This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json) Hash identifier: Bx+gj11glz6N/hoy6FfujA/9Vvd3b3A2648vIYpFlj4= Subject key identifier: E8:92:1F:42:52:4D:81:93:87:B5:37:95:DF:A8:0F:0B:FA:AA:3C:C5 Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7 Certificate serial: 019AF19BB9F268AE1DF7D8606CD31B694B0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft Manifest number: 0767 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=) 2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: PM2MmUhkCFM789A0i8C8nlNY4amJdWjUKZ4zPgsayq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b9:f2:68:ae:1d:f7:d8:60:6c:d3:1b:69:4b:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=e8921f42524d819387b53795dfa80f0bfaaa3cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:5f:80:af:ba:28:3e:0b:7b:b0:00:cd:d6: 5c:bf:fb:53:2c:23:69:b2:fe:56:b5:c8:f7:53:31: 9c:b7:9c:2a:28:2d:b5:01:da:17:94:6f:22:24:df: 1d:f1:3d:a6:e7:7e:e3:80:b2:76:50:bf:9f:1f:1e: 4b:10:ff:9b:2a:24:d8:4b:35:ab:50:ee:e4:71:4d: 71:29:fd:69:32:0d:da:48:70:a4:87:08:49:e2:95: e2:04:3f:af:88:10:9c:75:c3:1a:ca:dc:bb:63:de: 18:53:4c:5c:21:17:85:ae:87:97:4d:37:0c:b1:df: b8:25:81:9e:bf:0b:ed:62:0b:3f:d4:05:8a:1c:78: 15:7e:09:50:d9:24:08:82:74:8b:f8:81:de:08:65: df:13:fb:70:fb:cb:62:dc:3a:7b:91:eb:ec:db:e4: b6:2d:6b:90:28:6b:e5:a7:82:42:1d:07:35:89:c9: e2:70:27:d6:be:58:9c:3b:0c:0e:54:dd:9f:15:ba: fe:d5:43:c2:9a:21:c8:19:12:28:56:be:1f:e4:84: 17:40:15:f2:7b:74:00:c1:14:38:f9:4c:a3:f0:4d: 71:fc:99:05:35:a8:ba:47:a9:77:70:95:9b:5f:09: 14:3b:68:43:89:05:53:7a:bc:4b:2a:0e:f6:9b:62: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:1F:42:52:4D:81:93:87:B5:37:95:DF:A8:0F:0B:FA:AA:3C:C5 X509v3 Authority Key Identifier: keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:85:d4:75:44:b7:60:b3:eb:ad:a7:54:cc:96:14:2e:8c:90: 66:39:01:a0:48:af:6c:c4:ae:c8:ed:a8:db:02:4b:24:26:ac: 25:89:24:e3:6c:d7:dc:74:03:ee:63:7a:9e:15:1f:7c:86:94: a9:c6:20:ab:d0:5d:dd:23:c1:21:71:36:a2:3d:cf:b2:9f:46: ae:e5:68:43:ac:1a:c2:15:90:ad:ff:04:17:f3:3a:ae:41:5a: 19:d5:0a:c2:7d:a3:29:77:f3:3b:7d:1d:5e:4f:44:58:32:9e: 2d:04:d5:24:0f:58:ef:54:a0:e7:bd:75:89:e1:0f:dc:de:bb: bd:b9:ce:54:5a:6b:12:63:b0:8e:4c:ee:a5:be:4b:13:98:a9: d1:e8:11:12:31:64:c5:54:ce:bd:ac:a6:1f:9e:e8:09:ea:1d: 52:23:c0:2f:54:ad:80:6e:69:eb:23:3c:e0:58:09:a3:04:1c: ed:bc:41:94:f0:f6:52:8e:1f:7d:10:28:2e:16:f0:3f:f8:89: f4:24:80:c8:85:0a:f5:73:da:46:4e:da:f6:1b:47:b6:f8:61: c8:f8:b0:aa:ea:71:68:44:98:83:91:e6:a8:7b:ab:d1:c5:46: 0b:fc:6b:13:de:20:bc:b0:27:b5:44:48:c7:68:ca:84:6a:ad: 32:05:80:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7nyaK4d99hgbNMbaUsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk Y2VmZTcwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EyhlODkyMWY0MjUyNGQ4MTkzODdiNTM3OTVkZmE4MGYwYmZhYWEzY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApydfgK+6KD4Le7AAzdZcv/tTLCNp sv5Wtcj3UzGct5wqKC21AdoXlG8iJN8d8T2m537jgLJ2UL+fHx5LEP+bKiTYSzWr UO7kcU1xKf1pMg3aSHCkhwhJ4pXiBD+viBCcdcMayty7Y94YU0xcIReFroeXTTcM sd+4JYGevwvtYgs/1AWKHHgVfglQ2SQIgnSL+IHeCGXfE/tw+8ti3Dp7kevs2+S2 LWuQKGvlp4JCHQc1icnicCfWvlicOwwOVN2fFbr+1UPCmiHIGRIoVr4f5IQXQBXy e3QAwRQ4+Uyj8E1x/JkFNai6R6l3cJWbXwkUO2hDiQVTerxLKg72m2IcswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiSH0JSTYGTh7U3ld+oDwv6qjzFMB8GA1UdIwQY MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt NjJmMWEzNTA0MTRjLzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4XUdUS3 YLPrradUzJYULoyQZjkBoEivbMSuyO2o2wJLJCasJYkk42zX3HQD7mN6nhUffIaU qcYgq9Bd3SPBIXE2oj3Psp9GruVoQ6wawhWQrf8EF/M6rkFaGdUKwn2jKXfzO30d Xk9EWDKeLQTVJA9Y71Sg5711ieEP3N67vbnOVFprEmOwjkzupb5LE5ip0egREjFk xVTOvaymH57oCeodUiPAL1StgG5p6yM84FgJowQc7bxBlPD2Uo4ffRAoLhbwP/iJ 9CSAyIUK9XPaRk7a9htHtvhhyPiwqupxaESYg5HmqHur0cVGC/xrE94gvLAntURI x2jKhGqtMgWAFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:53 2025 by rpki-client