This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json) Hash identifier: KTVrfI3iLJmmMsRvRBv4g2qag1ScJJd3s6QldjkI6N4= Subject key identifier: AE:CF:F2:F5:66:C2:A9:18:DD:CD:FC:1B:CD:2B:15:79:33:36:48:8D Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1 Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1 Certificate serial: 019AF08800FBC9099F180F1ED9BD2EC516B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft Manifest number: 1075 Signing time: Fri 05 Dec 2025 22:00:36 +0000 Manifest this update: Fri 05 Dec 2025 22:00:36 +0000 Manifest next update: Sat 06 Dec 2025 22:00:36 +0000 Files and hashes: 1: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: SXuM+nhV89sWXoFb7sYyXOiKd5+jHPv5be0yiLqy48U=) 2: WG1KaYBil4vEXHxcooJOyBDWYD4.roa (hash: KHIxCFkGSHSfCiqYXlIC0/8nqViYZ1Y0FqW8AdTQIkI=) 3: u0xWet9ZDHMXVkjPrbzs1OmWO1g.roa (hash: ZwDDqnoNXIsm40ptE+7O6BmOJ1pGhObOr/LwRxZDq2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:00:fb:c9:09:9f:18:0f:1e:d9:bd:2e:c5:16:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1 Validity Not Before: Dec 5 22:00:36 2025 GMT Not After : Dec 6 22:00:36 2025 GMT Subject: CN=aecff2f566c2a918ddcdfc1bcd2b15793336488d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b7:aa:9f:86:3a:9a:ab:7e:28:dd:f6:a2:ae: 73:84:eb:db:4a:e9:61:8d:b7:86:aa:08:66:04:6d: e3:ff:d5:0f:ef:dd:12:1d:d9:ba:c8:7b:2a:0f:bd: b9:4b:3d:b5:a1:f8:4f:38:f1:36:18:eb:4d:8e:a6: 4e:13:95:5b:eb:e2:2d:69:d6:90:27:bc:65:ad:f6: 96:a8:75:a5:f5:b0:67:5b:74:ad:89:43:b5:c0:dc: 27:a0:10:02:47:bd:ee:6e:c7:a0:80:bc:af:1f:d4: 1c:05:3d:92:06:07:fa:39:f8:c2:c2:77:5b:07:29: e9:56:cd:cd:58:1d:ce:7f:86:0b:3d:5e:67:67:ab: 47:2a:a5:ed:29:b7:5e:98:75:a6:0b:45:ae:d2:53: ba:bc:60:0f:73:b9:e3:3f:a6:b7:e7:de:b3:fa:3e: 6d:28:45:cf:d0:2c:d9:13:40:e0:f7:c1:6c:f2:4d: 57:bc:73:98:27:d0:79:45:42:71:87:7c:f1:6d:be: 2b:42:07:15:3d:24:1b:59:b0:74:0a:a5:02:db:ec: 5d:f4:ae:e0:df:54:ff:1f:9d:f8:35:e9:e1:dc:82: 1f:44:f6:36:04:d4:bc:f9:ac:9e:c0:8b:9f:9b:ba: 47:8b:e5:78:2b:14:88:ec:df:71:70:10:8b:2d:57: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CF:F2:F5:66:C2:A9:18:DD:CD:FC:1B:CD:2B:15:79:33:36:48:8D X509v3 Authority Key Identifier: keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4d:91:3a:c4:06:ce:ae:0f:43:db:85:dd:be:50:39:5f:ca: 3b:b7:94:0d:ec:e2:b6:bb:c9:65:b0:81:2f:34:a5:81:d8:91: 03:8e:14:08:7b:a8:4c:a5:a9:83:d3:09:71:2f:f9:0c:20:66: cb:58:d1:a2:04:7f:9f:4a:e3:fc:9f:de:04:ff:3e:0c:d3:d8: 4a:4d:ad:bd:4f:c4:48:62:48:d6:c7:b5:b9:d8:3b:a7:80:c0: bc:21:3a:0d:f1:4f:de:ab:cb:d1:36:05:24:54:64:67:cc:43: 54:42:59:0d:12:2e:45:7b:51:7a:c5:80:a9:dd:34:03:fc:05: 79:c0:7e:a8:25:e5:46:54:25:44:4d:a0:fd:33:1f:66:10:ec: be:92:ed:a4:db:08:96:1f:2e:27:18:13:90:d7:bc:2f:4b:de: ca:06:de:a8:f5:f7:a4:ed:a1:2b:45:88:0b:ac:53:e2:dc:b7: 4f:86:23:dc:39:96:42:c6:ab:30:59:5b:da:a6:ff:b0:85:29: 1a:95:e1:51:a1:4a:fe:10:48:96:a1:ad:09:90:34:09:f3:5a: 8a:30:c1:95:f7:53:22:89:2c:de:db:bf:30:aa:93:40:67:95: 8a:3c:4f:d3:3a:3a:ab:c6:f7:2e:12:f7:65:87:dd:9c:cd:7e: 89:e6:7b:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAD7yQmfGA8e2b0uxRa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzM3NzhmYjFiZWMyOGM5OTgyNjUyYWVkZTg2YTAwNGMy NjgyZjEwHhcNMjUxMjA1MjIwMDM2WhcNMjUxMjA2MjIwMDM2WjAzMTEwLwYDVQQD EyhhZWNmZjJmNTY2YzJhOTE4ZGRjZGZjMWJjZDJiMTU3OTMzMzY0ODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbeqn4Y6mqt+KN32oq5zhOvbSulh jbeGqghmBG3j/9UP790SHdm6yHsqD725Sz21ofhPOPE2GOtNjqZOE5Vb6+ItadaQ J7xlrfaWqHWl9bBnW3StiUO1wNwnoBACR73ubseggLyvH9QcBT2SBgf6OfjCwndb BynpVs3NWB3Of4YLPV5nZ6tHKqXtKbdemHWmC0Wu0lO6vGAPc7njP6a3596z+j5t KEXP0CzZE0Dg98Fs8k1XvHOYJ9B5RUJxh3zxbb4rQgcVPSQbWbB0CqUC2+xd9K7g 31T/H534Nenh3IIfRPY2BNS8+ayewIufm7pHi+V4KxSI7N9xcBCLLVd/xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7P8vVmwqkY3c38G80rFXkzNkiNMB8GA1UdIwQY MBaAFApzd4+xvsKMmYJlKu3oagBMJoLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEt NTcwOGY1ODBlMzZhLzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEtNTcwOGY1ODBlMzZh LzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE2ROsQG zq4PQ9uF3b5QOV/KO7eUDezitrvJZbCBLzSlgdiRA44UCHuoTKWpg9MJcS/5DCBm y1jRogR/n0rj/J/eBP8+DNPYSk2tvU/ESGJI1se1udg7p4DAvCE6DfFP3qvL0TYF JFRkZ8xDVEJZDRIuRXtResWAqd00A/wFecB+qCXlRlQlRE2g/TMfZhDsvpLtpNsI lh8uJxgTkNe8L0veygbeqPX3pO2hK0WIC6xT4ty3T4Yj3DmWQsarMFlb2qb/sIUp GpXhUaFK/hBIlqGtCZA0CfNaijDBlfdTIoks3tu/MKqTQGeVijxP0zo6q8b3LhL3 ZYfdnM1+ieZ7sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:45 2025 by rpki-client