This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json) Hash identifier: 5GZB3Hm18r7Jx/C0CDxLwvnkTqrSWrXB+nFjsXOZOFQ= Subject key identifier: C3:D4:D5:C9:A7:DF:56:2C:7F:0D:19:75:D7:63:36:F4:AA:5F:4A:3C Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6 Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6 Certificate serial: 019B2BF8CE365BA6C0892DE34037B6E199E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft Manifest number: 0AAC Signing time: Wed 17 Dec 2025 11:01:24 +0000 Manifest this update: Wed 17 Dec 2025 11:01:24 +0000 Manifest next update: Thu 18 Dec 2025 11:01:24 +0000 Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: QoRxPR/3C+WCk4veux8d3kMqxN7z8VnEQKHlHDRwVo8=) 2: eTuN91J09OBNoZtxEtruVhH4DbY.roa (hash: F1iOkNAfZrkXFWgz/sdsk9Ul6Wkc9BDyHiaUC1recQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:ce:36:5b:a6:c0:89:2d:e3:40:37:b6:e1:99:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6 Validity Not Before: Dec 17 11:01:24 2025 GMT Not After : Dec 18 11:01:24 2025 GMT Subject: CN=c3d4d5c9a7df562c7f0d1975d76336f4aa5f4a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:f6:f3:e1:03:80:40:f1:03:7b:97:5e:03: d2:6d:a2:1d:c3:5a:c4:c1:e2:20:c1:ca:bd:32:e1: 5b:5f:17:0b:9c:26:3d:6c:e3:f9:df:4d:93:0b:68: 52:e0:7e:93:dc:90:b7:49:b9:23:8b:89:52:44:5e: e5:e9:0b:98:4a:92:29:d3:28:e9:67:7b:40:2a:ba: 0e:49:e8:f5:6a:c2:4c:6f:bc:e8:e5:7d:df:e0:cd: ec:b3:ed:4b:a0:57:ec:30:c6:3b:aa:e7:9a:ac:52: ab:f8:a1:9e:85:b7:9d:d0:9b:05:ad:3f:aa:fa:98: 09:96:83:71:a4:10:43:82:52:81:78:5f:eb:1c:50: b8:e2:8e:50:c9:f8:02:e0:f0:ab:a4:08:f5:43:b9: 8c:cf:4f:a0:1b:b6:63:68:e3:2e:ee:4e:f0:e7:e0: ca:b1:59:b3:18:60:75:95:8d:3e:25:26:3e:a3:87: 89:3b:3d:d8:f6:15:d0:bc:7e:72:4f:ac:39:a4:14: 0b:18:53:e2:8a:1b:bf:8d:53:54:95:ee:02:62:ee: 3d:47:d4:72:d0:d0:b0:26:7c:72:db:8d:e8:35:81: 72:7c:7e:f0:22:df:24:02:0c:98:5a:f6:52:b8:90: c7:36:e7:ed:b0:ff:6a:e1:a0:80:c1:6a:7f:22:4e: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D4:D5:C9:A7:DF:56:2C:7F:0D:19:75:D7:63:36:F4:AA:5F:4A:3C X509v3 Authority Key Identifier: keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f9:b9:ed:50:2a:40:91:1a:f7:0c:85:d3:71:c5:66:60:3c: 83:dd:c7:63:21:2b:c4:fe:d6:5d:d3:7f:22:4d:0b:3d:5a:bf: e2:7d:4a:33:33:34:c9:f2:5f:80:31:7c:03:ab:18:ac:71:c2: 1f:57:b8:ea:5f:3a:a5:87:60:df:8f:be:1c:f2:a4:a7:94:46: c1:9b:0a:e6:47:f3:86:81:5b:7f:27:94:a0:e6:ca:7e:22:b0: 11:b6:4e:d9:ba:ab:bc:29:ef:1e:02:5c:eb:6c:1c:ae:0d:26: aa:7a:42:68:36:d8:8e:a9:a7:86:b2:74:79:f8:90:ac:08:ce: e4:73:fa:e4:1b:03:28:e3:ec:ff:c6:35:74:6a:c4:de:f7:48: a3:07:14:8f:fa:32:73:78:85:ad:cb:ce:5b:02:36:41:8a:69: 47:7a:54:97:cb:d2:0b:ac:a3:d3:ca:cb:c5:a2:23:7a:9c:1a: 00:c8:8d:9a:a5:b3:c6:a5:66:a1:dc:40:9e:37:dd:96:9a:86: 9d:33:d4:f2:88:f4:7a:f1:e3:5a:a1:9d:9a:f1:b6:1a:08:2b: bc:2f:b3:2f:1c:ab:b1:e7:ce:c3:11:5b:cd:8a:f8:eb:a8:bb: 2d:3c:d6:cf:eb:c9:d9:83:0e:f0:d1:1b:b2:08:5c:87:20:c0: 0b:e3:31:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+M42W6bAiS3jQDe24ZnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzAyMDJjMzEyZGQyYzdhNmZmYzMxN2FhODZlNGUyMDY5 MjQ5YTYwHhcNMjUxMjE3MTEwMTI0WhcNMjUxMjE4MTEwMTI0WjAzMTEwLwYDVQQD EyhjM2Q0ZDVjOWE3ZGY1NjJjN2YwZDE5NzVkNzYzMzZmNGFhNWY0YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAP28+EDgEDxA3uXXgPSbaIdw1rE weIgwcq9MuFbXxcLnCY9bOP5302TC2hS4H6T3JC3Sbkji4lSRF7l6QuYSpIp0yjp Z3tAKroOSej1asJMb7zo5X3f4M3ss+1LoFfsMMY7quearFKr+KGehbed0JsFrT+q +pgJloNxpBBDglKBeF/rHFC44o5QyfgC4PCrpAj1Q7mMz0+gG7ZjaOMu7k7w5+DK sVmzGGB1lY0+JSY+o4eJOz3Y9hXQvH5yT6w5pBQLGFPiihu/jVNUle4CYu49R9Ry 0NCwJnxy243oNYFyfH7wIt8kAgyYWvZSuJDHNuftsP9q4aCAwWp/Ik6u5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPU1cmn31Ysfw0ZdddjNvSqX0o8MB8GA1UdIwQY MBaAFApwICwxLdLHpv/DF6qG5OIGkkmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84ZmY2OTctNTdmYy00MGZmLThhNTMt NjhjODQ5Mjc3ZDczLzEvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84ZmY2OTctNTdmYy00MGZmLThhNTMtNjhjODQ5Mjc3ZDcz LzEvQ25BZ0xERXQwc2VtXzhNWHFvYms0Z2FTU2FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvm57VAq QJEa9wyF03HFZmA8g93HYyErxP7WXdN/Ik0LPVq/4n1KMzM0yfJfgDF8A6sYrHHC H1e46l86pYdg34++HPKkp5RGwZsK5kfzhoFbfyeUoObKfiKwEbZO2bqrvCnvHgJc 62wcrg0mqnpCaDbYjqmnhrJ0efiQrAjO5HP65BsDKOPs/8Y1dGrE3vdIowcUj/oy c3iFrcvOWwI2QYppR3pUl8vSC6yj08rLxaIjepwaAMiNmqWzxqVmodxAnjfdlpqG nTPU8oj0evHjWqGdmvG2GggrvC+zLxyrsefOwxFbzYr466i7LTzWz+vJ2YMO8NEb sghchyDAC+MxHQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:41:39 2025 by rpki-client