This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json) Hash identifier: evYEIbK6tVQ6L9s6v63kKZ2qVMSFxwotlEWnz5TCJXY= Subject key identifier: 2A:A2:E6:2B:D4:2F:E8:CC:46:74:ED:E4:F1:48:AA:29:12:B5:97:15 Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13 Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213 Certificate serial: 019AF0F5DBFDBED2ABEC0C33AC2187C3135B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft Manifest number: 0BA3 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: G/K/c+uHdOnSzbkVqW0EiNS8dAcY7ags+IL82CqBZEE=) 2: lOVXNjzpi8a1KpauebcG1qek3Rw.roa (hash: lmKylougTZLm/1gqELvjEpFi4/W9FJdA8v6kdy+vP4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:db:fd:be:d2:ab:ec:0c:33:ac:21:87:c3:13:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=2aa2e62bd42fe8cc4674ede4f148aa2912b59715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:0a:c9:ec:d1:70:36:99:cb:42:bc:bb:fd: 0b:f2:0a:ee:37:f1:f0:db:19:7d:45:68:6a:e9:d3: 2e:23:79:52:9f:a1:06:bb:59:4b:9f:4b:eb:77:5c: 0a:4c:16:59:b6:fa:b3:ad:97:2b:6a:80:d9:c0:e2: f8:12:f6:09:96:1f:32:bf:39:23:0f:06:61:2c:e0: f7:59:f1:1a:1e:61:39:96:1f:d1:e9:d9:f6:63:53: e2:f8:bb:35:d7:c4:b2:05:ed:14:70:29:3a:1c:c1: 3d:68:82:bc:15:0d:ad:c3:35:24:c4:3a:58:eb:cc: 6c:8a:28:09:00:e3:07:c4:50:a9:b9:a9:78:7b:c9: e0:47:54:e6:74:db:db:8c:b9:8a:7a:b2:97:aa:3a: b7:90:92:67:d6:3f:e5:a7:21:1f:2c:08:48:9e:e0: 71:97:d0:21:f4:d7:f1:ef:43:c8:3e:14:f1:01:20: 4f:d9:8c:73:9e:8d:a7:05:cb:1e:db:10:71:c3:e6: 93:15:00:d4:99:54:53:45:7a:4a:96:83:c4:97:79: 72:ca:be:fe:80:1f:d2:5f:47:6d:cf:54:a2:4a:95: cc:9b:4e:98:95:5a:e7:75:ee:47:1e:89:15:3c:dc: 98:15:d5:45:80:b7:dd:25:cb:c6:3b:0d:62:29:bf: 51:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A2:E6:2B:D4:2F:E8:CC:46:74:ED:E4:F1:48:AA:29:12:B5:97:15 X509v3 Authority Key Identifier: keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:93:65:5b:f9:36:c1:11:bc:e4:5a:5f:d6:6c:3a:1b:ed:e5: 8e:8e:86:49:ee:b3:23:d6:b9:f0:44:31:0d:af:34:92:e4:1b: 26:74:2f:01:b1:79:c1:d0:56:15:ac:7c:c1:da:50:84:42:31: 9a:cd:6e:0e:9d:0d:72:82:7a:08:20:b2:13:21:13:a3:ac:24: db:b3:6f:6b:11:c2:dc:8d:0b:77:d0:5b:6b:ed:92:6c:55:0f: cd:6a:e9:fa:e2:49:bf:e8:60:69:6f:55:cb:38:12:83:5c:5b: 0b:9f:97:f5:86:de:c6:40:64:7d:b9:de:75:37:f3:82:5f:85: 6c:e8:2b:4e:78:35:a5:17:e6:d2:f9:a6:0f:09:c0:f0:38:cf: 71:54:f2:17:fd:7f:f0:c6:02:25:f5:ab:af:17:59:8c:66:60: 52:af:92:d2:0e:b5:fa:c0:db:d3:5e:7e:1b:68:a2:41:25:83: 18:a5:05:86:de:c3:b4:66:24:83:62:3f:f2:23:bc:7e:64:2f: 1c:71:33:3a:f9:3f:24:15:d6:fd:57:45:4b:7e:8e:62:d3:c8: f2:ce:e9:b1:96:6f:5e:e0:15:60:a8:25:bc:81:f5:4e:27:e8: 45:97:83:e4:91:60:f0:86:5d:dc:67:1f:e7:71:3d:c5:c9:37: 7b:12:d6:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dv9vtKr7AwzrCGHwxNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWY4ZjMyMDgyMTUyMzU5Y2RhZjlhYWJkNGE1NTFmNGZi NDAyMTMwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD EygyYWEyZTYyYmQ0MmZlOGNjNDY3NGVkZTRmMTQ4YWEyOTEyYjU5NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpYKyezRcDaZy0K8u/0L8gruN/Hw 2xl9RWhq6dMuI3lSn6EGu1lLn0vrd1wKTBZZtvqzrZcraoDZwOL4EvYJlh8yvzkj DwZhLOD3WfEaHmE5lh/R6dn2Y1Pi+Ls118SyBe0UcCk6HME9aIK8FQ2twzUkxDpY 68xsiigJAOMHxFCpual4e8ngR1TmdNvbjLmKerKXqjq3kJJn1j/lpyEfLAhInuBx l9Ah9Nfx70PIPhTxASBP2Yxzno2nBcse2xBxw+aTFQDUmVRTRXpKloPEl3lyyr7+ gB/SX0dtz1SiSpXMm06YlVrnde5HHokVPNyYFdVFgLfdJcvGOw1iKb9RLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqi5ivUL+jMRnTt5PFIqikStZcVMB8GA1UdIwQY MBaAFHCfjzIIIVI1nNr5qr1KVR9PtAITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mMzc1MzgtN2Y5Zi00MjI4LWEzMWUt MmRhYjQzYWMwNGIzLzEvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mMzc1MzgtN2Y5Zi00MjI4LWEzMWUtMmRhYjQzYWMwNGIz LzEvY0otUE1nZ2hValdjMnZtcXZVcFZIMC0wQWhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpNlW/k2 wRG85Fpf1mw6G+3ljo6GSe6zI9a58EQxDa80kuQbJnQvAbF5wdBWFax8wdpQhEIx ms1uDp0NcoJ6CCCyEyETo6wk27NvaxHC3I0Ld9Bba+2SbFUPzWrp+uJJv+hgaW9V yzgSg1xbC5+X9YbexkBkfbnedTfzgl+FbOgrTng1pRfm0vmmDwnA8DjPcVTyF/1/ 8MYCJfWrrxdZjGZgUq+S0g61+sDb015+G2iiQSWDGKUFht7DtGYkg2I/8iO8fmQv HHEzOvk/JBXW/VdFS36OYtPI8s7psZZvXuAVYKglvIH1TifoRZeD5JFg8IZd3Gcf 53E9xck3exLWLw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:23 2025 by rpki-client