This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json) Hash identifier: QDWVyyppDJ9o8FK26zwxZTqyXbZtDTNUzFvAJmCur1g= Subject key identifier: C3:34:69:86:28:1C:41:B5:24:A2:FA:F4:4F:62:BB:C7:26:2A:5C:3D Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Certificate serial: 019B405B9379B0DBE0807A01DE920101915D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 10:01:41 +0000 Manifest this update: Sun 21 Dec 2025 10:01:41 +0000 Manifest next update: Mon 22 Dec 2025 10:01:41 +0000 Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: Doqigs635vl0ChlkVwlcWE9+su4fkUkzLeTcUvv1TIE=) 2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:93:79:b0:db:e0:80:7a:01:de:92:01:01:91:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Validity Not Before: Dec 21 10:01:41 2025 GMT Not After : Dec 22 10:01:41 2025 GMT Subject: CN=c3346986281c41b524a2faf44f62bbc7262a5c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:52:85:7c:76:11:8a:53:1c:c5:ff:de:c3: 73:db:14:eb:72:0f:a1:33:6e:48:ec:8f:9a:49:b9: e3:b1:87:f8:a4:36:88:97:07:a7:36:51:25:98:08: ee:c5:88:d4:66:01:b0:5b:36:14:f3:ef:85:b4:fa: 68:67:c4:27:b1:77:5c:07:a2:d1:3b:3a:86:41:b9: 42:b6:cb:c9:ce:7d:50:19:76:d7:2a:07:93:1e:eb: e1:5d:9b:71:be:c9:b8:f6:e8:59:ba:3a:9d:3f:69: 73:a3:78:93:4d:0d:27:b3:14:71:2d:88:4c:9e:1e: d0:e5:b3:28:bc:35:0d:22:86:a5:fd:2c:25:17:b8: a5:5b:72:19:6b:42:8e:4b:cd:13:41:a0:66:67:80: 10:71:dc:62:b0:39:ca:b5:25:a6:b4:fc:9e:80:ce: c4:23:16:9f:31:da:3b:1a:e2:43:27:a5:03:90:d1: 6e:ef:67:b0:b5:e1:a9:a7:0d:26:fb:84:c0:46:79: 87:47:0e:c4:40:d0:cd:0d:88:14:9f:8e:75:fe:37: 0a:d7:4d:ce:80:2e:e9:58:fa:62:02:69:dc:e7:e8: e1:a1:ac:aa:8a:55:48:07:82:e6:a1:9a:c5:fa:f8: fe:76:73:d1:c2:81:dd:19:3c:e1:e5:46:98:53:b8: 22:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:69:86:28:1C:41:B5:24:A2:FA:F4:4F:62:BB:C7:26:2A:5C:3D X509v3 Authority Key Identifier: keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:95:ec:a3:dd:40:a3:e5:09:6d:8d:d2:58:d0:20:e0:62:3b: 96:88:5f:e2:56:6c:18:3c:d3:9c:48:0d:d6:1f:b9:ec:a8:8e: af:46:c8:28:47:d6:88:30:1c:72:19:d0:d5:70:e0:55:bc:06: 9a:2d:50:c4:57:65:1c:ed:29:35:61:07:fd:c1:62:51:e5:6d: e7:4d:38:92:9e:44:55:bc:df:da:f9:fc:9c:c5:1b:26:ad:ad: 6e:70:00:30:b5:ca:d9:49:fd:62:8c:d9:f3:ed:e6:e5:ce:3f: 7a:95:85:31:75:15:ae:f2:c6:ba:c7:a0:40:e6:43:d9:fd:7d: 1c:e6:19:1f:97:66:be:65:df:07:f6:7b:86:16:71:e5:55:9e: a9:7d:fc:6e:0c:4a:98:ac:28:c5:df:57:9a:18:16:5b:0c:f0: 98:57:fe:af:4f:ae:e0:cf:00:e3:52:4d:80:e1:b9:39:07:1c: e5:10:c9:82:c4:69:a2:8b:8a:72:47:3c:bc:d0:63:d3:a1:5a: 28:f0:a2:33:4c:b0:0b:62:c0:bb:81:9f:56:96:94:fd:9c:8b: e1:a2:b2:8b:2e:04:77:20:63:b4:f3:53:fa:5d:6d:46:91:aa: e3:57:c7:83:65:cd:6a:ea:6c:56:fd:cd:46:25:b3:73:b7:32: 50:df:c8:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW5N5sNvggHoB3pIBAZFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2 N2NhM2YwHhcNMjUxMjIxMTAwMTQxWhcNMjUxMjIyMTAwMTQxWjAzMTEwLwYDVQQD EyhjMzM0Njk4NjI4MWM0MWI1MjRhMmZhZjQ0ZjYyYmJjNzI2MmE1YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/VShXx2EYpTHMX/3sNz2xTrcg+h M25I7I+aSbnjsYf4pDaIlwenNlElmAjuxYjUZgGwWzYU8++FtPpoZ8QnsXdcB6LR OzqGQblCtsvJzn1QGXbXKgeTHuvhXZtxvsm49uhZujqdP2lzo3iTTQ0nsxRxLYhM nh7Q5bMovDUNIoal/SwlF7ilW3IZa0KOS80TQaBmZ4AQcdxisDnKtSWmtPyegM7E IxafMdo7GuJDJ6UDkNFu72ewteGppw0m+4TARnmHRw7EQNDNDYgUn451/jcK103O gC7pWPpiAmnc5+jhoayqilVIB4LmoZrF+vj+dnPRwoHdGTzh5UaYU7giIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM0aYYoHEG1JKL69E9iu8cmKlw9MB8GA1UdIwQY MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJXso91A o+UJbY3SWNAg4GI7lohf4lZsGDzTnEgN1h+57KiOr0bIKEfWiDAcchnQ1XDgVbwG mi1QxFdlHO0pNWEH/cFiUeVt5004kp5EVbzf2vn8nMUbJq2tbnAAMLXK2Un9YozZ 8+3m5c4/epWFMXUVrvLGusegQOZD2f19HOYZH5dmvmXfB/Z7hhZx5VWeqX38bgxK mKwoxd9XmhgWWwzwmFf+r0+u4M8A41JNgOG5OQcc5RDJgsRpoouKckc8vNBj06Fa KPCiM0ywC2LAu4GfVpaU/ZyL4aKyiy4EdyBjtPNT+l1tRpGq41fHg2XNaupsVv3N RiWzc7cyUN/Ieg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:19:28 2025 by rpki-client