This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json) Hash identifier: 8lJLBcmNACtYCjUsE3nh/pGNAjQiYKMhJzgf3gePzqE= Subject key identifier: AB:FA:4E:2E:1A:F9:13:2A:3C:A8:ED:0C:31:ED:DF:46:17:57:E5:0E Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Certificate serial: 019AF0BF8201776FFF3607AFA857A16DD0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft Manifest number: 1768 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=) 2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: 9tdYMVUxbQOtgbkX5e6VHZrOqfZsnhre7Cf6QaflpNM=) 3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:82:01:77:6f:ff:36:07:af:a8:57:a1:6d:d0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461 Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=abfa4e2e1af9132a3ca8ed0c31eddf461757e50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:2a:a5:56:d4:84:08:af:74:a9:17:60:42: 69:e9:1b:b1:a8:11:f4:27:37:b2:e5:9b:b3:50:65: ca:9f:4b:67:9a:3b:7c:ca:0a:ec:a0:59:f4:35:d5: 02:8f:ea:95:74:1c:8e:a9:81:44:d8:c8:0a:c2:da: 97:95:c6:3b:7c:e6:66:77:27:d9:22:f0:1d:fc:30: 5f:9d:c9:29:cb:e9:b6:b2:16:75:10:18:28:1f:68: d6:64:69:ac:c1:63:c3:ad:38:8f:02:e3:da:45:74: e4:35:53:ab:6b:96:f7:fa:4b:d6:71:bf:ca:8d:ed: 0e:74:2e:e6:20:9f:16:35:0c:0a:f6:2c:47:b6:22: 01:09:74:25:10:42:83:0d:69:27:2b:b4:5e:78:a4: d6:f4:bf:f9:f7:6e:4d:25:2c:4c:4c:19:6e:0e:aa: fd:15:82:6f:ce:e7:02:d9:c3:ea:09:bf:5d:ae:ee: 24:ea:54:13:be:54:08:66:12:28:8a:09:5f:a0:d4: e9:24:0d:1e:7a:79:0e:f3:1e:8b:d1:f5:b1:c2:45: 07:1c:5c:6d:58:32:83:d9:d8:42:89:42:d7:de:7a: ab:90:fe:1b:8c:d2:cb:2c:b0:34:84:20:f6:55:90: be:91:2e:f1:64:27:0e:15:f1:4f:55:ca:c2:2c:df: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:4E:2E:1A:F9:13:2A:3C:A8:ED:0C:31:ED:DF:46:17:57:E5:0E X509v3 Authority Key Identifier: keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:98:74:54:95:9b:a4:ec:c8:9a:16:b8:63:d1:32:e6:71:a4: 65:27:f2:d8:6d:76:6f:d9:ff:00:21:d1:26:55:0c:20:ef:b0: 48:e5:18:c3:e0:cf:0f:e7:68:3e:62:c0:cc:7e:62:40:ad:d8: 8b:75:8c:81:2c:05:df:ea:0b:14:3a:0c:c2:b6:61:1d:21:ad: e8:50:91:00:39:74:ec:1b:cc:c0:1d:95:aa:22:6c:da:09:e3: 33:3f:d2:eb:42:e8:82:52:98:3d:aa:58:35:3b:b0:9b:63:3d: 65:34:0d:43:76:75:46:cb:72:42:ed:bc:ce:23:50:ad:62:77: f9:f7:d8:8e:04:12:ee:5f:0e:9d:8d:01:1b:4f:28:db:0a:a0: 60:5e:c2:9f:54:fd:dc:64:37:1c:48:ca:1d:3c:92:44:e7:8f: 31:2a:ee:0c:a7:79:0d:0e:27:51:ab:dd:6a:a7:18:4b:8d:2d: 08:d9:41:2c:33:a5:d8:97:6b:5a:54:a1:49:57:a5:31:16:f8: dc:09:bb:1b:5d:b8:c4:c3:6e:7c:f1:1a:28:f8:ab:30:af:21: 04:b2:0c:80:f6:74:c3:28:13:88:f9:19:de:e3:83:da:14:30: 01:95:ff:53:aa:1a:2e:55:86:53:3f:2c:d1:fc:56:c4:a6:20: c2:b5:6b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4IBd2//NgevqFehbdDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMjgyYTc5NGIzZjdhYjRjZDZmZWI2YzVmZDZiM2QyNTZh ZmM0NjEwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EyhhYmZhNGUyZTFhZjkxMzJhM2NhOGVkMGMzMWVkZGY0NjE3NTdlNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WMqpVbUhAivdKkXYEJp6RuxqBH0 Jzey5ZuzUGXKn0tnmjt8ygrsoFn0NdUCj+qVdByOqYFE2MgKwtqXlcY7fOZmdyfZ IvAd/DBfnckpy+m2shZ1EBgoH2jWZGmswWPDrTiPAuPaRXTkNVOra5b3+kvWcb/K je0OdC7mIJ8WNQwK9ixHtiIBCXQlEEKDDWknK7ReeKTW9L/5925NJSxMTBluDqr9 FYJvzucC2cPqCb9dru4k6lQTvlQIZhIoiglfoNTpJA0eenkO8x6L0fWxwkUHHFxt WDKD2dhCiULX3nqrkP4bjNLLLLA0hCD2VZC+kS7xZCcOFfFPVcrCLN+N6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv6Ti4a+RMqPKjtDDHt30YXV+UOMB8GA1UdIwQY MBaAFPwoKnlLP3q0zW/rbF/Ws9JWr8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzIt ZDMzMjZjNTliY2QyLzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lNDg1ZTEtYTY1Zi00M2Q0LWI1NzItZDMzMjZjNTliY2Qy LzEvX0NncWVVc19lclROYi10c1g5YXowbGF2eEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJh0VJWb pOzImha4Y9Ey5nGkZSfy2G12b9n/ACHRJlUMIO+wSOUYw+DPD+doPmLAzH5iQK3Y i3WMgSwF3+oLFDoMwrZhHSGt6FCRADl07BvMwB2VqiJs2gnjMz/S60LoglKYPapY NTuwm2M9ZTQNQ3Z1RstyQu28ziNQrWJ3+ffYjgQS7l8OnY0BG08o2wqgYF7Cn1T9 3GQ3HEjKHTySROePMSruDKd5DQ4nUavdaqcYS40tCNlBLDOl2JdrWlShSVelMRb4 3Am7G124xMNufPEaKPirMK8hBLIMgPZ0wygTiPkZ3uOD2hQwAZX/U6oaLlWGUz8s 0fxWxKYgwrVrKA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:43 2025 by rpki-client