This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json) Hash identifier: htNqJcBZCacGZ8BiIZ1sJf9BNxV+b18j9af+dTRG9MY= Subject key identifier: A8:FF:E7:25:BA:93:06:52:7A:5C:C2:F8:BF:5A:59:27:23:13:19:CB Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac Certificate serial: 019B30E8C9E5D7EC56A01D43514C36A55D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft Manifest number: 0AB4 Signing time: Thu 18 Dec 2025 10:02:00 +0000 Manifest this update: Thu 18 Dec 2025 10:02:00 +0000 Manifest next update: Fri 19 Dec 2025 10:02:00 +0000 Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: xpfVinItgu/Rp/vcxG5WmrIjV35o3//p+DnWFUE9KMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:c9:e5:d7:ec:56:a0:1d:43:51:4c:36:a5:5d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac Validity Not Before: Dec 18 10:02:00 2025 GMT Not After : Dec 19 10:02:00 2025 GMT Subject: CN=a8ffe725ba9306527a5cc2f8bf5a5927231319cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e2:09:51:0a:8a:4a:77:84:72:b6:c9:f9:8f: 0a:7c:da:aa:c0:10:58:34:22:f2:2c:a2:20:b1:68: 0c:3b:90:aa:18:76:75:53:cc:27:c3:01:e4:54:c2: f1:34:63:91:c1:f7:c5:bf:e1:0b:7b:bc:82:d9:df: 05:b4:9e:92:9a:a3:c9:1c:ad:83:e3:02:b3:e4:eb: 35:41:ea:87:9c:f7:9d:88:1e:84:f5:20:5e:07:50: 9d:3e:0e:8f:73:79:21:78:db:0f:6d:5d:a3:ce:2d: 7a:82:eb:63:0a:4e:34:3f:c7:0e:ed:27:4a:cd:49: d6:5b:b9:0c:4c:d4:a3:5b:b5:54:52:1b:b7:9b:61: 4c:2e:61:34:e0:7a:f9:e2:11:58:83:fc:93:2a:f1: 22:06:e8:a1:8b:03:50:1c:8b:d5:29:7c:89:9f:52: ef:dd:8d:51:08:ae:e7:e3:19:bf:6e:1b:21:90:a4: 77:38:36:46:30:03:73:8d:3f:86:d2:2e:04:e4:e8: 4e:bd:fd:ab:bd:ef:f2:6a:0d:8f:c7:80:ea:4a:d8: a0:33:71:da:36:94:88:23:85:45:18:85:e3:fc:3a: e3:63:91:8f:b0:ab:48:5e:e0:18:43:e8:3e:1d:a7: 58:84:a5:6e:70:04:82:aa:b5:54:57:86:ba:0e:fd: 3c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FF:E7:25:BA:93:06:52:7A:5C:C2:F8:BF:5A:59:27:23:13:19:CB X509v3 Authority Key Identifier: keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:38:4f:00:98:c2:d9:1d:f8:17:97:2a:cc:92:78:80:35:50: 4a:11:65:55:5a:60:53:68:cc:7d:3a:10:73:1b:58:5e:10:bf: e5:f7:94:21:59:9d:d9:3a:56:d3:64:88:93:64:c3:6f:81:93: cd:97:c5:af:11:7a:f3:a7:07:02:31:8d:18:35:89:38:f0:6c: db:d7:10:a2:c9:d3:7d:d0:07:48:46:89:88:65:57:6a:33:51: 70:0b:3f:7f:d1:f5:81:38:7a:26:52:d6:65:5e:ad:ff:7d:41: f8:b2:7d:25:59:ca:48:8c:b6:3c:68:9a:c4:eb:8e:0f:96:9e: 77:ac:62:8b:80:7a:70:b6:44:d5:ab:1a:e3:a6:24:3a:8d:5c: 37:9c:b3:b5:25:0c:da:75:12:ce:7a:e1:9f:5c:16:7d:ea:fb: d5:90:86:26:53:27:ff:ce:fb:8b:10:e3:80:f0:6f:fb:52:4d: dd:c0:3d:b5:5a:58:31:32:7c:68:b7:cc:e0:b0:30:56:7f:68: 6c:3a:d6:cd:ec:0e:93:aa:eb:7e:9c:c5:b9:e8:0d:25:3f:8c: 93:4c:6a:d2:54:df:9c:a1:9b:fa:6e:01:21:f3:36:8a:1f:75: 87:37:15:49:74:0b:a5:e0:f3:e9:25:b4:08:bb:f0:de:35:c5: da:56:fc:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Mnl1+xWoB1DUUw2pV1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5 MGI1YWMwHhcNMjUxMjE4MTAwMjAwWhcNMjUxMjE5MTAwMjAwWjAzMTEwLwYDVQQD EyhhOGZmZTcyNWJhOTMwNjUyN2E1Y2MyZjhiZjVhNTkyNzIzMTMxOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+IJUQqKSneEcrbJ+Y8KfNqqwBBY NCLyLKIgsWgMO5CqGHZ1U8wnwwHkVMLxNGORwffFv+ELe7yC2d8FtJ6SmqPJHK2D 4wKz5Os1QeqHnPediB6E9SBeB1CdPg6Pc3kheNsPbV2jzi16gutjCk40P8cO7SdK zUnWW7kMTNSjW7VUUhu3m2FMLmE04Hr54hFYg/yTKvEiBuihiwNQHIvVKXyJn1Lv 3Y1RCK7n4xm/bhshkKR3ODZGMANzjT+G0i4E5OhOvf2rve/yag2Px4DqStigM3Ha NpSII4VFGIXj/DrjY5GPsKtIXuAYQ+g+HadYhKVucASCqrVUV4a6Dv08fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj/5yW6kwZSelzC+L9aWScjExnLMB8GA1UdIwQY MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjhPAJjC 2R34F5cqzJJ4gDVQShFlVVpgU2jMfToQcxtYXhC/5feUIVmd2TpW02SIk2TDb4GT zZfFrxF686cHAjGNGDWJOPBs29cQosnTfdAHSEaJiGVXajNRcAs/f9H1gTh6JlLW ZV6t/31B+LJ9JVnKSIy2PGiaxOuOD5aed6xii4B6cLZE1asa46YkOo1cN5yztSUM 2nUSznrhn1wWfer71ZCGJlMn/877ixDjgPBv+1JN3cA9tVpYMTJ8aLfM4LAwVn9o bDrWzewOk6rrfpzFuegNJT+Mk0xq0lTfnKGb+m4BIfM2ih91hzcVSXQLpeDz6SW0 CLvw3jXF2lb83g== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:23 2025 by rpki-client