This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft (raw, json) Hash identifier: iP7riKAl+zg8fde3bNoDIC2oqmlEMP5OdKSJcjoYKB0= Subject key identifier: 41:49:3D:86:2C:CF:22:FA:5E:E8:32:E2:3B:1B:F4:92:07:CB:8C:6C Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42 Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342 Certificate serial: 019B394614C202C490B55B747C051BDF3937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft Manifest number: 05AC Signing time: Sat 20 Dec 2025 01:00:52 +0000 Manifest this update: Sat 20 Dec 2025 01:00:52 +0000 Manifest next update: Sun 21 Dec 2025 01:00:52 +0000 Files and hashes: 1: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl (hash: OdUiRYU2cCl/du3/WesitFXIEHvGzfnrtBG5QpYn/hs=) 2: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (hash: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=) 3: epS9uhPYBS4XHgZYHUSjyRaPT-8.roa (hash: yIRFJuAs5Q1gEW1rNp50YuIW1vM7yb2oOp7wzJTUTIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:14:c2:02:c4:90:b5:5b:74:7c:05:1b:df:39:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342 Validity Not Before: Dec 20 01:00:52 2025 GMT Not After : Dec 21 01:00:52 2025 GMT Subject: CN=41493d862ccf22fa5ee832e23b1bf49207cb8c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:de:ab:f2:d3:13:d3:8b:30:dd:3a:83:7a:4a: 37:cc:4b:d5:50:63:85:e4:2b:26:5a:dc:23:eb:6c: d4:88:fe:f7:a6:51:50:02:15:eb:7d:f9:fc:f4:c0: 52:1a:d6:db:c8:59:56:38:d9:88:27:57:8f:b2:9c: 36:b3:9c:d7:54:c0:1f:38:64:28:78:81:e6:79:d4: e6:55:49:e7:4d:d1:66:3a:85:62:79:ce:eb:0c:fe: 5b:78:c5:f1:b9:3b:15:1e:3a:f3:30:39:7a:00:71: 82:90:bb:5d:54:29:2a:1f:32:7c:56:6a:66:79:a6: 15:40:24:da:15:1a:23:0e:5e:e0:39:80:c5:19:51: fc:8d:39:18:fd:a5:2e:28:f3:5c:f9:56:84:0d:07: c2:92:a4:9c:d1:25:d3:7b:02:03:e8:6b:ee:ce:59: f0:44:93:e4:53:07:7a:8b:d3:4c:7f:b5:74:e3:b8: 19:2f:4b:ba:4f:fc:d0:5f:70:43:1b:36:7b:a7:6d: 00:95:3c:20:e0:b1:06:62:a1:b7:ae:d1:d8:87:c9: 6f:cd:ac:3f:c2:95:db:60:03:54:46:fd:68:0d:fa: 8b:8d:d4:4c:87:41:89:26:d1:78:3b:5a:76:d5:af: 9d:fd:81:a6:a9:79:8f:86:86:8f:ae:01:83:9e:75: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:3D:86:2C:CF:22:FA:5E:E8:32:E2:3B:1B:F4:92:07:CB:8C:6C X509v3 Authority Key Identifier: keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:95:01:f0:29:86:46:4a:e4:61:95:54:42:8a:1a:4e:24: a0:d4:91:cb:4c:07:5a:8c:83:9a:fb:b6:87:12:c3:55:6b:4c: 9a:d9:f7:d9:7c:35:c0:82:31:ce:44:57:de:77:b2:00:9a:08: 48:da:51:19:d6:61:a0:6a:d5:f8:4f:55:ac:95:c4:55:67:29: 20:33:1a:d2:7a:57:06:d1:f5:33:1e:a5:f3:14:ee:82:e6:4f: 91:6e:38:95:f9:3c:e4:1c:82:41:15:19:61:0e:37:9c:27:de: 83:cd:41:85:80:62:47:6c:6c:ba:f7:5b:0b:3b:40:ed:d5:a8: 32:68:3d:de:e3:f6:0f:10:d9:d0:62:e8:2c:b2:e6:94:ab:ce: 41:db:0e:41:8f:77:69:8a:57:59:20:e5:11:ea:7e:2a:77:d8: 95:87:78:2c:b8:70:10:b3:84:7b:13:a3:7d:e7:22:b2:8b:04: c3:6c:58:0c:6e:81:10:ae:04:f2:30:41:ad:8f:99:9e:24:37: 7a:07:f8:bd:5b:b5:8b:c5:ed:7e:c5:cb:b3:03:23:15:d0:18: 96:32:26:fe:49:9c:2e:e9:01:ab:e8:98:c0:32:60:11:a7:cb: df:b7:3f:ed:65:d9:eb:8c:91:9d:eb:be:9b:20:60:08:f8:d4: 02:7a:64:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RhTCAsSQtVt0fAUb3zk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0 ZDczNDIwHhcNMjUxMjIwMDEwMDUyWhcNMjUxMjIxMDEwMDUyWjAzMTEwLwYDVQQD Eyg0MTQ5M2Q4NjJjY2YyMmZhNWVlODMyZTIzYjFiZjQ5MjA3Y2I4YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt6r8tMT04sw3TqDeko3zEvVUGOF 5CsmWtwj62zUiP73plFQAhXrffn89MBSGtbbyFlWONmIJ1ePspw2s5zXVMAfOGQo eIHmedTmVUnnTdFmOoViec7rDP5beMXxuTsVHjrzMDl6AHGCkLtdVCkqHzJ8Vmpm eaYVQCTaFRojDl7gOYDFGVH8jTkY/aUuKPNc+VaEDQfCkqSc0SXTewID6Gvuzlnw RJPkUwd6i9NMf7V047gZL0u6T/zQX3BDGzZ7p20AlTwg4LEGYqG3rtHYh8lvzaw/ wpXbYANURv1oDfqLjdRMh0GJJtF4O1p21a+d/YGmqXmPhoaPrgGDnnVJpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFJPYYszyL6Xugy4jsb9JIHy4xsMB8GA1UdIwQY MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt MmUwZWI0ZjQ2ZmE0LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0 LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoaVAfAp hkZK5GGVVEKKGk4koNSRy0wHWoyDmvu2hxLDVWtMmtn32Xw1wIIxzkRX3neyAJoI SNpRGdZhoGrV+E9VrJXEVWcpIDMa0npXBtH1Mx6l8xTuguZPkW44lfk85ByCQRUZ YQ43nCfeg81BhYBiR2xsuvdbCztA7dWoMmg93uP2DxDZ0GLoLLLmlKvOQdsOQY93 aYpXWSDlEep+KnfYlYd4LLhwELOEexOjfecisosEw2xYDG6BEK4E8jBBrY+ZniQ3 egf4vVu1i8XtfsXLswMjFdAYljIm/kmcLukBq+iYwDJgEafL37c/7WXZ64yRneu+ myBgCPjUAnpktQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:59:55 2025 by rpki-client