This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json) Hash identifier: OT92tlSvsRCITxQguIBGZ3yRuA71qRpLeYStQ5K1hkA= Subject key identifier: 03:0E:8D:22:FE:F3:F6:2A:38:25:2C:DB:EE:CD:EC:BE:91:60:D3:9C Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19 Certificate serial: 019B48827C533848712CB154ED22F403BEB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft Manifest number: 151B Signing time: Tue 23 Dec 2025 00:01:09 +0000 Manifest this update: Tue 23 Dec 2025 00:01:09 +0000 Manifest next update: Wed 24 Dec 2025 00:01:09 +0000 Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: yUrkEM3RID0dz1/q2S9gichX6tahaO5x2bVpmBtwI30=) 2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:7c:53:38:48:71:2c:b1:54:ed:22:f4:03:be:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19 Validity Not Before: Dec 23 00:01:09 2025 GMT Not After : Dec 24 00:01:09 2025 GMT Subject: CN=030e8d22fef3f62a38252cdbeecdecbe9160d39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:d3:4f:23:f5:b2:3d:e3:89:81:ac:ad:cc: a3:64:fb:0c:e6:b9:a6:3c:bb:89:01:fe:21:18:41: 4a:4e:7b:f0:b3:97:14:be:28:1f:ae:0d:f3:05:6b: 28:2d:1b:e5:4e:5b:9f:73:e5:1c:a6:68:ef:ee:05: 72:5f:6e:4d:c9:09:d3:d2:31:2d:07:01:09:24:97: 65:a1:c8:84:c6:51:d3:27:c5:c2:1d:d3:ef:32:12: ca:f4:71:06:f1:2d:2d:0b:c9:d8:4a:6a:d5:14:ee: 2a:fe:ca:e8:c6:66:43:68:09:5f:18:c9:c1:ae:58: 5b:c0:a2:73:79:c3:be:bd:b5:9d:5d:43:57:d0:17: 8f:2e:5b:fb:71:d9:07:cb:04:84:83:15:64:fa:63: 4c:5d:47:ae:d5:90:4f:00:41:fa:c7:e0:b9:a8:32: dc:0e:c1:e7:d8:72:b2:cb:ec:84:db:a9:ee:da:1e: 9f:a8:8c:0a:c2:d1:9a:24:dd:47:44:0a:5c:55:b8: 27:d8:24:04:d9:9a:5e:0c:61:0d:75:87:e0:19:44: 3b:c9:fd:20:a3:d2:ce:ad:a1:47:e1:f2:64:ba:d9: fc:e4:3e:bf:41:22:85:c0:35:39:41:c6:78:97:83: 28:88:49:e8:b2:a8:42:7c:3b:30:88:1a:be:59:63: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0E:8D:22:FE:F3:F6:2A:38:25:2C:DB:EE:CD:EC:BE:91:60:D3:9C X509v3 Authority Key Identifier: keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:59:10:c7:05:60:55:8e:5e:e2:ad:6b:a1:62:70:3f:f7: 68:6d:e8:42:7e:e4:58:36:21:3e:d9:b7:08:2c:1b:37:50:a0: 6d:5e:00:bb:cd:cc:67:a9:6e:ad:c8:6a:7c:61:91:0a:ee:0a: 1a:d4:b1:e0:81:99:d7:15:11:4a:0c:6e:b6:3b:c7:1f:37:84: 82:c9:47:57:b5:bb:44:34:45:1e:cc:e4:dc:30:6d:c4:65:d8: 50:78:19:3f:00:c3:0e:8d:d1:c6:40:bc:b7:a8:fe:03:ba:9b: 96:21:61:96:b7:fc:42:2c:56:c4:a1:72:98:05:6f:03:a9:cd: f5:4f:54:90:b0:c4:73:1f:60:bd:ac:15:a6:c9:76:ca:bd:57: 5b:42:d2:dd:c2:e6:09:95:2c:f6:15:ba:ac:dc:40:0a:a5:20: d7:9c:22:a1:e7:26:db:13:f7:84:a8:65:0c:c6:b4:00:66:c1: 7a:40:04:10:d3:08:68:bc:47:e5:cc:8f:1e:c5:df:45:79:f9: ac:8f:d0:ab:33:de:ea:d2:69:4c:16:6d:ff:b4:38:ac:a9:da: e9:4e:f9:c1:61:a4:4f:9a:ca:dd:8a:74:a3:81:83:b9:58:3d: 31:da:71:d3:d8:cc:43:b9:04:81:d9:f4:f1:c2:49:27:97:40: 2a:fb:be:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgnxTOEhxLLFU7SL0A765MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3 N2ZkMTkwHhcNMjUxMjIzMDAwMTA5WhcNMjUxMjI0MDAwMTA5WjAzMTEwLwYDVQQD EygwMzBlOGQyMmZlZjNmNjJhMzgyNTJjZGJlZWNkZWNiZTkxNjBkMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppnTTyP1sj3jiYGsrcyjZPsM5rmm PLuJAf4hGEFKTnvws5cUvigfrg3zBWsoLRvlTlufc+Ucpmjv7gVyX25NyQnT0jEt BwEJJJdlociExlHTJ8XCHdPvMhLK9HEG8S0tC8nYSmrVFO4q/sroxmZDaAlfGMnB rlhbwKJzecO+vbWdXUNX0BePLlv7cdkHywSEgxVk+mNMXUeu1ZBPAEH6x+C5qDLc DsHn2HKyy+yE26nu2h6fqIwKwtGaJN1HRApcVbgn2CQE2ZpeDGENdYfgGUQ7yf0g o9LOraFH4fJkutn85D6/QSKFwDU5QcZ4l4MoiEnosqhCfDswiBq+WWOWswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMOjSL+8/YqOCUs2+7N7L6RYNOcMB8GA1UdIwQY MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHVZEMcF YFWOXuKta6FicD/3aG3oQn7kWDYhPtm3CCwbN1CgbV4Au83MZ6lurchqfGGRCu4K GtSx4IGZ1xURSgxutjvHHzeEgslHV7W7RDRFHszk3DBtxGXYUHgZPwDDDo3RxkC8 t6j+A7qbliFhlrf8QixWxKFymAVvA6nN9U9UkLDEcx9gvawVpsl2yr1XW0LS3cLm CZUs9hW6rNxACqUg15wioecm2xP3hKhlDMa0AGbBekAEENMIaLxH5cyPHsXfRXn5 rI/QqzPe6tJpTBZt/7Q4rKna6U75wWGkT5rK3Yp0o4GDuVg9Mdpx09jMQ7kEgdn0 8cJJJ5dAKvu+yA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:29 2025 by rpki-client