This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json) Hash identifier: Mi8P0EkP7PpgnxjkgsigDTfNtwWvECJF4B6MvObhikY= Subject key identifier: 72:7B:58:C6:85:AC:40:F9:15:24:EC:79:02:89:52:ED:B0:88:96:83 Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Certificate serial: 019AF208D9DEC9CEF17789318360B405360D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft Manifest number: 05CA Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: ERI24cy0XGjSViMxIB/fAo+h3v/qQHx2OFrDwwO376I=) 2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d9:de:c9:ce:f1:77:89:31:83:60:b4:05:36:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=727b58c685ac40f91524ec79028952edb0889683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ff:42:1b:a9:7c:1c:96:3d:4b:c1:b7:ce:00: ef:b1:4f:ed:9b:22:d7:b0:f4:92:66:b5:5f:6e:8a: 98:6e:ee:6d:5c:aa:68:9e:92:be:2e:a3:69:af:1d: c6:c0:d1:13:f0:a6:ab:e1:7b:7d:a9:56:b0:b2:5e: 3f:be:56:bf:c3:6e:f0:0f:af:a5:e8:eb:84:8b:47: 45:9b:73:96:72:dd:e4:11:df:ea:4c:b4:08:5a:ef: b9:0d:89:a4:55:36:a8:fb:3f:48:9f:26:82:9b:a8: 42:cc:1a:0c:b2:58:e0:b2:36:64:31:de:30:7a:cb: 64:77:99:2d:a1:cc:05:1f:58:de:6f:16:7e:4e:78: 90:7d:dc:6c:4b:5e:dc:e6:f4:8a:0e:49:79:82:99: a4:c8:e1:ce:cf:e8:d8:63:53:93:26:86:13:94:e0: 92:88:a2:e7:eb:21:ac:87:28:db:f9:88:64:51:06: 08:d8:45:c8:00:44:ff:18:de:f2:7d:78:b3:12:8e: 4c:dc:26:bc:22:ba:d9:a6:ad:b7:a0:99:b7:33:b4: 47:03:55:36:40:5e:54:ed:b1:1b:60:b4:6a:29:5c: fc:fb:55:88:d4:69:d5:da:47:97:d8:df:67:81:f5: 0e:66:01:88:81:3d:b4:ca:6b:41:b1:0c:29:4e:28: 9d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7B:58:C6:85:AC:40:F9:15:24:EC:79:02:89:52:ED:B0:88:96:83 X509v3 Authority Key Identifier: keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:03:ee:72:1a:29:21:57:4f:65:a6:ed:6b:a3:3c:f9:4d:fd: 57:e8:e8:a7:e0:3c:0d:42:f6:95:c0:1d:13:ce:05:45:66:a4: 7e:fa:12:70:d4:0d:50:f1:d9:54:40:18:e6:32:3b:a8:0e:15: 75:30:a5:d0:d3:1d:eb:e6:04:1f:8a:08:85:5f:d7:23:b0:5b: 01:ff:1a:2e:df:cb:31:75:62:54:25:a7:f4:e0:72:34:27:e6: c8:d3:db:af:63:a5:da:1f:94:49:22:b1:40:5c:b3:dc:08:e1: 6b:86:db:63:e4:e7:63:a7:6d:7c:71:f0:11:e9:b1:d9:51:0f: 81:39:93:4f:44:88:9a:d0:de:57:da:1c:54:2b:c4:de:57:c7: 08:5b:1c:90:d1:d6:45:ce:fc:b2:30:50:ed:fe:7f:da:7d:b3: 84:9f:fe:0b:ee:e9:27:2c:28:22:eb:5d:a4:fd:24:7c:8b:a8: 94:d1:86:c6:22:8f:ec:eb:93:e2:34:8b:ee:ad:e2:37:87:ea: fa:52:55:91:3a:4f:28:6a:62:6c:6e:82:e7:b3:c2:bb:63:e0: bf:23:29:1d:b5:3c:cc:64:f1:d5:9b:89:bf:95:c7:86:d6:29: 4d:0f:a3:61:1e:d2:b2:6a:d4:21:e6:e7:99:5b:cd:8f:33:dd: ae:03:1d:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNneyc7xd4kxg2C0BTYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNTUyNmY5YWIwZGQyNzY4MjNmYzFmMGViYWExZGU2M2I3 ZDY1NmMwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD Eyg3MjdiNThjNjg1YWM0MGY5MTUyNGVjNzkwMjg5NTJlZGIwODg5NjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov9CG6l8HJY9S8G3zgDvsU/tmyLX sPSSZrVfboqYbu5tXKponpK+LqNprx3GwNET8Kar4Xt9qVawsl4/vla/w27wD6+l 6OuEi0dFm3OWct3kEd/qTLQIWu+5DYmkVTao+z9InyaCm6hCzBoMsljgsjZkMd4w estkd5ktocwFH1jebxZ+TniQfdxsS17c5vSKDkl5gpmkyOHOz+jYY1OTJoYTlOCS iKLn6yGshyjb+YhkUQYI2EXIAET/GN7yfXizEo5M3Ca8IrrZpq23oJm3M7RHA1U2 QF5U7bEbYLRqKVz8+1WI1GnV2keX2N9ngfUOZgGIgT20ymtBsQwpTiidzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJ7WMaFrED5FSTseQKJUu2wiJaDMB8GA1UdIwQY MBaAFHBVJvmrDdJ2gj/B8OuqHeY7fWVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEt Njk5OGFiN2VkZjdhLzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTcxYjYtNmFhYS00YmQ0LTg2NjEtNjk5OGFiN2VkZjdh LzEvY0ZVbS1hc04wbmFDUDhIdzY2b2Q1anQ5Wld3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwPuchop IVdPZabta6M8+U39V+jop+A8DUL2lcAdE84FRWakfvoScNQNUPHZVEAY5jI7qA4V dTCl0NMd6+YEH4oIhV/XI7BbAf8aLt/LMXViVCWn9OByNCfmyNPbr2Ol2h+USSKx QFyz3Ajha4bbY+TnY6dtfHHwEemx2VEPgTmTT0SImtDeV9ocVCvE3lfHCFsckNHW Rc78sjBQ7f5/2n2zhJ/+C+7pJywoIutdpP0kfIuolNGGxiKP7OuT4jSL7q3iN4fq +lJVkTpPKGpibG6C57PCu2PgvyMpHbU8zGTx1ZuJv5XHhtYpTQ+jYR7SsmrUIebn mVvNjzPdrgMdzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:54 2025 by rpki-client