This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json) Hash identifier: h6VfzrWVEk2JcE+iHUuZHQJ/RQFg0+8Pglak+aKkzSI= Subject key identifier: 6C:B6:A0:CB:F5:B1:C0:B3:DC:19:85:98:8B:62:4B:4E:EA:89:59:21 Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Certificate serial: 019AF5AF1E191347795761556BF64DD0DC8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 22:01:25 +0000 Manifest this update: Sat 06 Dec 2025 22:01:25 +0000 Manifest next update: Sun 07 Dec 2025 22:01:25 +0000 Files and hashes: 1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=) 2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=) 3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: lFZ9YFZlCeIeBm3Y5opVYtYhNhwa0HwWU6k9qbbzyY8=) 4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:1e:19:13:47:79:57:61:55:6b:f6:4d:d0:dc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Validity Not Before: Dec 6 22:01:25 2025 GMT Not After : Dec 7 22:01:25 2025 GMT Subject: CN=6cb6a0cbf5b1c0b3dc1985988b624b4eea895921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0f:2d:8a:a2:ac:e6:de:87:61:02:2b:bc:94: 00:10:cf:ef:7a:04:b4:83:ca:c1:51:e8:a8:36:a1: 18:dc:5c:a6:ec:f4:81:80:03:2c:dd:56:ae:aa:37: d1:9d:66:eb:e7:18:8f:ff:87:be:b8:44:35:48:0f: 33:d2:ee:d0:a6:cf:2a:39:88:93:98:ec:d9:de:f9: 07:0d:0b:05:0a:39:f2:96:78:4f:d1:6a:1c:66:75: 0d:47:4e:51:63:5a:3b:af:56:25:78:a5:43:be:b8: c9:16:ec:30:0b:a6:43:81:6f:a9:21:61:76:9b:69: 07:eb:95:6c:5e:07:0c:b9:2e:67:71:0d:d7:79:94: d0:f1:b9:99:d8:07:08:e5:5d:01:38:e2:de:8d:f2: 3c:21:7b:c1:d4:b0:0a:71:19:74:86:fe:27:f4:9d: 34:84:f0:44:89:87:f1:0d:6d:77:5a:86:44:b0:ba: 80:c4:b0:b1:b2:a2:8b:b1:e3:21:f0:d6:7b:5f:17: 63:53:4e:8d:4a:ef:00:49:5c:95:4a:00:76:07:38: 31:a8:84:bb:41:5b:d1:a1:9a:86:d4:f4:3a:60:a6: 5b:2a:81:88:e5:7e:92:c8:d8:ad:9d:ba:1a:9a:fa: ea:d3:18:26:ee:da:0a:dc:20:c4:16:06:3e:ea:64: fb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B6:A0:CB:F5:B1:C0:B3:DC:19:85:98:8B:62:4B:4E:EA:89:59:21 X509v3 Authority Key Identifier: keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d4:7d:19:cd:1a:d3:9a:49:e8:2a:d6:a9:36:fa:dd:c2:f4: c3:af:52:56:52:0f:a9:d1:1b:ee:59:fc:2a:05:98:0a:c8:23: 2b:8a:30:a6:5c:66:b9:11:0f:eb:c8:a8:b1:96:5c:91:88:3a: 96:57:a0:8a:8e:6c:a9:a4:f4:fd:a7:4b:ad:83:1f:65:0e:ec: 25:14:77:b9:ba:16:d2:5e:ca:4f:e1:9b:43:01:4e:2b:be:10: ce:18:59:29:15:38:e4:6a:e1:35:12:1b:88:ac:a1:36:77:6e: 79:58:1c:e4:ba:57:ae:d4:92:a8:f9:37:0d:40:58:9b:95:0d: 12:4f:de:d4:e2:49:12:ab:b7:24:25:32:d8:21:e2:84:69:c5: 3a:82:5c:1b:ae:7b:e3:f5:b2:ed:8c:e7:9b:0a:dd:52:71:fe: 63:50:0d:df:c4:53:ba:22:6d:a5:59:28:4f:fc:c9:53:42:7c: d6:60:05:da:d5:11:7a:1d:5c:d9:b4:3e:f6:77:5c:08:43:c8: c2:68:bd:9f:89:6d:00:b2:30:3f:97:e4:c1:f9:67:d3:39:c4: 2e:8f:cf:00:21:b7:6d:77:38:8e:e8:25:05:eb:60:19:e7:8c: 18:63:f9:6d:49:65:db:4b:96:30:df:85:95:ed:cc:8a:23:fa: f5:04:98:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rx4ZE0d5V2FVa/ZN0NyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2 NjQzNDQwHhcNMjUxMjA2MjIwMTI1WhcNMjUxMjA3MjIwMTI1WjAzMTEwLwYDVQQD Eyg2Y2I2YTBjYmY1YjFjMGIzZGMxOTg1OTg4YjYyNGI0ZWVhODk1OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw8tiqKs5t6HYQIrvJQAEM/vegS0 g8rBUeioNqEY3Fym7PSBgAMs3VauqjfRnWbr5xiP/4e+uEQ1SA8z0u7Qps8qOYiT mOzZ3vkHDQsFCjnylnhP0WocZnUNR05RY1o7r1YleKVDvrjJFuwwC6ZDgW+pIWF2 m2kH65VsXgcMuS5ncQ3XeZTQ8bmZ2AcI5V0BOOLejfI8IXvB1LAKcRl0hv4n9J00 hPBEiYfxDW13WoZEsLqAxLCxsqKLseMh8NZ7XxdjU06NSu8ASVyVSgB2BzgxqIS7 QVvRoZqG1PQ6YKZbKoGI5X6SyNitnboamvrq0xgm7toK3CDEFgY+6mT7NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy2oMv1scCz3BmFmItiS07qiVkhMB8GA1UdIwQY MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt NzZiMDMyNWMzYjA3LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3 LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNR9Gc0a 05pJ6CrWqTb63cL0w69SVlIPqdEb7ln8KgWYCsgjK4owplxmuREP68iosZZckYg6 llegio5sqaT0/adLrYMfZQ7sJRR3uboW0l7KT+GbQwFOK74QzhhZKRU45GrhNRIb iKyhNndueVgc5LpXrtSSqPk3DUBYm5UNEk/e1OJJEqu3JCUy2CHihGnFOoJcG657 4/Wy7YznmwrdUnH+Y1AN38RTuiJtpVkoT/zJU0J81mAF2tUReh1c2bQ+9ndcCEPI wmi9n4ltALIwP5fkwfln0znELo/PACG3bXc4juglBetgGeeMGGP5bUll20uWMN+F le3MiiP69QSYIA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:44 2025 by rpki-client