This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json) Hash identifier: hbYYcnpCZLl57QnoI4dRsIvCXnCSh8PhpeJJLH74HG8= Subject key identifier: 52:58:E0:A4:86:90:0D:DB:B8:32:53:05:2C:71:D4:AC:54:6B:13:E2 Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98 Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398 Certificate serial: 019B3F4877B14BB1982F1992A1E58DC76902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft Manifest number: 0538 Signing time: Sun 21 Dec 2025 05:01:12 +0000 Manifest this update: Sun 21 Dec 2025 05:01:12 +0000 Manifest next update: Mon 22 Dec 2025 05:01:12 +0000 Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: f9Mb1//UfW9V5rKR0T7WcZEFzpSFaGFAthLxJPNo64Y=) 2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:77:b1:4b:b1:98:2f:19:92:a1:e5:8d:c7:69:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398 Validity Not Before: Dec 21 05:01:12 2025 GMT Not After : Dec 22 05:01:12 2025 GMT Subject: CN=5258e0a486900ddbb83253052c71d4ac546b13e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a0:05:49:30:38:b2:07:98:c7:ce:35:7e:05: e3:ce:74:8d:31:14:4c:01:a5:fd:1f:18:cd:b7:cd: 5d:21:df:05:c5:42:c5:5a:18:b5:3d:9c:03:4d:64: b9:09:9c:85:6b:45:1e:43:4d:22:13:13:b1:47:16: ab:1a:f6:72:64:a1:8b:8e:39:53:2c:94:f0:7d:b5: c6:67:92:d0:90:5e:bc:11:7b:00:24:96:a9:ca:dd: 66:24:22:4d:fa:c0:b1:14:57:42:a7:f3:d7:4a:2b: c6:89:c1:ef:62:a0:e3:aa:fc:0b:aa:ec:57:68:2d: 62:de:d9:95:db:59:79:c7:7a:85:1e:30:b0:21:4e: f5:70:c4:63:ed:0d:6e:1e:ca:d6:34:e5:bc:4b:18: fa:48:f3:45:7f:f0:eb:f8:38:97:5b:1c:0e:df:ff: a6:99:0a:e4:40:6d:50:e2:e5:a2:14:70:38:cd:f9: 71:59:2b:0e:9a:4f:56:36:f8:e6:e0:01:aa:18:b7: e2:85:26:1e:be:e2:bc:8f:6a:ed:df:43:b9:42:9e: 03:44:21:50:b5:6b:4e:91:97:88:c4:f4:aa:82:0b: c9:93:39:24:44:11:45:16:90:56:93:bc:29:ea:28: 84:95:cf:30:c2:4a:81:52:a2:a0:16:f3:67:dd:32: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:58:E0:A4:86:90:0D:DB:B8:32:53:05:2C:71:D4:AC:54:6B:13:E2 X509v3 Authority Key Identifier: keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:47:74:fc:aa:07:f2:5f:a7:30:de:32:41:bf:26:e9:03:eb: 4d:29:bb:bb:ad:39:a6:ce:f7:8e:c1:e0:8f:c9:5b:02:f9:a9: 42:d1:dc:cd:7b:ad:04:b7:2c:06:fb:b7:31:bd:a0:21:3f:7c: 70:33:cf:ad:ad:dc:bf:28:84:a2:2d:d7:eb:6a:70:2f:95:16: bb:40:c5:e9:39:02:69:37:d5:38:d4:3a:d5:9a:74:88:54:61: a9:02:5a:05:e3:73:87:b9:72:05:71:e7:20:91:c2:43:c0:73: 7d:f1:7d:ff:82:16:8b:c5:b9:45:b7:e6:ac:6b:ec:8b:36:74: e4:c5:87:5e:93:ca:73:90:b1:96:fc:17:7e:b8:db:1b:ed:4f: af:c5:99:7a:a7:86:c8:70:cf:65:46:05:0b:ce:9d:3c:8a:03: 2c:f2:88:56:5f:1c:65:d1:12:16:eb:58:4f:71:55:33:75:bf: be:14:65:14:89:8a:5c:a3:77:71:7f:1b:0c:06:08:93:41:fa: 9e:49:53:9b:c7:e7:f0:19:ca:e7:cb:e0:e9:0b:fd:f9:90:f3: 4c:1a:80:f4:15:ed:04:47:39:c3:fb:74:42:51:05:13:4e:ba: ca:87:88:28:46:98:e6:04:94:8d:92:dc:d4:fd:bc:20:95:1e: 34:3e:09:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SHexS7GYLxmSoeWNx2kCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NWFmODFiOTllYmY0ODJmM2M2YjUzNTFlMjllMjhhMmUy MGIzOTgwHhcNMjUxMjIxMDUwMTEyWhcNMjUxMjIyMDUwMTEyWjAzMTEwLwYDVQQD Eyg1MjU4ZTBhNDg2OTAwZGRiYjgzMjUzMDUyYzcxZDRhYzU0NmIxM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaAFSTA4sgeYx841fgXjznSNMRRM AaX9HxjNt81dId8FxULFWhi1PZwDTWS5CZyFa0UeQ00iExOxRxarGvZyZKGLjjlT LJTwfbXGZ5LQkF68EXsAJJapyt1mJCJN+sCxFFdCp/PXSivGicHvYqDjqvwLquxX aC1i3tmV21l5x3qFHjCwIU71cMRj7Q1uHsrWNOW8Sxj6SPNFf/Dr+DiXWxwO3/+m mQrkQG1Q4uWiFHA4zflxWSsOmk9WNvjm4AGqGLfihSYevuK8j2rt30O5Qp4DRCFQ tWtOkZeIxPSqggvJkzkkRBFFFpBWk7wp6iiElc8wwkqBUqKgFvNn3TKvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJY4KSGkA3buDJTBSxx1KxUaxPiMB8GA1UdIwQY MBaAFAha+BuZ6/SC88a1NR4p4oouILOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQt YzI4ZDE0YzdiNzMxLzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wODQwZTktNzE5OS00ZTAzLTg0ZmQtYzI4ZDE0YzdiNzMx LzEvQ0ZyNEc1bnI5SUx6eHJVMUhpbmlpaTRnczVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkd0/KoH 8l+nMN4yQb8m6QPrTSm7u605ps73jsHgj8lbAvmpQtHczXutBLcsBvu3Mb2gIT98 cDPPra3cvyiEoi3X62pwL5UWu0DF6TkCaTfVONQ61Zp0iFRhqQJaBeNzh7lyBXHn IJHCQ8BzffF9/4IWi8W5RbfmrGvsizZ05MWHXpPKc5CxlvwXfrjbG+1Pr8WZeqeG yHDPZUYFC86dPIoDLPKIVl8cZdESFutYT3FVM3W/vhRlFImKXKN3cX8bDAYIk0H6 nklTm8fn8BnK58vg6Qv9+ZDzTBqA9BXtBEc5w/t0QlEFE066yoeIKEaY5gSUjZLc 1P28IJUeND4J+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 13:09:24 2025 by rpki-client