This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json) Hash identifier: ekv4MD0m1LzdXBaIdWFdJQwHbn4eQIUzksWbMRUzkxY= Subject key identifier: 77:BC:E5:2E:12:62:66:52:45:B6:72:9B:34:DA:02:6E:11:70:1B:F7 Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Certificate serial: 019AF57777EA43DB4DC866DCF4AD9C7B6DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 21:00:38 +0000 Manifest this update: Sat 06 Dec 2025 21:00:38 +0000 Manifest next update: Sun 07 Dec 2025 21:00:38 +0000 Files and hashes: 1: 7wYbQJjmUZJ3jrCYQep7ej1ycX8.roa (hash: gX6AQ4uDUscH9HZMwyFhtSxb+YXiJVmytGAK7BhRx4Q=) 2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: AmxnBdhNrBgL3Hws1SY5wIVEUeCalKXwELCUao7XqU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:77:ea:43:db:4d:c8:66:dc:f4:ad:9c:7b:6d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Validity Not Before: Dec 6 21:00:38 2025 GMT Not After : Dec 7 21:00:38 2025 GMT Subject: CN=77bce52e1262665245b6729b34da026e11701bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:a2:10:22:e7:4a:ab:54:03:c1:b1:41:69: f4:98:9c:9c:2a:3d:95:24:d5:e7:75:e4:95:81:39: 3b:37:d5:aa:aa:96:5f:52:99:44:c3:6f:7b:57:51: 8f:a3:3c:d9:f0:c3:b7:0b:08:b5:e8:74:b0:19:8d: 97:38:78:1e:81:aa:c4:2d:9e:47:40:91:24:b6:f3: d6:3e:aa:e4:b5:07:ca:12:20:a1:77:9a:2f:77:3b: 13:bf:f2:0f:fd:9d:a6:81:c3:4b:03:af:17:ee:71: e5:13:03:0e:e6:7f:61:9a:d2:ac:1c:2d:e0:33:30: 99:06:61:66:b5:22:af:c1:07:17:ab:9b:70:2a:38: 34:6e:83:a8:d4:11:9b:0c:bd:7a:56:5d:1e:2a:5a: 81:95:f8:27:92:5f:95:6e:ad:e3:c2:ca:8c:bb:b7: fa:ae:d2:c7:0d:55:e5:34:fe:94:46:e4:83:d7:2a: c6:d0:4e:24:cb:ca:ba:36:8f:6a:5f:1b:76:93:91: 3e:b3:e1:6a:84:0d:62:e1:3f:d6:c8:b3:6d:31:9b: ac:4c:59:fe:96:df:52:33:6b:36:73:c3:3c:0d:78: 4b:ec:c2:cf:41:b3:2b:59:93:16:86:cc:50:ea:38: 28:8c:23:9c:fb:77:18:01:cf:ac:b7:73:d1:0d:8b: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:E5:2E:12:62:66:52:45:B6:72:9B:34:DA:02:6E:11:70:1B:F7 X509v3 Authority Key Identifier: keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8b:ee:f5:ef:1f:2e:e0:01:a8:62:87:95:7c:29:ad:11:83: 90:75:45:1f:37:ba:5b:a5:a7:2b:3d:7c:cb:fb:8b:99:72:b7: 9e:f2:c2:67:38:75:c5:6d:14:56:07:88:a7:34:74:32:37:e5: 7c:3a:76:aa:5b:0f:5c:a7:20:ba:b0:9a:bf:0a:ce:96:fe:2c: fb:f3:ee:e6:d6:5c:da:54:0b:0a:c2:2c:69:61:66:d7:4c:81: 9a:14:82:aa:09:72:c2:de:79:3c:89:5f:4b:b4:f7:10:1f:58: 1e:64:4e:32:f4:56:b5:f3:a0:93:ac:b0:ad:e0:bd:77:0f:1b: ef:05:ea:dc:d7:d0:7d:5b:bf:71:20:77:e5:6c:2c:aa:7f:7f: e0:d8:33:19:c6:a6:6a:a8:4f:68:e2:88:c2:3c:65:7b:95:7a: 65:2a:8c:ae:57:ab:24:25:94:57:c9:a3:d3:8d:a5:e3:6f:4b: 18:f4:1b:f7:d2:50:56:c0:25:f7:73:21:41:d8:ed:e6:9e:5c: 7f:84:a5:0c:33:b8:c5:7b:a8:47:02:ce:7f:fc:da:eb:3c:ed: 76:05:06:dd:a1:a8:e1:85:af:f7:a6:5e:c6:75:46:a4:7c:e5: 61:f5:9e:1d:86:15:4e:56:22:a2:13:04:38:7c:40:cc:3f:4e: 55:31:27:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3fqQ9tNyGbc9K2ce23hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZGJlYTA3NTNkZjA4M2U1NzgyYmI5ZjM4MGI1ZDc5OWNi NzhhMDYwHhcNMjUxMjA2MjEwMDM4WhcNMjUxMjA3MjEwMDM4WjAzMTEwLwYDVQQD Eyg3N2JjZTUyZTEyNjI2NjUyNDViNjcyOWIzNGRhMDI2ZTExNzAxYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn26iECLnSqtUA8GxQWn0mJycKj2V JNXndeSVgTk7N9WqqpZfUplEw297V1GPozzZ8MO3Cwi16HSwGY2XOHgegarELZ5H QJEktvPWPqrktQfKEiChd5ovdzsTv/IP/Z2mgcNLA68X7nHlEwMO5n9hmtKsHC3g MzCZBmFmtSKvwQcXq5twKjg0boOo1BGbDL16Vl0eKlqBlfgnkl+Vbq3jwsqMu7f6 rtLHDVXlNP6URuSD1yrG0E4ky8q6No9qXxt2k5E+s+FqhA1i4T/WyLNtMZusTFn+ lt9SM2s2c8M8DXhL7MLPQbMrWZMWhsxQ6jgojCOc+3cYAc+st3PRDYtayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe85S4SYmZSRbZymzTaAm4RcBv3MB8GA1UdIwQY MBaAFHDb6gdT3wg+V4K7nzgLXXmct4oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjkt MmEwY2YxMzE3M2Q4LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZWVjMmUtMGNkNi00MTEzLWIyYjktMmEwY2YxMzE3M2Q4 LzEvY052cUIxUGZDRDVYZ3J1Zk9BdGRlWnkzaWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4vu9e8f LuABqGKHlXwprRGDkHVFHze6W6WnKz18y/uLmXK3nvLCZzh1xW0UVgeIpzR0Mjfl fDp2qlsPXKcgurCavwrOlv4s+/Pu5tZc2lQLCsIsaWFm10yBmhSCqglywt55PIlf S7T3EB9YHmROMvRWtfOgk6ywreC9dw8b7wXq3NfQfVu/cSB35Wwsqn9/4NgzGcam aqhPaOKIwjxle5V6ZSqMrlerJCWUV8mj042l429LGPQb99JQVsAl93MhQdjt5p5c f4SlDDO4xXuoRwLOf/za6zztdgUG3aGo4YWv96ZexnVGpHzlYfWeHYYVTlYiohME OHxAzD9OVTEnxw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:01:04 2025 by rpki-client