This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json) Hash identifier: Bja2NrzK/xu1nMSAPoNhiZzoURx513MI8Qd4SlnWjUM= Subject key identifier: AA:0A:F0:7E:1C:A3:87:D8:90:FF:D2:DD:7E:D2:B8:48:32:32:99:22 Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Certificate serial: 019B3B346E872D92B215266F931FEAF1AC80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft Manifest number: 14CF Signing time: Sat 20 Dec 2025 10:00:50 +0000 Manifest this update: Sat 20 Dec 2025 10:00:50 +0000 Manifest next update: Sun 21 Dec 2025 10:00:50 +0000 Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: piAfnt1vtBMVB303nH3gqNZGlPT13w853dNStU1cDdg=) 2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:6e:87:2d:92:b2:15:26:6f:93:1f:ea:f1:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Validity Not Before: Dec 20 10:00:50 2025 GMT Not After : Dec 21 10:00:50 2025 GMT Subject: CN=aa0af07e1ca387d890ffd2dd7ed2b84832329922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:8c:45:07:bb:c3:33:18:32:44:cd:d5:ad: ea:38:c8:21:6f:86:8e:e4:97:b8:1b:97:d1:16:b0: e5:dc:8a:12:86:a4:1e:e7:9f:da:d7:8e:6c:d8:06: 39:16:a7:1d:45:ab:18:06:92:af:2c:d6:2d:1e:73: b3:90:16:dd:04:bc:57:08:e5:d4:72:f4:56:1d:68: 7c:80:b2:cb:0e:95:ba:bc:9b:db:d4:ce:fa:f2:e9: e8:7e:25:c3:d5:89:22:4a:41:3c:82:69:44:5d:83: e9:60:0b:a4:b0:4f:7c:24:6c:3e:d7:e2:35:33:5b: 2e:00:13:85:47:59:3e:d3:55:d5:30:a1:6a:ec:38: 28:e9:01:01:8a:52:06:11:59:64:df:48:89:93:88: 59:88:35:30:68:7e:6c:f1:20:98:33:c3:b1:5f:c0: fe:42:14:8b:59:db:62:7f:b0:02:22:38:58:fd:f2: e5:fb:c9:80:e7:1a:03:2e:44:f2:a0:04:a5:6f:38: ad:36:01:52:12:cc:15:5d:f6:46:bf:29:3e:a8:4c: 5f:17:56:c8:0c:61:5b:ed:df:da:73:6d:e7:e3:df: 09:c2:c3:27:6f:e4:5e:ee:4e:c2:65:e2:cc:0e:52: e8:75:b1:ce:e9:dd:ac:a8:b2:08:40:9e:43:ac:c8: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:F0:7E:1C:A3:87:D8:90:FF:D2:DD:7E:D2:B8:48:32:32:99:22 X509v3 Authority Key Identifier: keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:62:47:4d:6e:52:9f:28:84:a8:93:ab:3f:bc:38:37:2c:4a: ac:28:df:42:62:1a:10:97:c7:de:c2:f3:6a:8e:58:23:c7:ba: 5f:51:24:bb:03:79:cb:41:fd:b5:fa:5e:c6:58:36:f4:34:fb: 03:e3:70:08:a2:95:3e:28:54:9f:33:b4:14:03:e2:25:4a:41: dd:03:3c:6a:10:71:91:48:fd:8c:36:dc:d2:5e:ca:db:70:a2: 51:2e:ad:f4:e7:b0:a4:b3:0e:4e:fd:a8:c1:ba:82:97:d7:48: 56:42:70:4d:3d:c8:78:d3:bc:ce:68:b1:ac:e8:ca:4d:e1:ef: 3a:dd:ab:82:f1:fd:1f:af:e4:3d:f3:81:e1:1d:83:17:cc:c1: 1d:55:0c:d0:1f:0d:9f:81:73:44:fb:0b:56:27:88:64:5b:e8: e0:b1:82:b2:11:c8:3e:bd:97:ce:74:d6:11:26:47:50:b8:0c: 08:5a:7f:2a:96:1a:07:d8:e3:c2:76:fe:f7:04:4f:fb:d3:d8: 43:75:57:51:ec:4a:1f:e5:75:05:b7:ad:fc:be:1e:41:00:c6: 76:07:39:cb:a5:57:c7:f8:d2:9a:73:d2:97:8a:be:57:ac:ee: bd:a5:24:b7:9a:cb:13:74:55:bc:73:21:9f:0c:a9:0e:e4:e5: 61:9c:b7:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NG6HLZKyFSZvkx/q8ayAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5 NjdmMDIwHhcNMjUxMjIwMTAwMDUwWhcNMjUxMjIxMTAwMDUwWjAzMTEwLwYDVQQD EyhhYTBhZjA3ZTFjYTM4N2Q4OTBmZmQyZGQ3ZWQyYjg0ODMyMzI5OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxaMRQe7wzMYMkTN1a3qOMghb4aO 5Je4G5fRFrDl3IoShqQe55/a145s2AY5FqcdRasYBpKvLNYtHnOzkBbdBLxXCOXU cvRWHWh8gLLLDpW6vJvb1M768unofiXD1YkiSkE8gmlEXYPpYAuksE98JGw+1+I1 M1suABOFR1k+01XVMKFq7Dgo6QEBilIGEVlk30iJk4hZiDUwaH5s8SCYM8OxX8D+ QhSLWdtif7ACIjhY/fLl+8mA5xoDLkTyoASlbzitNgFSEswVXfZGvyk+qExfF1bI DGFb7d/ac23n498JwsMnb+Re7k7CZeLMDlLodbHO6d2sqLIIQJ5DrMhVUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoK8H4co4fYkP/S3X7SuEgyMpkiMB8GA1UdIwQY MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmJHTW5S nyiEqJOrP7w4NyxKrCjfQmIaEJfH3sLzao5YI8e6X1EkuwN5y0H9tfpexlg29DT7 A+NwCKKVPihUnzO0FAPiJUpB3QM8ahBxkUj9jDbc0l7K23CiUS6t9OewpLMOTv2o wbqCl9dIVkJwTT3IeNO8zmixrOjKTeHvOt2rgvH9H6/kPfOB4R2DF8zBHVUM0B8N n4FzRPsLVieIZFvo4LGCshHIPr2XznTWESZHULgMCFp/KpYaB9jjwnb+9wRP+9PY Q3VXUexKH+V1Bbet/L4eQQDGdgc5y6VXx/jSmnPSl4q+V6zuvaUkt5rLE3RVvHMh nwypDuTlYZy38Q== -----END CERTIFICATE-----Generated at Sat Dec 20 15:26:14 2025 by rpki-client