This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json) Hash identifier: 6mLQYuO9HjRxjMVwawUI9mObpHIsIxPAttkoNKEJ/pw= Subject key identifier: 64:26:3A:66:7C:82:D1:E9:00:06:AC:9C:78:CA:80:FB:BE:C8:0B:60 Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698 Certificate serial: 019B3AFE21E0E79E744F79CF53DF50702F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft Manifest number: 0678 Signing time: Sat 20 Dec 2025 09:01:31 +0000 Manifest this update: Sat 20 Dec 2025 09:01:31 +0000 Manifest next update: Sun 21 Dec 2025 09:01:31 +0000 Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=) 2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=) 3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=) 4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: rBinqV2DXnTmSuq0KWKiWdceuWc0LcIBdrcPXWpzjTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:21:e0:e7:9e:74:4f:79:cf:53:df:50:70:2f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698 Validity Not Before: Dec 20 09:01:31 2025 GMT Not After : Dec 21 09:01:31 2025 GMT Subject: CN=64263a667c82d1e90006ac9c78ca80fbbec80b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:56:79:71:3f:68:7d:6a:a2:99:cc:65:f9: d1:e9:8e:39:4a:b4:38:72:d4:bc:fe:7c:2e:fa:a8: f7:90:d2:90:00:ff:f2:a5:6e:fa:e2:3f:a6:58:c6: f4:10:d9:8e:e5:9c:d3:f3:19:7d:ac:b3:77:19:28: b5:bf:ac:f4:80:e9:a0:90:2e:2d:9c:c4:17:34:fd: 0f:98:0d:a7:3d:0f:d9:76:92:75:78:b3:d6:18:39: a0:f1:37:34:87:cc:ab:91:70:9d:79:b8:6b:d8:db: 78:71:1b:ea:70:0a:b0:4f:6a:b3:21:da:5d:42:e6: cb:1a:79:1d:91:ea:ca:7b:cf:17:da:c0:10:d9:8e: 29:5f:2f:64:4c:3e:74:67:ad:a0:8d:03:2d:12:80: d6:a1:be:b5:e3:de:c1:cb:83:b4:42:ee:da:64:df: 00:04:e3:46:85:4e:c4:35:13:9b:1c:7c:7c:c2:2f: 62:74:9e:22:ad:97:66:07:2a:42:d4:41:fb:9c:66: 17:57:74:61:7b:fa:56:a7:7a:1d:b5:60:30:c7:4f: 54:0f:dc:99:28:b0:06:0e:08:ed:55:22:bc:b2:c1: bb:a7:17:f8:10:f8:68:15:c5:58:45:79:4d:b8:e7: fe:31:11:b3:d7:8a:50:59:a0:71:b9:af:fe:ee:94: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:26:3A:66:7C:82:D1:E9:00:06:AC:9C:78:CA:80:FB:BE:C8:0B:60 X509v3 Authority Key Identifier: keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4f:d0:3b:f3:89:e6:3b:41:89:6c:e1:df:24:05:a3:b5:dd: 1c:03:78:b3:b9:cf:7e:d3:27:24:ca:c4:a4:ee:a1:51:83:35: 74:ca:39:a9:a4:db:e7:d8:d4:e9:0a:12:f1:c2:a2:34:24:ac: 13:fd:2a:2b:21:27:f9:fc:35:af:14:82:43:a3:6b:ae:9f:d1: e5:93:c2:8a:1e:e0:9b:c0:51:62:8b:59:25:80:6c:58:d3:12: ac:3c:b7:04:78:1a:09:62:f2:c1:fa:c4:a1:3c:32:e7:e1:42: 02:2e:6c:43:84:ef:55:2d:75:e0:96:e2:32:24:b9:1d:9c:16: e9:d7:e1:e8:00:b9:ab:f3:da:3c:70:76:6f:97:2f:60:d6:56: de:fe:bc:df:dd:b5:c5:48:15:0e:d6:1b:85:08:7b:6b:ed:0b: 84:f1:aa:01:af:0f:24:bc:00:25:09:b9:58:f9:38:2f:1e:c2: c3:6e:d3:bc:3c:29:9c:c2:dd:3a:f6:26:3e:5f:6c:85:90:1c: 0a:93:bc:c0:33:d6:70:02:95:40:c8:04:d8:f8:50:c5:7b:a7: 2f:fd:ab:e5:c3:fd:44:a7:72:4c:a0:d6:a6:b4:73:f4:da:72: 43:d5:d3:da:fd:3f:32:fa:09:b5:34:dc:a0:f5:dd:af:20:e2: 64:b3:5d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/iHg5550T3nPU99QcC9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh Mzk2OTgwHhcNMjUxMjIwMDkwMTMxWhcNMjUxMjIxMDkwMTMxWjAzMTEwLwYDVQQD Eyg2NDI2M2E2NjdjODJkMWU5MDAwNmFjOWM3OGNhODBmYmJlYzgwYjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+FWeXE/aH1qopnMZfnR6Y45SrQ4 ctS8/nwu+qj3kNKQAP/ypW764j+mWMb0ENmO5ZzT8xl9rLN3GSi1v6z0gOmgkC4t nMQXNP0PmA2nPQ/ZdpJ1eLPWGDmg8Tc0h8yrkXCdebhr2Nt4cRvqcAqwT2qzIdpd QubLGnkdkerKe88X2sAQ2Y4pXy9kTD50Z62gjQMtEoDWob61497By4O0Qu7aZN8A BONGhU7ENRObHHx8wi9idJ4irZdmBypC1EH7nGYXV3Rhe/pWp3odtWAwx09UD9yZ KLAGDgjtVSK8ssG7pxf4EPhoFcVYRXlNuOf+MRGz14pQWaBxua/+7pQa8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQmOmZ8gtHpAAasnHjKgPu+yAtgMB8GA1UdIwQY MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2 LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcE/QO/OJ 5jtBiWzh3yQFo7XdHAN4s7nPftMnJMrEpO6hUYM1dMo5qaTb59jU6QoS8cKiNCSs E/0qKyEn+fw1rxSCQ6Nrrp/R5ZPCih7gm8BRYotZJYBsWNMSrDy3BHgaCWLywfrE oTwy5+FCAi5sQ4TvVS114JbiMiS5HZwW6dfh6AC5q/PaPHB2b5cvYNZW3v683921 xUgVDtYbhQh7a+0LhPGqAa8PJLwAJQm5WPk4Lx7Cw27TvDwpnMLdOvYmPl9shZAc CpO8wDPWcAKVQMgE2PhQxXunL/2r5cP9RKdyTKDWprRz9NpyQ9XT2v0/MvoJtTTc oPXdryDiZLNdDw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:21:15 2025 by rpki-client