This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json) Hash identifier: KEwPSigNpSH5xH3GQIMoL8nJVdZY407zhcYAToJ+xJA= Subject key identifier: 18:21:9C:2C:77:4F:F0:CA:15:15:7C:17:E9:AC:FE:49:70:36:D3:39 Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Certificate serial: 019B3AFD632995A7E4447C292078A222FB9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft Manifest number: 0515 Signing time: Sat 20 Dec 2025 09:00:43 +0000 Manifest this update: Sat 20 Dec 2025 09:00:43 +0000 Manifest next update: Sun 21 Dec 2025 09:00:43 +0000 Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: eicmpBUWBtT2IuuW0KR/gSyllKoT847JrihPFpUjmNg=) 2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:63:29:95:a7:e4:44:7c:29:20:78:a2:22:fb:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Validity Not Before: Dec 20 09:00:43 2025 GMT Not After : Dec 21 09:00:43 2025 GMT Subject: CN=18219c2c774ff0ca15157c17e9acfe497036d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c0:68:ea:4d:96:37:35:4f:b9:34:3b:f9:7b: 04:fd:a8:e1:b2:95:ec:6c:9c:39:33:3b:10:6d:8c: 01:78:7f:ba:08:43:8f:36:8d:ed:6c:a1:c1:00:73: 16:1a:b6:ad:87:46:67:65:cb:08:f4:c3:0b:73:0c: 02:06:03:4d:e7:de:d0:81:15:3b:94:16:be:0d:5f: ae:68:0e:bc:c7:a8:dc:50:98:5f:68:25:f7:1b:ff: e4:e7:f8:86:ba:65:5c:dc:46:06:35:58:ac:a6:db: f4:62:cd:07:80:ac:16:82:44:fe:c2:b0:b4:f4:9c: d3:50:73:db:f8:be:57:fe:00:d3:e5:72:9e:cf:04: ae:23:30:4e:73:0c:bd:56:5d:7c:2a:34:81:b1:84: b4:b8:85:10:d0:d3:5b:27:04:8d:12:91:ee:d3:5b: e0:c6:04:d8:6d:ac:05:c5:12:59:23:64:c5:d3:45: 9d:ee:a9:28:e0:a9:e9:9a:4c:55:6b:0d:03:cc:4d: 19:33:6f:56:e0:68:10:54:04:fd:84:55:8c:fe:1a: 43:23:48:29:4b:ce:5d:f2:61:41:4d:6f:f0:dc:5a: 39:25:62:6f:8f:ea:3d:c4:0d:95:af:16:bc:e5:87: 26:c4:29:6d:a2:f1:9b:22:2d:60:00:8d:5b:b6:e8: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:21:9C:2C:77:4F:F0:CA:15:15:7C:17:E9:AC:FE:49:70:36:D3:39 X509v3 Authority Key Identifier: keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cd:c7:49:2c:b8:6c:3d:c8:de:38:a0:05:32:fb:3c:e8:cb: 06:bf:d5:90:78:8d:3d:23:3f:98:eb:d5:1c:3d:e2:a2:b9:0a: 11:70:58:c8:5f:02:65:b5:fd:03:28:9e:d8:69:13:f7:6d:69: e1:e0:20:f0:3c:f7:c4:a7:01:80:ec:07:8b:89:e5:ac:6c:bd: d5:f2:93:43:43:60:97:62:b4:c4:1e:46:9b:1f:6b:7a:fb:21: ae:33:e5:3d:aa:52:1b:d3:7b:68:c7:d7:a7:13:36:35:8b:89: b1:ba:16:97:0c:e5:a7:13:19:2b:12:7c:c6:ef:a1:96:49:d8: 00:0d:41:9d:c1:d1:6c:98:e9:1a:65:65:44:8d:6a:4a:ff:a9: 2d:a3:3e:7d:58:f0:2d:a6:99:0e:d1:50:55:f6:8e:32:28:52: b1:9f:cf:a5:ad:f9:bc:83:0b:37:e3:d2:ec:7b:f4:b1:be:70: 84:f8:a4:f7:b6:06:42:11:08:16:78:5f:15:ab:0d:30:b0:3b: ce:cb:01:9e:7b:5b:7c:41:37:9d:1d:df:60:67:6b:e3:dd:0f: 99:9d:2d:18:ac:67:de:78:5f:6a:b0:15:d1:12:5b:2d:5e:6b: 3e:85:01:6c:f4:a9:3c:e3:f7:bc:cc:c4:de:ec:89:d4:5a:d5: 1e:13:ac:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/WMplafkRHwpIHiiIvubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1 ZjkyNjgwHhcNMjUxMjIwMDkwMDQzWhcNMjUxMjIxMDkwMDQzWjAzMTEwLwYDVQQD EygxODIxOWMyYzc3NGZmMGNhMTUxNTdjMTdlOWFjZmU0OTcwMzZkMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MBo6k2WNzVPuTQ7+XsE/ajhspXs bJw5MzsQbYwBeH+6CEOPNo3tbKHBAHMWGrath0ZnZcsI9MMLcwwCBgNN597QgRU7 lBa+DV+uaA68x6jcUJhfaCX3G//k5/iGumVc3EYGNVisptv0Ys0HgKwWgkT+wrC0 9JzTUHPb+L5X/gDT5XKezwSuIzBOcwy9Vl18KjSBsYS0uIUQ0NNbJwSNEpHu01vg xgTYbawFxRJZI2TF00Wd7qko4KnpmkxVaw0DzE0ZM29W4GgQVAT9hFWM/hpDI0gp S85d8mFBTW/w3Fo5JWJvj+o9xA2Vrxa85YcmxCltovGbIi1gAI1btui9kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBghnCx3T/DKFRV8F+ms/klwNtM5MB8GA1UdIwQY MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt ZjZjMTZhY2ExNzVlLzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXc3HSSy4 bD3I3jigBTL7POjLBr/VkHiNPSM/mOvVHD3iorkKEXBYyF8CZbX9Ayie2GkT921p 4eAg8Dz3xKcBgOwHi4nlrGy91fKTQ0Ngl2K0xB5Gmx9revshrjPlPapSG9N7aMfX pxM2NYuJsboWlwzlpxMZKxJ8xu+hlknYAA1BncHRbJjpGmVlRI1qSv+pLaM+fVjw LaaZDtFQVfaOMihSsZ/Ppa35vIMLN+PS7Hv0sb5whPik97YGQhEIFnhfFasNMLA7 zssBnntbfEE3nR3fYGdr490PmZ0tGKxn3nhfarAV0RJbLV5rPoUBbPSpPOP3vMzE 3uyJ1FrVHhOsQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:54 2025 by rpki-client