This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json) Hash identifier: 0GgG+e9m/vO+PuJ5ynEetZrl4xzuyCC/L0oeu8gEvsM= Subject key identifier: CF:7A:D8:03:44:59:DC:D7:E7:5A:2B:CB:1F:CF:39:DC:56:DF:E7:24 Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea Certificate serial: 019AF31C5C29CFAF358684E1D1524652D464 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft Manifest number: 0640 Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: VT0OzC1Snv3GFIHsqBYoMeUU7ehNPbi3ciWcTqS6tcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5c:29:cf:af:35:86:84:e1:d1:52:46:52:d4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=cf7ad8034459dcd7e75a2bcb1fcf39dc56dfe724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:65:ad:d3:69:11:25:5f:7f:f6:d0:e8:0e: 82:4f:9a:40:9d:98:86:e9:4d:d3:d7:8f:8d:eb:0d: 1a:ed:3c:ef:8d:02:2a:c5:f7:90:37:39:f8:4a:2d: 91:5c:29:ea:e8:42:5a:3c:87:df:71:51:f0:ce:2c: 1d:76:d9:6e:0f:fa:59:af:6d:06:a4:8a:ca:4a:3f: 37:10:10:b7:cd:5d:54:29:96:b6:0f:35:2b:fb:0d: a1:41:f3:5d:9e:9c:91:6e:e3:dd:2c:b2:71:dd:e8: a6:2b:58:19:55:76:9e:f0:66:62:bd:24:3f:e4:13: 2f:95:74:79:c4:bb:d9:e9:b8:ed:29:ee:60:a9:75: 66:b8:a1:a2:cc:2d:0b:0f:04:14:69:80:3e:51:51: d3:03:3e:82:22:2a:24:5b:64:19:28:9d:78:0f:a4: fe:c5:d4:ae:dd:10:24:5f:6d:fd:e6:da:9b:3b:43: ab:57:d5:fe:9a:2a:0a:63:5e:9b:9e:24:5c:98:c0: 74:25:5e:c7:4d:bd:cd:40:5e:27:ff:d5:60:4d:52: 38:03:7c:9e:ab:52:d2:f5:d0:c1:0b:25:e4:ea:a8: ff:e2:e4:99:ee:ce:90:7c:44:d5:cf:85:5e:a7:18: 61:97:c2:2a:2e:1e:0d:35:87:22:fc:6e:a9:59:13: 39:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7A:D8:03:44:59:DC:D7:E7:5A:2B:CB:1F:CF:39:DC:56:DF:E7:24 X509v3 Authority Key Identifier: keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:95:e6:83:fd:db:32:97:94:77:c2:7b:a2:a8:e9:d9:2d:af: 1e:32:20:96:99:e1:64:52:7a:db:2a:15:7f:c4:78:1f:2f:b7: 3d:68:f1:75:09:43:c4:84:fa:93:a0:6f:67:7c:92:91:ae:47: 5a:e8:5a:55:3f:21:ff:59:b5:13:f1:3d:16:47:dd:92:f8:19: d5:82:7e:80:72:51:fe:1b:93:e5:8e:df:9b:e1:83:7c:97:c4: 59:d2:c9:19:96:2f:aa:11:fe:90:ef:7c:e8:5b:47:af:a0:84: 0b:a0:fa:75:df:5c:28:7f:76:de:75:0e:29:b5:b3:24:96:0b: a2:b7:b9:58:86:7a:bf:fa:a9:a0:8b:ce:82:24:af:03:10:f0: 38:70:44:88:0e:e7:36:08:58:b0:52:5c:45:b2:c7:60:f2:a4: d3:ff:6c:88:3c:26:63:b5:64:a1:8a:15:2b:67:c5:55:56:87: 2e:ba:4f:62:1a:37:45:81:25:5c:34:62:13:f8:70:9b:e2:33: 8f:37:02:d2:e5:ca:4f:93:b6:8c:9a:e0:a3:95:40:f1:44:1c: 51:e0:08:a0:9f:ba:78:12:52:ae:d3:7b:ed:bd:b6:79:e6:fc: 3f:fa:6b:56:1b:5c:e5:e0:f4:bc:4c:3f:b8:2b:4b:8e:aa:18: 15:06:4b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFwpz681hoTh0VJGUtRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDU3ODU4YjE5ZGNhOTY3M2JjMWY2NzIxOWVmNTAxYmYz YmRjZWEwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD EyhjZjdhZDgwMzQ0NTlkY2Q3ZTc1YTJiY2IxZmNmMzlkYzU2ZGZlNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB9lrdNpESVff/bQ6A6CT5pAnZiG 6U3T14+N6w0a7TzvjQIqxfeQNzn4Si2RXCnq6EJaPIffcVHwziwddtluD/pZr20G pIrKSj83EBC3zV1UKZa2DzUr+w2hQfNdnpyRbuPdLLJx3eimK1gZVXae8GZivSQ/ 5BMvlXR5xLvZ6bjtKe5gqXVmuKGizC0LDwQUaYA+UVHTAz6CIiokW2QZKJ14D6T+ xdSu3RAkX2395tqbO0OrV9X+mioKY16bniRcmMB0JV7HTb3NQF4n/9VgTVI4A3ye q1LS9dDBCyXk6qj/4uSZ7s6QfETVz4Vepxhhl8IqLh4NNYci/G6pWRM5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM962ANEWdzX51oryx/POdxW3+ckMB8GA1UdIwQY MBaAFHHVeFixncqWc7wfZyGe9QG/O9zqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RWNFdMR2R5cFp6dkI5bklaNzFBYjg3M09vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mYWNmMDctNzQ5Ny00NDZlLTlkYTgt MjY3MzFlNWY4MDZlLzEvY2RWNFdMR2R5cFp6dkI5bklaNzFBYjg3M09vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mYWNmMDctNzQ5Ny00NDZlLTlkYTgtMjY3MzFlNWY4MDZl LzEvY2RWNFdMR2R5cFp6dkI5bklaNzFBYjg3M09vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZXmg/3b MpeUd8J7oqjp2S2vHjIglpnhZFJ62yoVf8R4Hy+3PWjxdQlDxIT6k6BvZ3ySka5H WuhaVT8h/1m1E/E9FkfdkvgZ1YJ+gHJR/huT5Y7fm+GDfJfEWdLJGZYvqhH+kO98 6FtHr6CEC6D6dd9cKH923nUOKbWzJJYLore5WIZ6v/qpoIvOgiSvAxDwOHBEiA7n NghYsFJcRbLHYPKk0/9siDwmY7VkoYoVK2fFVVaHLrpPYho3RYElXDRiE/hwm+Iz jzcC0uXKT5O2jJrgo5VA8UQcUeAIoJ+6eBJSrtN77b22eeb8P/prVhtc5eD0vEw/ uCtLjqoYFQZLuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:22:01 2025 by rpki-client