This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json) Hash identifier: 1YB19pltOwA86Z7ch90xviekJk7pGX5KRaICi5+frf4= Subject key identifier: A3:EA:ED:6E:D9:96:C9:5E:FE:4A:C1:82:1E:02:6A:FB:90:E3:4C:61 Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Certificate serial: 019B3569D8C40B673161D98E3D75A62BC920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 07:01:27 +0000 Manifest this update: Fri 19 Dec 2025 07:01:27 +0000 Manifest next update: Sat 20 Dec 2025 07:01:27 +0000 Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: dEnzYCIEmH30DJzictoUWRzkjPJwcsumvXpkNqG8QcQ=) 2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:d8:c4:0b:67:31:61:d9:8e:3d:75:a6:2b:c9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Validity Not Before: Dec 19 07:01:27 2025 GMT Not After : Dec 20 07:01:27 2025 GMT Subject: CN=a3eaed6ed996c95efe4ac1821e026afb90e34c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:93:78:5c:2d:2d:d3:cc:c7:a0:46:33:fc: 23:15:d8:21:f0:8d:df:38:4c:70:15:27:a9:f9:0a: 65:77:9d:c7:b8:9b:2b:fb:cc:79:0b:40:ca:15:34: a1:9d:6a:51:11:67:f1:08:7c:2d:b3:8a:41:16:03: 0c:af:c0:c5:eb:25:8d:68:e6:06:9a:5b:6e:03:14: 02:7a:9f:7f:d2:33:36:07:13:39:58:8e:47:40:df: a0:ea:83:19:7a:e0:f1:27:ae:17:23:9f:f7:2a:8e: 48:e0:21:9f:a7:e7:14:30:2a:3c:64:2d:6f:42:f5: f1:1d:c2:ff:3f:02:04:12:58:8e:a8:9f:b6:b5:85: 64:5d:9b:08:49:5f:4b:9a:f6:ab:3a:a6:d3:12:b2: 47:43:cb:59:62:47:10:94:9d:bd:9c:81:2e:0b:4c: aa:7b:a8:c8:3d:75:86:6c:fa:58:9d:51:17:2f:50: d9:39:49:a0:f5:f6:f6:b2:72:d1:d9:5c:ff:72:7e: 73:0f:37:d3:34:98:79:16:1e:11:54:76:95:18:83: 79:60:db:0c:e1:1b:b2:34:f5:db:14:57:07:9d:c5: c3:e5:7f:eb:d8:64:90:2d:e5:2a:75:9d:c4:f0:c6: 33:ff:08:d5:db:16:cf:32:53:40:12:63:da:c2:45: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EA:ED:6E:D9:96:C9:5E:FE:4A:C1:82:1E:02:6A:FB:90:E3:4C:61 X509v3 Authority Key Identifier: keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:02:c6:01:be:0a:50:70:31:4f:3c:d7:81:30:98:17:2f:37: aa:4a:b4:b5:12:fe:1a:04:82:5c:88:54:1e:72:df:56:f7:68: a0:c7:2d:b6:73:6a:cc:17:86:51:02:11:70:0f:3b:58:07:b2: 33:a7:da:a0:0d:18:0e:9c:cf:0e:3b:da:c8:ea:9f:54:38:33: 50:3f:60:d9:d6:d4:22:8f:be:47:ff:b2:f6:49:67:22:aa:5d: b9:92:48:50:5a:7e:3e:03:6b:c2:e5:71:ad:e6:1a:5a:bd:38: 55:df:67:48:fb:1e:e0:a3:64:53:42:25:26:41:29:ae:e3:1f: 04:de:0d:ea:30:27:9f:37:09:e0:fd:bb:d9:1b:35:18:ab:f6: 29:c5:f6:be:a7:3e:b9:84:c9:91:a8:84:d8:81:4d:e6:f5:e2: 87:a1:4c:76:91:9c:b8:0e:9d:93:64:fb:26:a3:ea:52:56:5a: 73:27:16:a0:fe:43:6d:46:33:b7:53:6d:49:4e:ac:03:a3:7f: 41:18:de:5c:45:6a:7a:6f:5f:5d:69:57:11:0d:40:e0:a4:eb: 55:b7:9f:aa:fa:da:3a:c2:e6:e0:e2:b2:22:47:17:d6:4a:b4: a7:65:35:5a:a2:c3:b7:e9:46:4d:cf:f5:37:bb:f1:79:34:84: 40:10:d3:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1adjEC2cxYdmOPXWmK8kgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0 NTE1ZTkwHhcNMjUxMjE5MDcwMTI3WhcNMjUxMjIwMDcwMTI3WjAzMTEwLwYDVQQD EyhhM2VhZWQ2ZWQ5OTZjOTVlZmU0YWMxODIxZTAyNmFmYjkwZTM0YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iKTeFwtLdPMx6BGM/wjFdgh8I3f OExwFSep+Qpld53HuJsr+8x5C0DKFTShnWpREWfxCHwts4pBFgMMr8DF6yWNaOYG mltuAxQCep9/0jM2BxM5WI5HQN+g6oMZeuDxJ64XI5/3Ko5I4CGfp+cUMCo8ZC1v QvXxHcL/PwIEEliOqJ+2tYVkXZsISV9LmvarOqbTErJHQ8tZYkcQlJ29nIEuC0yq e6jIPXWGbPpYnVEXL1DZOUmg9fb2snLR2Vz/cn5zDzfTNJh5Fh4RVHaVGIN5YNsM 4RuyNPXbFFcHncXD5X/r2GSQLeUqdZ3E8MYz/wjV2xbPMlNAEmPawkUyiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPq7W7Zlsle/krBgh4CavuQ40xhMB8GA1UdIwQY MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5 LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwLGAb4K UHAxTzzXgTCYFy83qkq0tRL+GgSCXIhUHnLfVvdooMcttnNqzBeGUQIRcA87WAey M6faoA0YDpzPDjvayOqfVDgzUD9g2dbUIo++R/+y9klnIqpduZJIUFp+PgNrwuVx reYaWr04Vd9nSPse4KNkU0IlJkEpruMfBN4N6jAnnzcJ4P272Rs1GKv2KcX2vqc+ uYTJkaiE2IFN5vXih6FMdpGcuA6dk2T7JqPqUlZacycWoP5DbUYzt1NtSU6sA6N/ QRjeXEVqem9fXWlXEQ1A4KTrVbefqvraOsLm4OKyIkcX1kq0p2U1WqLDt+lGTc/1 N7vxeTSEQBDTdA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:53:24 2025 by rpki-client