This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json) Hash identifier: /jhDODcASijzzPTFSLQgBJo6H8dh5Evv8DD1VhjIOxI= Subject key identifier: 70:02:5D:DD:FA:D3:70:02:96:05:4F:B3:75:21:25:80:0F:43:DF:15 Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25 Certificate serial: 019B255331951E0D11F56A42A1E54C19AC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft Manifest number: 1719 Signing time: Tue 16 Dec 2025 04:02:47 +0000 Manifest this update: Tue 16 Dec 2025 04:02:47 +0000 Manifest next update: Wed 17 Dec 2025 04:02:47 +0000 Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=) 2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: LwZ3vuDZ+V/Ywgs+oMDTSQRvv6C1uLNbKHZKkNorHr4=) 3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=) 4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:31:95:1e:0d:11:f5:6a:42:a1:e5:4c:19:ac:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25 Validity Not Before: Dec 16 04:02:47 2025 GMT Not After : Dec 17 04:02:47 2025 GMT Subject: CN=70025dddfad3700296054fb3752125800f43df15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:76:f9:11:be:d7:56:b0:07:e8:c4:ff:c2: b5:4e:26:6d:7d:ce:ed:3a:2f:33:5b:74:cf:a0:b2: 6d:82:b7:82:d4:13:b4:85:7d:30:1f:d4:2c:ec:b6: 00:b0:4b:44:33:cb:e6:21:91:f0:a6:66:8f:1d:c7: 10:5a:93:ba:dd:13:31:8e:1f:14:9e:d7:f2:8c:2f: 51:02:4c:61:86:be:af:45:73:45:6f:d0:a1:44:ff: 52:be:da:af:d3:bc:82:12:7b:a8:3f:87:f6:36:5c: 1a:ee:fe:d7:1f:a7:08:99:54:46:bf:40:2a:83:ca: ac:e3:6b:b9:16:83:1a:40:c3:91:f3:bc:51:16:5a: 76:e6:10:09:b9:98:57:6a:c8:d2:66:f7:2d:b2:5e: f6:6c:75:ec:3a:1a:fd:b1:5d:36:f6:e6:51:80:62: 35:99:2e:69:9e:24:f0:89:a8:1c:93:27:5b:41:f1: d3:0f:ea:7e:4d:13:fc:00:d4:ed:4a:e0:8f:d2:6a: 08:6f:4a:7e:d7:6e:7e:da:fd:61:27:ae:6a:61:81: 7e:33:b8:fa:ee:5b:9c:74:5f:bb:2d:03:79:13:dd: 13:77:af:fe:08:77:14:a9:7c:d2:01:16:a9:ec:fb: fd:e1:92:0d:d6:b9:6d:31:dc:22:17:bd:4e:71:aa: 68:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:02:5D:DD:FA:D3:70:02:96:05:4F:B3:75:21:25:80:0F:43:DF:15 X509v3 Authority Key Identifier: keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a6:cf:48:8f:3e:33:1e:a6:5d:cf:85:fd:7e:14:4e:02:b6: 88:fe:b0:c1:b0:1c:b0:ec:3a:c6:3a:b2:fe:01:26:4d:cb:c1: ba:06:63:a5:9e:1e:10:ab:d1:c0:da:7d:64:8c:78:e7:85:81: 61:16:1e:bf:b0:79:e3:56:ba:0f:c1:02:ca:1b:29:76:45:0c: 0f:e4:e3:6f:e0:5a:c6:48:74:31:3e:d8:a5:e1:3f:b6:b2:4f: 3e:e4:ca:78:67:2b:77:5e:26:e6:b3:71:9c:9c:95:36:94:3a: bf:70:ff:58:9d:d5:f8:d9:47:f0:5a:1d:89:cb:23:8d:6a:50: 86:69:1e:dc:40:c6:14:1d:b1:ae:c2:77:2f:86:0e:73:91:91: c0:f1:4e:b5:11:a8:8a:fa:9c:65:10:12:db:80:4a:08:b1:e5: f5:5e:3e:3b:49:8b:15:a8:8a:2e:7d:8e:ad:21:50:7d:4c:30: a2:7d:c3:5c:dd:8a:85:c5:96:d3:99:56:7b:bb:14:14:30:a0: 20:d5:52:66:95:d2:c3:8b:2c:ac:a5:d3:5e:10:23:21:47:23: 5c:26:4f:e7:e9:31:5e:5d:fb:8b:78:61:71:4f:75:1d:5d:18: 19:35:c2:e4:3d:2d:76:aa:a7:17:c8:c8:95:fe:d3:b3:2d:c8: 6e:e6:9c:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUzGVHg0R9WpCoeVMGayCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5 ZTRlMjUwHhcNMjUxMjE2MDQwMjQ3WhcNMjUxMjE3MDQwMjQ3WjAzMTEwLwYDVQQD Eyg3MDAyNWRkZGZhZDM3MDAyOTYwNTRmYjM3NTIxMjU4MDBmNDNkZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz52+RG+11awB+jE/8K1TiZtfc7t Oi8zW3TPoLJtgreC1BO0hX0wH9Qs7LYAsEtEM8vmIZHwpmaPHccQWpO63RMxjh8U ntfyjC9RAkxhhr6vRXNFb9ChRP9Svtqv07yCEnuoP4f2Nlwa7v7XH6cImVRGv0Aq g8qs42u5FoMaQMOR87xRFlp25hAJuZhXasjSZvctsl72bHXsOhr9sV029uZRgGI1 mS5pniTwiagckydbQfHTD+p+TRP8ANTtSuCP0moIb0p+125+2v1hJ65qYYF+M7j6 7lucdF+7LQN5E90Td6/+CHcUqXzSARap7Pv94ZIN1rltMdwiF71Ocapo1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHACXd3603AClgVPs3UhJYAPQ98VMB8GA1UdIwQY MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqbPSI8+ Mx6mXc+F/X4UTgK2iP6wwbAcsOw6xjqy/gEmTcvBugZjpZ4eEKvRwNp9ZIx454WB YRYev7B541a6D8ECyhspdkUMD+Tjb+Baxkh0MT7YpeE/trJPPuTKeGcrd14m5rNx nJyVNpQ6v3D/WJ3V+NlH8FodicsjjWpQhmke3EDGFB2xrsJ3L4YOc5GRwPFOtRGo ivqcZRAS24BKCLHl9V4+O0mLFaiKLn2OrSFQfUwwon3DXN2KhcWW05lWe7sUFDCg INVSZpXSw4ssrKXTXhAjIUcjXCZP5+kxXl37i3hhcU91HV0YGTXC5D0tdqqnF8jI lf7Tsy3IbuacmA== -----END CERTIFICATE-----Generated at Tue Dec 16 13:47:06 2025 by rpki-client