This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json) Hash identifier: uvJs0ORcvXpXeshcseSw5rGYEHPoTs0U4odXDfIouMA= Subject key identifier: 10:36:21:D1:75:77:C9:E9:64:E8:B0:F8:53:B7:94:FF:9A:81:6C:E9 Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Certificate serial: 019B3AC6D04F00CC7D740CC78E4EDA98E484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft Manifest number: 11EB Signing time: Sat 20 Dec 2025 08:01:06 +0000 Manifest this update: Sat 20 Dec 2025 08:01:06 +0000 Manifest next update: Sun 21 Dec 2025 08:01:06 +0000 Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: frrdi/EOjnbXC6AGvPB4nnLp78t5kRfgx7QtEVRjgIA=) 2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d0:4f:00:cc:7d:74:0c:c7:8e:4e:da:98:e4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Validity Not Before: Dec 20 08:01:06 2025 GMT Not After : Dec 21 08:01:06 2025 GMT Subject: CN=103621d17577c9e964e8b0f853b794ff9a816ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:2a:9a:9b:f1:1a:33:33:3a:99:e1:66:c7: 28:55:9f:eb:ef:4d:01:0f:db:90:2a:55:63:9c:03: d1:fd:62:b1:52:68:2f:fd:4a:44:a1:46:83:53:2b: 57:d5:9d:75:d7:45:23:68:b6:82:89:92:aa:20:5d: 01:aa:47:db:ea:36:e8:42:59:7b:32:2b:f7:3a:1b: 71:5a:af:5d:22:fa:e6:4b:04:3c:cd:3d:db:13:b1: 26:b5:2f:4d:d4:11:7f:4a:54:95:be:00:72:3d:5a: 24:25:6c:5a:29:ab:5f:13:65:0c:73:77:e5:5d:19: 7f:94:0d:a2:5d:ce:2e:1d:c6:9e:f5:f1:b1:bb:9e: bd:1e:9e:ea:80:a0:d2:f3:c4:ac:f6:98:18:42:a3: 3c:f7:b4:af:b4:68:53:ad:cb:68:02:4e:12:92:f2: de:10:ba:0f:76:0c:09:01:74:4a:04:a7:88:06:d7: c3:ca:c9:91:4d:63:d1:4d:3b:0b:6e:b6:32:e3:ab: f3:2e:85:7d:71:42:19:48:83:e3:5b:d6:33:95:3f: a4:45:59:6d:88:cf:cf:3a:fa:ac:eb:60:f6:bf:ed: 57:5f:49:d1:60:f1:d9:c8:7a:6e:44:a5:94:f9:89: 5a:e4:62:87:95:cf:23:c6:0b:1a:12:46:c0:b2:46: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:21:D1:75:77:C9:E9:64:E8:B0:F8:53:B7:94:FF:9A:81:6C:E9 X509v3 Authority Key Identifier: keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:00:44:70:f5:0b:7a:5b:f5:1f:6a:e7:ba:a6:31:e3:32:4c: 17:a8:d5:08:06:be:29:43:e9:47:18:74:e4:53:49:81:1e:bc: e1:af:33:3a:13:9b:ac:20:e8:dc:67:78:2a:ea:83:57:69:bb: c4:11:4f:ce:87:1c:57:e0:dc:b3:51:1c:bc:6d:77:52:b8:ca: bd:b2:f7:d6:44:47:3d:e1:fe:e0:95:f9:0e:db:e1:94:d4:af: e6:2e:b1:9a:cc:fa:24:0c:fd:28:9d:15:80:ed:48:a3:06:7a: 19:2f:39:a6:13:b4:37:ab:b0:92:19:60:5d:86:82:6a:90:ca: 34:8e:b5:d2:d0:b8:24:cd:32:7d:23:ce:17:1f:a6:4a:f2:78: 23:3d:82:64:81:58:84:0c:c5:05:27:9c:bc:b0:5b:df:55:21: 2b:ea:c3:f2:6f:6a:f1:26:a2:ff:df:b5:0b:a6:22:a8:48:4f: c3:1e:7f:5f:04:33:30:2d:11:32:8d:e9:b9:b2:c5:8c:8b:82: d3:f9:24:67:7a:c9:14:17:9b:5c:c1:22:a5:3d:a5:da:57:ec: af:80:e9:35:ef:a4:be:5e:81:11:e4:0e:4f:2e:f4:57:29:3c: a3:49:82:89:65:93:42:7b:28:c1:de:22:17:1a:a6:23:55:41: f5:5d:bb:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtBPAMx9dAzHjk7amOSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm OGMxNGQwHhcNMjUxMjIwMDgwMTA2WhcNMjUxMjIxMDgwMTA2WjAzMTEwLwYDVQQD EygxMDM2MjFkMTc1NzdjOWU5NjRlOGIwZjg1M2I3OTRmZjlhODE2Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhwqmpvxGjMzOpnhZscoVZ/r700B D9uQKlVjnAPR/WKxUmgv/UpEoUaDUytX1Z1110UjaLaCiZKqIF0Bqkfb6jboQll7 Miv3OhtxWq9dIvrmSwQ8zT3bE7EmtS9N1BF/SlSVvgByPVokJWxaKatfE2UMc3fl XRl/lA2iXc4uHcae9fGxu569Hp7qgKDS88Ss9pgYQqM897SvtGhTrctoAk4SkvLe ELoPdgwJAXRKBKeIBtfDysmRTWPRTTsLbrYy46vzLoV9cUIZSIPjW9YzlT+kRVlt iM/POvqs62D2v+1XX0nRYPHZyHpuRKWU+Yla5GKHlc8jxgsaEkbAskakuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA2IdF1d8npZOiw+FO3lP+agWzpMB8GA1UdIwQY MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQBEcPUL elv1H2rnuqYx4zJMF6jVCAa+KUPpRxh05FNJgR684a8zOhObrCDo3Gd4KuqDV2m7 xBFPzoccV+Dcs1EcvG13UrjKvbL31kRHPeH+4JX5DtvhlNSv5i6xmsz6JAz9KJ0V gO1IowZ6GS85phO0N6uwkhlgXYaCapDKNI610tC4JM0yfSPOFx+mSvJ4Iz2CZIFY hAzFBSecvLBb31UhK+rD8m9q8Sai/9+1C6YiqEhPwx5/XwQzMC0RMo3pubLFjIuC 0/kkZ3rJFBebXMEipT2l2lfsr4DpNe+kvl6BEeQOTy70Vyk8o0mCiWWTQnsowd4i FxqmI1VB9V27Sw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:05 2025 by rpki-client