This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json) Hash identifier: KB9PjEzyZ76z5mDnCz1kR2F5ORvq998PyzHLWm7R0lg= Subject key identifier: 75:4E:41:09:DD:4F:B8:5B:E1:EF:DA:BE:49:02:9F:6E:B7:51:18:9C Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07 Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07 Certificate serial: 019AF49C5B6538219A26F8ECBC6EE00D5C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 17:01:18 +0000 Manifest this update: Sat 06 Dec 2025 17:01:18 +0000 Manifest next update: Sun 07 Dec 2025 17:01:18 +0000 Files and hashes: 1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: 471An+F8x1ijOuj0bZfpzhkBL2I7FVX8qe8GiIxi+Sw=) 2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:5b:65:38:21:9a:26:f8:ec:bc:6e:e0:0d:5c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07 Validity Not Before: Dec 6 17:01:18 2025 GMT Not After : Dec 7 17:01:18 2025 GMT Subject: CN=754e4109dd4fb85be1efdabe49029f6eb751189c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:d8:05:d2:4a:41:82:bd:24:04:68:58:64: b5:31:a7:20:56:7a:47:d1:9d:61:6a:bd:b6:00:41: f7:50:0e:ea:9b:d4:1e:83:b6:a8:58:55:41:ee:24: 4e:8a:11:dc:51:7c:24:4b:9f:f3:0f:64:ba:01:b8: d5:c9:83:e1:30:fe:c7:61:d2:cc:7a:38:d1:be:98: 67:ce:bb:02:65:32:e6:3e:29:38:b4:5f:2e:a1:a1: c8:11:b6:20:9e:71:95:32:f1:25:df:4d:dd:c0:43: ca:45:70:ba:7a:73:51:10:fe:c7:b5:36:f2:09:a9: 9a:10:c3:de:62:0c:de:30:5e:63:87:f1:ab:e3:a4: a1:4f:bf:3d:9d:38:ec:89:ce:17:55:dd:76:79:93: c6:d4:7e:63:a9:1b:59:b8:aa:b8:b6:81:2c:47:ca: 05:13:77:d1:f8:d8:7a:bf:0c:48:74:08:f5:5e:11: e0:d8:22:c7:2f:12:8e:ab:bb:82:46:ab:f7:5d:7b: 3e:3e:44:21:07:72:1a:e7:8b:ee:65:89:eb:86:c5: 39:7e:60:09:85:88:e9:30:16:d1:57:87:ea:ed:c5: c3:44:0f:c1:c4:20:3b:08:59:72:0e:ed:09:d8:29: 3c:59:09:4d:2e:ad:06:22:78:f3:b7:76:f8:d9:e1: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4E:41:09:DD:4F:B8:5B:E1:EF:DA:BE:49:02:9F:6E:B7:51:18:9C X509v3 Authority Key Identifier: keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cf:8e:a1:34:38:ac:1e:b8:91:5b:22:ff:bc:ef:03:49:71: 56:6e:7f:15:d4:9c:90:2e:1f:81:6a:e4:bc:c6:5a:74:02:f3: b2:f3:99:3f:05:2a:d7:20:a5:2d:fd:f4:8a:ae:ac:8e:91:10: d8:de:68:6f:ac:c9:0c:15:c4:cb:4e:27:30:6a:72:a4:c3:ef: 2e:c1:b1:09:dd:a2:d6:48:db:ae:d0:de:23:93:0e:f4:38:56: 91:35:a5:ff:27:9e:59:71:ea:79:cd:99:f1:68:29:d5:3e:32: 4e:17:24:d1:f7:96:55:d4:ec:34:a6:a6:f0:2a:5a:99:29:d2: 03:b1:e4:15:a8:e7:1e:6c:84:cb:54:8d:49:f0:d6:4d:5b:69: 30:25:39:e7:7c:ac:c3:d5:e1:7b:91:c7:7f:59:e8:98:99:05: 8e:6a:fe:00:83:98:96:b6:e4:38:18:af:f0:b9:3b:ae:45:24: 70:0a:77:dc:18:04:93:f3:3f:af:6f:c2:5f:72:52:62:d1:b4: 9b:ff:98:0d:3f:f3:fa:92:56:c4:6b:ec:b2:80:4f:42:27:e1: f3:bb:ab:8f:c5:59:e3:4a:da:41:35:ca:91:82:bc:72:cf:d8: 47:f2:e5:6e:d2:55:4a:4b:29:d8:61:2d:b9:3c:63:5d:18:fd: 57:fb:0a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nFtlOCGaJvjsvG7gDVyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDcxYzg1YTM0ODI5NThmODdmMDMyYjY0NjMxOThjN2Zk OWViMDcwHhcNMjUxMjA2MTcwMTE4WhcNMjUxMjA3MTcwMTE4WjAzMTEwLwYDVQQD Eyg3NTRlNDEwOWRkNGZiODViZTFlZmRhYmU0OTAyOWY2ZWI3NTExODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppfYBdJKQYK9JARoWGS1MacgVnpH 0Z1har22AEH3UA7qm9Qeg7aoWFVB7iROihHcUXwkS5/zD2S6AbjVyYPhMP7HYdLM ejjRvphnzrsCZTLmPik4tF8uoaHIEbYgnnGVMvEl303dwEPKRXC6enNREP7HtTby CamaEMPeYgzeMF5jh/Gr46ShT789nTjsic4XVd12eZPG1H5jqRtZuKq4toEsR8oF E3fR+Nh6vwxIdAj1XhHg2CLHLxKOq7uCRqv3XXs+PkQhB3Ia54vuZYnrhsU5fmAJ hYjpMBbRV4fq7cXDRA/BxCA7CFlyDu0J2Ck8WQlNLq0GInjzt3b42eH9BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVOQQndT7hb4e/avkkCn263URicMB8GA1UdIwQY MBaAFHEHHIWjSClY+H8DK2RjGYx/2esHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEt YWVmZDgwODcyNTMyLzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEtYWVmZDgwODcyNTMy LzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs+OoTQ4 rB64kVsi/7zvA0lxVm5/FdSckC4fgWrkvMZadALzsvOZPwUq1yClLf30iq6sjpEQ 2N5ob6zJDBXEy04nMGpypMPvLsGxCd2i1kjbrtDeI5MO9DhWkTWl/yeeWXHqec2Z 8Wgp1T4yThck0feWVdTsNKam8CpamSnSA7HkFajnHmyEy1SNSfDWTVtpMCU553ys w9Xhe5HHf1nomJkFjmr+AIOYlrbkOBiv8Lk7rkUkcAp33BgEk/M/r2/CX3JSYtG0 m/+YDT/z+pJWxGvssoBPQifh87urj8VZ40raQTXKkYK8cs/YR/LlbtJVSksp2GEt uTxjXRj9V/sKwg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:37 2025 by rpki-client