This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft File: CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft (raw, json) Hash identifier: Rrpm2sc4YeQ234nGotFGN0HRbrnK6mZ7hAJkTUAWqaE= Subject key identifier: E5:40:90:AC:C9:77:E9:B3:A9:39:D9:85:87:6E:4E:60:AB:7D:31:1D Authority key identifier: 08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 Certificate issuer: /CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Certificate serial: 019B3E6DF5ADF57E4E24E01FC6A928249746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft Manifest number: 06B3 Signing time: Sun 21 Dec 2025 01:02:32 +0000 Manifest this update: Sun 21 Dec 2025 01:02:32 +0000 Manifest next update: Mon 22 Dec 2025 01:02:32 +0000 Files and hashes: 1: CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl (hash: VA8CwKDz6kZVWF5cu7gkmSQGwTy6f8Ea2CgQ4Jh9cQ4=) 2: R2V69ZkOUTYrzFoNRRlCyipVFJY.roa (hash: 1fYxoQiQnyI9X886nVPbCzerEk6YCs6KXxGjMqHwwf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:f5:ad:f5:7e:4e:24:e0:1f:c6:a9:28:24:97:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08cd67b5f97ba795a6bf86906b771c1dd2cb1dc9 Validity Not Before: Dec 21 01:02:32 2025 GMT Not After : Dec 22 01:02:32 2025 GMT Subject: CN=e54090acc977e9b3a939d985876e4e60ab7d311d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:8d:be:f4:46:29:f5:58:fb:aa:2a:cf:91: 53:09:d4:2d:5e:bd:87:a0:58:46:47:5b:a3:1f:af: 54:fe:fc:69:6b:74:a0:8e:c3:08:71:94:74:e8:20: 53:c0:31:45:31:09:3a:aa:f1:62:44:86:48:a2:f0: 41:bc:d4:ac:9b:89:a4:6b:9b:08:20:de:62:46:6a: 31:eb:6e:ab:51:b7:40:d3:35:e7:8a:bb:4b:18:e4: 03:35:db:cc:c8:d2:5a:56:ce:0e:ab:8b:cd:9c:b7: 83:2c:6c:bb:e7:6a:b6:6e:dd:d7:75:df:ff:98:c3: 13:05:07:02:25:43:77:40:90:36:8e:49:d1:5a:86: 6f:6a:89:e4:48:88:a2:ac:5a:9c:3f:b5:82:e0:c5: a1:c4:df:eb:51:02:68:97:8a:26:0f:2f:21:0f:cf: 37:ac:1d:93:21:ef:f4:1e:81:1f:41:13:66:19:7f: d9:ce:cc:95:0e:32:22:1f:4b:af:44:da:04:5e:ed: d1:a8:48:7b:11:d1:fe:23:c4:3a:d1:8f:f4:dc:e4: f9:86:61:f2:8d:2d:1d:fc:a2:04:82:14:f5:00:8f: 22:11:8e:ef:4d:29:6f:15:20:97:78:ee:ab:36:ee: 9d:14:b0:37:b9:b2:68:dc:44:5a:ba:88:60:38:41: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:90:AC:C9:77:E9:B3:A9:39:D9:85:87:6E:4E:60:AB:7D:31:1D X509v3 Authority Key Identifier: