This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json) Hash identifier: VdeqwQe474AU9L4am7pwwK8XJni+buRr18DIy2mePNc= Subject key identifier: 2A:0F:F6:6C:83:C3:93:D1:1A:1D:EB:33:F9:E8:89:17:45:BB:A3:C2 Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f Certificate serial: 019AF61C3FFF4C9BCC05D8216F57AB4D8F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft Manifest number: 13F6 Signing time: Sun 07 Dec 2025 00:00:37 +0000 Manifest this update: Sun 07 Dec 2025 00:00:37 +0000 Manifest next update: Mon 08 Dec 2025 00:00:37 +0000 Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: qo6QzC3J2HinGcer28UCObFkHtp9VmGvFeddpGYmuLU=) 2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3f:ff:4c:9b:cc:05:d8:21:6f:57:ab:4d:8f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f Validity Not Before: Dec 7 00:00:37 2025 GMT Not After : Dec 8 00:00:37 2025 GMT Subject: CN=2a0ff66c83c393d11a1deb33f9e8891745bba3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:03:08:ff:64:35:47:39:3a:a8:c0:11:d7: 56:d0:31:4f:d2:4e:78:bb:7b:1e:20:1a:36:7a:bf: 7f:8b:c4:fb:d1:42:64:80:84:14:bd:7e:fd:83:48: 12:47:00:b8:a9:7f:c9:6d:ac:ea:72:2e:5b:e9:4e: 60:74:08:e6:7c:94:0a:44:c2:ce:4a:25:3d:44:c7: bb:28:23:88:ef:27:08:52:74:f6:1c:95:8b:43:55: 6c:8e:d2:1e:8b:15:52:ea:f3:f0:32:bf:06:08:b3: 53:c7:c3:2c:cf:7c:ed:95:c8:52:47:df:e4:7e:1f: d7:29:51:53:11:3d:35:5b:d7:be:c6:e5:4e:cc:f6: 19:e3:4c:61:ad:01:2d:58:79:c6:22:97:8e:21:56: c7:71:2e:39:5c:b8:c6:90:94:9d:19:98:31:b8:ba: 49:5f:d6:4a:79:be:4c:72:2a:2b:80:3f:81:14:c0: 0f:d1:c5:d0:2d:c5:9d:a0:6b:0a:8b:67:b4:3e:f9: f3:bc:7c:12:75:33:c1:ea:ab:96:38:b4:68:06:8f: f5:bf:84:ab:5f:d2:e5:fe:ea:6d:f2:cd:1d:d0:80: a6:20:36:e1:5b:0e:b7:e9:48:46:ab:54:9d:b9:56: 09:9e:6a:fd:1c:d8:02:2b:35:a7:ad:28:f5:c6:9a: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:F6:6C:83:C3:93:D1:1A:1D:EB:33:F9:E8:89:17:45:BB:A3:C2 X509v3 Authority Key Identifier: keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:59:a5:46:ee:36:72:10:e4:3f:54:4e:f2:ec:5a:8a:0b:8b: 8a:79:45:1b:13:03:9b:a9:0b:fc:51:7e:48:50:a0:8e:c5:c0: 6f:ce:1f:8d:5f:73:ca:16:57:03:bc:f6:84:35:83:b4:24:29: 3b:d6:dc:93:1f:67:fb:e2:2f:de:cf:1c:f4:d7:f7:57:8c:6a: a5:c4:69:93:ed:33:3a:ac:ae:39:d4:30:c2:6a:d8:f2:bf:2a: fc:cb:1a:83:e5:c7:ec:fb:96:c7:b5:d1:29:10:82:64:38:9c: 8e:b2:7f:5d:3a:0b:1a:11:a6:09:85:22:cb:e9:e6:5d:97:1a: 98:64:13:af:fa:ae:b4:73:d9:db:2a:35:7d:38:66:d4:6c:61: 68:b5:a5:bf:f2:66:0f:33:74:c7:49:da:36:2b:f0:2e:db:a9: 8e:a2:56:bf:e9:d0:16:e7:36:e4:54:75:97:2d:b2:f1:57:c7: 0c:5f:6c:ec:eb:4f:36:7c:35:2f:60:b0:59:1d:15:43:37:ef: c9:a0:20:d1:db:d5:ee:af:ee:12:38:71:e0:39:08:c5:0c:72: 2d:d3:81:ad:71:bb:d9:54:56:56:7e:ea:4e:75:1d:69:e1:45: b3:93:b0:04:97:8e:de:e1:cc:1d:26:78:7d:12:d0:ee:27:71: da:db:b1:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HD//TJvMBdghb1erTY97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2I4OWExMTExNGVmYmUwZTFlMjU1MGVjZGEzMzZmZDc5 MmVjNWYwHhcNMjUxMjA3MDAwMDM3WhcNMjUxMjA4MDAwMDM3WjAzMTEwLwYDVQQD EygyYTBmZjY2YzgzYzM5M2QxMWExZGViMzNmOWU4ODkxNzQ1YmJhM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxawDCP9kNUc5OqjAEddW0DFP0k54 u3seIBo2er9/i8T70UJkgIQUvX79g0gSRwC4qX/Jbazqci5b6U5gdAjmfJQKRMLO SiU9RMe7KCOI7ycIUnT2HJWLQ1VsjtIeixVS6vPwMr8GCLNTx8Msz3ztlchSR9/k fh/XKVFTET01W9e+xuVOzPYZ40xhrQEtWHnGIpeOIVbHcS45XLjGkJSdGZgxuLpJ X9ZKeb5MciorgD+BFMAP0cXQLcWdoGsKi2e0PvnzvHwSdTPB6quWOLRoBo/1v4Sr X9Ll/upt8s0d0ICmIDbhWw636UhGq1SduVYJnmr9HNgCKzWnrSj1xpo76wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoP9myDw5PRGh3rM/noiRdFu6PCMB8GA1UdIwQY MBaAFAjLiaERFO++Dh4lUOzaM2/XkuxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEt NGFmMWZhMzZjZGI5LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEtNGFmMWZhMzZjZGI5 LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVmlRu42 chDkP1RO8uxaiguLinlFGxMDm6kL/FF+SFCgjsXAb84fjV9zyhZXA7z2hDWDtCQp O9bckx9n++Iv3s8c9Nf3V4xqpcRpk+0zOqyuOdQwwmrY8r8q/Msag+XH7PuWx7XR KRCCZDicjrJ/XToLGhGmCYUiy+nmXZcamGQTr/qutHPZ2yo1fThm1GxhaLWlv/Jm DzN0x0naNivwLtupjqJWv+nQFuc25FR1ly2y8VfHDF9s7OtPNnw1L2CwWR0VQzfv yaAg0dvV7q/uEjhx4DkIxQxyLdOBrXG72VRWVn7qTnUdaeFFs5OwBJeO3uHMHSZ4 fRLQ7idx2tux6w== -----END CERTIFICATE-----Generated at Sun Dec 7 05:51:13 2025 by rpki-client