This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json) Hash identifier: dm5DAc8MTCrvHFyLehwzCxCPTwWw8D8+QDUMDknz1co= Subject key identifier: 76:99:20:F7:2B:7F:6B:78:ED:0F:7C:2E:78:01:50:3F:E0:3A:98:2D Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Certificate serial: 019AF577EA187B198FFA929E9D0160743C1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft Manifest number: 16F8 Signing time: Sat 06 Dec 2025 21:01:07 +0000 Manifest this update: Sat 06 Dec 2025 21:01:07 +0000 Manifest next update: Sun 07 Dec 2025 21:01:07 +0000 Files and hashes: 1: V-MtEFAl-wCRS2pESKzV6P6YTGg.roa (hash: eJVKgFjZ3+wJXzgqDKuQr6XkPa6E31J6OO87/ztXlAY=) 2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: 7fqG30BbpMBw2mgCr0lL9gAu7rt2540s9lrlWD5OC4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:ea:18:7b:19:8f:fa:92:9e:9d:01:60:74:3c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5 Validity Not Before: Dec 6 21:01:07 2025 GMT Not After : Dec 7 21:01:07 2025 GMT Subject: CN=769920f72b7f6b78ed0f7c2e7801503fe03a982d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:2f:a9:77:4c:e3:c8:5d:25:0e:98:92:82: bb:88:af:a0:b5:e4:c2:4c:1e:d0:ff:5b:a3:3a:28: 37:73:ab:d2:28:e6:8d:5a:08:b0:cd:9c:36:8c:cd: 47:f9:7a:6c:bf:a3:d7:55:9e:c1:04:3c:67:73:b8: 36:c2:bb:e7:f9:e9:2b:f3:4c:a9:04:7f:dd:c4:13: 26:f7:fc:cf:f6:36:94:f0:80:80:46:60:cc:5d:6b: c5:79:4b:3e:5d:7c:b7:2c:11:96:06:b2:d4:f9:c2: 6c:d4:ce:11:1c:5c:b5:07:30:9c:4e:0f:95:79:1a: 9c:7a:9e:b3:39:b1:f8:f1:d2:14:c4:d5:3b:25:d3: 4b:6f:3e:af:6b:26:83:50:09:03:ea:b8:9f:6b:9c: a8:6f:0f:95:bd:83:56:ff:3a:b7:9a:41:77:60:a4: 4f:1f:7e:a3:a2:63:66:70:bd:1e:ab:da:74:13:16: 13:45:f7:4a:1c:0d:ed:c9:40:8d:6e:55:7c:d7:d8: 5b:cb:bc:5b:62:ee:17:69:f2:1f:0c:9d:2e:71:5b: 36:fa:7e:e2:31:6d:d9:11:bb:08:d8:c2:54:39:30: 45:34:bf:06:76:e1:7a:92:1b:5a:20:e3:6f:b1:d4: 4c:09:49:1c:fb:ad:ac:9b:77:34:8f:89:1a:61:36: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:99:20:F7:2B:7F:6B:78:ED:0F:7C:2E:78:01:50:3F:E0:3A:98:2D X509v3 Authority Key Identifier: keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f6:97:3d:3a:bd:14:b0:dd:0d:aa:c9:32:43:62:ef:64:1b: 4b:09:8d:4e:42:4a:71:94:41:52:8d:f1:e1:69:3a:57:44:9a: f2:e3:2a:62:45:81:ff:69:9b:59:11:f9:bd:7f:51:be:0a:27: d7:c2:87:8f:d2:ba:70:cf:0a:7a:57:2b:d9:97:a6:13:a4:45: 0a:68:21:dc:d7:a2:3d:ef:8a:df:fe:fd:33:a2:f8:1d:66:53: 3e:59:b0:c7:bd:56:c3:e8:06:ca:a0:03:52:5d:2b:fd:ce:ca: cd:2d:ab:df:48:77:1a:da:fb:88:63:96:f1:01:21:d3:1c:a9: 22:58:c3:36:c4:56:3d:bb:2b:58:5e:4e:c9:76:2b:83:99:ce: 06:c1:df:21:72:c3:03:dd:76:9b:bc:d5:1d:70:82:69:68:4a: e5:0a:ad:9b:fa:fd:65:40:e8:37:f5:73:59:a5:bb:14:d1:d0: a3:b5:d7:d6:05:10:24:33:55:1f:2a:61:85:54:00:2e:8c:40: 22:0f:f8:67:e7:72:37:68:e3:60:4c:97:a1:73:38:c1:a3:94: 20:39:43:27:e7:16:55:84:d1:a8:a3:74:c1:41:a8:b0:90:e5: fc:8b:ad:2a:9c:b3:f3:86:5c:18:59:c4:2e:6c:06:c0:55:95: dd:7c:08:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+oYexmP+pKenQFgdDwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm NzNjYjUwHhcNMjUxMjA2MjEwMTA3WhcNMjUxMjA3MjEwMTA3WjAzMTEwLwYDVQQD Eyg3Njk5MjBmNzJiN2Y2Yjc4ZWQwZjdjMmU3ODAxNTAzZmUwM2E5ODJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxEvqXdM48hdJQ6YkoK7iK+gteTC TB7Q/1ujOig3c6vSKOaNWgiwzZw2jM1H+Xpsv6PXVZ7BBDxnc7g2wrvn+ekr80yp BH/dxBMm9/zP9jaU8ICARmDMXWvFeUs+XXy3LBGWBrLU+cJs1M4RHFy1BzCcTg+V eRqcep6zObH48dIUxNU7JdNLbz6vayaDUAkD6rifa5yobw+VvYNW/zq3mkF3YKRP H36jomNmcL0eq9p0ExYTRfdKHA3tyUCNblV819hby7xbYu4XafIfDJ0ucVs2+n7i MW3ZEbsI2MJUOTBFNL8GduF6khtaIONvsdRMCUkc+62sm3c0j4kaYTbY+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaZIPcrf2t47Q98LngBUD/gOpgtMB8GA1UdIwQY MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct MDEyMDhkODZkZGNjLzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvaXPTq9 FLDdDarJMkNi72QbSwmNTkJKcZRBUo3x4Wk6V0Sa8uMqYkWB/2mbWRH5vX9Rvgon 18KHj9K6cM8Kelcr2ZemE6RFCmgh3NeiPe+K3/79M6L4HWZTPlmwx71Ww+gGyqAD Ul0r/c7KzS2r30h3Gtr7iGOW8QEh0xypIljDNsRWPbsrWF5OyXYrg5nOBsHfIXLD A912m7zVHXCCaWhK5Qqtm/r9ZUDoN/VzWaW7FNHQo7XX1gUQJDNVHyphhVQALoxA Ig/4Z+dyN2jjYEyXoXM4waOUIDlDJ+cWVYTRqKN0wUGosJDl/IutKpyz84ZcGFnE LmwGwFWV3XwI/A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:32:15 2025 by rpki-client