This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: ZoClbNhEPmtepIhvQc0YpvWPiTJNOi1203jRFQ4VnBY= Subject key identifier: FF:D8:B6:E0:CB:97:F1:B3:62:5E:0A:D3:17:18:B4:A4:10:BE:51:25 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019AF0F5F411D1AF4F12647D492BA6F51ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 1148 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: z6/Eo1+t9zFtNWPf+w47p517ShwfaCTQ1nECbEhTif4=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f4:11:d1:af:4f:12:64:7d:49:2b:a6:f5:1e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=ffd8b6e0cb97f1b3625e0ad31718b4a410be5125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6b:da:e0:36:3b:3e:ef:1d:3d:73:a9:c6:a8: a8:10:3b:61:f6:8d:ea:19:0c:94:d9:4a:3a:35:54: 11:ec:6a:97:1c:0e:f1:08:31:5c:e4:b3:c7:48:35: c4:26:d6:dd:f4:e8:61:35:b7:88:81:da:dd:7f:2d: 42:31:d2:08:bf:41:6f:89:0e:56:de:83:29:36:07: 85:e6:5c:b7:41:71:85:31:21:63:f4:6a:30:3e:4e: 6b:17:e2:17:f3:96:49:f0:fb:1b:c9:05:70:e1:ae: d1:41:68:d8:32:a7:ac:07:a1:47:7b:e0:e9:85:71: c3:01:5f:05:05:b3:9f:b7:89:9b:4d:fd:99:18:2c: 1d:4d:b1:9c:a0:15:01:c6:bb:d3:be:26:14:59:13: dd:20:35:44:07:3f:78:88:1e:20:93:9b:5d:55:5e: a6:7c:2e:cf:7b:a1:ca:da:60:ce:17:3a:90:7c:cc: 0f:75:af:45:39:40:00:21:64:04:3f:17:87:0f:ff: 1f:b3:f0:b2:3e:0f:c9:7d:6b:07:3c:98:bd:8d:28: 3e:e4:26:80:a7:69:08:0c:55:a9:01:3b:6e:49:a8: 46:3b:cd:ac:bb:9d:41:d9:75:f0:de:c9:6a:bf:4b: 60:c3:cf:e9:14:22:48:67:fe:3c:c7:c0:98:65:3d: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:B6:E0:CB:97:F1:B3:62:5E:0A:D3:17:18:B4:A4:10:BE:51:25 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:5f:ca:09:43:eb:67:78:4e:8f:e5:87:32:2f:45:d3:c2:2c: a4:d8:2e:02:39:fd:19:1b:d3:5e:e3:9f:25:64:cc:48:21:58: 90:04:a5:85:ea:3b:00:0a:38:13:02:83:e1:4b:76:bc:4e:c4: 8b:eb:26:f8:13:71:94:2d:b0:c5:f7:33:c5:0d:d8:1e:13:5f: ac:e2:2b:cd:be:c6:65:6d:8a:01:94:1a:81:76:b6:8e:74:09: 1d:57:be:92:d2:9d:69:36:f6:d0:46:1b:b0:3a:b0:b1:bc:81: 03:c7:e0:4b:3a:cb:06:eb:a5:2a:c5:a9:24:d7:bb:6e:c6:05: d4:8f:2d:11:7f:85:68:a0:41:31:fa:8f:f1:7f:64:4f:09:93: fd:e3:91:d1:58:52:54:38:a3:74:b9:9a:9f:00:ae:66:2c:8e: aa:4d:5b:93:a0:dd:05:0f:58:9e:87:d1:71:96:41:18:88:5c: dd:33:ea:7c:e5:d4:08:73:61:25:47:c5:4d:b5:1f:c1:7d:de: bb:2f:0a:f6:6d:18:47:1b:4f:d2:e8:e7:b8:f0:47:2c:e3:63: df:74:46:45:0b:98:19:85:f5:6a:a0:f5:48:13:bb:d8:05:fe: c4:c9:22:38:ef:75:52:de:ad:bf:1d:50:c7:04:19:f0:d7:2d: c2:6f:69:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fQR0a9PEmR9SSum9R7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD EyhmZmQ4YjZlMGNiOTdmMWIzNjI1ZTBhZDMxNzE4YjRhNDEwYmU1MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Gva4DY7Pu8dPXOpxqioEDth9o3q GQyU2Uo6NVQR7GqXHA7xCDFc5LPHSDXEJtbd9OhhNbeIgdrdfy1CMdIIv0FviQ5W 3oMpNgeF5ly3QXGFMSFj9GowPk5rF+IX85ZJ8PsbyQVw4a7RQWjYMqesB6FHe+Dp hXHDAV8FBbOft4mbTf2ZGCwdTbGcoBUBxrvTviYUWRPdIDVEBz94iB4gk5tdVV6m fC7Pe6HK2mDOFzqQfMwPda9FOUAAIWQEPxeHD/8fs/CyPg/JfWsHPJi9jSg+5CaA p2kIDFWpATtuSahGO82su51B2XXw3slqv0tgw8/pFCJIZ/48x8CYZT20uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/YtuDLl/GzYl4K0xcYtKQQvlElMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3F/KCUPr Z3hOj+WHMi9F08IspNguAjn9GRvTXuOfJWTMSCFYkASlheo7AAo4EwKD4Ut2vE7E i+sm+BNxlC2wxfczxQ3YHhNfrOIrzb7GZW2KAZQagXa2jnQJHVe+ktKdaTb20EYb sDqwsbyBA8fgSzrLBuulKsWpJNe7bsYF1I8tEX+FaKBBMfqP8X9kTwmT/eOR0VhS VDijdLmanwCuZiyOqk1bk6DdBQ9YnofRcZZBGIhc3TPqfOXUCHNhJUfFTbUfwX3e uy8K9m0YRxtP0ujnuPBHLONj33RGRQuYGYX1aqD1SBO72AX+xMkiOO91Ut6tvx1Q xwQZ8Nctwm9pLA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:38 2025 by rpki-client