This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json) Hash identifier: 5bFzPtRAzo8n1Rp5xS3WbyRkFaValtWHbUV5SDxVhJU= Subject key identifier: 36:36:53:7E:84:B4:43:CA:E7:46:12:D4:1B:30:C2:E0:82:F0:36:A4 Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Certificate serial: 019AFFC48650129F2A3B6E422C09C23C8021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft Manifest number: 072C Signing time: Mon 08 Dec 2025 21:01:00 +0000 Manifest this update: Mon 08 Dec 2025 21:01:00 +0000 Manifest next update: Tue 09 Dec 2025 21:01:00 +0000 Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: l3sy873ZGhChTFt1NemR2I/zFjMimMnIZnW7QNcIsH8=) 2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:c4:86:50:12:9f:2a:3b:6e:42:2c:09:c2:3c:80:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Validity Not Before: Dec 8 21:01:00 2025 GMT Not After : Dec 9 21:01:00 2025 GMT Subject: CN=3636537e84b443cae74612d41b30c2e082f036a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:d3:a8:00:89:21:ac:8b:2c:31:db:50:a0: 1f:63:ac:8f:66:bf:8f:75:74:4c:2f:46:64:ed:ef: ef:f5:94:1f:98:83:d2:da:9e:08:d6:e4:cd:c0:ea: 03:71:fe:24:73:57:9f:a8:64:25:7f:81:57:4e:24: 98:e0:5b:ab:4b:00:76:24:44:99:98:6f:47:6a:b7: bb:67:9e:ca:1d:42:65:ec:e2:ca:f8:1f:8c:77:42: b4:73:cf:04:c5:ba:d2:2c:9b:e5:5f:bb:fd:19:5e: 7c:dd:bc:e8:83:50:42:0a:9f:6a:19:1c:b8:3c:8e: 7c:43:4a:ae:2b:f6:da:2e:68:69:47:79:5c:6d:8e: 2a:0d:92:f2:a6:98:86:7e:41:b3:db:a9:37:9b:81: ac:8f:54:9d:2b:8a:9a:f0:08:93:74:52:7c:cb:1d: 7f:24:61:98:2f:10:1c:d9:48:a8:c1:cc:9d:53:5b: 4e:94:0b:90:a9:b9:9a:30:55:d9:e1:6f:99:ac:6e: 1e:22:6e:82:3d:31:3e:56:85:3c:da:6c:a5:68:d1: 8e:39:c6:76:41:50:ed:4c:a9:02:ca:ba:26:2d:30: de:44:8e:6c:0b:01:4f:5b:b1:fe:a1:ae:15:48:e3: ae:18:e6:e2:e4:c5:0f:5a:aa:ec:9f:72:8d:f9:1a: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:36:53:7E:84:B4:43:CA:E7:46:12:D4:1B:30:C2:E0:82:F0:36:A4 X509v3 Authority Key Identifier: keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:66:bb:4e:f3:4c:2d:cb:c7:50:b9:28:cb:ba:6a:d9:90:25: d8:84:9f:16:8f:71:c2:47:6b:23:db:39:3b:1c:e6:8f:4e:4c: 96:e7:50:1d:91:04:2c:ac:e1:c2:46:f4:e4:6a:8c:00:3b:a1: 8e:b2:94:f2:4c:cb:c9:ad:32:c9:99:e3:ad:6c:84:f9:b2:0b: fd:d0:ae:ea:43:bd:76:a8:c3:55:a3:a7:8a:78:d4:6a:39:4f: 30:92:ec:f3:92:05:65:17:97:40:db:5a:17:d4:57:6c:b8:9b: a0:a4:98:b9:e4:00:87:7a:00:ff:96:93:89:8a:8e:f0:90:d3: 1e:0a:cf:b2:06:f4:a0:a4:18:54:c4:9e:71:da:73:89:e7:3f: e0:9e:4c:9f:e8:9d:32:5e:8c:58:46:3a:a2:a2:e1:ee:37:0d: 94:05:f0:42:7b:7b:6c:00:3b:7c:db:df:aa:bd:4e:d0:70:70: 96:b3:fd:d8:9d:5d:9a:2f:1c:fe:18:5f:36:cf:51:1b:68:df: c0:d4:65:95:b2:c8:a7:e8:9e:79:4c:56:dd:be:38:02:b4:a5: f3:4e:28:5c:ad:37:35:29:3b:8d:2a:17:65:e0:b1:d4:bb:ba: 79:7c:c0:cb:8c:fe:59:f6:f0:14:58:49:d2:f6:89:dc:8c:e3: 77:5a:ca:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr/xIZQEp8qO25CLAnCPIAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj ZjJlODEwHhcNMjUxMjA4MjEwMTAwWhcNMjUxMjA5MjEwMTAwWjAzMTEwLwYDVQQD EygzNjM2NTM3ZTg0YjQ0M2NhZTc0NjEyZDQxYjMwYzJlMDgyZjAzNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviTTqACJIayLLDHbUKAfY6yPZr+P dXRML0Zk7e/v9ZQfmIPS2p4I1uTNwOoDcf4kc1efqGQlf4FXTiSY4FurSwB2JESZ mG9Hare7Z57KHUJl7OLK+B+Md0K0c88ExbrSLJvlX7v9GV583bzog1BCCp9qGRy4 PI58Q0quK/baLmhpR3lcbY4qDZLyppiGfkGz26k3m4Gsj1SdK4qa8AiTdFJ8yx1/ JGGYLxAc2UiowcydU1tOlAuQqbmaMFXZ4W+ZrG4eIm6CPTE+VoU82mylaNGOOcZ2 QVDtTKkCyromLTDeRI5sCwFPW7H+oa4VSOOuGObi5MUPWqrsn3KN+RrJjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY2U36EtEPK50YS1BswwuCC8DakMB8GA1UdIwQY MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2a7TvNM LcvHULkoy7pq2ZAl2ISfFo9xwkdrI9s5Oxzmj05MludQHZEELKzhwkb05GqMADuh jrKU8kzLya0yyZnjrWyE+bIL/dCu6kO9dqjDVaOninjUajlPMJLs85IFZReXQNta F9RXbLiboKSYueQAh3oA/5aTiYqO8JDTHgrPsgb0oKQYVMSecdpziec/4J5Mn+id Ml6MWEY6oqLh7jcNlAXwQnt7bAA7fNvfqr1O0HBwlrP92J1dmi8c/hhfNs9RG2jf wNRllbLIp+ieeUxW3b44ArSl804oXK03NSk7jSoXZeCx1Lu6eXzAy4z+WfbwFFhJ 0vaJ3Izjd1rKvQ== -----END CERTIFICATE-----Generated at Tue Dec 9 00:49:57 2025 by rpki-client