This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json) Hash identifier: LphDmrmBX7C9LiqRhVxsFdfSVC06+9jtxkfuLyB4XbU= Subject key identifier: B1:C6:01:E4:F5:E6:8C:C3:F9:AC:BB:07:8A:F1:5B:99:C6:75:8C:62 Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Certificate serial: 019AF3F74DF3FE66EEA69C4C1D3BC434F908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft Manifest number: 12E9 Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: D9c0pxCnd51U1hn+e1BxByWCb3zJGKw9acqjCLv56j0=) 2: pszj2ow_8e4yhWJ4p_2OlR6lAZA.roa (hash: Bkleu+zwlUm+Ij3pdF+L2pghaKZyEcPMCuJgamcNwU0=) 3: x05s8cxNFz3Ea01ENwVR0hPrDdY.roa (hash: 7Z21y2oOiXJmBN38XDJhWItGwbzVeLKb+Gde/eJFRgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4d:f3:fe:66:ee:a6:9c:4c:1d:3b:c4:34:f9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=b1c601e4f5e68cc3f9acbb078af15b99c6758c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:b0:a2:cd:90:a5:54:a2:f8:9d:c1:22:c0: 56:ba:7c:21:75:22:33:62:f9:2b:36:e5:12:7c:24: 83:45:aa:cd:51:c5:b7:2c:4d:dd:ad:7e:47:65:7b: 89:1c:cf:0c:b4:d3:43:2f:84:f0:84:01:38:cc:ac: db:02:a5:62:22:8e:0e:6c:6f:f9:23:17:8d:db:08: 21:b5:79:fc:bc:d5:39:cc:8f:c0:4b:ca:cc:ad:91: e5:d3:73:53:3b:ff:c9:3e:12:eb:d6:3a:aa:c3:e8: 4e:81:3c:e5:11:fe:f4:54:a5:ff:4f:04:e3:1e:82: c7:c1:9e:55:30:64:1d:08:67:86:3c:61:bf:2d:f2: de:c9:76:58:0f:b0:69:b6:59:6a:3b:e5:ee:fc:29: 18:39:30:43:26:78:19:d1:87:b5:d5:33:e5:63:6a: f2:aa:af:7c:f5:f6:bb:c8:ea:e3:9b:af:b9:80:e1: fb:3e:3b:0b:26:44:60:54:0d:0e:4b:72:4a:12:2c: f4:ba:4a:1b:df:65:b1:cb:57:21:16:39:65:e8:d1: cb:13:74:7e:3c:f7:ed:65:d1:5d:42:de:74:b1:a9: 2e:51:f1:31:7c:b1:47:3d:f0:49:fc:bc:00:09:25: b2:18:46:84:b9:d6:5d:8e:8e:af:0b:c0:b5:60:d0: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C6:01:E4:F5:E6:8C:C3:F9:AC:BB:07:8A:F1:5B:99:C6:75:8C:62 X509v3 Authority Key Identifier: keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:24:10:18:35:74:6e:e3:3c:2e:23:67:d8:a6:0b:00:3b:90: 8e:8f:2f:db:64:d0:da:7a:11:a9:d1:c2:29:d6:2e:3f:39:f2: 9d:41:a6:72:65:1e:41:d7:29:08:71:ce:e5:8e:6b:59:0e:b6: f6:8b:4b:25:74:73:a7:dc:b7:45:86:f0:45:66:90:89:b4:df: 11:8c:63:24:68:e7:2f:a5:d0:18:7b:cf:58:a1:18:58:97:5e: 05:25:66:0f:55:0c:18:fc:65:0f:3b:ef:39:aa:92:8e:39:ec: df:3c:35:dc:66:09:61:3f:3a:64:0b:3c:67:bf:df:02:6b:51: 77:1b:74:59:85:97:29:e1:d1:22:de:95:d4:c5:62:2b:b0:67: f0:f0:dc:1e:88:fb:4a:c7:2e:84:16:8b:43:a9:99:47:8e:fe: 6c:ff:45:41:c9:1e:5c:1b:3a:46:92:ba:5c:e9:14:88:e1:f0: c1:16:cf:1c:54:01:50:25:41:28:20:5f:ce:a1:b3:c9:8b:8a: c7:08:62:7b:b9:d4:53:b1:9d:bf:dd:1a:16:7f:ca:e4:10:9b: df:17:a3:64:20:8f:a2:1f:4e:f7:1b:71:a4:2d:b7:53:9c:05: 90:cf:ed:2e:ba:28:65:3d:7f:00:ee:40:84:6c:08:3e:a5:7a: 18:e9:be:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz903z/mbuppxMHTvENPkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWViNmVhYWE0OWRkNmI0ODNlMDRiMTQzNGU0ZGFjNzll ZDlkMzEwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD EyhiMWM2MDFlNGY1ZTY4Y2MzZjlhY2JiMDc4YWYxNWI5OWM2NzU4YzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XWwos2QpVSi+J3BIsBWunwhdSIz YvkrNuUSfCSDRarNUcW3LE3drX5HZXuJHM8MtNNDL4TwhAE4zKzbAqViIo4ObG/5 IxeN2wghtXn8vNU5zI/AS8rMrZHl03NTO//JPhLr1jqqw+hOgTzlEf70VKX/TwTj HoLHwZ5VMGQdCGeGPGG/LfLeyXZYD7BptllqO+Xu/CkYOTBDJngZ0Ye11TPlY2ry qq989fa7yOrjm6+5gOH7PjsLJkRgVA0OS3JKEiz0ukob32Wxy1chFjll6NHLE3R+ PPftZdFdQt50sakuUfExfLFHPfBJ/LwACSWyGEaEudZdjo6vC8C1YNAmMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHGAeT15ozD+ay7B4rxW5nGdYxiMB8GA1UdIwQY MBaAFHCetuqqSd1rSD4EsUNOTax57Z0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAt OWY2ZmEwZTFhNWE1LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAtOWY2ZmEwZTFhNWE1 LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiQQGDV0 buM8LiNn2KYLADuQjo8v22TQ2noRqdHCKdYuPznynUGmcmUeQdcpCHHO5Y5rWQ62 9otLJXRzp9y3RYbwRWaQibTfEYxjJGjnL6XQGHvPWKEYWJdeBSVmD1UMGPxlDzvv OaqSjjns3zw13GYJYT86ZAs8Z7/fAmtRdxt0WYWXKeHRIt6V1MViK7Bn8PDcHoj7 SscuhBaLQ6mZR47+bP9FQckeXBs6RpK6XOkUiOHwwRbPHFQBUCVBKCBfzqGzyYuK xwhie7nUU7Gdv90aFn/K5BCb3xejZCCPoh9O9xtxpC23U5wFkM/tLrooZT1/AO5A hGwIPqV6GOm+WA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:58:49 2025 by rpki-client