This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json) Hash identifier: e39JY+Bip/lXmxuujNHpaNeqWV/z8+jDLnsNWiahnGI= Subject key identifier: 6B:93:2F:25:35:DC:BE:8D:91:0D:BB:95:C8:37:3E:EE:78:EC:75:6C Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd Certificate serial: 019AF19B764C1A8D52727D920B88CB746A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft Manifest number: 0C83 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: 9G+Znap5N58w8WvH/PojDPfC6HUihhdwECoxWTt/+zQ=) 2: fS7Vtpenx3ISocQLcsKDmT4cdAc.roa (hash: lsacutCDcdT1KWfBtvedBOBvauWcszwNt+V8+YsxMyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:76:4c:1a:8d:52:72:7d:92:0b:88:cb:74:6a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=6b932f2535dcbe8d910dbb95c8373eee78ec756c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:05:c3:20:32:a4:fd:59:5d:e0:b6:ac:d9: ae:6b:21:fe:53:72:af:de:dc:41:56:ce:3b:11:c0: a4:90:67:98:d0:8b:94:8c:17:99:1a:ca:8b:80:ed: 27:b8:15:92:7e:a0:c2:7b:84:0e:0e:cd:e3:96:9d: bd:c2:cf:25:af:44:a6:7d:7b:38:b8:d4:c2:b4:12: a0:a1:d7:ef:dc:ac:d8:8e:83:e0:3a:a7:0a:fe:b7: ba:b7:f6:bd:8c:81:d6:34:6f:d8:47:d6:69:ce:5e: 27:a7:74:02:10:19:90:e8:ca:63:41:cc:32:e3:38: 37:9d:e7:c3:3f:8a:58:ff:78:52:1d:c2:ca:09:06: 05:75:64:4c:48:3a:89:da:c0:42:82:15:58:f3:0f: 85:dc:aa:3c:ca:1e:e0:44:02:3e:1b:da:85:09:49: fd:c9:c2:75:5a:8d:10:51:cd:28:83:d5:90:24:0d: de:02:56:72:ac:dd:3a:fc:a0:74:83:df:2f:ad:8d: 0e:91:cb:f8:ac:b6:e7:cd:e3:34:dd:8a:6b:7a:8b: 9d:ae:33:97:f2:3e:62:05:66:ea:1d:66:04:77:9a: c2:af:60:31:3d:8a:ae:bd:66:f4:59:06:5a:1e:fb: 42:e9:71:95:24:89:35:95:bc:f0:a3:c6:fc:89:68: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:93:2F:25:35:DC:BE:8D:91:0D:BB:95:C8:37:3E:EE:78:EC:75:6C X509v3 Authority Key Identifier: keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f8:1f:a5:c5:3c:4b:a8:4f:21:41:0e:5e:bd:26:ca:41:26: 05:f2:c2:dd:39:46:44:9a:39:06:c6:0c:12:78:7e:17:1d:94: a9:d5:15:20:fd:3b:1c:f6:78:c3:e7:8b:8f:f0:2c:ee:22:3f: c6:1a:ef:0c:08:30:4d:9f:80:50:e3:7c:d6:24:96:39:a6:72: 8d:2b:39:ff:4f:c2:e3:48:f0:f6:3c:33:a5:8f:1d:16:25:65: db:dc:35:69:dc:01:20:89:a2:f8:3d:cb:75:92:39:f3:54:fa: 1c:5a:4f:ce:67:a8:94:c3:b6:c9:47:4f:6f:cf:75:91:f9:fa: d8:fd:59:fc:48:3a:11:e1:be:5f:ec:96:73:2b:77:18:7b:f0: ba:94:4e:a9:50:6e:c5:f2:71:bc:ad:ec:52:95:73:2f:d1:c9: 94:45:e9:13:0f:56:bb:01:1e:93:fd:13:ef:0b:e9:84:99:ef: 81:d6:22:b2:02:14:4e:87:27:37:94:9a:eb:98:34:0d:fc:35: 13:18:f0:f8:48:1b:18:8a:84:20:88:f5:14:d6:a7:b1:90:80: 24:2c:46:7e:2f:ed:5d:4d:6b:93:b7:54:08:70:b6:c0:e0:7a: 33:c3:e8:c1:a4:66:ea:48:06:3f:1e:ce:aa:66:6e:65:1f:7a: 3b:80:55:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3ZMGo1Scn2SC4jLdGo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNmY2ZDExZjBjZTYzMjMwMTgxYTczZjg1YTY2NjE3MGY3 Mzg5YmQwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD Eyg2YjkzMmYyNTM1ZGNiZThkOTEwZGJiOTVjODM3M2VlZTc4ZWM3NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gwFwyAypP1ZXeC2rNmuayH+U3Kv 3txBVs47EcCkkGeY0IuUjBeZGsqLgO0nuBWSfqDCe4QODs3jlp29ws8lr0SmfXs4 uNTCtBKgodfv3KzYjoPgOqcK/re6t/a9jIHWNG/YR9Zpzl4np3QCEBmQ6MpjQcwy 4zg3nefDP4pY/3hSHcLKCQYFdWRMSDqJ2sBCghVY8w+F3Ko8yh7gRAI+G9qFCUn9 ycJ1Wo0QUc0og9WQJA3eAlZyrN06/KB0g98vrY0Okcv4rLbnzeM03YpreoudrjOX 8j5iBWbqHWYEd5rCr2AxPYquvWb0WQZaHvtC6XGVJIk1lbzwo8b8iWjmgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuTLyU13L6NkQ27lcg3Pu547HVsMB8GA1UdIwQY MBaAFHFvbRHwzmMjAYGnP4WmZhcPc4m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTIt ZTNmNDlhYzQ5NTYwLzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTItZTNmNDlhYzQ5NTYw LzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvgfpcU8 S6hPIUEOXr0mykEmBfLC3TlGRJo5BsYMEnh+Fx2UqdUVIP07HPZ4w+eLj/As7iI/ xhrvDAgwTZ+AUON81iSWOaZyjSs5/0/C40jw9jwzpY8dFiVl29w1adwBIImi+D3L dZI581T6HFpPzmeolMO2yUdPb891kfn62P1Z/Eg6EeG+X+yWcyt3GHvwupROqVBu xfJxvK3sUpVzL9HJlEXpEw9WuwEek/0T7wvphJnvgdYisgIUTocnN5Sa65g0Dfw1 Exjw+EgbGIqEIIj1FNansZCAJCxGfi/tXU1rk7dUCHC2wOB6M8PowaRm6kgGPx7O qmZuZR96O4BVrw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:35 2025 by rpki-client