This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json) Hash identifier: jFnPGwv4yq2Tkk3jk4uATO6B/9odiuFXxe44fM59NYQ= Subject key identifier: E5:FF:8D:AB:AA:1C:D8:88:92:03:5C:1E:F8:EA:18:0B:2D:6C:B0:64 Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b Certificate serial: 019AF208F355B346981C0DC2C2324CACCB60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft Manifest number: 112B Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: yh7ezwyoQIoI/JBD6QMQoXqZdevyNp6pJhq/r9G75zo=) 2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f3:55:b3:46:98:1c:0d:c2:c2:32:4c:ac:cb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=e5ff8dabaa1cd88892035c1ef8ea180b2d6cb064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:f1:bc:0d:65:43:3d:4e:7a:b2:d7:a5:49: 24:70:75:52:c9:4b:38:ca:f5:c8:b8:6c:62:a7:d2: 4f:36:88:5c:46:89:57:71:37:23:95:25:d4:70:6f: 9f:c8:ee:09:63:50:02:9c:88:27:ca:57:8f:93:9c: 77:1e:d2:62:b0:3a:ca:a6:59:09:6d:05:72:fa:37: 9a:b2:3e:e5:94:62:49:e1:21:cf:98:7a:cb:d2:4f: 9a:77:bc:ef:93:42:b4:a1:90:3d:b9:17:6c:ed:f0: 54:25:3e:dc:c2:f8:f7:c1:1c:d9:b7:8c:2b:a2:38: c0:a8:10:6c:a6:cd:20:93:67:2b:36:58:11:ef:92: 92:ad:1b:8c:ba:99:7c:ce:06:76:03:fa:fd:f1:e2: 4f:c6:5f:6f:71:b0:70:a9:0c:f3:44:25:be:c4:93: 3d:98:0b:21:ab:66:d4:f4:99:ab:a3:35:96:59:6f: ff:92:27:e2:dd:56:4e:a6:3f:e1:50:0d:db:ad:72: 21:02:7b:de:98:f1:da:93:bf:19:0e:40:55:20:0f: c6:39:b3:ef:6b:d2:58:05:c6:11:97:f8:a7:66:0f: 86:ff:2a:e9:f1:43:4b:c3:00:a3:f5:6e:5f:ed:2b: 1c:69:c6:82:f5:01:d9:2a:70:5a:f7:95:01:f6:36: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FF:8D:AB:AA:1C:D8:88:92:03:5C:1E:F8:EA:18:0B:2D:6C:B0:64 X509v3 Authority Key Identifier: keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f8:a7:83:24:5d:02:4c:89:c3:e1:d2:92:d9:e7:bb:c5:37: a5:63:c3:f7:ba:1c:21:f7:32:1b:f1:c8:16:a3:44:e3:9f:c2: e0:f2:c7:33:40:5b:08:6e:51:23:fc:1a:7a:6d:ea:a4:16:09: e3:cd:ee:e8:14:30:b1:4a:05:e5:8b:c3:e1:02:55:15:96:fd: e9:99:70:80:c0:2b:d9:8e:dc:e4:19:dc:4d:86:50:9d:8f:ea: df:ab:7a:b9:27:c9:8b:bd:44:89:02:ee:d2:af:31:9f:f0:11: 92:a0:c4:6f:b4:49:f6:ab:e9:0d:0d:e2:40:a6:89:2c:39:da: ac:2e:fb:0d:80:2a:94:fe:27:12:2e:40:12:53:1b:3a:7e:a1: e5:61:01:0b:4b:3c:2d:7c:5c:61:72:5d:4a:2d:13:df:ca:3f: b2:31:fe:89:b2:eb:91:b6:0e:ce:06:1c:c6:bb:68:9d:0a:01: 74:49:8b:f6:7e:71:06:1e:99:36:cd:53:98:d9:ca:4b:77:9d: 8c:b8:14:2d:0c:7e:30:3c:ba:95:dc:a3:d4:1e:c4:45:9c:a1: a4:44:d8:1e:a4:b2:64:b5:bc:86:b3:53:3f:46:f0:d5:4e:c1: 0c:12:51:7b:78:87:45:4e:c5:11:eb:ce:77:d8:8b:27:56:55: 68:cd:79:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPNVs0aYHA3CwjJMrMtgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5 MTY4OGIwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhlNWZmOGRhYmFhMWNkODg4OTIwMzVjMWVmOGVhMTgwYjJkNmNiMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa7xvA1lQz1OerLXpUkkcHVSyUs4 yvXIuGxip9JPNohcRolXcTcjlSXUcG+fyO4JY1ACnIgnylePk5x3HtJisDrKplkJ bQVy+jeasj7llGJJ4SHPmHrL0k+ad7zvk0K0oZA9uRds7fBUJT7cwvj3wRzZt4wr ojjAqBBsps0gk2crNlgR75KSrRuMupl8zgZ2A/r98eJPxl9vcbBwqQzzRCW+xJM9 mAshq2bU9JmrozWWWW//kifi3VZOpj/hUA3brXIhAnvemPHak78ZDkBVIA/GObPv a9JYBcYRl/inZg+G/yrp8UNLwwCj9W5f7SscacaC9QHZKnBa95UB9jbzbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOX/jauqHNiIkgNcHvjqGAstbLBkMB8GA1UdIwQY MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt MGM2ODc3N2E0MDE5LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5 LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPingyRd AkyJw+HSktnnu8U3pWPD97ocIfcyG/HIFqNE45/C4PLHM0BbCG5RI/waem3qpBYJ 483u6BQwsUoF5YvD4QJVFZb96ZlwgMAr2Y7c5BncTYZQnY/q36t6uSfJi71EiQLu 0q8xn/ARkqDEb7RJ9qvpDQ3iQKaJLDnarC77DYAqlP4nEi5AElMbOn6h5WEBC0s8 LXxcYXJdSi0T38o/sjH+ibLrkbYOzgYcxrtonQoBdEmL9n5xBh6ZNs1TmNnKS3ed jLgULQx+MDy6ldyj1B7ERZyhpETYHqSyZLW8hrNTP0bw1U7BDBJRe3iHRU7FEevO d9iLJ1ZVaM15Dg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:51:38 2025 by rpki-client