This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json) Hash identifier: FUfMwPm1QdZ1XrWbyDfvYMp+gr/IAWsjAKbTy29m7OQ= Subject key identifier: 1D:DF:B7:42:EB:95:12:3B:AB:1E:9B:74:F7:FB:C7:2E:49:A5:29:6E Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80 Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980 Certificate serial: 019B3CEC61AA1FB15B4C1CA9E5CD50736C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 18:01:22 +0000 Manifest this update: Sat 20 Dec 2025 18:01:22 +0000 Manifest next update: Sun 21 Dec 2025 18:01:22 +0000 Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: w6gQCcbiNoySZImlsKotFY97LECcClrXFDW+Y4wDQIg=) 2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:61:aa:1f:b1:5b:4c:1c:a9:e5:cd:50:73:6c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980 Validity Not Before: Dec 20 18:01:22 2025 GMT Not After : Dec 21 18:01:22 2025 GMT Subject: CN=1ddfb742eb95123bab1e9b74f7fbc72e49a5296e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:33:87:1b:d5:03:cb:d7:b1:b9:3a:35:e1: cb:de:f1:17:58:af:4b:d0:00:d6:0d:1d:b6:e1:e2: 9d:c7:44:3a:a8:2a:78:fe:c5:18:7c:c4:39:cd:2e: 3c:91:f2:a3:fe:a0:67:64:d3:e4:5d:6b:a1:f2:94: 3f:2e:d9:bc:2a:c6:9e:f4:6d:53:93:a1:45:66:02: 58:3b:b8:fb:5e:b7:c8:fc:65:3d:70:ea:fd:14:8e: f8:11:44:0e:69:16:4a:72:2a:cf:8e:d5:fd:bf:76: a8:81:43:21:1c:72:94:7f:4b:6c:af:d7:30:e3:dc: 07:0a:48:eb:cb:8b:d2:ff:8b:1b:2e:07:47:7e:cf: ce:02:08:31:af:e0:90:8a:b5:14:01:69:b9:15:54: 9c:86:d3:ca:5e:35:fa:4b:90:fd:b1:e4:f5:18:85: 91:23:22:ee:1a:bd:a0:fa:1b:95:56:e6:cb:10:62: e8:58:dc:ba:9b:e9:ee:26:22:e4:7d:9b:55:64:e8: 17:88:9e:0d:22:f2:b7:6d:f1:89:27:ce:24:b5:4f: e9:88:0f:e8:9a:08:9b:d4:d2:93:e8:4a:8b:54:be: 4b:b8:73:2c:d6:25:b2:bf:c2:ae:a0:95:d6:54:60: 56:9b:c0:8a:af:12:41:90:bd:52:30:6c:18:b8:2d: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:B7:42:EB:95:12:3B:AB:1E:9B:74:F7:FB:C7:2E:49:A5:29:6E X509v3 Authority Key Identifier: keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:57:07:59:80:14:ec:a8:47:0a:4e:54:9a:75:dd:27:e3:94: 70:d8:2f:fb:75:63:b3:09:c1:41:90:97:db:ab:1d:90:d2:0e: f9:2a:47:49:20:22:ec:6d:ef:b8:50:d3:90:0c:2d:f8:94:c7: 2f:cf:d0:6a:5b:0c:0d:fd:49:e8:88:69:8f:b3:36:9f:b0:9a: 84:d7:11:af:4e:1a:16:70:76:40:c0:43:52:b6:e3:0a:1e:0d: a8:cd:8c:bb:fc:e7:65:03:72:e2:29:fa:a7:c6:3d:c7:62:b2: a4:f0:03:e8:10:a7:3b:de:59:be:c8:30:3c:ae:37:92:3f:0a: 00:87:e6:9e:fb:0c:4f:51:82:df:e4:d4:79:90:8f:39:7a:b8: 81:fe:49:25:53:4b:e2:41:fa:e2:2f:14:ee:7d:e5:bb:e4:5a: fa:9f:6a:68:a2:f2:73:28:ba:1f:11:93:e2:be:6f:d9:f6:45: db:5e:b6:5a:e2:fc:61:5b:8b:91:8a:ad:a5:78:4d:0f:2f:fe: 53:24:ed:df:62:41:1a:fc:18:04:fe:58:d1:38:77:c4:4a:67: 95:41:c7:4d:f9:7a:79:a8:8e:b4:b9:9e:49:2a:f4:c3:f7:5b: a8:ce:de:5a:8c:d3:d4:b0:a6:d1:03:dc:ea:78:76:14:5a:36: df:a4:cf:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GGqH7FbTByp5c1Qc2wpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NTYxZDBkZTYyMjQ3ZTIwODViZjU5YTczYzg3ZDI1YTI0 Mzg5ODAwHhcNMjUxMjIwMTgwMTIyWhcNMjUxMjIxMTgwMTIyWjAzMTEwLwYDVQQD EygxZGRmYjc0MmViOTUxMjNiYWIxZTliNzRmN2ZiYzcyZTQ5YTUyOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJAzhxvVA8vXsbk6NeHL3vEXWK9L 0ADWDR224eKdx0Q6qCp4/sUYfMQ5zS48kfKj/qBnZNPkXWuh8pQ/Ltm8Ksae9G1T k6FFZgJYO7j7XrfI/GU9cOr9FI74EUQOaRZKcirPjtX9v3aogUMhHHKUf0tsr9cw 49wHCkjry4vS/4sbLgdHfs/OAggxr+CQirUUAWm5FVSchtPKXjX6S5D9seT1GIWR IyLuGr2g+huVVubLEGLoWNy6m+nuJiLkfZtVZOgXiJ4NIvK3bfGJJ84ktU/piA/o mgib1NKT6EqLVL5LuHMs1iWyv8KuoJXWVGBWm8CKrxJBkL1SMGwYuC2i/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3ft0LrlRI7qx6bdPf7xy5JpSluMB8GA1UdIwQY MBaAFAhWHQ3mIkfiCFv1mnPIfSWiQ4mAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWIt NTNlZDgyZDMzZDg0LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lZDljNjMtNTZiZS00NzFiLTliYWItNTNlZDgyZDMzZDg0 LzEvQ0ZZZERlWWlSLUlJV19XYWM4aDlKYUpEaVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFcHWYAU 7KhHCk5UmnXdJ+OUcNgv+3VjswnBQZCX26sdkNIO+SpHSSAi7G3vuFDTkAwt+JTH L8/QalsMDf1J6Ihpj7M2n7CahNcRr04aFnB2QMBDUrbjCh4NqM2Mu/znZQNy4in6 p8Y9x2KypPAD6BCnO95ZvsgwPK43kj8KAIfmnvsMT1GC3+TUeZCPOXq4gf5JJVNL 4kH64i8U7n3lu+Ra+p9qaKLycyi6HxGT4r5v2fZF2162WuL8YVuLkYqtpXhNDy/+ UyTt32JBGvwYBP5Y0Th3xEpnlUHHTfl6eaiOtLmeSSr0w/dbqM7eWozT1LCm0QPc 6nh2FFo236TPgg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:00 2025 by rpki-client