This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json) Hash identifier: xdh2yi+NzgFXI7kE3t0jHeaM5+Sa5KBFKxJUCDDCq/k= Subject key identifier: E8:95:60:AB:88:AE:15:94:ED:28:6E:B1:9E:0D:B9:F6:B5:7A:3A:61 Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2 Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2 Certificate serial: 019B66FB535221D6B100C25CF987CDA8B1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 22:01:45 +0000 Manifest this update: Sun 28 Dec 2025 22:01:45 +0000 Manifest next update: Mon 29 Dec 2025 22:01:45 +0000 Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: kQxOR6zIY7rfISuxiFFLk3BKZkFOCSvTeeDtfNgSNlU=) 2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:53:52:21:d6:b1:00:c2:5c:f9:87:cd:a8:b1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2 Validity Not Before: Dec 28 22:01:45 2025 GMT Not After : Dec 29 22:01:45 2025 GMT Subject: CN=e89560ab88ae1594ed286eb19e0db9f6b57a3a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:b9:ee:68:fe:2c:dc:f7:4a:b8:7e:f9:a8: 72:3d:fe:58:e0:ea:74:76:96:1e:e5:82:e4:0a:ac: 0f:fa:5a:b2:35:b3:3e:e0:ab:fd:d1:ff:b8:23:c7: 91:7c:ea:ff:0a:a4:30:81:4c:99:75:a0:65:92:07: ff:90:a5:69:0b:85:2b:f9:44:8c:46:d5:70:d4:1a: 11:a9:82:00:7a:41:b9:65:ed:a6:6f:cb:ca:5b:ed: 40:24:cf:45:2b:3b:88:92:ba:63:cb:56:88:20:8f: 93:57:6d:8c:69:7e:a7:5a:66:21:d0:5d:46:cf:d7: 65:52:3d:91:39:ed:57:74:cb:7b:2d:95:53:9a:66: 63:24:25:c0:f3:5d:25:bd:80:81:ca:c9:1f:2f:62: bc:8d:21:c4:a7:12:46:b1:b3:4b:80:35:71:cd:f2: 5b:b8:92:b0:5b:5a:9c:bf:e0:b8:e0:1c:5b:6c:ee: e6:b7:b5:c6:18:8f:b3:2e:22:10:9a:81:05:d5:d5: 93:a1:55:1e:eb:66:02:ad:6f:e1:c9:38:da:39:0d: 7e:19:d1:a3:e8:61:94:3f:9b:19:44:c2:7f:ca:cb: a8:af:55:f0:16:14:45:98:c6:e9:82:cf:a7:d3:23: 82:0b:41:d6:4d:f1:e3:c9:8b:b9:b9:90:75:4f:41: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:95:60:AB:88:AE:15:94:ED:28:6E:B1:9E:0D:B9:F6:B5:7A:3A:61 X509v3 Authority Key Identifier: keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e3:5c:45:33:6f:71:49:c7:f3:a4:9e:7b:55:fe:97:a8:2f: 84:2d:c3:c8:43:55:44:51:75:08:1f:de:f6:3e:cd:3d:14:e2: 0c:86:fd:1e:b0:51:dc:39:bd:0b:54:86:37:fe:1a:8d:37:d1: 49:62:61:ef:d5:4e:c9:ef:15:2a:ef:48:d6:9a:37:13:d2:2c: ec:c7:93:90:fe:65:7d:5f:42:55:4b:8d:f2:88:25:5d:c5:5b: 3e:3e:e0:b2:a7:05:80:18:6f:6f:98:2a:d9:5e:50:cf:15:75: 12:0b:fd:12:72:da:11:73:02:5b:05:3b:f2:11:a1:f6:f3:79: f5:60:ba:21:3c:7c:ea:64:56:93:ce:f1:45:92:3e:fa:a2:1b: 72:e1:5c:be:e7:73:c0:9e:f7:7f:6e:52:04:a7:d9:8c:af:a7: f4:92:b0:9f:ec:e1:29:e4:36:3f:18:d2:63:21:61:90:50:af: 2b:fe:dc:22:73:5f:bb:5b:85:34:c8:53:c1:6d:8f:b0:cd:8e: 5b:98:a9:c8:ec:e1:b8:83:f6:70:94:8b:2e:65:a0:d5:e2:8d: ea:1b:d0:7d:3f:31:29:f2:81:c6:e9:99:a5:d4:c3:3e:ee:86: 56:0b:39:fc:0f:18:f7:26:f3:38:fb:2f:ec:ec:f7:03:e2:e7: 22:a8:e8:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+1NSIdaxAMJc+YfNqLGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1 YjNlZjIwHhcNMjUxMjI4MjIwMTQ1WhcNMjUxMjI5MjIwMTQ1WjAzMTEwLwYDVQQD EyhlODk1NjBhYjg4YWUxNTk0ZWQyODZlYjE5ZTBkYjlmNmI1N2EzYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Je57mj+LNz3Srh++ahyPf5Y4Op0 dpYe5YLkCqwP+lqyNbM+4Kv90f+4I8eRfOr/CqQwgUyZdaBlkgf/kKVpC4Ur+USM RtVw1BoRqYIAekG5Ze2mb8vKW+1AJM9FKzuIkrpjy1aIII+TV22MaX6nWmYh0F1G z9dlUj2ROe1XdMt7LZVTmmZjJCXA810lvYCByskfL2K8jSHEpxJGsbNLgDVxzfJb uJKwW1qcv+C44BxbbO7mt7XGGI+zLiIQmoEF1dWToVUe62YCrW/hyTjaOQ1+GdGj 6GGUP5sZRMJ/ysuor1XwFhRFmMbpgs+n0yOCC0HWTfHjyYu5uZB1T0HzFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiVYKuIrhWU7ShusZ4Nufa1ejphMB8GA1UdIwQY MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1 LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeNcRTNv cUnH86See1X+l6gvhC3DyENVRFF1CB/e9j7NPRTiDIb9HrBR3Dm9C1SGN/4ajTfR SWJh79VOye8VKu9I1po3E9Is7MeTkP5lfV9CVUuN8oglXcVbPj7gsqcFgBhvb5gq 2V5QzxV1Egv9EnLaEXMCWwU78hGh9vN59WC6ITx86mRWk87xRZI++qIbcuFcvudz wJ73f25SBKfZjK+n9JKwn+zhKeQ2PxjSYyFhkFCvK/7cInNfu1uFNMhTwW2PsM2O W5ipyOzhuIP2cJSLLmWg1eKN6hvQfT8xKfKBxumZpdTDPu6GVgs5/A8Y9ybzOPsv 7Oz3A+LnIqjoVg== -----END CERTIFICATE-----Generated at Mon Dec 29 01:52:20 2025 by rpki-client