keyid:08:CD:67:B5:F9:7B:A7:95:A6:BF:86:90:6B:77:1C:1D:D2:CB:1D:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CM1ntfl7p5Wmv4aQa3ccHdLLHck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/349b83-6f74-49ec-a4fc-57462c283294/1/CM1ntfl7p5Wmv4aQa3ccHdLLHck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7b:8a:c1:94:ce:7e:9c:a3:72:96:e3:a6:17:9a:9c:67:ef: cc:51:1c:d1:df:af:63:d9:f0:bb:32:60:2d:8f:38:1f:58:68: 25:45:59:56:ef:97:1d:4e:b1:ea:3c:15:ec:f7:e4:09:3c:69: 70:eb:20:aa:e5:1f:53:21:be:78:77:c2:bd:27:df:2d:19:f9: fb:04:ad:47:82:c9:1b:6d:ae:b8:31:45:2a:60:85:cb:54:26: 0f:d5:9f:e0:0c:48:ad:ed:65:06:74:be:45:fe:3c:1c:f8:8f: dd:2f:90:e6:54:08:83:83:a6:ad:c9:5c:4b:31:42:15:4d:36: 97:7f:1b:de:d0:fc:10:65:b2:b1:ec:90:33:ee:a3:5e:5d:e2: d0:fb:11:e4:8a:12:99:3d:b6:58:22:ec:78:7b:42:9f:d2:6a: 03:ba:ff:d2:c3:67:4e:d5:73:0e:dc:eb:a1:28:d7:e6:3e:35: 99:6a:58:db:83:e3:9e:c0:4a:35:3a:25:f0:af:bb:a4:3f:29: dc:03:a5:92:04:57:80:6c:7c:7b:75:0d:4e:d3:11:e3:99:06: e0:9a:06:a1:41:63:49:02:66:ee:08:c9:0f:c5:18:8a:39:d9: 4a:e0:83:52:20:b7:99:e8:4e:5b:5d:e5:49:71:a6:54:45:20: 70:d4:2e:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bfWt9X5OJOAfxqkoJJdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4Y2Q2N2I1Zjk3YmE3OTVhNmJmODY5MDZiNzcxYzFkZDJj YjFkYzkwHhcNMjUxMjIxMDEwMjMyWhcNMjUxMjIyMDEwMjMyWjAzMTEwLwYDVQQD EyhlNTQwOTBhY2M5NzdlOWIzYTkzOWQ5ODU4NzZlNGU2MGFiN2QzMTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3aNvvRGKfVY+6oqz5FTCdQtXr2H oFhGR1ujH69U/vxpa3SgjsMIcZR06CBTwDFFMQk6qvFiRIZIovBBvNSsm4mka5sI IN5iRmox626rUbdA0zXnirtLGOQDNdvMyNJaVs4Oq4vNnLeDLGy752q2bt3Xdd// mMMTBQcCJUN3QJA2jknRWoZvaonkSIiirFqcP7WC4MWhxN/rUQJol4omDy8hD883 rB2TIe/0HoEfQRNmGX/ZzsyVDjIiH0uvRNoEXu3RqEh7EdH+I8Q60Y/03OT5hmHy jS0d/KIEghT1AI8iEY7vTSlvFSCXeO6rNu6dFLA3ubJo3ERauohgOEEnDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVAkKzJd+mzqTnZhYduTmCrfTEdMB8GA1UdIwQY MBaAFAjNZ7X5e6eVpr+GkGt3HB3Syx3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMt NTc0NjJjMjgzMjk0LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNDliODMtNmY3NC00OWVjLWE0ZmMtNTc0NjJjMjgzMjk0 LzEvQ00xbnRmbDdwNVdtdjRhUWEzY2NIZExMSGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHuKwZTO fpyjcpbjpheanGfvzFEc0d+vY9nwuzJgLY84H1hoJUVZVu+XHU6x6jwV7PfkCTxp cOsgquUfUyG+eHfCvSffLRn5+wStR4LJG22uuDFFKmCFy1QmD9Wf4AxIre1lBnS+ Rf48HPiP3S+Q5lQIg4OmrclcSzFCFU02l38b3tD8EGWyseyQM+6jXl3i0PsR5IoS mT22WCLseHtCn9JqA7r/0sNnTtVzDtzroSjX5j41mWpY24PjnsBKNTol8K+7pD8p 3AOlkgRXgGx8e3UNTtMR45kG4JoGoUFjSQJm7gjJD8UYijnZSuCDUiC3mehOW13l SXGmVEUgcNQucw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:31 2025 by rpki-client