This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json) Hash identifier: YB7+L/y/m7xJZNDUMCaed1z8CX9S2Vstx23xt1CE5Qk= Subject key identifier: 05:F0:7F:DC:84:0C:23:78:BA:03:A6:8F:6E:C9:35:A5:EC:1B:0A:E5 Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e Certificate serial: 019B3E6D1656D62EC80D899A19A6B49E2412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft Manifest number: 03CA Signing time: Sun 21 Dec 2025 01:01:35 +0000 Manifest this update: Sun 21 Dec 2025 01:01:35 +0000 Manifest next update: Mon 22 Dec 2025 01:01:35 +0000 Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: zGsZsgbYFSu96MBoLRZQ7xCURhZV+3nPeOnuV9FrT5s=) 2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=) 3: Eqq1hxnObNRaQRziaWuuBD1-O8o.roa (hash: jq17ziTa438haUw4I3TgAJRiuoEa3mnBNSNTDtlyTb8=) 4: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:16:56:d6:2e:c8:0d:89:9a:19:a6:b4:9e:24:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e Validity Not Before: Dec 21 01:01:35 2025 GMT Not After : Dec 22 01:01:35 2025 GMT Subject: CN=05f07fdc840c2378ba03a68f6ec935a5ec1b0ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:b0:0f:7f:9e:3d:14:66:9e:7e:ee:15:c3: 5e:dd:e8:61:8a:49:f7:68:8e:df:58:1e:7e:a7:73: 22:1c:7c:39:07:91:5a:c0:a8:00:1d:a1:8e:b2:38: 8f:2f:27:2c:0f:f1:c8:b8:cd:e5:b6:5f:43:61:95: 44:15:a1:66:76:c3:27:d6:2a:0e:c0:f7:6f:97:bb: b2:33:be:fb:1f:07:eb:32:03:45:42:83:1b:5b:e4: a1:d2:37:ce:87:42:64:80:15:a3:ae:4e:ed:f5:52: 13:9f:ac:a7:49:30:5d:5e:c6:c4:24:04:0e:1f:e8: a0:16:99:f7:ae:56:02:cc:26:15:d2:ee:f4:b1:da: a6:42:4c:3b:ba:fe:da:11:54:ca:33:49:6c:43:7c: 9a:f3:13:8d:49:7e:09:b9:40:f9:2f:68:58:5d:62: eb:fa:69:10:f6:70:ae:78:0e:ad:eb:a7:b9:66:73: 9f:11:e2:b7:b4:be:23:7f:e8:e9:ca:7e:bb:15:b4: 3c:cc:4f:c9:f1:38:4e:fe:ec:91:c5:7a:f9:91:17: ee:98:c4:df:c5:2a:9f:14:97:57:b4:15:7a:e0:d5: 07:88:74:89:ea:34:25:e2:83:59:78:83:2a:9f:5b: 67:0c:77:19:c2:78:be:09:34:88:6e:a3:19:b5:16: d2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F0:7F:DC:84:0C:23:78:BA:03:A6:8F:6E:C9:35:A5:EC:1B:0A:E5 X509v3 Authority Key Identifier: keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:79:4c:62:da:bb:a5:0f:9f:9a:f2:6d:f6:bb:80:96:26:28: 8a:19:5f:62:a5:86:ad:f3:2d:31:99:71:46:3e:1e:21:d1:2e: d2:65:9c:61:29:6a:f8:cf:98:f7:bb:2e:98:15:a0:31:5b:78: 70:08:e6:56:27:5d:f9:be:bf:48:2f:81:b8:9e:e0:80:b5:77: 57:67:b7:55:88:97:76:f8:fd:8c:e7:d2:27:f2:1a:04:11:e1: f3:e1:8a:0c:6d:ad:dd:8f:0d:39:ae:f0:22:4a:55:10:a7:01: 63:8e:30:9d:51:f7:75:13:11:3d:61:fc:ad:c2:04:01:b0:e9: f3:fb:f0:6f:7c:40:25:10:ba:1b:d9:c8:21:b9:29:22:df:4a: 17:dd:66:94:2a:67:45:37:57:89:03:13:7d:1d:e0:e1:7e:88: 33:ba:e6:a9:27:65:1b:9b:06:3d:f1:16:e2:f7:ff:b8:e2:a9: 9e:a7:cb:29:8b:42:a1:8b:d3:fa:8d:ad:73:88:4a:59:96:9d: c4:48:79:36:71:a8:ff:f4:80:da:eb:29:16:eb:a5:f5:af:25: ee:08:37:19:65:66:b9:14:98:25:b2:fb:d9:57:fc:0b:31:63: a9:89:da:b1:59:31:92:72:d5:25:13:b7:79:00:b5:e4:be:05: c3:55:cd:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bRZW1i7IDYmaGaa0niQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0 MTIxMmUwHhcNMjUxMjIxMDEwMTM1WhcNMjUxMjIyMDEwMTM1WjAzMTEwLwYDVQQD EygwNWYwN2ZkYzg0MGMyMzc4YmEwM2E2OGY2ZWM5MzVhNWVjMWIwYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA6wD3+ePRRmnn7uFcNe3ehhikn3 aI7fWB5+p3MiHHw5B5FawKgAHaGOsjiPLycsD/HIuM3ltl9DYZVEFaFmdsMn1ioO wPdvl7uyM777HwfrMgNFQoMbW+Sh0jfOh0JkgBWjrk7t9VITn6ynSTBdXsbEJAQO H+igFpn3rlYCzCYV0u70sdqmQkw7uv7aEVTKM0lsQ3ya8xONSX4JuUD5L2hYXWLr +mkQ9nCueA6t66e5ZnOfEeK3tL4jf+jpyn67FbQ8zE/J8ThO/uyRxXr5kRfumMTf xSqfFJdXtBV64NUHiHSJ6jQl4oNZeIMqn1tnDHcZwni+CTSIbqMZtRbSCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXwf9yEDCN4ugOmj27JNaXsGwrlMB8GA1UdIwQY MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHlMYtq7 pQ+fmvJt9ruAliYoihlfYqWGrfMtMZlxRj4eIdEu0mWcYSlq+M+Y97sumBWgMVt4 cAjmVidd+b6/SC+BuJ7ggLV3V2e3VYiXdvj9jOfSJ/IaBBHh8+GKDG2t3Y8NOa7w IkpVEKcBY44wnVH3dRMRPWH8rcIEAbDp8/vwb3xAJRC6G9nIIbkpIt9KF91mlCpn RTdXiQMTfR3g4X6IM7rmqSdlG5sGPfEW4vf/uOKpnqfLKYtCoYvT+o2tc4hKWZad xEh5NnGo//SA2uspFuul9a8l7gg3GWVmuRSYJbL72Vf8CzFjqYnasVkxknLVJRO3 eQC15L4Fw1XNkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:21 2025 by rpki-client