This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json) Hash identifier: f5utmgXvvafr1+MSp3S4zvlAhCMozHOFty/X1w9N/is= Subject key identifier: 42:5F:FF:68:C8:D3:A6:98:17:DD:9F:3B:1B:25:FF:81:D5:26:1B:77 Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75 Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775 Certificate serial: 019AF20928D5A27C759D27700344292C9373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: DPZDlwC5lvIBjZjDv4jWEsMDlMI.roa (hash: JSJ9xva93NHEmD/GiUVFRsLxBb1tpR6rl5zNqgBI5EE=) 2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: VClTpWSZhCcOHfcwalLS2IUyiJ/Jwn/XUN7rmB9K9oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:28:d5:a2:7c:75:9d:27:70:03:44:29:2c:93:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=425fff68c8d3a69817dd9f3b1b25ff81d5261b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:7a:6b:a9:42:06:13:fd:90:b1:48:b6:b2: 0f:25:09:a9:ff:30:77:b2:d1:b9:19:ff:82:09:b1: 4b:df:ae:87:3b:14:a5:e3:6c:62:2d:7b:91:36:a9: 8b:ce:1a:17:c3:55:e1:2d:70:63:3d:6e:ff:46:14: 1d:15:c5:ce:cc:59:82:fb:df:53:96:de:a1:d7:52: 44:46:6d:c2:e3:5a:e7:c9:e2:ff:31:30:55:67:ec: 9e:f0:f9:40:39:bd:57:21:4d:8f:39:33:ea:f2:30: a2:53:f5:94:92:cd:a8:3b:85:7c:cf:0c:47:26:80: 76:db:69:31:40:5a:1b:d8:6c:7e:12:d7:d0:1b:cc: d1:82:95:39:6b:37:61:3e:17:cd:7a:9a:29:79:2c: 14:8f:4a:d6:c9:e5:8f:7f:53:f3:3f:f7:8a:5e:fc: 55:eb:e0:95:31:df:d7:dd:a2:48:e8:d0:b0:e6:d9: 86:e9:75:9c:d5:e7:e6:cf:21:b6:98:07:aa:66:4e: 49:96:3a:97:49:94:b0:1e:71:4b:24:24:3b:db:c2: 19:61:ca:4d:15:bf:72:d4:f5:6c:c5:4b:24:aa:f9: 02:21:65:0f:d1:d8:38:a7:f3:8c:85:c4:ba:3f:1c: e7:e2:4b:ba:93:5f:4e:06:16:02:fe:d5:92:97:b9: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:FF:68:C8:D3:A6:98:17:DD:9F:3B:1B:25:FF:81:D5:26:1B:77 X509v3 Authority Key Identifier: keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8f:b1:76:d1:55:62:36:fe:01:fd:2e:77:9b:ba:fb:2a:e8: 90:9a:95:c7:2b:cc:42:20:bf:cf:e6:8d:d2:54:8a:9b:59:df: e5:c2:4f:99:28:e2:55:d4:f0:07:0c:fe:77:ac:e9:95:a5:51: 91:78:98:da:a6:40:32:66:1e:f2:cf:78:1c:3c:77:40:1d:72: 88:07:a4:11:9c:27:90:28:a6:f5:2c:fc:2f:6d:eb:9f:e4:d6: ac:41:19:e0:b9:52:ea:8e:39:ad:04:d9:f5:8a:fe:cb:1a:80: 2a:4c:33:ae:45:99:4d:7f:dd:c5:3f:9d:73:6d:cf:b6:4e:6f: bb:1e:3d:6e:95:07:24:02:6b:50:94:75:da:05:fe:73:cf:80: 2a:cf:26:fe:2e:0f:0d:85:4b:78:33:e0:ec:23:66:f5:55:b9: 4f:b4:38:25:d5:7b:60:71:89:c4:bb:29:a2:4f:5a:75:32:91: ab:0b:ba:fa:b1:12:21:f6:d0:fa:44:d5:03:8e:55:d1:d5:33: 6b:08:30:34:c6:9c:f1:b8:d3:ff:f4:02:8c:b8:47:23:eb:41: d6:17:a7:d3:b7:68:84:ff:31:0b:f2:41:fa:9f:d5:47:ed:64: 42:7c:80:05:90:a4:64:d8:ae:5d:45:9e:8b:ba:32:12:2f:4a: 05:7c:97:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSjVonx1nSdwA0QpLJNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWU3NWRiY2NlNWZjZGQ5MWQ4YTk5ZTVhMWIyYzk5NWI4 MTI3NzUwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg0MjVmZmY2OGM4ZDNhNjk4MTdkZDlmM2IxYjI1ZmY4MWQ1MjYxYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBt6a6lCBhP9kLFItrIPJQmp/zB3 stG5Gf+CCbFL366HOxSl42xiLXuRNqmLzhoXw1XhLXBjPW7/RhQdFcXOzFmC+99T lt6h11JERm3C41rnyeL/MTBVZ+ye8PlAOb1XIU2POTPq8jCiU/WUks2oO4V8zwxH JoB222kxQFob2Gx+EtfQG8zRgpU5azdhPhfNepopeSwUj0rWyeWPf1PzP/eKXvxV 6+CVMd/X3aJI6NCw5tmG6XWc1efmzyG2mAeqZk5JljqXSZSwHnFLJCQ728IZYcpN Fb9y1PVsxUskqvkCIWUP0dg4p/OMhcS6Pxzn4ku6k19OBhYC/tWSl7m6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJf/2jI06aYF92fOxsl/4HVJht3MB8GA1UdIwQY MBaAFHBeddvM5fzdkdipnlobLJlbgSd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWY0NDgtODgwOC00YTJmLWJmZmEt ZjhiNDhiYWNjZDliLzEvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jMWY0NDgtODgwOC00YTJmLWJmZmEtZjhiNDhiYWNjZDli LzEvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4+xdtFV Yjb+Af0ud5u6+yrokJqVxyvMQiC/z+aN0lSKm1nf5cJPmSjiVdTwBwz+d6zplaVR kXiY2qZAMmYe8s94HDx3QB1yiAekEZwnkCim9Sz8L23rn+TWrEEZ4LlS6o45rQTZ 9Yr+yxqAKkwzrkWZTX/dxT+dc23Ptk5vux49bpUHJAJrUJR12gX+c8+AKs8m/i4P DYVLeDPg7CNm9VW5T7Q4JdV7YHGJxLspok9adTKRqwu6+rESIfbQ+kTVA45V0dUz awgwNMac8bjT//QCjLhHI+tB1hen07dohP8xC/JB+p/VR+1kQnyABZCkZNiuXUWe i7oyEi9KBXyXaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:01 2025 by rpki-client