This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json) Hash identifier: ct7vV1OWXeupfxZBCYaYI3/ALJUoJJsvMYaTDl+okrk= Subject key identifier: 36:CE:4D:EE:8C:29:B7:A3:B6:FD:95:30:BD:1E:B7:3E:CC:61:31:C8 Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e Certificate serial: 019AF2AD9A10B8B79B0008F112CFB658F43B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft Manifest number: 0480 Signing time: Sat 06 Dec 2025 08:00:54 +0000 Manifest this update: Sat 06 Dec 2025 08:00:54 +0000 Manifest next update: Sun 07 Dec 2025 08:00:54 +0000 Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: I9/FzED3+TfvrpmsOAEKCHLz2nrUqkenPeITMKN8eAw=) 2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9a:10:b8:b7:9b:00:08:f1:12:cf:b6:58:f4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e Validity Not Before: Dec 6 08:00:54 2025 GMT Not After : Dec 7 08:00:54 2025 GMT Subject: CN=36ce4dee8c29b7a3b6fd9530bd1eb73ecc6131c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:38:85:d3:88:67:b9:2b:0a:2c:37:f0:c9: ad:dd:00:1a:79:f1:4e:aa:72:a5:1c:b8:21:ce:aa: eb:4e:9e:39:23:75:70:e9:cc:50:f1:43:7a:18:d2: 71:8b:b4:82:b8:67:02:60:ac:b2:9b:b5:5d:84:cb: 9f:e5:03:23:4c:a3:84:f7:38:44:fa:69:97:94:03: 37:ce:19:d9:9e:88:36:91:47:a9:7f:49:7c:a3:75: 41:84:3c:e6:e0:b7:dd:bf:4b:ad:2a:a2:9c:fb:2b: 10:57:36:87:31:d1:57:ee:a6:84:7e:7b:7d:58:7f: 9e:25:4a:21:e9:fb:7e:84:a6:a7:a7:93:1d:ae:62: 21:5e:11:fd:79:25:7c:ee:ef:da:30:af:61:ae:5e: fa:7d:48:49:0a:88:9f:35:da:ec:58:2f:b1:74:45: 3c:d2:b4:6c:ee:53:58:32:fc:77:0e:1f:c9:88:4a: 61:fd:4f:bc:9c:fe:9f:4c:55:4f:64:28:3b:a5:07: 3f:61:a6:11:9a:5f:5c:00:b5:ae:d6:0f:43:23:7a: db:ba:3d:0b:28:ca:d0:7c:c5:af:2c:07:5d:29:ed: ea:9b:be:09:9f:e7:da:df:c8:50:0e:41:b8:3d:a2: 16:0d:e1:39:73:4e:aa:fe:60:3a:a7:27:75:d0:24: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CE:4D:EE:8C:29:B7:A3:B6:FD:95:30:BD:1E:B7:3E:CC:61:31:C8 X509v3 Authority Key Identifier: keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:73:1d:d7:25:50:de:90:8d:aa:3f:b1:21:e9:bc:2f:a3:88: e4:f1:2d:5c:89:ca:24:0a:5e:61:76:64:b6:76:7a:32:ee:a4: 87:49:7b:ef:af:04:0d:c2:b2:bd:70:68:18:86:cb:71:78:4c: 42:70:39:96:87:1b:cc:3b:6c:31:a3:52:43:81:8f:05:28:84: 27:aa:23:b4:ef:75:5e:00:37:0d:de:db:ee:ad:bd:24:d5:91: ef:a0:35:4c:97:0d:a0:32:22:5a:91:a2:77:97:bb:13:fa:92: 5f:12:bc:93:ba:81:7d:07:1d:92:8a:4f:6e:dd:df:7e:44:f0: 7c:23:28:4f:92:69:91:cc:01:7a:d7:5f:1f:84:13:87:4b:d5: bf:b4:64:82:1f:e1:3e:b6:8d:67:bd:1d:83:fe:ae:bb:38:9c: 68:0f:83:26:f7:73:52:45:b6:d8:08:36:af:1f:b2:76:58:8a: e9:2b:1e:91:06:3e:aa:f0:13:e6:6e:18:f4:05:43:9a:d6:b4: 9b:e6:b7:16:69:cd:0d:0f:53:d8:71:a4:4a:70:33:cf:df:44: d4:af:b7:19:69:6d:dc:d6:e5:39:ce:d4:14:78:3f:a4:a2:11: 41:e8:8d:1c:5b:6c:4a:6a:1b:a2:76:0d:a6:1f:9c:a0:ef:4f: 87:0e:8e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZoQuLebAAjxEs+2WPQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzU2ODY1N2U1MGU2ZjhlNWM2YmZlZmE4OWNlZjM1MGQ5 NGY4MmUwHhcNMjUxMjA2MDgwMDU0WhcNMjUxMjA3MDgwMDU0WjAzMTEwLwYDVQQD EygzNmNlNGRlZThjMjliN2EzYjZmZDk1MzBiZDFlYjczZWNjNjEzMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1k4hdOIZ7krCiw38Mmt3QAaefFO qnKlHLghzqrrTp45I3Vw6cxQ8UN6GNJxi7SCuGcCYKyym7VdhMuf5QMjTKOE9zhE +mmXlAM3zhnZnog2kUepf0l8o3VBhDzm4Lfdv0utKqKc+ysQVzaHMdFX7qaEfnt9 WH+eJUoh6ft+hKanp5MdrmIhXhH9eSV87u/aMK9hrl76fUhJCoifNdrsWC+xdEU8 0rRs7lNYMvx3Dh/JiEph/U+8nP6fTFVPZCg7pQc/YaYRml9cALWu1g9DI3rbuj0L KMrQfMWvLAddKe3qm74Jn+fa38hQDkG4PaIWDeE5c06q/mA6pyd10CRWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbOTe6MKbejtv2VML0etz7MYTHIMB8GA1UdIwQY MBaAFP3FaGV+UOb45ca/76ic7zUNlPguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUt NDM1YWYxNGFhMDdhLzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUtNDM1YWYxNGFhMDdh LzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3Md1yVQ 3pCNqj+xIem8L6OI5PEtXInKJApeYXZktnZ6Mu6kh0l7768EDcKyvXBoGIbLcXhM QnA5locbzDtsMaNSQ4GPBSiEJ6ojtO91XgA3Dd7b7q29JNWR76A1TJcNoDIiWpGi d5e7E/qSXxK8k7qBfQcdkopPbt3ffkTwfCMoT5JpkcwBetdfH4QTh0vVv7Rkgh/h PraNZ70dg/6uuzicaA+DJvdzUkW22Ag2rx+ydliK6SsekQY+qvAT5m4Y9AVDmta0 m+a3FmnNDQ9T2HGkSnAzz99E1K+3GWlt3NblOc7UFHg/pKIRQeiNHFtsSmobonYN ph+coO9Phw6O3w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:14 2025 by rpki-client