This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json) Hash identifier: HAHvzsbch6Q7wBCM589oz7gErU3k1lxVDd5cERKBuXw= Subject key identifier: 48:94:DB:09:D5:14:11:C4:A7:B1:ED:CC:EC:96:B6:12:6D:8C:07:3E Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Certificate serial: 019B65B0C153E22B189DF0BE64613C7EE0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft Manifest number: 033D Signing time: Sun 28 Dec 2025 16:00:41 +0000 Manifest this update: Sun 28 Dec 2025 16:00:41 +0000 Manifest next update: Mon 29 Dec 2025 16:00:41 +0000 Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: NngojfbAOJNuRs3qIjVYU/dkbDdfI2jYd/dv7jbZetI=) 2: H2ZOh9fIAnQ96NovacR2PdzVa0g.roa (hash: +nBuIb1Jhz2syXSr6RgoJwf6cbGP9SV27ZeU9ljDCeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b0:c1:53:e2:2b:18:9d:f0:be:64:61:3c:7e:e0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Validity Not Before: Dec 28 16:00:41 2025 GMT Not After : Dec 29 16:00:41 2025 GMT Subject: CN=4894db09d51411c4a7b1edccec96b6126d8c073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:87:19:58:8c:93:f2:5e:25:9a:3f:ad:26:d9: 2b:f2:57:b5:1f:d1:7b:37:9f:d3:3e:c4:91:25:1b: 9d:05:2f:2a:2d:08:78:31:f0:7b:80:27:3d:3f:48: 12:d2:62:da:5a:68:03:41:19:6e:5e:f0:84:bc:e3: f9:ae:9a:80:48:c9:cd:f1:82:99:3d:cb:18:05:6d: 24:4a:7e:5a:9b:9b:b6:eb:ae:8d:70:07:dd:a3:96: d0:d6:ea:2b:fe:b4:0c:56:cb:c4:54:1a:f7:24:15: 2b:2a:f1:2f:87:50:d5:82:46:ae:9f:4d:9b:7e:f5: c9:23:0d:2d:f5:bc:83:ee:86:da:f1:9d:a7:72:d0: d1:81:ed:54:b6:b9:bd:0f:69:cb:d4:fd:a8:4f:a1: 4b:b8:35:1a:dd:6c:70:ac:d0:a2:42:73:fc:0c:25: 68:74:83:48:6a:7a:71:b0:e5:f4:01:2a:64:fd:0a: a1:23:4b:51:b9:af:54:6b:d9:f9:11:7d:ad:98:e9: dc:9e:8e:83:fc:0f:fa:ba:af:ab:16:d0:f5:eb:96: 44:ed:0d:20:a0:25:c6:23:b0:ac:87:ad:47:7f:93: bf:71:33:c2:a4:5a:b9:63:fc:fd:73:63:f4:ca:92: 17:ab:fc:29:e0:b9:1c:0e:d1:65:e9:f1:06:79:5d: ff:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:DB:09:D5:14:11:C4:A7:B1:ED:CC:EC:96:B6:12:6D:8C:07:3E X509v3 Authority Key Identifier: keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:98:45:fd:b2:cf:8e:af:20:f9:41:3a:c6:2c:c5:6d:82:a8: d6:9c:2c:b9:26:14:f6:bb:c7:a7:f2:65:3e:ef:57:a4:80:1a: e9:15:3d:15:f6:b4:0e:9c:52:89:41:76:c1:a6:cd:46:f0:14: 75:39:ad:23:99:b4:47:0c:62:f5:ce:cc:0b:7b:12:b7:e9:25: 1a:f6:9a:ee:9a:05:02:26:88:81:6c:55:8e:09:4b:86:7a:5e: 01:4f:3c:2d:31:62:31:1b:94:80:07:50:e4:ad:0e:04:46:56: 9a:ff:23:4d:0b:55:df:ee:13:d4:7f:48:2c:32:b8:a4:7d:42: 90:b2:07:c4:81:9b:96:0d:56:3f:5b:b5:2b:3b:a8:f2:3d:b6: 31:a3:84:cc:01:64:bf:9b:63:57:f3:34:d8:a8:a5:0f:ed:34: 3f:37:65:db:2e:5e:ee:56:06:3a:3a:b9:fa:bc:44:31:d1:b3: 1a:26:0f:b0:ff:7c:e8:8a:6c:f7:fd:c3:60:b9:d1:e2:48:f8: 00:8e:c8:56:1a:66:8b:dc:f2:ec:f5:3a:c8:2a:20:a8:18:87: 47:a0:22:5f:30:d3:67:75:ce:73:36:d6:76:47:08:80:de:e5: a0:98:b5:8b:17:2c:ff:49:18:d8:d2:13:a6:4f:ba:19:a1:ad: 99:a5:b3:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsMFT4isYnfC+ZGE8fuDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm MjZmNjUwHhcNMjUxMjI4MTYwMDQxWhcNMjUxMjI5MTYwMDQxWjAzMTEwLwYDVQQD Eyg0ODk0ZGIwOWQ1MTQxMWM0YTdiMWVkY2NlYzk2YjYxMjZkOGMwNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YcZWIyT8l4lmj+tJtkr8le1H9F7 N5/TPsSRJRudBS8qLQh4MfB7gCc9P0gS0mLaWmgDQRluXvCEvOP5rpqASMnN8YKZ PcsYBW0kSn5am5u2666NcAfdo5bQ1uor/rQMVsvEVBr3JBUrKvEvh1DVgkaun02b fvXJIw0t9byD7oba8Z2nctDRge1Utrm9D2nL1P2oT6FLuDUa3WxwrNCiQnP8DCVo dINIanpxsOX0ASpk/QqhI0tRua9Ua9n5EX2tmOncno6D/A/6uq+rFtD165ZE7Q0g oCXGI7Csh61Hf5O/cTPCpFq5Y/z9c2P0ypIXq/wp4LkcDtFl6fEGeV3/AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiU2wnVFBHEp7HtzOyWthJtjAc+MB8GA1UdIwQY MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt YWZiNTAwYTQ0ODJhLzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAphF/bLP jq8g+UE6xizFbYKo1pwsuSYU9rvHp/JlPu9XpIAa6RU9Ffa0DpxSiUF2wabNRvAU dTmtI5m0Rwxi9c7MC3sSt+klGvaa7poFAiaIgWxVjglLhnpeAU88LTFiMRuUgAdQ 5K0OBEZWmv8jTQtV3+4T1H9ILDK4pH1CkLIHxIGblg1WP1u1Kzuo8j22MaOEzAFk v5tjV/M02KilD+00Pzdl2y5e7lYGOjq5+rxEMdGzGiYPsP986Ips9/3DYLnR4kj4 AI7IVhpmi9zy7PU6yCogqBiHR6AiXzDTZ3XOczbWdkcIgN7loJi1ixcs/0kY2NIT pk+6GaGtmaWzYQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:26 2025 by rpki-client