This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json) Hash identifier: 1o293OidWttzADFshHHau6LokAF2WFbp1/do1Us74dY= Subject key identifier: C2:B5:2A:3D:FB:E1:2F:78:BF:6B:52:16:9C:8A:80:B6:B6:55:05:FB Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27 Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27 Certificate serial: 019AF12E36F22A6797AF7F6E9865CADBCC68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: A1yspEzrRjpmcSZD03i9322xPNH22BRAqhpNyDCD2TM=) 2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:36:f2:2a:67:97:af:7f:6e:98:65:ca:db:cc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27 Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=c2b52a3dfbe12f78bf6b52169c8a80b6b65505fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c1:b5:0d:4a:4b:e9:f6:bb:4b:27:94:fa:11: 3a:68:a4:df:f7:c5:3a:49:32:63:d8:06:56:0d:d4: 7a:a5:8f:33:6d:26:5e:bd:5e:76:fe:4e:0b:a5:82: b4:4c:4f:8a:f0:df:26:94:f0:56:07:f4:03:db:6e: c0:5e:de:7d:6f:9c:7a:c0:bf:66:fd:21:52:cc:9a: 8a:29:66:b8:c9:63:4d:77:9b:4c:b1:4d:3b:2c:c6: e6:16:02:47:82:8e:53:f5:71:75:94:ed:24:cc:2b: b3:50:6d:df:90:2f:7b:03:8c:d3:6f:1c:fc:3c:a2: df:1e:36:09:7f:b0:38:f4:3e:af:e5:13:73:40:64: bd:ab:83:8f:9e:e5:68:21:e9:6f:c7:9e:fc:20:56: 75:14:bb:5f:7d:93:31:ec:0c:21:aa:a2:98:b0:fb: 9f:69:25:07:56:74:02:f6:88:26:67:27:b0:b5:2d: f2:73:b5:0f:02:12:03:7f:fe:71:02:16:50:a1:f8: 91:60:58:47:50:60:95:79:0f:66:2e:59:74:a9:50: 15:d7:7f:61:bb:40:58:36:08:73:fa:36:65:5c:59: fd:9a:d7:d8:0c:b9:48:a7:b6:fe:36:bb:2e:2b:83: 11:db:fd:f5:a1:16:38:4a:52:c7:b4:43:b5:3c:2b: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:2A:3D:FB:E1:2F:78:BF:6B:52:16:9C:8A:80:B6:B6:55:05:FB X509v3 Authority Key Identifier: keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:aa:f7:6e:e6:cd:52:55:f3:61:19:f8:b3:0c:7f:a5:94:51: 44:52:f8:b3:1f:63:a6:06:e4:fc:db:b1:3d:3a:20:01:59:82: a5:6a:8d:e5:fc:46:65:d3:e9:b0:ca:08:94:5c:f4:e2:3d:14: 5d:65:83:2f:7f:95:5f:4c:72:bb:12:87:28:38:d3:41:55:e8: 02:f8:39:c8:24:a7:2c:37:e5:69:03:30:d4:01:dc:0f:29:4e: 6f:74:ad:aa:e5:ff:55:05:f8:ad:7e:f2:b6:4c:aa:77:1d:0b: ec:e2:52:ae:2d:17:5b:4d:01:bf:75:f2:fe:9a:da:fd:7a:a6: 86:e7:56:79:be:9d:7b:57:36:50:80:1e:cd:e8:cf:cb:91:e2: dc:04:d0:85:f8:63:22:0d:47:3f:74:39:c0:c4:b4:3f:a2:f1: 7d:9a:7a:94:50:c3:c9:fd:3a:9b:42:8b:32:00:61:5f:cd:be: e2:e5:03:eb:51:3d:b4:65:d7:10:4b:c0:1c:93:cc:dc:85:ef: fe:06:b1:65:3f:28:11:e5:8b:98:73:04:42:b3:38:3a:b5:99: 8f:cf:db:1d:7f:14:e4:72:cb:27:55:64:b9:3d:69:6e:03:1e: b7:36:a6:ac:90:7c:61:39:75:d9:6e:bc:30:a7:94:64:5c:8d: 69:3d:60:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjbyKmeXr39umGXK28xoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWEzYmIxMTc1MzhkYjZkYjljNWNmZDVhNzk0YmYzZGY2 OTdjMjcwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD EyhjMmI1MmEzZGZiZTEyZjc4YmY2YjUyMTY5YzhhODBiNmI2NTUwNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sG1DUpL6fa7SyeU+hE6aKTf98U6 STJj2AZWDdR6pY8zbSZevV52/k4LpYK0TE+K8N8mlPBWB/QD227AXt59b5x6wL9m /SFSzJqKKWa4yWNNd5tMsU07LMbmFgJHgo5T9XF1lO0kzCuzUG3fkC97A4zTbxz8 PKLfHjYJf7A49D6v5RNzQGS9q4OPnuVoIelvx578IFZ1FLtffZMx7AwhqqKYsPuf aSUHVnQC9ogmZyewtS3yc7UPAhIDf/5xAhZQofiRYFhHUGCVeQ9mLll0qVAV139h u0BYNghz+jZlXFn9mtfYDLlIp7b+NrsuK4MR2/31oRY4SlLHtEO1PCsixwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMK1Kj374S94v2tSFpyKgLa2VQX7MB8GA1UdIwQY MBaAFHBaO7EXU42225xc/Vp5S/PfaXwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2Ut Nzc2NjAzNzFhMWVjLzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zZjdhYjgtNmIzOS00MzYyLWEyN2UtNzc2NjAzNzFhMWVj LzEvY0ZvN3NSZFRqYmJibkZ6OVdubEw4OTlwZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuqr3bubN UlXzYRn4swx/pZRRRFL4sx9jpgbk/NuxPTogAVmCpWqN5fxGZdPpsMoIlFz04j0U XWWDL3+VX0xyuxKHKDjTQVXoAvg5yCSnLDflaQMw1AHcDylOb3StquX/VQX4rX7y tkyqdx0L7OJSri0XW00Bv3Xy/pra/XqmhudWeb6de1c2UIAezejPy5Hi3ATQhfhj Ig1HP3Q5wMS0P6LxfZp6lFDDyf06m0KLMgBhX82+4uUD61E9tGXXEEvAHJPM3IXv /gaxZT8oEeWLmHMEQrM4OrWZj8/bHX8U5HLLJ1VkuT1pbgMetzamrJB8YTl12W68 MKeUZFyNaT1g2A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:24 2025 by rpki-client