This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft File: cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft (raw, json) Hash identifier: ElESr+UHe6zERUHAHpMsCvA6wdXRDkWcCTofF9Iar7M= Subject key identifier: DA:01:CF:84:DD:2D:D5:BE:06:77:CF:90:D1:BE:BB:71:F5:E8:30:9E Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40 Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440 Certificate serial: 019AF19B9D483FFF48F8B31B6CD33D1D57A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl (hash: XUBv5WqwJBzRCBITih06cMoCxZADxuZsQnbEpKks18o=) 2: iXldcpMNtu5kim9vQXhjht5Ha_0.roa (hash: OZZlPHrzKaaexsTtY7l0u4aOhC15J2UaGXg/fHHU/6k=) 3: lishyzU5fcRQD0UnbZJENmou-sc.roa (hash: OXZjviRf58gZnLzaiDcKdYvZD8OZRwCWQQj7e3qyEJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9d:48:3f:ff:48:f8:b3:1b:6c:d3:3d:1d:57:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=da01cf84dd2dd5be0677cf90d1bebb71f5e8309e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:64:56:7c:14:b3:df:04:46:f3:a6:e1:aa: e6:fd:fd:e1:87:9e:37:37:56:bc:93:46:b3:53:3d: f4:e5:b0:60:f0:dd:5b:b4:ea:7a:a2:a0:a6:d6:c4: 1b:3a:de:da:6c:a2:39:0a:d0:da:fe:d5:a1:82:d2: ec:c0:de:e4:c6:a2:2a:dc:5d:13:3f:43:33:df:b2: e7:9e:76:93:29:3e:43:28:25:dd:3d:c2:5a:ed:66: 7d:0d:06:01:6d:c0:96:de:51:a6:f6:75:10:23:04: 3d:7e:85:f5:04:6c:9d:55:f0:9f:68:57:03:d9:91: f3:e8:68:54:fd:2b:9f:29:88:50:4a:2c:64:9d:70: b0:7b:5c:22:06:8c:9e:29:a3:e1:f2:b6:4e:ab:10: f6:21:63:59:99:64:f6:c2:2f:30:af:bf:91:b8:ee: c0:81:a4:dd:ce:75:ca:4b:6a:b2:62:a7:b0:55:a7: 01:d3:97:a8:68:a6:74:01:d3:be:5f:3f:45:e9:71: 13:0a:e0:eb:a9:8d:f0:41:5f:0e:9f:ae:9f:d8:44: 69:2d:3e:25:94:a5:62:e9:7c:8f:3b:c8:b9:2a:d0: b0:a8:2f:b4:e9:cf:cf:71:7a:65:80:9c:ec:57:fa: be:83:5a:61:de:3a:62:73:3e:d8:58:21:e0:9f:fc: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:01:CF:84:DD:2D:D5:BE:06:77:CF:90:D1:BE:BB:71:F5:E8:30:9E X509v3 Authority Key Identifier: keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:db:23:a4:c4:6b:f2:78:45:ac:e1:7b:ae:f8:1f:0d:43:d4: a3:90:1c:91:c7:ba:fb:38:fc:85:74:09:02:88:4d:4e:5c:49: f8:67:bc:76:8f:32:94:63:24:c5:04:d1:cc:24:74:06:33:e2: a4:d3:25:db:98:3c:01:bf:1c:23:05:46:b6:54:0d:de:56:1d: e7:9e:12:51:f5:d4:2a:0f:48:ab:42:c7:bc:05:20:bc:ca:d8: 77:75:6b:ee:bc:24:6d:4a:26:70:09:95:21:7c:10:38:bb:c4: 24:55:9a:a1:35:3f:0a:a2:b1:c7:0b:c9:43:1d:2b:2b:2f:39: 54:a5:31:a9:53:52:e0:f7:74:27:0c:81:aa:dc:af:6d:39:d5: 3a:22:a9:b9:96:49:c1:ec:6f:b2:03:e9:c4:2a:4f:6c:dc:33: 02:cb:de:d8:24:1f:51:94:4d:48:29:ff:f5:2f:03:d4:f0:4a: 0a:3b:19:7e:33:f7:94:e0:86:0b:54:ab:40:2a:97:be:c8:43: a4:23:fc:c3:50:67:0b:91:13:89:4b:20:b2:b6:83:f1:af:06: 00:3a:29:ab:3d:a8:68:91:76:4f:40:3a:a7:b5:25:87:78:87: 48:f0:05:e4:69:52:84:44:02:79:6c:c2:e5:80:a2:0f:62:91: f1:5e:85:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm51IP/9I+LMbbNM9HVemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGMwMzA5MzBhOWQyZTRkYTg4ZDgxODUyYTQ0YzNmNzhi ZmI0NDAwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD EyhkYTAxY2Y4NGRkMmRkNWJlMDY3N2NmOTBkMWJlYmI3MWY1ZTgzMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt1kVnwUs98ERvOm4arm/f3hh543 N1a8k0azUz305bBg8N1btOp6oqCm1sQbOt7abKI5CtDa/tWhgtLswN7kxqIq3F0T P0Mz37LnnnaTKT5DKCXdPcJa7WZ9DQYBbcCW3lGm9nUQIwQ9foX1BGydVfCfaFcD 2ZHz6GhU/SufKYhQSixknXCwe1wiBoyeKaPh8rZOqxD2IWNZmWT2wi8wr7+RuO7A gaTdznXKS2qyYqewVacB05eoaKZ0AdO+Xz9F6XETCuDrqY3wQV8On66f2ERpLT4l lKVi6XyPO8i5KtCwqC+06c/PcXplgJzsV/q+g1ph3jpicz7YWCHgn/x2cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoBz4TdLdW+BnfPkNG+u3H16DCeMB8GA1UdIwQY MBaAFHAMAwkwqdLk2ojYGFKkTD94v7RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEt YzViYmY5NWY4NTg0LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEtYzViYmY5NWY4NTg0 LzEvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtsjpMRr 8nhFrOF7rvgfDUPUo5Ackce6+zj8hXQJAohNTlxJ+Ge8do8ylGMkxQTRzCR0BjPi pNMl25g8Ab8cIwVGtlQN3lYd554SUfXUKg9Iq0LHvAUgvMrYd3Vr7rwkbUomcAmV IXwQOLvEJFWaoTU/CqKxxwvJQx0rKy85VKUxqVNS4Pd0JwyBqtyvbTnVOiKpuZZJ wexvsgPpxCpPbNwzAsve2CQfUZRNSCn/9S8D1PBKCjsZfjP3lOCGC1SrQCqXvshD pCP8w1BnC5ETiUsgsraD8a8GADopqz2oaJF2T0A6p7Ulh3iHSPAF5GlShEQCeWzC 5YCiD2KR8V6FuA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:05 2025 by rpki-client