This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft File: cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft (raw, json) Hash identifier: 7gnM+ajOjjdy2vuWGzx1qLIKfkLl8as2ucw7lAEH2lk= Subject key identifier: ED:5A:37:FC:C2:DE:E6:23:3E:A8:4B:84:93:67:CE:55:97:AD:AA:C0 Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 Certificate issuer: /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Certificate serial: 019AF1D21B0B90E4D15CAC63D739B99FC484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: MTFqs6mA7KUnw1QvYWNmKm0YqCY.roa (hash: q+PYR9H4ojp55utjjPF/ZBfxUxgnsX2OKoLSnPQgWVE=) 2: cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl (hash: MAwEcVW1Iy5ubKfWkaNfDlHL9L8LU2+E2LPjzzXV1m8=) 3: fs0ZmJI91FgrAyS_qaO4SZnCnx4.roa (hash: ycybeagUIzrtezPLqz+FSenm/c5GMC1YyzGUnHiNwd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1b:0b:90:e4:d1:5c:ac:63:d7:39:b9:9f:c4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01 Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=ed5a37fcc2dee6233ea84b849367ce5597adaac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:ba:40:d9:a9:02:65:bb:23:e6:86:76:b0: 58:85:b5:20:c2:df:b8:91:a2:8d:80:86:44:fb:79: 84:4e:f1:6e:06:34:4c:b6:72:d7:9f:c8:ee:9a:cd: f5:af:aa:c8:73:f4:b0:38:dd:17:b4:a5:ca:61:0a: 24:96:19:0b:8a:b3:bf:cd:bf:e8:70:2b:d7:c3:cd: 47:91:f8:e6:1a:01:6b:2c:c6:71:19:17:d3:11:5f: fc:29:86:0b:dd:b7:cb:c4:9a:9f:2f:be:de:fd:fe: 8a:56:e5:16:03:af:2a:e4:ae:b6:8a:8d:a1:85:41: 20:5d:b0:06:84:af:4a:34:f7:4e:b3:56:12:08:17: fd:de:be:4f:a3:78:eb:ba:fe:17:ee:cc:9b:af:b1: a5:01:53:91:7c:03:01:ee:53:62:77:f5:60:38:eb: 6e:98:74:bd:a4:1e:19:60:c3:5d:84:6e:2f:4f:16: 01:66:39:4d:c5:77:37:c3:0f:d7:e0:dc:b0:19:e9: 76:3f:12:2c:13:12:26:35:74:2a:70:20:5d:ea:df: c1:e1:77:e9:58:eb:7a:f7:f8:fe:80:5a:96:2a:88: 54:b2:f3:c1:ed:74:20:9c:4f:0f:9c:da:30:b9:01: f8:2f:39:87:45:cb:77:ed:63:4d:91:dd:59:28:cd: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5A:37:FC:C2:DE:E6:23:3E:A8:4B:84:93:67:CE:55:97:AD:AA:C0 X509v3 Authority Key Identifier: keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:96:c4:49:d0:fd:df:06:c1:95:9f:22:8e:c4:10:af:62:83: cf:5c:7c:7e:ca:b7:c0:a8:20:8d:f5:5b:a2:1c:ab:12:3f:e9: 5d:bb:50:25:be:bc:e2:ca:cb:4f:2f:89:17:f2:f8:f4:b7:9c: 99:d4:6e:c9:d5:88:7a:b4:f9:0c:cb:c1:39:2e:73:a0:eb:26: 0f:4a:d2:36:62:cb:0c:ac:cd:a4:40:c4:99:57:ce:68:94:45: 28:f4:78:e7:19:4c:95:4f:eb:47:19:06:20:9e:fa:09:e6:7d: f1:0e:af:7e:8c:b6:31:57:b6:eb:46:77:09:dc:88:35:73:8e: 0c:14:44:56:b3:be:d0:72:fb:0c:d2:2a:5c:c4:ec:5d:a0:4b: cc:b2:74:83:e1:f4:f6:04:c5:cd:ad:39:ce:df:74:15:6e:cf: ca:85:da:83:1b:89:ef:62:31:b4:2c:a0:31:62:3d:97:c0:3f: cb:7c:4b:e0:8e:30:11:82:19:7c:20:d1:0e:62:7f:7a:bc:37: c7:2b:d1:60:30:17:5b:74:00:df:67:d0:16:d0:5f:e8:79:11: df:46:c3:dc:02:5a:5b:0f:b1:dd:e6:4c:50:ae:71:7b:ee:f6: f2:3c:44:6c:2b:ab:d2:5c:31:2d:dc:a9:c0:17:d0:6b:92:a6: 25:81:cb:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hsLkOTRXKxj1zm5n8SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2I5NDA0YTBjNDMyMjNhZGRjOGVhMWIxMGFiNzRiNzc3 YTJhMDEwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD EyhlZDVhMzdmY2MyZGVlNjIzM2VhODRiODQ5MzY3Y2U1NTk3YWRhYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7q6QNmpAmW7I+aGdrBYhbUgwt+4 kaKNgIZE+3mETvFuBjRMtnLXn8jums31r6rIc/SwON0XtKXKYQoklhkLirO/zb/o cCvXw81HkfjmGgFrLMZxGRfTEV/8KYYL3bfLxJqfL77e/f6KVuUWA68q5K62io2h hUEgXbAGhK9KNPdOs1YSCBf93r5Po3jruv4X7sybr7GlAVORfAMB7lNid/VgOOtu mHS9pB4ZYMNdhG4vTxYBZjlNxXc3ww/X4NywGel2PxIsExImNXQqcCBd6t/B4Xfp WOt69/j+gFqWKohUsvPB7XQgnE8PnNowuQH4LzmHRct37WNNkd1ZKM148QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1aN/zC3uYjPqhLhJNnzlWXrarAMB8GA1UdIwQY MBaAFHE7lASgxDIjrdyOobEKt0t3eioBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUt N2E1MzFkNDgzNzQ3LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83ZWM3YTItODMxOC00NjJmLTk2NmUtN2E1MzFkNDgzNzQ3 LzEvY1R1VUJLREVNaU90M0k2aHNRcTNTM2Q2S2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJbESdD9 3wbBlZ8ijsQQr2KDz1x8fsq3wKggjfVbohyrEj/pXbtQJb684srLTy+JF/L49Lec mdRuydWIerT5DMvBOS5zoOsmD0rSNmLLDKzNpEDEmVfOaJRFKPR45xlMlU/rRxkG IJ76CeZ98Q6vfoy2MVe260Z3CdyINXOODBREVrO+0HL7DNIqXMTsXaBLzLJ0g+H0 9gTFza05zt90FW7PyoXagxuJ72IxtCygMWI9l8A/y3xL4I4wEYIZfCDRDmJ/erw3 xyvRYDAXW3QA32fQFtBf6HkR30bD3AJaWw+x3eZMUK5xe+728jxEbCur0lwxLdyp wBfQa5KmJYHLJw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:13 2025 by rpki-client