This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json) Hash identifier: QrMXnvZZn/YRabXcjx8NVYeD2XxXDdQWO7owl/qy7iY= Subject key identifier: 4E:97:D9:9B:5C:72:0C:73:80:9D:A6:8E:8A:FE:23:F4:7D:36:59:06 Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Certificate serial: 019B3F115957278CC9609A851C6303DE7D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 04:01:00 +0000 Manifest this update: Sun 21 Dec 2025 04:01:00 +0000 Manifest next update: Mon 22 Dec 2025 04:01:00 +0000 Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: xBShJ2VW+T29PRuLl5CkJ7i2E7isgl823ujMiZQMilg=) 2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:59:57:27:8c:c9:60:9a:85:1c:63:03:de:7d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Validity Not Before: Dec 21 04:01:00 2025 GMT Not After : Dec 22 04:01:00 2025 GMT Subject: CN=4e97d99b5c720c73809da68e8afe23f47d365906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:63:16:da:b5:a5:e3:f1:cc:aa:66:17:14: c8:23:13:47:2b:8e:c0:75:b5:98:45:cb:1a:5a:9b: d2:e1:16:68:6b:9e:f6:20:51:95:ce:29:4c:42:69: e9:cd:08:91:b5:34:be:e8:29:ef:6f:09:15:ba:ae: 8e:3b:8a:c7:8b:c2:70:5d:68:f9:8a:fa:c8:b7:51: a0:28:ff:af:dd:b1:e6:c1:a0:e3:33:12:b0:9b:e4: 1c:b1:e8:c6:69:2b:cb:5b:7c:81:9f:0e:0a:95:10: fa:a2:02:f3:53:5f:33:f1:2d:20:ee:60:cd:b1:06: d4:1a:9a:70:ff:5d:b3:4a:83:95:40:e3:de:9f:31: 6c:23:7a:ee:9c:d1:96:13:08:c2:51:2b:0c:21:3e: f6:65:bd:42:ce:a2:55:5b:39:4d:2d:f0:1b:8c:80: 45:a6:f7:79:c9:01:ca:12:6f:19:d8:68:60:a2:9a: 2d:2d:26:69:5c:9e:27:8f:f0:1c:3c:60:37:cc:05: 52:62:de:ba:bb:ae:6f:82:c1:8f:a1:f3:bb:c7:28: 67:58:d1:d9:e0:98:69:7a:80:a1:77:34:35:4c:e3: fe:43:d1:47:8a:27:00:4e:d5:79:f3:a8:b4:eb:95: 00:b4:b9:60:7b:bb:b0:8e:2c:03:4e:19:b4:0f:5c: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:97:D9:9B:5C:72:0C:73:80:9D:A6:8E:8A:FE:23:F4:7D:36:59:06 X509v3 Authority Key Identifier: keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2d:f9:ed:8f:7f:91:59:3d:ae:b1:6d:ed:80:e8:73:85:f9: f6:72:f0:ce:a3:32:28:e0:de:dd:fb:cf:88:27:0d:a9:85:cb: 72:22:14:ce:87:eb:bf:4c:d6:30:7b:9a:7c:74:a6:c6:f0:16: d0:ac:3a:2c:bc:af:42:5c:0c:f4:55:b4:6e:72:ae:23:4f:12: 21:9f:f0:f1:d3:c5:a8:a2:9f:d5:7d:6b:be:e3:ac:54:6b:95: 12:97:2d:ff:b6:3a:9d:bf:da:54:db:32:36:53:86:c4:e7:0a: 7a:19:49:b0:ce:5c:93:f7:b7:bc:8f:c7:f0:70:07:67:56:81: ec:00:64:07:9f:a6:63:e7:27:18:02:cf:38:47:e9:aa:b5:47: 54:d9:f8:93:d1:a4:b0:0d:91:04:ed:4b:c6:f3:74:09:72:27: b7:9a:e5:c8:01:d8:41:2a:2b:82:b1:e3:ea:94:cc:af:cc:4e: f9:ca:3f:a3:47:8a:0e:39:91:78:ff:f7:71:e4:b3:8c:ec:9b: 97:17:f4:9e:cc:6d:32:3f:7a:bd:7b:1b:17:fb:0f:fc:d6:4b: 0b:0c:5a:d9:d6:33:2a:ee:4d:f3:b7:bd:ec:64:5c:12:d1:6c: 60:04:6e:65:68:50:8e:8f:39:b4:c0:42:2f:5c:8e:d6:8d:e1: ec:c1:79:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EVlXJ4zJYJqFHGMD3n1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0 NTE1ZTkwHhcNMjUxMjIxMDQwMTAwWhcNMjUxMjIyMDQwMTAwWjAzMTEwLwYDVQQD Eyg0ZTk3ZDk5YjVjNzIwYzczODA5ZGE2OGU4YWZlMjNmNDdkMzY1OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd5jFtq1pePxzKpmFxTIIxNHK47A dbWYRcsaWpvS4RZoa572IFGVzilMQmnpzQiRtTS+6CnvbwkVuq6OO4rHi8JwXWj5 ivrIt1GgKP+v3bHmwaDjMxKwm+QcsejGaSvLW3yBnw4KlRD6ogLzU18z8S0g7mDN sQbUGppw/12zSoOVQOPenzFsI3runNGWEwjCUSsMIT72Zb1CzqJVWzlNLfAbjIBF pvd5yQHKEm8Z2GhgopotLSZpXJ4nj/AcPGA3zAVSYt66u65vgsGPofO7xyhnWNHZ 4JhpeoChdzQ1TOP+Q9FHiicATtV586i065UAtLlge7uwjiwDThm0D1zIVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6X2ZtccgxzgJ2mjor+I/R9NlkGMB8GA1UdIwQY MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5 LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy357Y9/ kVk9rrFt7YDoc4X59nLwzqMyKODe3fvPiCcNqYXLciIUzofrv0zWMHuafHSmxvAW 0Kw6LLyvQlwM9FW0bnKuI08SIZ/w8dPFqKKf1X1rvuOsVGuVEpct/7Y6nb/aVNsy NlOGxOcKehlJsM5ck/e3vI/H8HAHZ1aB7ABkB5+mY+cnGALPOEfpqrVHVNn4k9Gk sA2RBO1LxvN0CXInt5rlyAHYQSorgrHj6pTMr8xO+co/o0eKDjmReP/3ceSzjOyb lxf0nsxtMj96vXsbF/sP/NZLCwxa2dYzKu5N87e97GRcEtFsYARuZWhQjo85tMBC L1yO1o3h7MF5Mg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:11 2025 by rpki-client