This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json) Hash identifier: MF4ZPcUGG55+MQxLKnANMRqRwF1YUWkaby7vQHyw6oc= Subject key identifier: AC:2D:57:97:E8:47:A3:5C:26:EB:51:A9:28:C3:75:89:07:A8:6E:61 Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Certificate serial: 019B3CB5219A9E6628FA41F3CE6F191B9319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft Manifest number: 11EC Signing time: Sat 20 Dec 2025 17:01:01 +0000 Manifest this update: Sat 20 Dec 2025 17:01:01 +0000 Manifest next update: Sun 21 Dec 2025 17:01:01 +0000 Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: 4J/0TP/EsL1+R2w0V0V1MtHD/wW7mMLcPxEHRzbElJw=) 2: aZ04YotwMN5NF6QJ2ZcHvh79g-w.roa (hash: dZyQQffGI8dAk3Ily2WBsTj4NOYJ+9MtNaWUE01PNh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:21:9a:9e:66:28:fa:41:f3:ce:6f:19:1b:93:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Validity Not Before: Dec 20 17:01:01 2025 GMT Not After : Dec 21 17:01:01 2025 GMT Subject: CN=ac2d5797e847a35c26eb51a928c3758907a86e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:53:bb:d9:6a:9c:7a:57:27:c3:a5:1d:8b:9f: 97:27:6a:e7:76:46:83:2f:64:a4:bf:86:db:cb:b7: 4d:6f:72:58:f8:2f:a4:92:c2:be:38:25:61:8e:f7: c9:4d:ab:0e:d0:92:bf:de:e3:41:d0:e0:15:50:d9: 1c:44:82:bd:2b:89:f2:36:ed:53:7c:3c:0f:a2:b6: 28:54:48:67:67:49:78:2a:f0:02:d2:00:9b:e3:0a: a4:6b:55:82:91:7f:88:dc:3b:10:4a:f6:c4:e4:76: 19:47:d7:65:4e:96:b8:78:86:1a:de:c9:db:59:c5: 97:7f:9a:4c:4c:5a:b9:35:35:a4:60:e7:68:b9:7b: 17:60:9e:1a:71:7b:22:35:93:79:48:32:9f:a4:0c: 9f:f1:2f:5f:e8:ac:c5:f5:dc:eb:65:bc:5e:bf:51: 6a:ae:85:76:c4:30:74:33:b6:1f:d3:af:bd:fa:0f: c3:5e:f9:a2:d9:f7:a3:d2:dc:f7:16:86:7a:42:03: 5e:76:3a:ab:fe:36:3b:6f:c4:63:72:0c:36:66:58: 87:95:cc:6e:55:b1:0a:bf:46:cc:c6:4e:ea:52:2e: a3:37:b8:75:95:e4:00:8a:5a:f8:bf:0e:78:e2:75: 0a:31:ef:d1:fb:57:a6:64:d3:f6:6a:80:10:ac:1a: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2D:57:97:E8:47:A3:5C:26:EB:51:A9:28:C3:75:89:07:A8:6E:61 X509v3 Authority Key Identifier: keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4b:89:83:29:af:58:82:c8:92:04:29:bf:92:0d:01:f4:94: 80:37:b5:82:f1:44:3f:09:35:35:db:7e:a4:7f:da:c3:f1:14: af:36:67:86:3d:ed:28:e8:e7:82:b4:d3:f1:1d:0f:46:09:1b: 71:d0:60:59:09:73:ba:5d:ff:dc:de:9b:21:6b:ac:ba:2e:50: 5d:13:86:af:24:b4:ad:fd:a3:c1:7f:46:5c:c0:74:fb:92:85: 98:fa:ad:5e:0f:af:2d:60:65:fb:c8:d0:df:42:3a:86:0b:3e: fb:58:bd:bd:fa:f2:2a:8c:8a:2c:c8:33:13:e4:1a:00:15:2d: c6:f4:31:38:6c:ab:d5:f7:31:bb:bb:ef:b3:3a:49:54:eb:5e: 16:0d:3a:9e:17:17:25:ec:d7:46:94:f0:85:12:2f:d0:9a:09: 36:3d:43:20:e1:db:6e:7f:11:dc:e8:23:a2:d1:b9:21:4b:08: 96:a6:18:42:a3:8b:24:06:8c:77:55:a6:d7:a1:68:da:23:19: fa:7f:dd:73:ed:a5:b0:9d:24:7e:6c:ac:0c:2a:6f:2d:85:7a: e9:cc:09:6f:72:78:b5:c1:7c:86:fd:a5:1b:47:77:15:0d:3d: fd:cb:c0:0f:99:6f:50:b0:01:57:dd:43:bf:78:0a:c5:66:92: af:f6:85:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tSGanmYo+kHzzm8ZG5MZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm OGMxNGQwHhcNMjUxMjIwMTcwMTAxWhcNMjUxMjIxMTcwMTAxWjAzMTEwLwYDVQQD EyhhYzJkNTc5N2U4NDdhMzVjMjZlYjUxYTkyOGMzNzU4OTA3YTg2ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVO72Wqcelcnw6Udi5+XJ2rndkaD L2Skv4bby7dNb3JY+C+kksK+OCVhjvfJTasO0JK/3uNB0OAVUNkcRIK9K4nyNu1T fDwPorYoVEhnZ0l4KvAC0gCb4wqka1WCkX+I3DsQSvbE5HYZR9dlTpa4eIYa3snb WcWXf5pMTFq5NTWkYOdouXsXYJ4acXsiNZN5SDKfpAyf8S9f6KzF9dzrZbxev1Fq roV2xDB0M7Yf06+9+g/DXvmi2fej0tz3FoZ6QgNedjqr/jY7b8Rjcgw2ZliHlcxu VbEKv0bMxk7qUi6jN7h1leQAilr4vw544nUKMe/R+1emZNP2aoAQrBolQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwtV5foR6NcJutRqSjDdYkHqG5hMB8GA1UdIwQY MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkuJgymv WILIkgQpv5INAfSUgDe1gvFEPwk1Ndt+pH/aw/EUrzZnhj3tKOjngrTT8R0PRgkb cdBgWQlzul3/3N6bIWusui5QXROGryS0rf2jwX9GXMB0+5KFmPqtXg+vLWBl+8jQ 30I6hgs++1i9vfryKoyKLMgzE+QaABUtxvQxOGyr1fcxu7vvszpJVOteFg06nhcX JezXRpTwhRIv0JoJNj1DIOHbbn8R3OgjotG5IUsIlqYYQqOLJAaMd1Wm16Fo2iMZ +n/dc+2lsJ0kfmysDCpvLYV66cwJb3J4tcF8hv2lG0d3FQ09/cvAD5lvULABV91D v3gKxWaSr/aFCw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:30:53 2025 by rpki-client