This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json) Hash identifier: H/lb+aDNs39zGCgXcjDuF9JR4JChCiDEf6KX5IGx6v0= Subject key identifier: 2B:90:AE:05:FF:AB:D6:17:3E:3E:3C:9B:27:4C:8E:99:04:D2:3B:69 Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61 Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161 Certificate serial: 019B5B656A67B9E40E09E3677ABA00838476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft Manifest number: 041E Signing time: Fri 26 Dec 2025 16:02:11 +0000 Manifest this update: Fri 26 Dec 2025 16:02:11 +0000 Manifest next update: Sat 27 Dec 2025 16:02:11 +0000 Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: woB51ttgcOII9nDD+AFpKs4mWOz66AoYinDEGXWPHzc=) 2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:6a:67:b9:e4:0e:09:e3:67:7a:ba:00:83:84:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161 Validity Not Before: Dec 26 16:02:11 2025 GMT Not After : Dec 27 16:02:11 2025 GMT Subject: CN=2b90ae05ffabd6173e3e3c9b274c8e9904d23b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:a3:88:a0:66:06:f8:a9:3f:53:cc:51:5e: 92:9a:0a:0d:51:6d:71:c2:f3:90:81:eb:b3:33:d7: cf:19:53:dc:95:07:27:fe:db:75:12:96:75:26:42: 17:cd:c2:9f:70:07:da:07:8d:78:94:98:b9:ed:83: 24:65:5f:05:2a:14:7b:d5:a6:a7:18:9d:29:ee:22: 86:24:66:de:21:c6:b9:03:40:d5:c2:b9:f6:ec:7b: 97:31:d4:0b:e4:fa:3d:f4:48:c7:ba:ee:ff:10:06: a2:72:de:ea:f8:44:22:ec:d3:ba:d9:b6:54:fd:80: 4d:b7:26:25:ca:a4:d8:01:83:37:4c:da:7c:92:e4: ff:94:fc:68:21:e8:2f:3c:7b:e7:08:3e:8b:cb:03: d9:52:c1:a7:8c:92:73:fd:8a:fb:d5:33:ed:f0:e1: 20:34:0b:02:42:56:d2:f4:a5:c1:ac:fc:fe:33:6a: 3f:fa:6b:2e:59:59:b4:4d:76:2d:32:6b:0d:d5:ba: 75:14:f4:c0:23:ad:b2:1b:e1:bf:f3:4c:5a:d8:c1: a8:50:66:1e:61:a0:32:fc:25:0d:80:8c:49:7d:21: 4b:dd:28:df:f8:1c:f3:1d:4b:ea:f2:ee:b1:b6:3e: b9:44:e5:dc:a3:55:5d:0d:e5:71:c1:a0:af:28:66: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:90:AE:05:FF:AB:D6:17:3E:3E:3C:9B:27:4C:8E:99:04:D2:3B:69 X509v3 Authority Key Identifier: keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8f:f5:6c:0c:0b:ca:d2:36:43:b6:75:ad:b9:c2:22:68:ba: 15:ca:e3:0b:c2:cf:1f:13:ae:d6:5c:69:21:0f:4a:fd:03:b0: 94:25:d2:cb:fc:35:69:ee:af:b4:1b:67:91:73:12:00:31:4d: 74:09:b3:bd:22:b8:68:a4:f0:7c:1c:60:7e:d9:a3:e8:90:d0: ca:70:cf:09:84:d1:26:06:6a:7f:66:22:bf:19:ee:cf:9f:84: cc:83:82:bd:6c:09:91:ae:db:2f:c8:13:d8:ef:76:79:d1:51: ad:86:74:b1:91:ad:b9:14:73:2a:07:fc:82:2f:c3:3f:07:9b: 1f:de:08:03:d7:32:f5:1c:67:e4:05:7a:ed:fd:db:36:91:e3: 8e:73:dd:eb:8a:f1:fa:cd:a7:61:8d:db:72:d0:65:bd:86:d9: e8:ad:97:6f:a9:4e:1b:6c:bd:45:74:1a:6e:c2:cc:b7:9c:45: be:33:48:0e:43:e0:f5:6a:d7:89:3b:97:3b:b8:8b:b5:59:cf: 1b:a4:43:e3:aa:bf:1e:84:92:41:ff:f1:c1:5c:c9:ff:da:a4: e6:56:27:a7:fd:a9:9c:96:e2:35:61:20:f9:68:99:08:f0:b8: f1:81:05:98:36:96:57:06:8a:ed:1f:7d:63:f2:48:65:8d:24: 59:63:05:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZWpnueQOCeNneroAg4R2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhM2UwOGVmM2Q3NTRiYzZhZmE5MWZhNmMxMDAyMGY1ODUw NWMxNjEwHhcNMjUxMjI2MTYwMjExWhcNMjUxMjI3MTYwMjExWjAzMTEwLwYDVQQD EygyYjkwYWUwNWZmYWJkNjE3M2UzZTNjOWIyNzRjOGU5OTA0ZDIzYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumCjiKBmBvipP1PMUV6SmgoNUW1x wvOQgeuzM9fPGVPclQcn/tt1EpZ1JkIXzcKfcAfaB414lJi57YMkZV8FKhR71aan GJ0p7iKGJGbeIca5A0DVwrn27HuXMdQL5Po99EjHuu7/EAaict7q+EQi7NO62bZU /YBNtyYlyqTYAYM3TNp8kuT/lPxoIegvPHvnCD6LywPZUsGnjJJz/Yr71TPt8OEg NAsCQlbS9KXBrPz+M2o/+msuWVm0TXYtMmsN1bp1FPTAI62yG+G/80xa2MGoUGYe YaAy/CUNgIxJfSFL3Sjf+BzzHUvq8u6xtj65ROXco1VdDeVxwaCvKGaN7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuQrgX/q9YXPj48mydMjpkE0jtpMB8GA1UdIwQY MBaAFAo+CO89dUvGr6kfpsEAIPWFBcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUt NGQxZDM3ZGM4MWI0LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUtNGQxZDM3ZGM4MWI0 LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo/1bAwL ytI2Q7Z1rbnCImi6FcrjC8LPHxOu1lxpIQ9K/QOwlCXSy/w1ae6vtBtnkXMSADFN dAmzvSK4aKTwfBxgftmj6JDQynDPCYTRJgZqf2Yivxnuz5+EzIOCvWwJka7bL8gT 2O92edFRrYZ0sZGtuRRzKgf8gi/DPwebH94IA9cy9Rxn5AV67f3bNpHjjnPd64rx +s2nYY3bctBlvYbZ6K2Xb6lOG2y9RXQabsLMt5xFvjNIDkPg9WrXiTuXO7iLtVnP G6RD46q/HoSSQf/xwVzJ/9qk5lYnp/2pnJbiNWEg+WiZCPC48YEFmDaWVwaK7R99 Y/JIZY0kWWMF2Q== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:27 2025 by rpki-client