This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json) Hash identifier: 2HfO4til/wDKPbiHeRsofds9g2aVCqMNlHLmNTF3Zu8= Subject key identifier: 2C:7E:06:DF:08:6E:05:5E:67:87:4D:0E:71:80:2E:AF:EE:EE:35:EF Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25 Certificate serial: 019B3C7E33D535D9CBDA57EAFB64CBC3A6F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft Manifest number: 1725 Signing time: Sat 20 Dec 2025 16:01:02 +0000 Manifest this update: Sat 20 Dec 2025 16:01:02 +0000 Manifest next update: Sun 21 Dec 2025 16:01:02 +0000 Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=) 2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: 5U1crTfS6EnM7fr11NZO6w8eEWMi2Y7f8lDsVR64OIM=) 3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=) 4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:33:d5:35:d9:cb:da:57:ea:fb:64:cb:c3:a6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25 Validity Not Before: Dec 20 16:01:02 2025 GMT Not After : Dec 21 16:01:02 2025 GMT Subject: CN=2c7e06df086e055e67874d0e71802eafeeee35ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:bc:73:37:bc:65:f6:d4:e0:fb:ba:d1:ef: 93:80:83:79:1e:f5:14:1c:89:bd:37:4b:85:34:10: 8d:6f:d8:f3:5c:f2:0f:44:3b:64:43:05:35:85:38: fe:b4:fe:cc:66:74:ad:40:ab:6d:d3:ad:ea:4a:96: 1b:a1:99:bb:03:08:07:8e:2d:a1:03:3f:74:fc:f4: a0:95:c1:64:fc:9d:db:63:01:ba:ae:99:cd:3a:15: 92:30:68:bd:ba:ec:10:40:34:37:b9:7d:85:05:ef: 29:0a:4d:87:18:0c:ec:df:52:38:28:18:82:b5:77: 7b:c9:06:63:59:23:71:7e:38:f4:72:8e:23:b3:19: fd:3e:e2:8e:91:9e:d7:e1:31:c0:1c:f4:31:bd:ec: a5:f1:d3:7b:7c:e2:c0:a9:10:ee:50:c5:f2:1c:08: c2:c9:b1:aa:9c:f9:31:77:14:8d:4e:81:ba:a7:fa: 37:f2:fe:d1:c6:88:a0:c2:a4:39:1d:bf:5e:92:41: 64:c5:82:e7:1c:67:e9:db:72:3d:40:62:0e:92:e7: 2f:57:c0:4a:dd:9d:c3:cf:f7:c4:8b:f4:4c:8d:c1: 50:7d:c1:e2:db:25:46:b2:ae:77:3c:62:ee:78:8f: 87:e7:ab:18:c1:a7:37:1e:1d:3b:13:a5:87:6a:34: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7E:06:DF:08:6E:05:5E:67:87:4D:0E:71:80:2E:AF:EE:EE:35:EF X509v3 Authority Key Identifier: keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:00:bf:42:2d:9d:5a:0f:00:6c:59:eb:4c:19:b8:12:a6:c1: 8a:d2:96:8a:75:ef:f7:e5:90:9a:61:4a:f7:4b:83:fa:23:cc: d6:eb:6e:0b:ec:48:99:4e:e3:0c:14:17:a2:0b:7e:86:ca:7c: 39:1b:36:d5:95:13:62:34:71:05:fc:35:8e:08:73:df:9e:69: a6:2b:10:4c:c0:95:b2:ff:86:56:3e:eb:3f:04:08:fb:cb:cd: ac:37:f9:70:be:d5:4d:43:e8:44:78:65:e6:60:36:67:5d:61: fa:80:e4:54:86:cf:15:df:ee:be:f4:20:b4:5b:5f:67:44:c5: 39:77:95:6b:35:4e:91:52:db:58:15:5c:fe:00:91:18:a9:9a: 77:8a:67:29:d1:e5:12:7f:3b:25:ba:10:dd:95:f1:79:42:8b: fe:3a:cf:6b:82:42:ab:3c:db:55:af:df:45:a3:ed:cb:c0:1d: b8:3a:a4:26:60:3d:65:ed:43:27:c6:ea:de:3a:4e:dc:b2:ea: 8a:d8:be:6b:54:c6:31:69:e1:3b:1b:76:42:d3:36:e8:ed:e6: b0:b2:d3:55:be:7a:cc:20:07:72:10:c2:f5:11:53:6d:08:a9: 39:90:08:a8:ce:13:8b:e3:95:12:8d:b8:7f:84:08:d4:07:36: 7f:7f:76:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fjPVNdnL2lfq+2TLw6b0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5 ZTRlMjUwHhcNMjUxMjIwMTYwMTAyWhcNMjUxMjIxMTYwMTAyWjAzMTEwLwYDVQQD EygyYzdlMDZkZjA4NmUwNTVlNjc4NzRkMGU3MTgwMmVhZmVlZWUzNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c68cze8ZfbU4Pu60e+TgIN5HvUU HIm9N0uFNBCNb9jzXPIPRDtkQwU1hTj+tP7MZnStQKtt063qSpYboZm7AwgHji2h Az90/PSglcFk/J3bYwG6rpnNOhWSMGi9uuwQQDQ3uX2FBe8pCk2HGAzs31I4KBiC tXd7yQZjWSNxfjj0co4jsxn9PuKOkZ7X4THAHPQxveyl8dN7fOLAqRDuUMXyHAjC ybGqnPkxdxSNToG6p/o38v7RxoigwqQ5Hb9ekkFkxYLnHGfp23I9QGIOkucvV8BK 3Z3Dz/fEi/RMjcFQfcHi2yVGsq53PGLueI+H56sYwac3Hh07E6WHajQRuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCx+Bt8IbgVeZ4dNDnGALq/u7jXvMB8GA1UdIwQY MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgC/Qi2d Wg8AbFnrTBm4EqbBitKWinXv9+WQmmFK90uD+iPM1utuC+xImU7jDBQXogt+hsp8 ORs21ZUTYjRxBfw1jghz355ppisQTMCVsv+GVj7rPwQI+8vNrDf5cL7VTUPoRHhl 5mA2Z11h+oDkVIbPFd/uvvQgtFtfZ0TFOXeVazVOkVLbWBVc/gCRGKmad4pnKdHl En87JboQ3ZXxeUKL/jrPa4JCqzzbVa/fRaPty8AduDqkJmA9Ze1DJ8bq3jpO3LLq iti+a1TGMWnhOxt2QtM26O3msLLTVb56zCAHchDC9RFTbQipOZAIqM4Ti+OVEo24 f4QI1Ac2f392Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:49:26 2025 by rpki-client