This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json) Hash identifier: Y8qXTO4O1hkQiUJAZhPEGg5k98kJBS7ia/kIXlRP5cQ= Subject key identifier: C2:FE:EC:7E:3F:1A:6B:98:36:14:76:08:4E:C8:97:33:89:E5:3F:39 Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Certificate serial: 019AF541177E8E6B88142C15CB0CD8094A8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft Manifest number: 14AF Signing time: Sat 06 Dec 2025 20:01:15 +0000 Manifest this update: Sat 06 Dec 2025 20:01:15 +0000 Manifest next update: Sun 07 Dec 2025 20:01:15 +0000 Files and hashes: 1: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (hash: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=) 2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: W76m+DlclRQkTrOUC5nkZS7pidjnCnVPgQ+FtIUovu8=) 3: P5dWxSLpxtp-49eZGd_31_JRHHo.roa (hash: NT3aNwht6fMF/zfz0JOvuz5n/skNMJxnJBDVpcrq8Dc=) 4: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (hash: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=) 5: oT4_ERJ1NK-RUR-knGGnWo2w3XU.roa (hash: gXeEbcCW9pl3CKjG36RJur3xaPc6GaReOGS3i/R+/dY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:17:7e:8e:6b:88:14:2c:15:cb:0c:d8:09:4a:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378 Validity Not Before: Dec 6 20:01:15 2025 GMT Not After : Dec 7 20:01:15 2025 GMT Subject: CN=c2feec7e3f1a6b98361476084ec8973389e53f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:1f:62:f1:3f:d9:61:84:b0:6d:26:d3:c8: e8:76:6d:74:5a:da:5b:d3:0b:50:dd:4f:67:56:b3: 5b:28:bb:d1:a8:d3:42:e9:d1:85:01:b3:fe:d6:88: ad:84:56:b2:90:d1:26:4b:61:c5:a5:31:70:d5:5b: 0e:6f:33:df:ef:a5:80:33:22:bd:62:be:f6:9a:2a: e9:4a:0f:98:dd:d1:05:70:6d:84:2a:07:d6:8c:36: 16:11:4c:ac:ab:2b:a0:be:06:27:90:d8:0f:ce:aa: b3:df:a4:59:74:62:6a:ed:23:0d:f3:db:b6:bf:a2: 98:db:ea:34:db:5c:1b:ed:f9:4e:7f:ad:dc:4f:66: e0:eb:f7:85:5c:b7:f3:52:c8:b7:d5:bd:a4:7c:f8: 6b:5c:db:e3:11:8c:f3:8b:cf:17:c2:2d:ea:f3:b2: f2:0e:e1:45:18:1a:63:c7:3f:fc:0c:d8:1a:3b:88: 8c:cb:a1:8f:58:98:b7:68:11:58:9d:20:70:5b:c1: 5e:b1:ca:04:15:18:58:8c:b5:5f:0d:d0:32:f0:83: 67:a9:19:b9:39:97:2b:bf:30:7a:ea:01:9c:95:2e: cc:59:75:e0:b1:cf:4d:bf:47:43:56:03:46:de:71: 16:39:0a:7a:72:fc:af:f2:cf:4f:aa:56:47:d6:3a: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FE:EC:7E:3F:1A:6B:98:36:14:76:08:4E:C8:97:33:89:E5:3F:39 X509v3 Authority Key Identifier: keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fa:82:de:7d:d3:e1:cf:95:35:78:5f:41:45:7e:c6:c0:53: de:5f:bd:aa:58:55:f8:ef:ad:62:81:05:aa:e3:eb:4e:f5:82: 4b:bc:96:c8:13:03:1d:9c:c2:32:cf:b3:f1:e0:db:a2:1a:6e: 59:8f:6b:ff:6b:ef:21:20:f3:85:9d:90:1d:4a:21:59:f7:0b: 59:e9:ec:26:6f:59:ce:a9:94:3b:c2:9d:71:7b:c2:24:14:03: a6:f9:9b:3e:51:61:b7:44:e1:ec:a4:f1:79:f1:56:1b:28:89: 28:68:23:35:cb:9c:20:ca:b6:c7:0c:96:a2:24:08:6f:ac:78: f4:ec:4c:de:c4:10:94:0f:d7:70:9c:58:fc:fa:3d:35:91:11: 79:45:c4:1c:ae:fc:7d:41:07:2d:83:56:cd:af:ed:66:ef:50: 52:a9:fa:5a:21:4a:38:38:46:03:be:9c:36:50:e0:7f:ee:08: f0:1b:63:db:49:c0:41:8a:4e:22:cb:83:b7:7a:6c:85:76:54: 48:df:6f:6c:73:eb:14:de:fc:76:f0:05:23:e0:ac:2c:b5:a5: 4c:34:dd:7a:68:3c:7b:83:2a:af:0a:00:13:36:7e:f4:e1:27: f7:33:36:2a:c2:c5:e6:78:d2:4b:5b:78:8b:7e:d6:b9:59:ca: 30:31:72:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRd+jmuIFCwVywzYCUqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzcxOTYzNDBkMjE0NGI4Y2E3YjA3Nzg5ODRiYjA0YmMx Y2IzNzgwHhcNMjUxMjA2MjAwMTE1WhcNMjUxMjA3MjAwMTE1WjAzMTEwLwYDVQQD EyhjMmZlZWM3ZTNmMWE2Yjk4MzYxNDc2MDg0ZWM4OTczMzg5ZTUzZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzYfYvE/2WGEsG0m08jodm10Wtpb 0wtQ3U9nVrNbKLvRqNNC6dGFAbP+1oithFaykNEmS2HFpTFw1VsObzPf76WAMyK9 Yr72mirpSg+Y3dEFcG2EKgfWjDYWEUysqyugvgYnkNgPzqqz36RZdGJq7SMN89u2 v6KY2+o021wb7flOf63cT2bg6/eFXLfzUsi31b2kfPhrXNvjEYzzi88Xwi3q87Ly DuFFGBpjxz/8DNgaO4iMy6GPWJi3aBFYnSBwW8FescoEFRhYjLVfDdAy8INnqRm5 OZcrvzB66gGclS7MWXXgsc9Nv0dDVgNG3nEWOQp6cvyv8s9PqlZH1jrQ8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML+7H4/GmuYNhR2CE7IlzOJ5T85MB8GA1UdIwQY MBaAFAp3GWNA0hRLjKewd4mEuwS8HLN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQt ZWI5NzcxNjRhN2U0LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80OTg5YmEtOWFmMy00ZTNkLTg0NWQtZWI5NzcxNjRhN2U0 LzEvQ25jWlkwRFNGRXVNcDdCM2lZUzdCTHdjczNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/qC3n3T 4c+VNXhfQUV+xsBT3l+9qlhV+O+tYoEFquPrTvWCS7yWyBMDHZzCMs+z8eDbohpu WY9r/2vvISDzhZ2QHUohWfcLWensJm9ZzqmUO8KdcXvCJBQDpvmbPlFht0Th7KTx efFWGyiJKGgjNcucIMq2xwyWoiQIb6x49OxM3sQQlA/XcJxY/Po9NZEReUXEHK78 fUEHLYNWza/tZu9QUqn6WiFKODhGA76cNlDgf+4I8Btj20nAQYpOIsuDt3pshXZU SN9vbHPrFN78dvAFI+CsLLWlTDTdemg8e4MqrwoAEzZ+9OEn9zM2KsLF5njSS1t4 i37WuVnKMDFyQw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:07:12 2025 by rpki-client