This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json) Hash identifier: JVar4WuNvh9+G+ndzfotXWtp2VtxGjVDf3e5XrAFbQ8= Subject key identifier: 93:30:88:27:37:A1:53:83:36:FA:85:55:AF:D3:79:6B:1B:05:85:31 Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Certificate serial: 019B432501BAE80E251BF6CA31D935799628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft Manifest number: 1425 Signing time: Sun 21 Dec 2025 23:00:57 +0000 Manifest this update: Sun 21 Dec 2025 23:00:57 +0000 Manifest next update: Mon 22 Dec 2025 23:00:57 +0000 Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: K+cbp6tcqUKiZuteUt9EgHXFikndPwNEUQ9SbJ9JWws=) 2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:01:ba:e8:0e:25:1b:f6:ca:31:d9:35:79:96:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Validity Not Before: Dec 21 23:00:57 2025 GMT Not After : Dec 22 23:00:57 2025 GMT Subject: CN=9330882737a1538336fa8555afd3796b1b058531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:89:65:91:fd:81:e2:eb:9c:da:73:2e:03: 24:27:77:6e:bd:3d:f3:0d:0c:92:5f:c2:74:4b:68: b5:67:61:31:19:a7:e4:1c:cc:6e:4c:04:67:40:4a: fa:7e:76:c2:a9:88:00:4a:16:91:4d:3b:5c:d5:d9: 6f:f9:c2:26:cf:f4:20:25:82:58:a6:0c:5f:68:0d: e7:ce:b3:7d:f8:62:a2:9b:73:1b:33:0a:24:b7:fe: 51:73:b8:0d:fc:3f:69:d9:c0:61:d2:80:6a:09:64: b7:90:a8:c5:86:33:09:fd:c1:5f:84:f3:3c:00:ec: 73:f3:07:3d:9b:bf:cf:2e:45:8f:8e:d6:76:f1:b2: 82:41:a9:76:a3:4d:e0:60:1b:78:10:6a:f0:69:c1: 07:ec:82:a0:20:7a:c2:de:0c:b9:e3:0f:61:6e:ce: 6c:09:1a:be:f9:a7:eb:6f:67:d9:4a:39:d2:3b:f4: 64:4c:05:b1:71:fa:83:c9:e6:f1:f6:db:3f:09:d8: 3c:e5:c9:fb:fa:78:f4:44:ce:a8:16:c4:45:8f:27: a0:12:e5:46:98:98:71:8d:7b:46:63:2f:0e:d9:b8: f8:f9:fe:46:7d:19:f2:3f:74:3b:7e:1e:6c:14:0e: 78:bc:18:ab:9c:c2:9b:4e:f3:e5:ed:3d:1c:f8:c7: bc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:30:88:27:37:A1:53:83:36:FA:85:55:AF:D3:79:6B:1B:05:85:31 X509v3 Authority Key Identifier: keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:91:0e:e8:2d:83:84:07:88:64:f7:60:43:a0:73:58:62:96: 38:bd:78:93:14:95:39:4f:53:c2:96:b2:12:ca:db:4e:c7:b3: 31:95:69:e7:98:a2:27:2b:20:a1:fc:88:e3:92:18:e9:0b:d9: 88:1c:6c:d1:80:d8:af:c0:ef:5b:6b:43:73:9d:20:8c:6a:23: 98:ea:cf:04:71:b6:f6:e6:1e:4e:fa:c7:7b:2f:22:4b:f8:93: 6f:6b:d0:05:c3:3d:5a:8f:49:d7:3c:ec:4f:28:69:bf:50:50: 4f:b8:02:0e:22:ad:1b:c6:4e:9d:64:4f:74:fa:d9:a5:f4:4c: fb:38:a2:b0:33:41:13:be:16:0e:ab:4e:4e:5a:55:64:56:82: cf:d4:6e:81:c3:d9:12:fc:2b:21:b7:8e:55:d1:a2:61:a9:ae: 67:4f:09:5f:cc:1a:e2:2e:f2:45:b1:49:25:5b:da:e8:9d:b0: 34:97:de:dc:f3:82:c7:b4:9a:f3:a6:77:82:1e:8a:73:ec:0d: 25:25:6f:14:ec:de:84:a2:b9:1c:87:0f:1e:f0:dc:f7:6b:37: 95:de:ce:43:2c:c4:c1:a7:a4:9f:6b:f5:11:52:66:01:49:4e: db:66:c6:9c:8d:fe:51:83:6d:64:30:ef:2c:27:9a:eb:25:96: 86:eb:4e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQG66A4lG/bKMdk1eZYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjBmMTJmMTE1YWQ0MGYyYzJiNGFhZDQ1NGQyZTQzNjEx YzlhMDYwHhcNMjUxMjIxMjMwMDU3WhcNMjUxMjIyMjMwMDU3WjAzMTEwLwYDVQQD Eyg5MzMwODgyNzM3YTE1MzgzMzZmYTg1NTVhZmQzNzk2YjFiMDU4NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApImJZZH9geLrnNpzLgMkJ3duvT3z DQySX8J0S2i1Z2ExGafkHMxuTARnQEr6fnbCqYgAShaRTTtc1dlv+cImz/QgJYJY pgxfaA3nzrN9+GKim3MbMwokt/5Rc7gN/D9p2cBh0oBqCWS3kKjFhjMJ/cFfhPM8 AOxz8wc9m7/PLkWPjtZ28bKCQal2o03gYBt4EGrwacEH7IKgIHrC3gy54w9hbs5s CRq++afrb2fZSjnSO/RkTAWxcfqDyebx9ts/Cdg85cn7+nj0RM6oFsRFjyegEuVG mJhxjXtGYy8O2bj4+f5GfRnyP3Q7fh5sFA54vBirnMKbTvPl7T0c+Me8PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMwiCc3oVODNvqFVa/TeWsbBYUxMB8GA1UdIwQY MBaAFAiw8S8RWtQPLCtKrUVNLkNhHJoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4Mjkt NDhkZWExMDIxYTY5LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4MjktNDhkZWExMDIxYTY5 LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJEO6C2D hAeIZPdgQ6BzWGKWOL14kxSVOU9TwpayEsrbTsezMZVp55iiJysgofyI45IY6QvZ iBxs0YDYr8DvW2tDc50gjGojmOrPBHG29uYeTvrHey8iS/iTb2vQBcM9Wo9J1zzs Tyhpv1BQT7gCDiKtG8ZOnWRPdPrZpfRM+ziisDNBE74WDqtOTlpVZFaCz9RugcPZ EvwrIbeOVdGiYamuZ08JX8wa4i7yRbFJJVva6J2wNJfe3POCx7Sa86Z3gh6Kc+wN JSVvFOzehKK5HIcPHvDc92s3ld7OQyzEwaekn2v1EVJmAUlO22bGnI3+UYNtZDDv LCea6yWWhutOvg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:33:02 2025 by rpki-client