This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json) Hash identifier: LLvzJAVYQkEL/cY2RKRhpnP+Kfbcw/H6oCMWwNSsnIA= Subject key identifier: 8C:81:CE:E2:41:AD:D4:88:D8:B3:39:32:53:6F:69:56:2B:1A:CE:13 Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a Certificate serial: 019B40C863597C74A81DAA09126FB5994009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft Manifest number: 0764 Signing time: Sun 21 Dec 2025 12:00:32 +0000 Manifest this update: Sun 21 Dec 2025 12:00:32 +0000 Manifest next update: Mon 22 Dec 2025 12:00:32 +0000 Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: ZRLcZD/EVs81nJ/OvfiQuWO71rqwVD4kTu2SX7z46WE=) 2: D4WSO03jiEw1kzb7ndTCvZppED8.roa (hash: 91K1tOs91bcoBI4JkBxfYAcoNFaPEkkdbj6eyaYsnvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:63:59:7c:74:a8:1d:aa:09:12:6f:b5:99:40:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a Validity Not Before: Dec 21 12:00:32 2025 GMT Not After : Dec 22 12:00:32 2025 GMT Subject: CN=8c81cee241add488d8b33932536f69562b1ace13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:07:24:df:59:4f:47:d5:8b:81:97:5b:e5: 0b:02:31:0b:a1:05:b5:8a:18:a0:32:eb:e6:bd:e7: f4:e3:55:49:51:9b:06:87:b8:91:a3:0e:72:c9:72: 4a:e2:c9:7f:00:2b:1e:41:f9:d4:86:33:d8:c2:84: fb:3a:c4:03:4f:1e:02:82:2e:fe:1c:27:55:61:c0: c5:a0:0b:e1:ee:ae:c8:f4:47:32:85:c9:5a:3d:11: 54:aa:c4:f8:0f:ee:0c:67:5e:11:3f:46:33:39:7d: a2:52:ad:be:0f:96:3b:2a:cc:95:f8:96:cf:5f:3e: 47:54:0e:b7:df:8e:4d:0e:ae:ca:78:d7:e7:6e:e5: 76:c8:af:ce:b7:95:1a:4a:2e:13:47:64:2d:59:fa: 63:3d:39:05:e2:4c:0a:b7:fa:7f:e5:7a:62:2e:3e: 97:b6:10:82:88:a1:2f:96:8b:86:c8:0d:c5:3d:bf: 06:fd:71:18:d3:31:55:90:01:de:db:1a:ed:e5:b6: de:5e:18:55:73:be:45:76:db:dd:d4:4d:5f:33:31: b2:03:a4:e2:dc:70:e4:d1:97:6b:01:3b:12:c5:8c: 9d:5a:1a:03:e4:7a:53:99:9b:64:bc:5c:b4:ec:9e: 86:6b:44:f9:7c:a2:87:79:b7:3c:49:35:1b:19:8a: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:81:CE:E2:41:AD:D4:88:D8:B3:39:32:53:6F:69:56:2B:1A:CE:13 X509v3 Authority Key Identifier: keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ff:17:65:ca:3d:bc:12:f7:37:53:0c:a3:f7:71:d6:27:30: 71:73:17:8d:cb:0d:29:ec:94:94:ea:01:57:29:96:63:43:41: f4:cb:67:1e:05:11:b7:af:7c:d3:a4:ef:8b:52:b7:98:68:30: cd:05:c4:a5:f9:0a:b3:20:fb:2a:6a:29:56:e3:90:af:43:e8: 49:4d:9c:9a:ac:56:82:1a:e5:c7:6a:d6:5e:b5:f3:6d:54:60: 5d:57:ed:54:12:57:34:78:1c:b3:f9:9e:b3:9c:c0:a4:47:23: c2:56:a3:84:28:d8:5c:02:57:5f:a1:01:0f:da:fa:69:9d:70: cc:1c:c9:c7:9e:73:e5:74:1a:e3:34:13:0d:b3:40:7a:18:1f: 60:07:f1:dc:f4:b7:1b:51:58:25:f2:f0:0b:6d:a0:ae:4a:39: d4:01:1d:ee:4c:1f:50:7f:81:c3:ce:da:ac:21:bd:76:bd:0f: 06:54:38:a1:0d:35:98:e3:41:f4:97:b1:46:9b:7b:00:9d:b9: 2a:95:49:74:3f:fd:82:97:8d:cc:a3:94:d9:f2:23:2e:a5:d1: af:9b:9a:d0:d7:a0:06:b3:1b:69:c5:0c:14:46:c9:e4:33:8b: a5:6e:34:93:b1:7d:7d:da:82:46:40:11:3e:ab:05:96:9d:80: f6:b5:2e:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGNZfHSoHaoJEm+1mUAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5M2FkMDhhZDczYzJhYzQzOGFjNjk4MTYzODFlN2FhM2U4 NjU3OWEwHhcNMjUxMjIxMTIwMDMyWhcNMjUxMjIyMTIwMDMyWjAzMTEwLwYDVQQD Eyg4YzgxY2VlMjQxYWRkNDg4ZDhiMzM5MzI1MzZmNjk1NjJiMWFjZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrQHJN9ZT0fVi4GXW+ULAjELoQW1 ihigMuvmvef041VJUZsGh7iRow5yyXJK4sl/ACseQfnUhjPYwoT7OsQDTx4Cgi7+ HCdVYcDFoAvh7q7I9EcyhclaPRFUqsT4D+4MZ14RP0YzOX2iUq2+D5Y7KsyV+JbP Xz5HVA63345NDq7KeNfnbuV2yK/Ot5UaSi4TR2QtWfpjPTkF4kwKt/p/5XpiLj6X thCCiKEvlouGyA3FPb8G/XEY0zFVkAHe2xrt5bbeXhhVc75Fdtvd1E1fMzGyA6Ti 3HDk0ZdrATsSxYydWhoD5HpTmZtkvFy07J6Ga0T5fKKHebc8STUbGYrMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyBzuJBrdSI2LM5MlNvaVYrGs4TMB8GA1UdIwQY MBaAFAk60IrXPCrEOKxpgWOB56o+hleaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWIt NDFhYTQ3NWQxNWI4LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wOTU5ODUtZDBkYy00ZDQxLTk4ZWItNDFhYTQ3NWQxNWI4 LzEvQ1RyUWl0YzhLc1E0ckdtQlk0SG5xajZHVjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP8XZco9 vBL3N1MMo/dx1icwcXMXjcsNKeyUlOoBVymWY0NB9MtnHgURt69806Tvi1K3mGgw zQXEpfkKsyD7KmopVuOQr0PoSU2cmqxWghrlx2rWXrXzbVRgXVftVBJXNHgcs/me s5zApEcjwlajhCjYXAJXX6EBD9r6aZ1wzBzJx55z5XQa4zQTDbNAehgfYAfx3PS3 G1FYJfLwC22grko51AEd7kwfUH+Bw87arCG9dr0PBlQ4oQ01mONB9JexRpt7AJ25 KpVJdD/9gpeNzKOU2fIjLqXRr5ua0NegBrMbacUMFEbJ5DOLpW40k7F9fdqCRkAR PqsFlp2A9rUuEg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:10:26 2025 by rpki-client