This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft File: Cq4aYFi73NCDUGjjtPneUfK9kFc.mft (raw, json) Hash identifier: bJIRHwcBLZcWqrLo6jlvS+5zL7imi/VKMDjpnUAPl40= Subject key identifier: 7C:FD:66:A1:FC:AE:B3:81:40:70:09:62:04:E1:68:4E:95:5F:E3:6B Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57 Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057 Certificate serial: 019B42B733EE1A94878F5026BEFEFF8DE08A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft Manifest number: 1186 Signing time: Sun 21 Dec 2025 21:01:01 +0000 Manifest this update: Sun 21 Dec 2025 21:01:01 +0000 Manifest next update: Mon 22 Dec 2025 21:01:01 +0000 Files and hashes: 1: 1-wt4KP4ZyrvPLe15q7PV87j5ouc.roa (hash: YZnIrYBAzViRIOg0Z2wubi6eZGwgwJHXDai7+0T2WrY=) 2: Cq4aYFi73NCDUGjjtPneUfK9kFc.crl (hash: zVR3vAXT/B835RDM39MZR+4NTP526lb2AnbGrfr7LPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:33:ee:1a:94:87:8f:50:26:be:fe:ff:8d:e0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057 Validity Not Before: Dec 21 21:01:01 2025 GMT Not After : Dec 22 21:01:01 2025 GMT Subject: CN=7cfd66a1fcaeb3814070096204e1684e955fe36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:0f:62:14:52:5b:b3:e5:6b:0e:97:1e:1d: 9a:e7:d2:ba:6e:66:3f:ff:3e:f0:b7:ec:2c:5d:c4: 04:26:48:82:9d:64:d4:00:99:f4:d7:d0:77:cb:63: d9:3a:a0:7f:9f:fe:84:99:34:3a:33:e8:5e:c0:c3: e0:ad:12:b8:12:97:0f:93:ab:fd:80:1c:82:13:f0: 0d:19:e7:58:e7:e4:d0:03:5a:53:43:44:69:73:9f: e6:a4:e6:1e:92:38:2f:8e:1f:ba:91:8f:85:60:a0: ee:e5:bd:a5:29:72:66:77:a8:7f:b3:60:e9:76:69: 0b:a1:60:ef:c5:aa:89:5e:92:06:d2:b4:50:04:61: 8c:8c:08:68:7c:4a:96:cf:74:52:c1:82:9c:c6:ad: 1a:73:2a:b6:8c:7f:8b:ae:03:57:ab:18:75:14:9b: 16:1a:7b:5b:80:5b:df:a9:0f:6f:c1:11:75:9f:c5: d4:7d:58:02:1d:7c:55:97:db:55:91:46:f1:74:c6: a9:dd:63:fa:a9:f8:28:16:c9:63:80:69:76:d5:91: 5c:df:e9:74:83:e0:49:52:9c:b2:e8:5e:48:e4:1d: 46:9c:f1:5d:38:8b:4e:c0:ea:20:56:0f:e0:9c:af: a2:d6:d1:98:dc:26:b9:8c:58:f7:1f:12:58:bd:91: 89:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FD:66:A1:FC:AE:B3:81:40:70:09:62:04:E1:68:4E:95:5F:E3:6B X509v3 Authority Key Identifier: keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cf:b1:f0:d7:2d:98:17:76:ad:8c:f5:5c:d3:4f:08:22:89: 49:8e:37:bb:3b:b3:c8:fc:33:ac:6b:b5:ae:d1:7b:27:38:ba: a4:5d:3a:81:56:25:ad:44:cb:f2:41:4d:47:91:12:49:e6:5b: 67:07:a2:bd:ed:7f:c2:a4:6b:30:19:9d:a7:ca:f7:2e:8f:5d: ac:70:a8:b9:2b:f4:d8:a7:c6:d9:32:7a:c6:b5:75:b7:70:07: ac:e0:7f:c3:8c:f6:87:b7:a1:31:41:15:ee:c5:25:69:d1:16: 64:1b:f7:c9:30:ec:ce:2c:b6:a0:53:7d:cc:22:fc:e7:ac:d8: 53:e3:ae:44:61:d7:f7:6c:73:c0:03:0c:66:29:ae:5f:6a:b2: 27:62:92:84:1d:b1:65:95:8d:3f:bd:36:67:d2:d6:23:6b:bb: e9:60:8e:b1:40:28:6e:97:81:40:b4:ef:b4:7b:cf:ae:3e:6c: a4:22:24:c3:44:31:4d:02:6b:0c:35:2a:02:09:34:f6:63:92: d5:83:01:82:5a:46:eb:1a:54:d6:e9:b5:d1:67:50:06:d2:80: cd:4b:ed:81:9a:cc:4e:cd:cc:6a:bb:bc:b1:b2:9b:ec:70:d1: b3:47:cf:ff:05:33:da:80:69:7f:2a:ce:eb:7c:c2:9d:3a:72: 9a:60:43:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtzPuGpSHj1Amvv7/jeCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYWUxYTYwNThiYmRjZDA4MzUwNjhlM2I0ZjlkZTUxZjJi ZDkwNTcwHhcNMjUxMjIxMjEwMTAxWhcNMjUxMjIyMjEwMTAxWjAzMTEwLwYDVQQD Eyg3Y2ZkNjZhMWZjYWViMzgxNDA3MDA5NjIwNGUxNjg0ZTk1NWZlMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmIPYhRSW7Plaw6XHh2a59K6bmY/ /z7wt+wsXcQEJkiCnWTUAJn019B3y2PZOqB/n/6EmTQ6M+hewMPgrRK4EpcPk6v9 gByCE/ANGedY5+TQA1pTQ0Rpc5/mpOYekjgvjh+6kY+FYKDu5b2lKXJmd6h/s2Dp dmkLoWDvxaqJXpIG0rRQBGGMjAhofEqWz3RSwYKcxq0acyq2jH+LrgNXqxh1FJsW GntbgFvfqQ9vwRF1n8XUfVgCHXxVl9tVkUbxdMap3WP6qfgoFsljgGl21ZFc3+l0 g+BJUpyy6F5I5B1GnPFdOItOwOogVg/gnK+i1tGY3Ca5jFj3HxJYvZGJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHz9ZqH8rrOBQHAJYgThaE6VX+NrMB8GA1UdIwQY MBaAFAquGmBYu9zQg1Bo47T53lHyvZBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAt YjIyNDdiM2E1MmQ4LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny85YzBiMmUtN2JlOS00YmM0LTkzMjAtYjIyNDdiM2E1MmQ4 LzEvQ3E0YVlGaTczTkNEVUdqanRQbmVVZks5a0ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjc+x8Nct mBd2rYz1XNNPCCKJSY43uzuzyPwzrGu1rtF7Jzi6pF06gVYlrUTL8kFNR5ESSeZb Zweive1/wqRrMBmdp8r3Lo9drHCouSv02KfG2TJ6xrV1t3AHrOB/w4z2h7ehMUEV 7sUladEWZBv3yTDsziy2oFN9zCL856zYU+OuRGHX92xzwAMMZimuX2qyJ2KShB2x ZZWNP702Z9LWI2u76WCOsUAobpeBQLTvtHvPrj5spCIkw0QxTQJrDDUqAgk09mOS 1YMBglpG6xpU1um10WdQBtKAzUvtgZrMTs3Maru8sbKb7HDRs0fP/wUz2oBpfyrO 63zCnTpymmBD3w== -----END CERTIFICATE-----Generated at Mon Dec 22 06:28:45 2025 by rpki-client