This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft File: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft (raw, json) Hash identifier: FQ7X7rMTq7CV4mEtkuhpeTwDG8EOr7gjrqHdxapQNCc= Subject key identifier: 52:D8:8C:9D:69:97:2E:91:0D:D5:2F:A6:4D:93:2E:99:8F:70:AA:7F Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d Certificate serial: 019AF50B77B099D492A5494776A72395FFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 19:02:40 +0000 Manifest this update: Sat 06 Dec 2025 19:02:40 +0000 Manifest next update: Sun 07 Dec 2025 19:02:40 +0000 Files and hashes: 1: Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl (hash: jhReAH8yzJfhZJdhWH1Pl0RkhxAvje8SzrN4Bn0rlK0=) 2: rbzHYHanwggYI2O2PyN_ccDQ8To.roa (hash: ZzfYYIwcl7wz/PiBDA2nkdbr3LCq3ECUyDagAbAOmJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:77:b0:99:d4:92:a5:49:47:76:a7:23:95:ff:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d Validity Not Before: Dec 6 19:02:40 2025 GMT Not After : Dec 7 19:02:40 2025 GMT Subject: CN=52d88c9d69972e910dd52fa64d932e998f70aa7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:af:54:4f:65:10:fb:d4:de:f6:ba:7f:b6: f2:cf:54:d5:95:af:fa:4d:3b:c5:6f:b8:6c:6c:9d: 89:ad:83:16:46:51:db:de:f3:db:14:c8:e3:a7:90: 77:55:58:e8:33:b0:93:77:ea:4f:93:3b:d0:99:7f: b9:a2:21:06:15:7f:83:74:dd:24:2b:7e:cc:63:6c: 88:dc:30:bc:64:b5:2f:74:da:af:21:e1:4b:62:4a: 6c:8f:fd:f5:95:5e:47:9b:4d:00:43:b8:bb:cc:20: 10:36:39:af:55:43:5a:0a:71:85:2f:72:04:16:26: d8:cd:8d:58:a0:45:fe:85:26:70:b1:c2:4c:92:18: 4a:3e:dc:5b:5e:0b:6f:05:da:bd:8c:0d:0d:73:8d: 2d:4c:04:18:85:eb:09:0a:28:e6:b5:bb:b9:5e:c9: 14:60:0d:f6:29:8e:d4:5f:c1:79:7a:ae:59:7d:64: 8d:f8:1f:94:cc:27:7a:b9:be:ea:f1:ad:58:5e:9b: 0c:a1:aa:7c:b3:13:78:e4:3a:43:60:cb:49:ca:a1: 91:b7:6e:90:47:2f:15:a5:a6:34:d8:d5:87:83:81: 75:2c:87:20:e9:2c:94:c8:f2:e1:37:6c:57:0b:ff: 1c:13:72:e2:6c:c7:a3:e7:8b:cd:0c:82:26:0f:f3: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:8C:9D:69:97:2E:91:0D:D5:2F:A6:4D:93:2E:99:8F:70:AA:7F X509v3 Authority Key Identifier: keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:73:8f:53:f9:6c:3e:75:5d:83:ff:f9:0e:87:b3:00:22:f6: 33:81:6f:4a:22:4b:2a:44:aa:1e:b0:b9:d4:25:bb:75:f7:c7: fa:08:f1:57:50:ee:0f:74:e9:94:2f:c6:80:8c:82:78:52:c0: 49:6b:e5:3e:d8:1c:f1:b6:06:c5:a4:3b:e5:8c:9d:96:bb:25: 13:a5:7f:9f:eb:8d:09:21:8e:90:79:2e:85:90:40:a3:97:7e: a5:6c:bb:6d:a0:ba:13:7a:39:13:9b:be:85:8c:3d:fa:d5:6b: d5:14:83:f3:8f:40:2b:4d:e7:ba:16:38:5d:c3:0b:21:5d:37: 44:3d:f9:d9:dc:e9:27:d1:1c:1f:f4:73:10:31:47:2f:54:6c: dd:80:09:75:b1:7b:04:c8:ec:4e:b7:71:7f:ec:31:cb:f0:6d: 66:0e:75:57:38:11:01:cc:86:78:ba:b2:9a:6a:fc:86:40:4e: a5:6d:af:3d:ac:e3:2f:dc:bc:7e:3e:0d:60:37:d4:6c:80:dc: c5:0b:ee:0f:87:4c:91:2d:12:d7:f2:cb:2f:e5:51:34:a5:82: e7:e5:7d:e7:92:df:2f:f4:7c:1f:79:c9:24:0d:67:13:d6:1b: fb:f7:58:ac:43:f6:36:b5:58:e1:d2:17:b6:9a:83:29:da:f4: 67:45:b1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3ewmdSSpUlHdqcjlf/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZmVjZDcwNzFiNzI3ZGIzZDEyZjA5ZWZiYjQ1NGUwNGQ0 Zjc0M2QwHhcNMjUxMjA2MTkwMjQwWhcNMjUxMjA3MTkwMjQwWjAzMTEwLwYDVQQD Eyg1MmQ4OGM5ZDY5OTcyZTkxMGRkNTJmYTY0ZDkzMmU5OThmNzBhYTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfavVE9lEPvU3va6f7byz1TVla/6 TTvFb7hsbJ2JrYMWRlHb3vPbFMjjp5B3VVjoM7CTd+pPkzvQmX+5oiEGFX+DdN0k K37MY2yI3DC8ZLUvdNqvIeFLYkpsj/31lV5Hm00AQ7i7zCAQNjmvVUNaCnGFL3IE FibYzY1YoEX+hSZwscJMkhhKPtxbXgtvBdq9jA0Nc40tTAQYhesJCijmtbu5XskU YA32KY7UX8F5eq5ZfWSN+B+UzCd6ub7q8a1YXpsMoap8sxN45DpDYMtJyqGRt26Q Ry8VpaY02NWHg4F1LIcg6SyUyPLhN2xXC/8cE3LibMej54vNDIImD/O1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLYjJ1ply6RDdUvpk2TLpmPcKp/MB8GA1UdIwQY MBaAFAn+zXBxtyfbPRLwnvu0VOBNT3Q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEt NWEyMDZlOGIxMzY5LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS83MmUzYTEtOTA2Yy00NDhiLTk4ZGEtNWEyMDZlOGIxMzY5 LzEvQ2Y3TmNIRzNKOXM5RXZDZS03UlU0RTFQZEQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknOPU/ls PnVdg//5DoezACL2M4FvSiJLKkSqHrC51CW7dffH+gjxV1DuD3TplC/GgIyCeFLA SWvlPtgc8bYGxaQ75YydlrslE6V/n+uNCSGOkHkuhZBAo5d+pWy7baC6E3o5E5u+ hYw9+tVr1RSD849AK03nuhY4XcMLIV03RD352dzpJ9EcH/RzEDFHL1Rs3YAJdbF7 BMjsTrdxf+wxy/BtZg51VzgRAcyGeLqymmr8hkBOpW2vPazjL9y8fj4NYDfUbIDc xQvuD4dMkS0S1/LLL+VRNKWC5+V955LfL/R8H3nJJA1nE9Yb+/dYrEP2NrVY4dIX tpqDKdr0Z0WxHw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:41 2025 by rpki-client