This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft File: CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json) Hash identifier: uSZbVO8T8uI/5EMA44XVS0KCajj29WigIUnQtOFZBYM= Subject key identifier: 59:B3:96:32:73:73:D5:81:B4:9B:EE:F7:CB:22:AE:6B:20:DF:4B:72 Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Certificate serial: 019B3B6B75FF3192603811AEB1FE8BAD2676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft Manifest number: 1352 Signing time: Sat 20 Dec 2025 11:00:56 +0000 Manifest this update: Sat 20 Dec 2025 11:00:56 +0000 Manifest next update: Sun 21 Dec 2025 11:00:56 +0000 Files and hashes: 1: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (hash: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=) 2: A0RJOA3D0QS8jyOdklsxwozEZks.roa (hash: sW0q/KPoEvaj+bjphgSA1v3RGwifbXQZawO4nY7ko3U=) 3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: mJ+x+0pUi8kpSQM0dwKeXrWJfK61HzwEGVSxK6QJNLw=) 4: EiLZXNFLeYaMBuVG79qI9-lFpJ0.roa (hash: pWVGRhAAESPBnV3t2uHYBiBVbQwsb0r95XhCGXUNPKk=) 5: pjH39R69sTwNHovgBG7mjRi0zDA.roa (hash: ///nC0KLmONlIJKYPkTb/i0CXtnKWaQJex/id87l6FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:75:ff:31:92:60:38:11:ae:b1:fe:8b:ad:26:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936 Validity Not Before: Dec 20 11:00:56 2025 GMT Not After : Dec 21 11:00:56 2025 GMT Subject: CN=59b396327373d581b49beef7cb22ae6b20df4b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:63:d8:d3:06:cd:97:51:18:60:fd:49:d3: 81:06:cf:77:c8:01:1a:ca:d5:50:68:0f:0d:af:56: 81:81:88:a1:cc:c5:40:0c:7c:08:e8:81:b7:60:2f: 95:d5:d1:4a:c4:4a:b9:5e:cf:be:6c:3f:6f:36:3b: fe:89:8a:c9:b9:63:92:81:4b:11:0c:1c:c1:71:fe: f3:60:d9:63:97:13:47:da:d8:f2:74:49:e9:47:15: 71:43:8c:31:ad:e2:9f:f7:3f:34:8e:a3:8d:43:a7: a7:c0:c1:73:5f:e9:ec:93:c1:1b:d3:e5:3c:4c:f7: c6:60:1d:63:c4:ba:fa:74:47:77:99:b4:bf:f4:67: b7:87:db:7b:30:f9:4c:93:be:e3:c4:13:ea:51:12: 39:11:7e:1b:03:6e:4b:1d:a7:e4:e9:80:7b:f4:17: 93:10:a8:cf:3a:cd:75:70:0c:4b:13:94:bf:64:dd: 5b:b6:4e:49:85:50:06:64:2f:ea:25:d7:f6:17:4e: 1f:de:52:24:c1:aa:3f:e3:c8:4f:ce:ce:11:ea:f4: ec:25:9d:81:23:75:b3:0b:f2:fb:8e:0a:b3:f3:44: 6a:6d:48:b4:a5:2a:de:33:83:ab:e0:32:c0:83:c1: df:f8:e4:b0:a3:0a:99:e5:a6:f7:18:91:eb:f3:cc: 34:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B3:96:32:73:73:D5:81:B4:9B:EE:F7:CB:22:AE:6B:20:DF:4B:72 X509v3 Authority Key Identifier: keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:28:34:12:50:ab:35:93:88:fc:a3:e6:a9:a8:a0:ed:97:4e: 25:28:5f:33:41:de:ad:b1:52:8b:df:ff:79:be:11:75:06:46: 95:c6:b0:c5:89:79:ab:4c:5a:f0:18:81:d1:a6:1e:89:91:fb: 00:7b:d1:cb:25:55:58:ef:8c:07:e1:5b:3d:f3:56:f8:14:45: 91:ee:3c:cd:41:b4:82:41:21:90:18:14:35:c4:7f:29:61:95: aa:be:b3:db:99:3e:6c:0d:5b:30:85:45:23:2c:3c:1a:74:fd: 2e:68:cf:18:93:f1:3d:9e:e3:04:8d:ef:a9:db:66:76:b5:2f: eb:8b:99:b7:db:cd:88:b9:58:9c:04:08:86:43:7b:4d:b6:78: 86:8e:0c:f1:e8:e1:69:78:9b:a6:aa:00:0f:18:6a:d0:51:46: 45:d7:4c:0b:9b:eb:bd:15:f2:da:cb:80:50:ca:4d:20:e6:9d: f5:9e:b7:2e:9d:b0:92:f9:0f:19:4f:79:6a:09:ba:db:60:38: de:6e:df:40:62:3a:2b:60:76:7e:39:f1:84:73:92:1c:fd:a5: 85:84:f5:4a:3d:3e:a5:5c:03:d0:bf:04:5c:48:c6:99:72:88: 0a:46:0e:de:8d:51:6d:5e:35:7d:2a:1b:f2:e7:b9:8b:d2:b9: 2c:f9:32:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3X/MZJgOBGusf6LrSZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5 YjA5MzYwHhcNMjUxMjIwMTEwMDU2WhcNMjUxMjIxMTEwMDU2WjAzMTEwLwYDVQQD Eyg1OWIzOTYzMjczNzNkNTgxYjQ5YmVlZjdjYjIyYWU2YjIwZGY0YjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwBj2NMGzZdRGGD9SdOBBs93yAEa ytVQaA8Nr1aBgYihzMVADHwI6IG3YC+V1dFKxEq5Xs++bD9vNjv+iYrJuWOSgUsR DBzBcf7zYNljlxNH2tjydEnpRxVxQ4wxreKf9z80jqONQ6enwMFzX+nsk8Eb0+U8 TPfGYB1jxLr6dEd3mbS/9Ge3h9t7MPlMk77jxBPqURI5EX4bA25LHafk6YB79BeT EKjPOs11cAxLE5S/ZN1btk5JhVAGZC/qJdf2F04f3lIkwao/48hPzs4R6vTsJZ2B I3WzC/L7jgqz80RqbUi0pSreM4Or4DLAg8Hf+OSwowqZ5ab3GJHr88w0SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmzljJzc9WBtJvu98sirmsg30tyMB8GA1UdIwQY MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt OTk2MTg5ZjljZTE0LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0 LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSg0ElCr NZOI/KPmqaig7ZdOJShfM0HerbFSi9//eb4RdQZGlcawxYl5q0xa8BiB0aYeiZH7 AHvRyyVVWO+MB+FbPfNW+BRFke48zUG0gkEhkBgUNcR/KWGVqr6z25k+bA1bMIVF Iyw8GnT9LmjPGJPxPZ7jBI3vqdtmdrUv64uZt9vNiLlYnAQIhkN7TbZ4ho4M8ejh aXibpqoADxhq0FFGRddMC5vrvRXy2suAUMpNIOad9Z63Lp2wkvkPGU95agm622A4 3m7fQGI6K2B2fjnxhHOSHP2lhYT1Sj0+pVwD0L8EXEjGmXKICkYO3o1RbV41fSob 8ue5i9K5LPkyYg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:13:48 2025 by rpki-client