This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json) Hash identifier: dCJI4f/Ow6i8DsNTQqZarxbCtSoFbjt/V94OJt1Tyok= Subject key identifier: 0F:B0:A0:55:79:0E:ED:4E:15:6A:2C:34:57:50:73:9E:08:F6:7F:5E Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4 Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4 Certificate serial: 019B360E291DC76938FF3AB307DA0282B10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 10:00:56 +0000 Manifest this update: Fri 19 Dec 2025 10:00:56 +0000 Manifest next update: Sat 20 Dec 2025 10:00:56 +0000 Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: O7/+b3MNSM4U4EFOsKBhh34Ot/AMilnBsQdFBgMKBjs=) 2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:29:1d:c7:69:38:ff:3a:b3:07:da:02:82:b1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4 Validity Not Before: Dec 19 10:00:56 2025 GMT Not After : Dec 20 10:00:56 2025 GMT Subject: CN=0fb0a055790eed4e156a2c345750739e08f67f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:40:ed:08:92:a5:9e:a8:7e:82:9e:b1:30: 89:bb:b2:fd:63:cc:8f:1f:3f:70:07:b2:1e:e0:43: 54:9f:cc:0c:45:a4:2e:60:ff:d1:41:22:9b:1a:98: 16:2f:2d:f0:3e:d7:93:f2:e8:6b:2d:eb:42:b8:09: b7:58:13:d8:a8:25:e3:5c:a0:91:94:82:64:37:04: 56:db:e7:6b:07:d9:d9:6e:e0:d0:a0:98:5a:00:14: 30:4e:3d:b1:ca:d6:c6:86:11:36:5a:c0:e2:96:66: fa:8a:13:1a:df:6c:49:52:10:1e:60:de:0e:52:0e: a3:f0:21:b1:53:27:32:3b:5e:24:11:a3:b5:92:ee: 23:32:34:fc:a6:c6:d1:83:9b:79:28:0f:03:cf:47: 73:20:26:1b:ce:2f:de:f9:cb:63:3b:aa:05:c2:90: 8b:ae:8f:54:28:cf:93:71:2e:8d:a5:9f:e6:59:f0: 20:ca:d8:fb:55:b9:8e:72:d3:c9:a0:04:a0:b0:7a: 3d:ba:39:5b:86:e5:c9:e0:64:f4:7f:60:b5:24:47: d1:fc:8a:51:4c:6f:04:05:ee:4a:14:6b:e9:95:dd: b0:43:7b:ae:57:85:3e:aa:71:e4:8c:47:bc:f4:7f: 7c:c9:7f:b6:4f:a7:0c:ea:68:c5:0f:97:8a:e9:90: 6e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:A0:55:79:0E:ED:4E:15:6A:2C:34:57:50:73:9E:08:F6:7F:5E X509v3 Authority Key Identifier: keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:62:43:56:18:a0:87:b1:72:49:6e:7d:eb:ae:88:b6:36:a0: 84:3b:9e:de:93:72:86:44:95:01:a9:04:db:51:b7:08:10:0e: 18:fe:69:4d:2d:79:a1:dc:6f:eb:86:fb:67:78:a9:59:4b:8e: ad:71:4b:c3:aa:2a:c9:52:1d:88:16:b8:41:e9:bb:c5:2b:12: 8a:9b:0d:cc:2b:de:96:f2:f0:74:7a:55:03:b4:35:94:1f:37: 3a:b6:34:c7:7f:49:32:7c:8a:1e:59:fe:93:84:95:2e:fa:5d: ca:d0:68:50:bc:b1:48:36:19:bc:80:7b:ed:c9:45:d3:cf:4f: 51:ab:70:57:c0:d2:da:07:c4:07:6d:3a:f8:92:fb:1b:ef:9d: 46:ef:15:bf:a3:ec:1b:0d:e7:94:b3:50:39:4b:ad:a1:54:a0: 31:66:4f:5f:a7:9c:4d:3e:44:2d:a5:5f:4e:17:8b:dc:d8:48: 6a:96:c3:60:e2:8e:9e:e2:15:fa:4c:75:27:28:2a:d6:c0:e3: 83:8a:e1:b4:5a:2b:bc:b3:2d:bd:48:31:35:fa:88:36:1c:76: 9d:97:e5:ac:99:45:d1:37:54:49:38:dc:7d:33:f1:da:c5:70: 7d:4f:f7:07:ff:64:e0:dc:6c:01:bc:1e:3a:74:20:da:5e:33: aa:77:59:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dikdx2k4/zqzB9oCgrELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MDgyMDRkN2NmNWJjNGFhYjM4ZmZhMzlkYTNhNjgxZWQy MTdiZDQwHhcNMjUxMjE5MTAwMDU2WhcNMjUxMjIwMTAwMDU2WjAzMTEwLwYDVQQD EygwZmIwYTA1NTc5MGVlZDRlMTU2YTJjMzQ1NzUwNzM5ZTA4ZjY3ZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvhA7QiSpZ6ofoKesTCJu7L9Y8yP Hz9wB7Ie4ENUn8wMRaQuYP/RQSKbGpgWLy3wPteT8uhrLetCuAm3WBPYqCXjXKCR lIJkNwRW2+drB9nZbuDQoJhaABQwTj2xytbGhhE2WsDilmb6ihMa32xJUhAeYN4O Ug6j8CGxUycyO14kEaO1ku4jMjT8psbRg5t5KA8Dz0dzICYbzi/e+ctjO6oFwpCL ro9UKM+TcS6NpZ/mWfAgytj7VbmOctPJoASgsHo9ujlbhuXJ4GT0f2C1JEfR/IpR TG8EBe5KFGvpld2wQ3uuV4U+qnHkjEe89H98yX+2T6cM6mjFD5eK6ZBuywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+woFV5Du1OFWosNFdQc54I9n9eMB8GA1UdIwQY MBaAFAkIIE189bxKqzj/o52jpoHtIXvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjIt ODgyM2YxMTFkZjA3LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjItODgyM2YxMTFkZjA3 LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmJDVhig h7FySW59666ItjaghDue3pNyhkSVAakE21G3CBAOGP5pTS15odxv64b7Z3ipWUuO rXFLw6oqyVIdiBa4Qem7xSsSipsNzCvelvLwdHpVA7Q1lB83OrY0x39JMnyKHln+ k4SVLvpdytBoULyxSDYZvIB77clF089PUatwV8DS2gfEB206+JL7G++dRu8Vv6Ps Gw3nlLNQOUutoVSgMWZPX6ecTT5ELaVfTheL3NhIapbDYOKOnuIV+kx1Jygq1sDj g4rhtForvLMtvUgxNfqINhx2nZflrJlF0TdUSTjcfTPx2sVwfU/3B/9k4NxsAbwe OnQg2l4zqndZvw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:10 2025 by rpki-client