This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft File: cMbVNbDydaJhhfj03KWA0m16l0Y.mft (raw, json) Hash identifier: /zfcjeLsCsJ/Zr1FKnr3nlLriHaFk20X3Tddc1hhxvc= Subject key identifier: FD:06:27:0C:C2:6A:CE:A4:EF:C0:E2:BF:25:FD:1E:1C:F5:7E:11:D3 Authority key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46 Certificate issuer: /CN=70c6d535b0f275a26185f8f4dca580d26d7a9746 Certificate serial: 019AF240156AD5BA97440E566AC99EE90D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft Manifest number: 61 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: cMbVNbDydaJhhfj03KWA0m16l0Y.crl (hash: eOlU/eT99D6JgSrDNPVIcbgb3C9CZtfxBl++vcrnPQI=) 2: f8J05R1DiyfQNVJpqFL4fbooOhg.roa (hash: Dkqb7BcnwOOceNgCAbq8lzyD7hu5TVYuIlv372mwXcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:15:6a:d5:ba:97:44:0e:56:6a:c9:9e:e9:0d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=fd06270cc26acea4efc0e2bf25fd1e1cf57e11d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:e9:b1:58:8d:02:8e:cc:7a:89:58:5c:13: 8e:dd:75:7d:16:e6:0d:7c:2d:83:65:91:f0:2b:7d: 43:ac:9f:cc:12:d4:cc:61:b6:bc:b5:ba:62:40:c2: d8:6b:da:1f:f4:04:e7:d3:98:e2:c3:6b:86:cc:03: 6a:55:7c:50:36:92:35:b3:a7:84:63:a7:39:b6:71: 9c:f9:0c:b5:8b:d5:54:08:8d:d5:2e:79:3f:1a:5e: 75:b6:b7:bc:f3:e6:fe:6a:ca:8d:27:2a:cf:35:6b: ee:89:67:6a:8c:d1:73:8b:12:68:ef:ed:51:03:f2: 28:df:78:38:5c:7b:8b:63:53:ce:cf:87:7a:3b:30: 8c:3e:39:ba:7a:8f:4e:be:2f:d0:81:e2:b3:2a:bc: 75:32:08:ce:75:bf:ef:51:7d:54:2c:05:5d:44:b5: a1:97:fd:6e:14:06:f8:bb:e0:fe:7c:29:67:10:1f: d1:97:72:9b:17:ce:2a:27:f0:64:83:5c:c4:b2:9c: e1:82:cf:ad:97:36:99:53:ee:aa:08:f9:0c:83:42: 04:68:72:78:e8:11:eb:ff:d5:82:a3:76:2f:e8:ed: 5e:2d:c2:0d:3e:5b:a5:ba:5a:ab:1d:6c:1a:e9:45: 5a:10:af:dc:ca:b1:a3:58:5e:b8:d0:b3:e7:3a:07: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:27:0C:C2:6A:CE:A4:EF:C0:E2:BF:25:FD:1E:1C:F5:7E:11:D3 X509v3 Authority Key Identifier: keyid:70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:59:db:95:e8:1b:c9:11:12:4d:db:9d:6e:47:c5:49:eb:71: 1e:7e:b8:b4:f9:9b:e5:01:7a:15:d8:ff:1c:7b:7f:8e:41:83: ee:21:c0:04:75:d1:78:9d:95:47:3a:38:81:64:1b:5d:df:3d: a6:ed:8d:58:95:0d:2b:36:fc:7b:b0:68:72:86:4f:ff:98:10: b4:b1:93:19:7a:d9:72:b9:59:f6:e0:2a:60:ea:00:2e:72:74: 48:5c:41:ac:2e:30:fb:62:85:ff:6f:63:ee:e3:a5:1a:ba:76: b4:ec:ff:ec:ff:ec:53:f1:d8:2a:22:0f:bc:02:80:fb:a1:bb: 4c:2b:79:63:b7:43:fe:81:41:48:87:9c:0b:65:00:48:fb:16: a9:69:67:33:0d:b4:bf:1f:1f:12:82:3b:42:31:6a:fa:f9:71: b6:ae:cd:59:7e:49:89:76:8a:23:48:f7:54:d8:72:64:2a:51: ab:f3:2a:99:0d:81:be:6f:c2:cf:01:4b:1b:3a:cf:41:66:27: d4:36:38:e7:b5:a1:f9:87:9d:f5:b5:e5:d6:76:9e:6b:cc:7c: 67:2a:a1:5c:49:18:ea:18:66:c0:ac:f2:6b:22:54:62:8c:3b: 1e:cf:e5:50:37:ca:57:7c:df:07:42:d3:0c:f6:b1:ec:79:5c: c4:39:26:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBVq1bqXRA5Wasme6Q0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYzZkNTM1YjBmMjc1YTI2MTg1ZjhmNGRjYTU4MGQyNmQ3 YTk3NDYwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EyhmZDA2MjcwY2MyNmFjZWE0ZWZjMGUyYmYyNWZkMWUxY2Y1N2UxMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65/psViNAo7MeolYXBOO3XV9FuYN fC2DZZHwK31DrJ/MEtTMYba8tbpiQMLYa9of9ATn05jiw2uGzANqVXxQNpI1s6eE Y6c5tnGc+Qy1i9VUCI3VLnk/Gl51tre88+b+asqNJyrPNWvuiWdqjNFzixJo7+1R A/Io33g4XHuLY1POz4d6OzCMPjm6eo9Ovi/QgeKzKrx1MgjOdb/vUX1ULAVdRLWh l/1uFAb4u+D+fClnEB/Rl3KbF84qJ/Bkg1zEspzhgs+tlzaZU+6qCPkMg0IEaHJ4 6BHr/9WCo3Yv6O1eLcINPlululqrHWwa6UVaEK/cyrGjWF640LPnOgeuowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0GJwzCas6k78DivyX9Hhz1fhHTMB8GA1UdIwQY MBaAFHDG1TWw8nWiYYX49NylgNJtepdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY01iVk5iRHlkYUpoaGZqMDNLV0EwbTE2bDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zNTMzZDAtMTM2Ny00NGIyLTkwNDgt MDAyODFhNWJhNmM3LzEvY01iVk5iRHlkYUpoaGZqMDNLV0EwbTE2bDBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zNTMzZDAtMTM2Ny00NGIyLTkwNDgtMDAyODFhNWJhNmM3 LzEvY01iVk5iRHlkYUpoaGZqMDNLV0EwbTE2bDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFnblegb yRESTdudbkfFSetxHn64tPmb5QF6Fdj/HHt/jkGD7iHABHXReJ2VRzo4gWQbXd89 pu2NWJUNKzb8e7BocoZP/5gQtLGTGXrZcrlZ9uAqYOoALnJ0SFxBrC4w+2KF/29j 7uOlGrp2tOz/7P/sU/HYKiIPvAKA+6G7TCt5Y7dD/oFBSIecC2UASPsWqWlnMw20 vx8fEoI7QjFq+vlxtq7NWX5JiXaKI0j3VNhyZCpRq/MqmQ2Bvm/CzwFLGzrPQWYn 1DY457Wh+Yed9bXl1naea8x8ZyqhXEkY6hhmwKzyayJUYow7Hs/lUDfKV3zfB0LT DPax7HlcxDkmzA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client