This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft File: Cr193OT9cDvD-8r8G11Xfhp1dXU.mft (raw, json) Hash identifier: kqlLc4NZBMrHsnCSF6Za9w/h8+IS4fv5HAx5o+igHE8= Subject key identifier: FB:9E:A0:53:0E:A7:44:8D:05:E2:37:47:A1:84:34:A9:98:FD:E3:C4 Authority key identifier: 0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75 Certificate issuer: /CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575 Certificate serial: 019AF1D1D71AFBAEDEEDBC2C5901982A281F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft Manifest number: 1528 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: AWRVDrJmsEsB9Z159jyFngqyGLE.roa (hash: DirE8id/agwWNhmtyshobBEdAnWhXbNRd3+Zdg4CPc0=) 2: Cr193OT9cDvD-8r8G11Xfhp1dXU.crl (hash: xGsdI0Kajc2OYv0Psgfb2GpdGl8CcZjTH4NxyI/uQOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:1a:fb:ae:de:ed:bc:2c:59:01:98:2a:28:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abd7ddce4fd703bc3fbcafc1b5d577e1a757575 Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=fb9ea0530ea7448d05e23747a18434a998fde3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:58:77:0b:a3:8d:93:64:a9:e3:fd:c7:f1: f5:48:73:e9:e8:45:19:59:1d:36:b4:87:5d:8e:75: 92:f7:3d:54:75:34:e0:81:bb:99:e4:b0:70:d9:17: 51:8d:3d:bc:65:2a:d7:fc:a3:97:9e:25:6f:15:72: 68:93:9a:12:93:96:55:3a:22:4e:80:c7:90:e7:1d: 69:77:e7:66:fc:1a:40:5e:0b:3f:fb:bd:6b:16:8c: 45:2c:64:47:d0:82:a2:c5:2b:0d:c5:0c:68:a4:8e: cf:19:a3:05:10:73:7c:82:89:e6:22:a3:7d:35:ae: 2b:b0:ea:ac:b1:99:de:6c:23:b2:18:53:a1:13:4f: 63:8b:0a:b2:b7:24:e1:2c:24:89:2a:88:eb:31:60: 04:25:c7:da:1b:ae:73:27:9f:ea:11:85:3d:72:4c: a5:ef:04:db:03:14:12:a1:e7:bf:da:e9:bb:b8:93: 7d:06:b8:89:b1:6a:c5:b6:8d:03:28:8b:26:b7:98: b1:a1:f2:00:c3:a4:a8:80:c6:29:af:0a:29:6a:69: d7:92:2c:0e:e8:c1:01:ea:68:70:32:65:40:0b:62: ba:f5:5f:51:6f:3d:64:d4:fe:e3:7a:7e:d6:2a:fc: ba:07:a6:11:f1:7d:bb:04:ff:d5:00:25:c1:11:56: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9E:A0:53:0E:A7:44:8D:05:E2:37:47:A1:84:34:A9:98:FD:E3:C4 X509v3 Authority Key Identifier: keyid:0A:BD:7D:DC:E4:FD:70:3B:C3:FB:CA:FC:1B:5D:57:7E:1A:75:75:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr193OT9cDvD-8r8G11Xfhp1dXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d6680c-2ff3-4db5-9702-7d348cca1d20/1/Cr193OT9cDvD-8r8G11Xfhp1dXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:ae:f5:66:12:f9:f0:ab:35:82:b4:ad:5a:5b:5a:57:66: 7a:0b:e1:73:88:1d:72:cf:46:55:06:c6:7b:92:49:08:9b:01: ed:52:7f:bc:f9:e0:3d:bf:e5:e2:f6:27:8e:25:9b:a9:7a:60: a1:1a:45:1d:40:c9:42:fb:17:de:87:65:30:13:ea:bc:dd:65: fc:95:91:39:dd:73:ee:34:73:38:26:f4:17:3d:bd:46:57:42: 5d:cd:8b:28:9b:50:b1:d1:5a:3e:c2:84:93:9e:89:37:a2:8c: 72:fe:49:b2:5b:6d:11:e6:16:f4:06:c4:31:00:b3:47:de:76: 09:c0:97:07:20:30:5c:ba:86:ca:ed:4d:d1:fd:a8:cc:4b:89: 8b:62:7b:37:db:48:fa:de:11:ed:9a:5e:c6:f4:aa:c0:e0:b4: 59:71:a9:e2:16:ab:80:98:be:c1:cc:4b:4e:fb:e7:27:16:bc: 35:ad:46:73:a5:11:ec:86:4e:f3:1c:9b:5c:e1:24:a1:d0:0b: ce:ab:6a:0f:23:93:69:e4:d8:63:d8:73:40:cc:db:7a:e4:a0: 62:a8:fa:82:bf:1b:b4:ac:e0:cb:44:00:62:7f:c3:6e:7f:70: ef:8d:7a:d9:e2:a3:a0:44:92:63:e7:8c:40:8f:77:91:a3:9a: fa:c0:31:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dca+67e7bwsWQGYKigfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYmQ3ZGRjZTRmZDcwM2JjM2ZiY2FmYzFiNWQ1NzdlMWE3 NTc1NzUwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EyhmYjllYTA1MzBlYTc0NDhkMDVlMjM3NDdhMTg0MzRhOTk4ZmRlM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPpYdwujjZNkqeP9x/H1SHPp6EUZ WR02tIddjnWS9z1UdTTggbuZ5LBw2RdRjT28ZSrX/KOXniVvFXJok5oSk5ZVOiJO gMeQ5x1pd+dm/BpAXgs/+71rFoxFLGRH0IKixSsNxQxopI7PGaMFEHN8gonmIqN9 Na4rsOqssZnebCOyGFOhE09jiwqytyThLCSJKojrMWAEJcfaG65zJ5/qEYU9ckyl 7wTbAxQSoee/2um7uJN9BriJsWrFto0DKIsmt5ixofIAw6SogMYprwopamnXkiwO 6MEB6mhwMmVAC2K69V9Rbz1k1P7jen7WKvy6B6YR8X27BP/VACXBEVbcvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPueoFMOp0SNBeI3R6GENKmY/ePEMB8GA1UdIwQY MBaAFAq9fdzk/XA7w/vK/BtdV34adXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDIt N2QzNDhjY2ExZDIwLzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kNjY4MGMtMmZmMy00ZGI1LTk3MDItN2QzNDhjY2ExZDIw LzEvQ3IxOTNPVDljRHZELThyOEcxMVhmaHAxZFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUiu9WYS +fCrNYK0rVpbWldmegvhc4gdcs9GVQbGe5JJCJsB7VJ/vPngPb/l4vYnjiWbqXpg oRpFHUDJQvsX3odlMBPqvN1l/JWROd1z7jRzOCb0Fz29RldCXc2LKJtQsdFaPsKE k56JN6KMcv5JslttEeYW9AbEMQCzR952CcCXByAwXLqGyu1N0f2ozEuJi2J7N9tI +t4R7ZpexvSqwOC0WXGp4hargJi+wcxLTvvnJxa8Na1Gc6UR7IZO8xybXOEkodAL zqtqDyOTaeTYY9hzQMzbeuSgYqj6gr8btKzgy0QAYn/Dbn9w74162eKjoESSY+eM QI93kaOa+sAxFw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:16:01 2025 by rpki-client