This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json) Hash identifier: eLPnW8vDLhpmPShSMwzr0sO4fcrnnOhjgMu12N4gWcU= Subject key identifier: E2:B7:A8:2B:EC:AF:F0:D8:72:BE:C0:F6:CF:D9:55:7F:D0:B2:95:33 Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61 Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161 Certificate serial: 019B53AB4066102B82D574018FF20A4B9306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft Manifest number: 041A Signing time: Thu 25 Dec 2025 04:01:30 +0000 Manifest this update: Thu 25 Dec 2025 04:01:30 +0000 Manifest next update: Fri 26 Dec 2025 04:01:30 +0000 Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: JHukO50OLsigC8wKqf7TyQQUe54i8otYXsdrQmjmIzA=) 2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:40:66:10:2b:82:d5:74:01:8f:f2:0a:4b:93:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161 Validity Not Before: Dec 25 04:01:30 2025 GMT Not After : Dec 26 04:01:30 2025 GMT Subject: CN=e2b7a82becaff0d872bec0f6cfd9557fd0b29533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:8a:0e:c6:77:bc:75:c5:ca:94:1b:d9:02: ae:15:35:f8:b3:2b:13:0c:7e:ed:3f:80:01:e3:9d: e1:9b:1f:06:7b:c4:be:5d:0f:df:53:e9:fa:bf:43: cd:9c:88:b7:5f:cd:f3:e0:90:0b:de:e8:53:32:00: a9:3d:0f:ea:14:b2:fc:83:40:dd:79:86:4c:15:97: 17:c8:08:4e:23:4b:cb:3a:1a:ea:19:74:6b:9b:54: 4a:00:bb:00:9d:73:b3:03:fe:c4:f3:45:10:b7:b0: 21:36:e1:1e:6f:20:e6:b2:6e:8a:ec:69:f1:67:9b: 82:d8:c1:06:fb:6f:79:b4:d2:08:93:73:3e:1a:1f: d1:5a:25:00:0d:f2:fb:d0:03:bc:c8:74:34:c8:ed: e3:11:23:c9:af:b9:11:a2:ab:ca:c0:90:b6:74:10: 91:6b:98:14:a5:b7:f0:7e:b6:6e:7e:6f:82:f8:b9: 5b:60:c2:c8:cd:1f:99:7e:6f:f5:a5:bf:68:3b:94: 33:a1:d2:b3:b8:39:d3:87:cc:a3:7b:9f:5b:34:ea: c3:00:6f:d1:72:8e:2d:8b:b6:a8:2e:99:0a:e5:7c: ed:82:f4:c9:77:e3:e9:43:7a:e8:bd:67:3e:98:d3: e5:7a:a9:fa:23:3e:0c:97:18:d3:ec:13:54:a8:3f: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:A8:2B:EC:AF:F0:D8:72:BE:C0:F6:CF:D9:55:7F:D0:B2:95:33 X509v3 Authority Key Identifier: keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:d9:c7:e8:2f:2b:cf:29:66:98:10:b3:60:1b:49:c2:16: 42:6a:c4:57:44:e1:59:95:44:6a:70:9b:0a:9b:a3:83:c5:dc: 4b:32:57:2f:d5:25:32:d2:2b:d1:b2:07:9c:75:2f:8c:02:63: 89:26:06:e7:54:51:e2:c1:dd:d1:a1:3f:c2:04:c9:67:0b:57: 05:1c:f3:2e:07:90:ea:55:45:2f:c5:6e:d6:7c:eb:63:76:53: 05:2d:17:23:4c:71:56:74:05:02:dc:a6:80:14:97:f0:82:3c: 94:e6:87:9f:ac:c0:6c:00:0e:c0:ac:f9:c1:9a:8f:c8:8f:bb: 24:07:e5:66:2f:e6:86:5a:ca:e2:c5:db:89:e1:35:2d:35:5c: 02:32:58:bc:b8:2d:57:d4:8b:03:25:10:dd:de:f5:59:c6:fd: 22:9e:e8:e0:4d:c8:4d:f6:7f:29:cb:9e:2b:31:96:e6:cc:9a: f4:e2:d9:ae:0e:d6:4d:51:f7:87:c8:94:37:1b:48:2d:5d:0a: 9e:38:dc:5c:c0:b4:f9:50:45:5a:87:74:8e:1d:f0:9a:83:a5: f3:2b:33:00:f2:eb:ea:24:44:20:99:65:5d:89:41:47:2d:a9: 83:27:24:39:c1:83:4e:32:42:41:ed:25:05:1e:a7:2d:a5:22: 53:21:05:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq0BmECuC1XQBj/IKS5MGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhM2UwOGVmM2Q3NTRiYzZhZmE5MWZhNmMxMDAyMGY1ODUw NWMxNjEwHhcNMjUxMjI1MDQwMTMwWhcNMjUxMjI2MDQwMTMwWjAzMTEwLwYDVQQD EyhlMmI3YTgyYmVjYWZmMGQ4NzJiZWMwZjZjZmQ5NTU3ZmQwYjI5NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2duKDsZ3vHXFypQb2QKuFTX4sysT DH7tP4AB453hmx8Ge8S+XQ/fU+n6v0PNnIi3X83z4JAL3uhTMgCpPQ/qFLL8g0Dd eYZMFZcXyAhOI0vLOhrqGXRrm1RKALsAnXOzA/7E80UQt7AhNuEebyDmsm6K7Gnx Z5uC2MEG+295tNIIk3M+Gh/RWiUADfL70AO8yHQ0yO3jESPJr7kRoqvKwJC2dBCR a5gUpbfwfrZufm+C+LlbYMLIzR+Zfm/1pb9oO5QzodKzuDnTh8yje59bNOrDAG/R co4ti7aoLpkK5XztgvTJd+PpQ3rovWc+mNPleqn6Iz4MlxjT7BNUqD8qywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK3qCvsr/DYcr7A9s/ZVX/QspUzMB8GA1UdIwQY MBaAFAo+CO89dUvGr6kfpsEAIPWFBcFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUt NGQxZDM3ZGM4MWI0LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8zOTdkZmUtZGM5OC00NTg0LTg1ODUtNGQxZDM3ZGM4MWI0 LzEvQ2o0STd6MTFTOGF2cVItbXdRQWc5WVVGd1dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDXZx+gv K88pZpgQs2AbScIWQmrEV0ThWZVEanCbCpujg8XcSzJXL9UlMtIr0bIHnHUvjAJj iSYG51RR4sHd0aE/wgTJZwtXBRzzLgeQ6lVFL8Vu1nzrY3ZTBS0XI0xxVnQFAtym gBSX8II8lOaHn6zAbAAOwKz5wZqPyI+7JAflZi/mhlrK4sXbieE1LTVcAjJYvLgt V9SLAyUQ3d71Wcb9Ip7o4E3ITfZ/KcueKzGW5sya9OLZrg7WTVH3h8iUNxtILV0K njjcXMC0+VBFWod0jh3wmoOl8yszAPLr6iREIJllXYlBRy2pgyckOcGDTjJCQe0l BR6nLaUiUyEFBw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:24:47 2025 by rpki-client