This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json) Hash identifier: lAslBPj8R/Kdsh4SYkcKT3L+EMnvx0rVurNmJoN0Nfo= Subject key identifier: E2:23:11:4E:15:75:19:68:B9:64:45:62:A5:F8:2C:3B:4F:12:DB:92 Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Certificate serial: 019B318D1EBA1BE7684E98237FCC3BEFEA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft Manifest number: 0AD7 Signing time: Thu 18 Dec 2025 13:01:30 +0000 Manifest this update: Thu 18 Dec 2025 13:01:30 +0000 Manifest next update: Fri 19 Dec 2025 13:01:30 +0000 Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: 1GXNwqMWZBuBLA/dFwCzG+GQd1PYoRc7e71WD6cTyZs=) 2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:1e:ba:1b:e7:68:4e:98:23:7f:cc:3b:ef:ea:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Validity Not Before: Dec 18 13:01:30 2025 GMT Not After : Dec 19 13:01:30 2025 GMT Subject: CN=e223114e15751968b9644562a5f82c3b4f12db92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:53:49:81:5f:ae:5d:34:6a:03:f7:86:35: 55:d7:70:c3:c1:ee:c0:98:ca:a0:d0:b0:23:ab:19: 37:d6:97:4a:89:44:af:e7:ac:53:97:a4:d9:6c:7a: 30:80:9d:58:86:30:a5:a7:0f:58:b0:27:0b:b4:71: 61:43:36:e0:98:ec:4a:7d:3a:3b:e7:30:c5:5b:a4: 98:38:e9:3e:a0:f4:c8:c0:05:c2:c8:14:e1:54:08: e1:a8:0a:3a:6e:62:da:65:a0:51:cd:c6:55:93:1a: 7f:65:1c:57:10:44:10:f9:ba:b3:2e:44:10:fb:8b: 9e:bc:e3:3a:2f:ba:44:36:76:90:26:df:06:de:f8: d3:c2:a7:e9:16:af:5e:18:16:7c:3b:07:b5:7b:65: 26:81:72:4f:86:bc:b5:ce:8a:a1:d5:81:c3:01:8e: 60:c6:ec:ee:0e:bb:f6:eb:27:d8:03:b6:71:73:8d: 1a:c8:3b:80:7b:0d:2c:7e:cc:54:df:8a:ac:d5:ee: b1:33:7b:2b:6c:62:19:8a:bf:2e:b7:fa:97:f7:ad: 2c:a5:68:b4:56:1b:9c:d1:4e:ac:96:7c:59:8f:e4: bd:91:0f:42:8e:d8:8d:e8:d7:d8:71:5c:a0:96:4c: be:ae:9d:b1:f5:5e:19:43:e2:bf:f4:59:31:4b:0e: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:23:11:4E:15:75:19:68:B9:64:45:62:A5:F8:2C:3B:4F:12:DB:92 X509v3 Authority Key Identifier: keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:14:f0:73:f4:d2:c3:8f:00:42:e8:c5:3b:53:15:04:c5: 34:77:f5:e7:48:d9:85:55:46:a7:19:df:74:ab:d8:54:7b:29: 6d:e6:9b:f1:57:70:f5:e2:04:13:e6:8b:d2:e3:55:4c:89:00: a7:52:94:37:78:48:d1:56:43:e7:5d:6c:3a:ef:85:f7:69:3b: 8f:74:80:ee:ea:6a:9c:ac:1f:ca:43:1e:aa:97:02:84:99:30: 69:9e:16:2f:81:84:2c:d9:7b:8f:af:5f:6f:6e:1b:83:1e:bc: 5c:ca:4c:20:8f:cc:f5:f7:2d:3d:fc:ca:d1:f7:25:af:14:ec: 88:e1:96:d0:e8:06:dd:a5:57:62:e9:ef:f2:4b:47:c6:50:14: 3c:9e:23:d8:9b:25:92:9c:bc:8f:e2:f4:5a:2a:e8:8e:bd:56: 8d:72:7e:9e:a6:7e:21:cf:b4:57:1a:3c:16:32:fd:e6:f4:13: a5:ad:1c:ca:12:80:20:6e:09:e3:08:11:72:e5:ed:b3:03:2e: 08:9e:2c:15:0c:34:f1:ce:87:65:09:72:55:73:67:3a:25:ca: c4:c7:0e:e3:bf:1b:e8:7c:d7:b0:2f:f1:66:eb:56:31:02:7a: 24:66:d3:c9:0c:59:7d:e6:e7:80:89:a9:0a:ea:94:ac:4f:b0: 2d:5f:07:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjR66G+doTpgjf8w77+qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl YzZhOGUwHhcNMjUxMjE4MTMwMTMwWhcNMjUxMjE5MTMwMTMwWjAzMTEwLwYDVQQD EyhlMjIzMTE0ZTE1NzUxOTY4Yjk2NDQ1NjJhNWY4MmMzYjRmMTJkYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1tTSYFfrl00agP3hjVV13DDwe7A mMqg0LAjqxk31pdKiUSv56xTl6TZbHowgJ1YhjClpw9YsCcLtHFhQzbgmOxKfTo7 5zDFW6SYOOk+oPTIwAXCyBThVAjhqAo6bmLaZaBRzcZVkxp/ZRxXEEQQ+bqzLkQQ +4uevOM6L7pENnaQJt8G3vjTwqfpFq9eGBZ8Owe1e2UmgXJPhry1zoqh1YHDAY5g xuzuDrv26yfYA7Zxc40ayDuAew0sfsxU34qs1e6xM3srbGIZir8ut/qX960spWi0 Vhuc0U6slnxZj+S9kQ9CjtiN6NfYcVyglky+rp2x9V4ZQ+K/9FkxSw4SkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIjEU4VdRlouWRFYqX4LDtPEtuSMB8GA1UdIwQY MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAEU8HP0 0sOPAELoxTtTFQTFNHf150jZhVVGpxnfdKvYVHspbeab8Vdw9eIEE+aL0uNVTIkA p1KUN3hI0VZD511sOu+F92k7j3SA7upqnKwfykMeqpcChJkwaZ4WL4GELNl7j69f b24bgx68XMpMII/M9fctPfzK0fclrxTsiOGW0OgG3aVXYunv8ktHxlAUPJ4j2Jsl kpy8j+L0Wirojr1WjXJ+nqZ+Ic+0Vxo8FjL95vQTpa0cyhKAIG4J4wgRcuXtswMu CJ4sFQw08c6HZQlyVXNnOiXKxMcO478b6HzXsC/xZutWMQJ6JGbTyQxZfebngImp CuqUrE+wLV8Hpg== -----END CERTIFICATE-----Generated at Thu Dec 18 15:24:16 2025 by rpki-client