+TAPi803 lnDW2egri1CApg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:34 2025 by rpki-client