This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json) Hash identifier: DaIZywsMA/qDz89Y+86WT6WgxeO/8bKIWazVxfScrIs= Subject key identifier: AF:D4:99:91:68:C0:29:0C:49:A3:3A:46:1F:5E:FE:AE:CC:AE:84:51 Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013 Certificate serial: 019AF0BF92C33F25BF78307BE3FBB2F301B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft Manifest number: 1767 Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=) 2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: 5cwd2/rJSn+xBKzHGRBuPuM4DKLrbE2+9KQVy9ZUO7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:92:c3:3f:25:bf:78:30:7b:e3:fb:b2:f3:01:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704ab9688427073ff7e179de5af002e09f236013 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=afd4999168c0290c49a33a461f5efeaeccae8451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:f2:3c:2c:70:74:1d:2a:72:17:8a:00:58: 8c:36:11:93:03:f5:49:ef:04:47:bd:74:59:fd:e1: 22:24:26:11:85:82:68:15:b2:cd:d4:86:4c:8a:ab: 66:29:a1:3e:d7:73:20:57:f9:c6:92:ee:e5:f2:78: 32:d6:d1:3e:43:c8:8b:a3:76:54:bd:e0:41:c5:22: 8b:09:03:3c:8a:37:3d:d3:2f:84:d3:85:0c:a5:0e: 26:83:0f:60:11:fa:82:f3:7e:21:1b:9a:4c:e2:0b: 51:a6:a9:00:19:7c:48:49:df:ab:55:ea:5f:fa:d8: ca:5b:8b:01:4d:40:8c:19:10:1c:c2:16:a7:4e:7b: 32:f6:48:17:51:8b:a2:7d:7e:ed:dc:ad:e8:8a:3c: 41:fe:e9:81:fd:70:fa:78:c5:5b:3f:d0:a5:c1:39: 79:a7:1c:06:96:e8:5f:7f:6a:b0:5a:10:dc:0d:6e: 93:ca:d4:04:ea:7d:88:bf:a0:4b:31:84:a0:7f:76: ec:b1:65:64:34:09:c3:9e:24:af:a8:bf:fd:26:76: 33:85:4b:33:fa:45:87:77:e1:15:38:41:3f:6e:f1: 7b:39:36:76:96:83:9d:8a:df:cd:0e:09:6b:dc:fa: 3c:94:49:eb:87:8f:0d:c0:1b:d5:5a:76:f4:74:cb: 3a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:99:91:68:C0:29:0C:49:A3:3A:46:1F:5E:FE:AE:CC:AE:84:51 X509v3 Authority Key Identifier: keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5d:db:f0:92:ea:16:f2:08:1e:41:92:3a:64:ba:c1:26:17: ff:44:aa:a3:04:64:d8:44:27:24:a0:af:06:89:4c:e0:6f:01: 6a:57:ab:01:74:3a:a8:a5:14:e2:8f:47:b1:00:11:bc:16:4c: 07:26:64:cd:2b:42:31:88:ca:03:21:b0:72:4d:5f:4d:e0:08: e5:d7:c3:f4:d3:fd:58:1d:35:ed:23:67:7e:3b:ac:45:73:4a: 46:e0:84:d7:bc:d1:e2:78:2d:52:01:ee:bc:4d:47:e8:b9:46: 74:16:9b:ae:5b:47:e7:7c:32:c7:d1:16:d8:1f:f8:b1:0a:1f: 69:8e:8e:6f:25:16:93:d5:0a:9e:be:c2:33:a6:2b:f3:c0:61: 7f:20:f2:43:6d:80:93:cc:5d:1e:0f:9c:23:11:e4:ad:eb:ae: 16:74:82:1a:cc:ad:89:85:66:d6:4f:9f:c4:3c:c7:58:2d:e7: 8b:63:ea:91:39:3d:4e:29:03:61:7a:a5:2c:76:07:72:1c:f4: 75:e6:9a:d3:4d:a1:1e:b7:f4:58:51:21:dd:1e:1a:0a:3c:50: 92:45:69:be:44:3c:9f:04:f4:5e:26:90:9c:16:f1:84:1b:38: e9:0c:b9:c5:86:b1:60:c2:12:95:b9:6b:9b:16:dc:16:f2:18: e1:82:1b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5LDPyW/eDB74/uy8wGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy MzYwMTMwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD EyhhZmQ0OTk5MTY4YzAyOTBjNDlhMzNhNDYxZjVlZmVhZWNjYWU4NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq/yPCxwdB0qcheKAFiMNhGTA/VJ 7wRHvXRZ/eEiJCYRhYJoFbLN1IZMiqtmKaE+13MgV/nGku7l8ngy1tE+Q8iLo3ZU veBBxSKLCQM8ijc90y+E04UMpQ4mgw9gEfqC834hG5pM4gtRpqkAGXxISd+rVepf +tjKW4sBTUCMGRAcwhanTnsy9kgXUYuifX7t3K3oijxB/umB/XD6eMVbP9ClwTl5 pxwGluhff2qwWhDcDW6TytQE6n2Iv6BLMYSgf3bssWVkNAnDniSvqL/9JnYzhUsz +kWHd+EVOEE/bvF7OTZ2loOdit/NDglr3Po8lEnrh48NwBvVWnb0dMs6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/UmZFowCkMSaM6Rh9e/q7MroRRMB8GA1UdIwQY MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt NDZhOGIxOTFhMzc0LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjItNDZhOGIxOTFhMzc0 LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApV3b8JLq FvIIHkGSOmS6wSYX/0SqowRk2EQnJKCvBolM4G8BalerAXQ6qKUU4o9HsQARvBZM ByZkzStCMYjKAyGwck1fTeAI5dfD9NP9WB017SNnfjusRXNKRuCE17zR4ngtUgHu vE1H6LlGdBabrltH53wyx9EW2B/4sQofaY6ObyUWk9UKnr7CM6Yr88BhfyDyQ22A k8xdHg+cIxHkreuuFnSCGsytiYVm1k+fxDzHWC3ni2PqkTk9TikDYXqlLHYHchz0 deaa002hHrf0WFEh3R4aCjxQkkVpvkQ8nwT0XiaQnBbxhBs46Qy5xYaxYMISlblr mxbcFvIY4YIbjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:56:24 2025 by rpki-client