This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json) Hash identifier: xZNPXyogrJE7wTv4v19IhyxQN+hltJ/fEJMpWmztck8= Subject key identifier: 09:15:32:E4:12:9D:55:EF:6C:AC:53:88:E8:31:73:D2:FD:20:C4:45 Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25 Certificate serial: 019B405C8DFEF29ABD97D9DA387FC2883364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft Manifest number: 1727 Signing time: Sun 21 Dec 2025 10:02:46 +0000 Manifest this update: Sun 21 Dec 2025 10:02:46 +0000 Manifest next update: Mon 22 Dec 2025 10:02:46 +0000 Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=) 2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: NQOcIg3+HEabbz8aBqbsRziE9Y5EkDz6lEWKRXOaJ44=) 3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=) 4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:8d:fe:f2:9a:bd:97:d9:da:38:7f:c2:88:33:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25 Validity Not Before: Dec 21 10:02:46 2025 GMT Not After : Dec 22 10:02:46 2025 GMT Subject: CN=091532e4129d55ef6cac5388e83173d2fd20c445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:0f:70:d3:47:c4:55:b3:d7:cd:68:ab:38: 7f:09:00:67:83:d8:f9:c2:4b:33:e5:1d:38:99:59: 03:83:5e:2c:0a:eb:4f:79:8c:9b:94:87:d7:bd:37: 0a:49:58:2b:86:0c:af:2f:d3:52:ac:af:ea:06:fb: 7d:12:97:3a:fb:6b:34:c8:5b:b9:4f:cd:d7:1d:06: 53:d8:9c:75:bc:d7:12:7e:ea:c5:fe:a2:bc:56:1e: 35:92:72:09:22:4d:76:76:bb:db:d1:b8:62:a4:9a: c7:ef:58:11:21:62:8b:79:2c:4f:1d:1d:ca:d2:24: a7:9d:09:cd:54:0b:1f:bd:96:da:56:b5:75:4d:72: 15:6e:aa:35:2c:30:27:a6:fe:d2:e1:fb:b2:d2:17: 7b:04:5c:8d:88:94:74:13:f2:f9:d0:59:0e:ef:4d: 8a:25:17:e2:b8:7a:5b:7e:83:91:74:2b:18:3d:f9: 92:4b:cd:ab:b2:9b:33:26:97:28:51:c8:a9:b4:a5: f4:d8:79:51:02:12:21:a0:1c:5d:bd:41:ac:53:d3: 43:39:e2:5f:8d:4e:91:81:3f:06:35:6a:63:37:ca: 34:21:1f:ca:01:a5:fe:5e:59:0d:ea:78:0d:9b:5a: 48:f8:ba:a0:06:c8:05:1c:b3:06:83:ac:8f:6b:77: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:32:E4:12:9D:55:EF:6C:AC:53:88:E8:31:73:D2:FD:20:C4:45 X509v3 Authority Key Identifier: keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:8e:d5:c1:8f:91:21:e8:71:63:20:1b:c1:44:16:a7:f2:bc: 26:90:23:5b:bd:3b:95:d4:67:72:31:33:2a:a1:37:33:d6:ea: e7:90:36:01:55:9f:fb:53:b8:85:7f:91:19:e3:35:1b:5d:5f: 72:a1:6f:7e:c1:3b:f4:7d:cf:66:df:6e:c2:df:17:9a:14:b5: ad:66:66:4b:c7:e1:d9:90:fc:8d:fa:ba:f2:87:5e:90:4e:50: ab:e6:f7:b7:ba:23:07:4d:23:76:d3:6a:ba:22:d2:37:25:88: e4:3f:01:59:76:0c:e6:f5:fc:43:0b:a0:b6:6d:4c:eb:d9:30: b7:20:25:6d:88:c6:de:f5:10:89:2e:88:38:9d:5e:dd:cf:0a: f6:a3:7c:2d:2c:ca:21:95:98:a5:fa:3f:88:27:a4:0f:41:88: 2e:fd:5b:c8:8b:b2:ed:31:de:06:bf:ee:a4:06:7b:99:4c:05: 36:6f:f7:f9:17:d3:7e:30:fb:a2:0a:53:1c:e9:ad:37:6e:8f: 0a:19:c7:27:bf:80:2f:6f:92:d1:57:fb:c6:cf:49:d4:b1:42: c3:d3:cf:75:fd:c3:38:a5:48:81:a2:e8:c7:e2:85:da:3e:05: 26:ad:a6:98:52:41:5e:97:44:5d:39:e2:e9:d5:6e:b2:22:2a: dc:14:6c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXI3+8pq9l9naOH/CiDNkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5 ZTRlMjUwHhcNMjUxMjIxMTAwMjQ2WhcNMjUxMjIyMTAwMjQ2WjAzMTEwLwYDVQQD EygwOTE1MzJlNDEyOWQ1NWVmNmNhYzUzODhlODMxNzNkMmZkMjBjNDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA358PcNNHxFWz181oqzh/CQBng9j5 wksz5R04mVkDg14sCutPeYyblIfXvTcKSVgrhgyvL9NSrK/qBvt9Epc6+2s0yFu5 T83XHQZT2Jx1vNcSfurF/qK8Vh41knIJIk12drvb0bhipJrH71gRIWKLeSxPHR3K 0iSnnQnNVAsfvZbaVrV1TXIVbqo1LDAnpv7S4fuy0hd7BFyNiJR0E/L50FkO702K JRfiuHpbfoORdCsYPfmSS82rspszJpcoUciptKX02HlRAhIhoBxdvUGsU9NDOeJf jU6RgT8GNWpjN8o0IR/KAaX+XlkN6ngNm1pI+LqgBsgFHLMGg6yPa3d4UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkVMuQSnVXvbKxTiOgxc9L9IMRFMB8GA1UdIwQY MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkI7VwY+R IehxYyAbwUQWp/K8JpAjW707ldRncjEzKqE3M9bq55A2AVWf+1O4hX+RGeM1G11f cqFvfsE79H3PZt9uwt8XmhS1rWZmS8fh2ZD8jfq68odekE5Qq+b3t7ojB00jdtNq uiLSNyWI5D8BWXYM5vX8Qwugtm1M69kwtyAlbYjG3vUQiS6IOJ1e3c8K9qN8LSzK IZWYpfo/iCekD0GILv1byIuy7THeBr/upAZ7mUwFNm/3+RfTfjD7ogpTHOmtN26P ChnHJ7+AL2+S0Vf7xs9J1LFCw9PPdf3DOKVIgaLox+KF2j4FJq2mmFJBXpdEXTni 6dVusiIq3BRs6g== -----END CERTIFICATE-----Generated at Sun Dec 21 18:03:50 2025 by rpki-client