This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json) Hash identifier: jCZ435cEIe4gJQ3Adp/WRib9VGqiR/NutIzMLf8TqCk= Subject key identifier: 4F:E9:64:F6:3F:B3:96:F2:FB:94:35:54:3D:11:7E:70:14:F0:FE:4B Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2 Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2 Certificate serial: 019B44373F37E2C885E5C43E1C05BA9A38F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 04:00:29 +0000 Manifest this update: Mon 22 Dec 2025 04:00:29 +0000 Manifest next update: Tue 23 Dec 2025 04:00:29 +0000 Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: oTwUmGksOsCuBrjiLA/ESBVu8v0r22eeYT2Hy4Djzgg=) 2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:3f:37:e2:c8:85:e5:c4:3e:1c:05:ba:9a:38:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2 Validity Not Before: Dec 22 04:00:29 2025 GMT Not After : Dec 23 04:00:29 2025 GMT Subject: CN=4fe964f63fb396f2fb9435543d117e7014f0fe4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4b:c7:28:84:07:38:e8:9f:70:b9:ec:bf:93: 15:fb:d5:01:c2:71:e2:e5:07:f8:f9:63:44:6f:aa: 64:6b:54:77:00:a9:e5:a3:30:49:4a:1f:8c:78:07: 38:50:91:73:a8:40:e4:79:be:15:de:17:b4:50:72: 0c:6d:95:a5:d8:00:e3:e6:34:f3:a4:99:45:88:7b: 34:ae:e5:fa:d1:17:c2:a2:d7:9d:eb:88:0a:c9:53: 5e:ed:82:11:80:5c:b8:7c:cd:7a:0a:1a:68:a7:40: 2f:b0:c3:df:a3:10:8c:f9:50:c9:90:93:43:63:5d: 8a:c3:fb:a6:27:95:c8:ac:70:82:a7:ab:68:e7:e7: 23:9b:73:6b:01:d0:91:98:6e:69:35:04:c5:91:19: 2e:75:1f:4b:bd:95:9a:bf:4f:70:86:6f:02:e5:a5: 6b:95:9c:94:e4:c6:bd:8d:9e:47:9b:8a:e5:35:63: 5a:c7:51:3c:11:dd:b9:59:30:68:50:39:c3:b5:a4: fb:25:8f:48:89:2f:88:ba:d0:20:00:29:9b:5d:1e: 60:b7:1f:74:06:b8:30:34:59:08:18:de:a1:6e:a5: 9a:0a:0f:40:fd:be:16:54:ac:7c:05:f0:7a:1e:6e: 01:fd:d3:d3:ce:22:d3:ad:7c:d2:45:00:7d:3c:ba: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:64:F6:3F:B3:96:F2:FB:94:35:54:3D:11:7E:70:14:F0:FE:4B X509v3 Authority Key Identifier: keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b8:ee:54:d3:d0:63:ee:1a:fb:bd:04:f8:8f:78:34:59:2d: d2:45:98:83:9f:d2:5a:60:78:c0:21:0d:e2:10:a5:bd:7f:c6: af:7c:9b:c5:8c:09:7a:a8:ec:c3:c1:f3:2a:8a:89:b9:77:47: ff:15:3d:54:5d:f3:2a:3c:1c:1d:44:6f:fd:c2:08:80:fc:3a: 02:12:bf:44:78:e7:aa:b1:3d:5e:ec:ee:76:14:12:01:06:f6: 50:18:ab:32:c4:b4:d1:b2:c6:78:33:96:98:28:0c:fc:5d:35: cc:81:bf:94:c2:d0:80:80:3a:0b:2f:ab:cf:59:ae:af:c2:88: 8b:09:22:13:ad:77:08:0c:eb:b6:6b:c6:c9:c3:2c:8e:07:8c: 01:9d:5b:0a:db:dc:05:9c:48:37:6e:34:e7:4c:ff:e7:5a:a0: 0a:45:87:c3:36:94:00:d5:4a:ec:b2:9b:f3:b8:8c:56:36:d7: 6f:28:0e:a1:7c:9c:7f:23:2b:5e:42:4a:9e:a0:ee:9f:07:f5: 44:4a:cc:48:f8:73:9a:97:88:15:02:b3:00:1b:80:13:71:23: c0:25:cc:2f:18:6e:b5:db:a0:6f:2c:fd:3f:67:78:95:08:34: 95:14:4e:bf:03:aa:7b:b0:4e:84:a8:69:3b:b4:80:23:e1:96: 3f:40:46:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtENz834siF5cQ+HAW6mjj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1 YjNlZjIwHhcNMjUxMjIyMDQwMDI5WhcNMjUxMjIzMDQwMDI5WjAzMTEwLwYDVQQD Eyg0ZmU5NjRmNjNmYjM5NmYyZmI5NDM1NTQzZDExN2U3MDE0ZjBmZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kvHKIQHOOifcLnsv5MV+9UBwnHi 5Qf4+WNEb6pka1R3AKnlozBJSh+MeAc4UJFzqEDkeb4V3he0UHIMbZWl2ADj5jTz pJlFiHs0ruX60RfCoted64gKyVNe7YIRgFy4fM16Chpop0AvsMPfoxCM+VDJkJND Y12Kw/umJ5XIrHCCp6to5+cjm3NrAdCRmG5pNQTFkRkudR9LvZWav09whm8C5aVr lZyU5Ma9jZ5Hm4rlNWNax1E8Ed25WTBoUDnDtaT7JY9IiS+IutAgACmbXR5gtx90 BrgwNFkIGN6hbqWaCg9A/b4WVKx8BfB6Hm4B/dPTziLTrXzSRQB9PLr5DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/pZPY/s5by+5Q1VD0RfnAU8P5LMB8GA1UdIwQY MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1 LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbjuVNPQ Y+4a+70E+I94NFkt0kWYg5/SWmB4wCEN4hClvX/Gr3ybxYwJeqjsw8HzKoqJuXdH /xU9VF3zKjwcHURv/cIIgPw6AhK/RHjnqrE9XuzudhQSAQb2UBirMsS00bLGeDOW mCgM/F01zIG/lMLQgIA6Cy+rz1mur8KIiwkiE613CAzrtmvGycMsjgeMAZ1bCtvc BZxIN24050z/51qgCkWHwzaUANVK7LKb87iMVjbXbygOoXycfyMrXkJKnqDunwf1 RErMSPhzmpeIFQKzABuAE3EjwCXMLxhutdugbyz9P2d4lQg0lRROvwOqe7BOhKhp O7SAI+GWP0BGJA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:59:27 2025 by rpki-client