This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json) Hash identifier: uyX4WnA1nHKYnG/CBxmEU+0U5EX8sY+G8TLf5fuob0M= Subject key identifier: 46:F0:39:6C:95:CD:5A:0F:2D:A3:95:DD:C2:64:CC:06:01:08:8B:8B Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae Certificate serial: 019B28C060DF9D660CA1DF4C580117162523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft Manifest number: 06C4 Signing time: Tue 16 Dec 2025 20:00:54 +0000 Manifest this update: Tue 16 Dec 2025 20:00:54 +0000 Manifest next update: Wed 17 Dec 2025 20:00:54 +0000 Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: E7p+jW6u2OxF5KNbmYX8qrYPEHNKJuq5EDPplZjIQuA=) 2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:60:df:9d:66:0c:a1:df:4c:58:01:17:16:25:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae Validity Not Before: Dec 16 20:00:54 2025 GMT Not After : Dec 17 20:00:54 2025 GMT Subject: CN=46f0396c95cd5a0f2da395ddc264cc0601088b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:a0:d1:97:dc:d5:c8:81:bd:be:8d:a5:16: ee:69:71:b0:d8:55:6d:49:6e:a2:31:c5:94:fb:43: 40:bc:de:d8:a1:a6:f4:10:46:4b:57:ca:1b:81:6c: 9b:2c:b7:c8:b0:96:ea:ab:cf:6d:c7:ac:ab:4f:d9: 2a:9e:4c:80:88:29:43:8e:c8:16:04:de:a4:4c:15: e8:58:8b:4f:e1:5d:98:2f:5e:2c:e1:65:4f:43:20: 9a:dd:5a:f8:0a:4b:65:a0:2d:e7:2c:4d:dc:d3:48: f9:cd:79:62:63:e1:6e:3f:5c:39:ee:e8:0a:da:70: e2:f2:1a:5c:87:5f:d5:57:16:7f:e3:62:70:d9:b6: 58:e0:4a:6f:41:bc:97:4d:ff:ef:a5:d2:f1:1d:9f: 13:55:32:85:3e:94:bf:7a:0d:51:6e:1a:34:87:85: 50:ba:00:54:42:4e:39:a5:d6:12:06:65:52:bd:c7: 6e:df:e0:22:f4:e4:64:0b:4d:b2:9f:35:3c:bc:ae: f3:6a:44:85:fd:f0:e5:a8:ec:9e:80:37:f0:c6:3e: ce:51:39:16:99:a2:54:e1:40:9c:bb:b9:61:b1:5d: 8e:a7:0f:48:88:cb:28:5b:08:96:c7:6c:4a:da:a1: fb:c3:b1:d2:9d:48:ba:2e:a3:a1:c7:c6:5a:9e:ad: 59:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F0:39:6C:95:CD:5A:0F:2D:A3:95:DD:C2:64:CC:06:01:08:8B:8B X509v3 Authority Key Identifier: keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:63:39:d8:a2:be:15:6b:78:42:c0:98:1a:68:3a:28:3f:3f: 38:5f:2c:bf:10:f0:87:22:ee:c7:46:f0:d5:79:93:3b:8e:6b: 2c:77:83:93:31:e2:a5:dd:05:d1:46:75:6c:37:92:98:b5:f6: b3:3b:62:e1:44:0c:35:e0:74:1d:cd:db:96:a6:25:96:e9:c2: 81:8b:d6:f4:7c:19:d2:96:17:73:60:21:41:8e:46:4e:ea:66: 05:e1:3d:af:7b:e1:3a:38:73:3f:a4:ba:ba:88:d4:72:c1:61: c6:a5:bd:07:2d:1f:6d:fb:19:86:08:7e:cf:4b:9f:50:d2:6f: 48:c7:0e:80:1e:2b:8f:09:6e:9c:8c:2b:3a:0d:c0:5b:3f:22: 90:bb:8b:42:c0:8a:f3:57:dd:bf:7f:39:da:7c:9b:f0:9a:81: 1b:42:d2:84:3c:c6:52:cc:ec:f4:61:94:75:6c:96:9c:9d:fc: d4:de:c4:40:9e:5c:73:15:52:0e:94:7b:6c:7e:2e:88:1d:dd: b2:79:f7:f4:68:dd:1d:b4:a0:26:a3:5f:57:34:a9:0c:9a:6e: 28:04:21:97:85:b6:08:5a:9e:cd:80:7e:47:2b:cb:35:b1:39: be:a7:43:2d:6a:6a:79:de:61:49:4e:40:c7:02:d1:b6:30:fd: 29:c7:d4:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowGDfnWYMod9MWAEXFiUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjZjOGY0NmZjODBkMmY4NzdjMzVmZDI4ZDhhMDY1MWI3 MDgwYWUwHhcNMjUxMjE2MjAwMDU0WhcNMjUxMjE3MjAwMDU0WjAzMTEwLwYDVQQD Eyg0NmYwMzk2Yzk1Y2Q1YTBmMmRhMzk1ZGRjMjY0Y2MwNjAxMDg4YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwqg0Zfc1ciBvb6NpRbuaXGw2FVt SW6iMcWU+0NAvN7Yoab0EEZLV8obgWybLLfIsJbqq89tx6yrT9kqnkyAiClDjsgW BN6kTBXoWItP4V2YL14s4WVPQyCa3Vr4CktloC3nLE3c00j5zXliY+FuP1w57ugK 2nDi8hpch1/VVxZ/42Jw2bZY4EpvQbyXTf/vpdLxHZ8TVTKFPpS/eg1Rbho0h4VQ ugBUQk45pdYSBmVSvcdu3+Ai9ORkC02ynzU8vK7zakSF/fDlqOyegDfwxj7OUTkW maJU4UCcu7lhsV2Opw9IiMsoWwiWx2xK2qH7w7HSnUi6LqOhx8Zanq1ZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbwOWyVzVoPLaOV3cJkzAYBCIuLMB8GA1UdIwQY MBaAFAn2yPRvyA0vh3w1/SjYoGUbcICuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEt ZWU3M2M4ZTcwNDdkLzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEtZWU3M2M4ZTcwNDdk LzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmM52KK+ FWt4QsCYGmg6KD8/OF8svxDwhyLux0bw1XmTO45rLHeDkzHipd0F0UZ1bDeSmLX2 szti4UQMNeB0Hc3blqYllunCgYvW9HwZ0pYXc2AhQY5GTupmBeE9r3vhOjhzP6S6 uojUcsFhxqW9By0fbfsZhgh+z0ufUNJvSMcOgB4rjwlunIwrOg3AWz8ikLuLQsCK 81fdv3852nyb8JqBG0LShDzGUszs9GGUdWyWnJ381N7EQJ5ccxVSDpR7bH4uiB3d snn39GjdHbSgJqNfVzSpDJpuKAQhl4W2CFqezYB+RyvLNbE5vqdDLWpqed5hSU5A xwLRtjD9KcfUJw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:32:02 2025 by rpki-client