This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json) Hash identifier: dddsKGzEUoUAyzKd4hfgmUILT1U8pzWz+6W5MULy+tE= Subject key identifier: EB:DC:46:A6:91:C3:D1:F0:60:BE:06:D4:8A:3A:5F:4A:6F:94:66:CE Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Certificate serial: 019B5298C37491E6D8CF1A73DBE70A5DD6B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft Manifest number: 0BA9 Signing time: Wed 24 Dec 2025 23:01:41 +0000 Manifest this update: Wed 24 Dec 2025 23:01:41 +0000 Manifest next update: Thu 25 Dec 2025 23:01:41 +0000 Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: NpvZC07K5KL2weQM1nbW/WfkFFn/6KE+vnAr7iW/kEE=) 2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:c3:74:91:e6:d8:cf:1a:73:db:e7:0a:5d:d6:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21 Validity Not Before: Dec 24 23:01:41 2025 GMT Not After : Dec 25 23:01:41 2025 GMT Subject: CN=ebdc46a691c3d1f060be06d48a3a5f4a6f9466ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:29:1b:3a:f0:1d:1b:b6:d6:4a:17:df:84: a1:f4:7a:cd:fb:13:42:95:b5:89:ef:50:d2:2d:f9: 9a:a0:fa:db:8d:ec:bf:7f:6c:01:29:10:e5:bd:51: 21:fc:47:c0:e0:d5:93:02:78:ed:9f:14:bc:14:4f: 8e:08:dd:ea:75:e9:3f:42:22:5b:be:81:24:42:bf: c2:9a:a7:ba:f5:98:ff:4e:51:e2:10:bf:04:e8:0b: 00:1b:1d:31:ed:ea:71:37:65:5d:e9:16:8f:0c:76: 71:87:50:ea:c5:ed:92:12:3f:7e:c9:7f:d5:d7:a6: c4:1f:48:51:85:53:a9:e6:7e:8d:42:15:7d:df:cf: 59:7b:0c:08:26:a5:e1:91:8c:b3:20:42:5b:4e:20: 39:66:74:f7:8d:21:50:be:99:52:b8:b0:55:6a:da: bd:7f:9b:00:97:d0:87:89:93:41:9d:a1:10:f8:41: 22:80:db:4a:ae:fc:d4:21:d4:1a:3d:e3:d6:b7:e3: 11:47:63:41:85:fb:ae:a4:90:03:25:2a:45:3e:c8: 84:5a:7e:00:47:13:77:87:77:6c:f2:ac:48:0a:14: 4d:50:5f:a1:e7:05:06:fa:47:45:39:1c:02:47:b4: 1d:f0:74:d6:07:5d:47:d8:72:d7:6d:5e:1f:10:0a: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DC:46:A6:91:C3:D1:F0:60:BE:06:D4:8A:3A:5F:4A:6F:94:66:CE X509v3 Authority Key Identifier: keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:24:5c:4c:cd:e8:1b:fa:48:43:ce:1f:d6:42:af:d3:e5:6c: 85:88:14:8b:c1:12:1d:c6:cc:91:16:14:6c:b5:12:3d:58:0d: 6a:9c:3f:12:aa:93:5f:7e:0c:59:6f:a2:40:5a:a7:19:b9:84: 07:7a:73:88:a0:4d:61:2b:a7:27:33:ec:47:f9:ca:10:2a:74: b9:16:57:06:79:e2:63:dd:df:05:0f:ce:11:11:21:41:7a:43: 2f:9a:53:1b:9f:5a:4c:1b:fd:31:67:0f:f2:2f:ce:dd:d0:3e: 00:d7:30:ec:3b:5f:a3:c5:90:16:a8:b6:0e:0f:f6:01:1b:84: d2:06:23:3d:9d:92:eb:35:2e:af:27:2c:a6:b1:b8:cb:3c:d1: d9:62:39:92:69:fc:38:c0:77:ed:a2:f7:38:8c:88:88:47:2d: 8b:93:33:21:6c:59:56:da:13:74:a2:94:b7:ac:ec:c9:2a:b3: 60:21:e7:d6:b7:e1:69:48:01:a8:84:a5:ea:df:6a:b4:33:41: 18:03:eb:25:4a:9a:c3:31:89:7c:3a:30:f2:73:b4:c8:17:ba: 19:c1:0d:9f:ee:26:9d:fb:4f:b0:f5:e2:76:9d:a7:30:59:e7: 65:b1:8e:e4:25:8f:8c:5f:55:16:1a:d0:c6:04:49:d5:a1:c7: 3d:84:59:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmMN0kebYzxpz2+cKXda0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YThlZDk3YWJlOGI4MDE0ZGQzMWMyYzI0NGY5ZjI4ZjVm OTdhMjEwHhcNMjUxMjI0MjMwMTQxWhcNMjUxMjI1MjMwMTQxWjAzMTEwLwYDVQQD EyhlYmRjNDZhNjkxYzNkMWYwNjBiZTA2ZDQ4YTNhNWY0YTZmOTQ2NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy8pGzrwHRu21koX34Sh9HrN+xNC lbWJ71DSLfmaoPrbjey/f2wBKRDlvVEh/EfA4NWTAnjtnxS8FE+OCN3qdek/QiJb voEkQr/Cmqe69Zj/TlHiEL8E6AsAGx0x7epxN2Vd6RaPDHZxh1Dqxe2SEj9+yX/V 16bEH0hRhVOp5n6NQhV9389ZewwIJqXhkYyzIEJbTiA5ZnT3jSFQvplSuLBVatq9 f5sAl9CHiZNBnaEQ+EEigNtKrvzUIdQaPePWt+MRR2NBhfuupJADJSpFPsiEWn4A RxN3h3ds8qxIChRNUF+h5wUG+kdFORwCR7Qd8HTWB11H2HLXbV4fEAqTrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvcRqaRw9HwYL4G1Io6X0pvlGbOMB8GA1UdIwQY MBaAFAmo7Zer6LgBTdMcLCRPnyj1+XohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUt ZTdmZGY3NzQxYTY1LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85YTdkZGEtMGY2OC00MDg4LWEwNzUtZTdmZGY3NzQxYTY1 LzEvQ2FqdGw2dm91QUZOMHh3c0pFLWZLUFg1ZWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSRcTM3o G/pIQ84f1kKv0+VshYgUi8ESHcbMkRYUbLUSPVgNapw/EqqTX34MWW+iQFqnGbmE B3pziKBNYSunJzPsR/nKECp0uRZXBnniY93fBQ/OEREhQXpDL5pTG59aTBv9MWcP 8i/O3dA+ANcw7Dtfo8WQFqi2Dg/2ARuE0gYjPZ2S6zUurycsprG4yzzR2WI5kmn8 OMB37aL3OIyIiEcti5MzIWxZVtoTdKKUt6zsySqzYCHn1rfhaUgBqISl6t9qtDNB GAPrJUqawzGJfDow8nO0yBe6GcENn+4mnftPsPXidp2nMFnnZbGO5CWPjF9VFhrQ xgRJ1aHHPYRZ0w== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:22 2025 by rpki-client