This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft File: cM8vAv8fpzt72x-_g6u77C07HL0.mft (raw, json) Hash identifier: b5BNRHoDVVcT3Eo+dzwsOPvtC9/wpwV02GoFHnUk60g= Subject key identifier: C7:D1:E9:4B:1E:4F:86:59:53:E2:ED:64:89:E2:E8:A5:87:20:5E:B4 Authority key identifier: 70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD Certificate issuer: /CN=70cf2f02ff1fa73b7bdb1fbf83abbbec2d3b1cbd Certificate serial: 019AF209A1C91C06FCD7830C5D20A7154491 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft Manifest number: 3B Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: cM8vAv8fpzt72x-_g6u77C07HL0.crl (hash: iFGrHsIZ0P0KSFdwRAsGypJVhcPMq1qYkkEaFHqYhRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft rsync://rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a1:c9:1c:06:fc:d7:83:0c:5d:20:a7:15:44:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cf2f02ff1fa73b7bdb1fbf83abbbec2d3b1cbd Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=c7d1e94b1e4f865953e2ed6489e2e8a587205eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:13:84:2e:5d:59:ec:b8:dd:fb:91:b8:b3: 24:e2:bf:60:b1:66:bf:10:17:f6:65:4e:7b:91:4d: 25:0c:76:fd:37:66:ba:4d:e7:ef:88:af:5d:13:be: 04:fb:52:4e:b9:40:d5:b8:19:18:01:65:4a:c4:26: 9b:35:3c:9f:24:f2:94:e9:d4:b7:14:7a:9f:8a:5c: 7c:e8:de:c8:07:a0:f1:ee:f0:85:19:57:be:34:c3: 2d:a7:b3:1b:9b:f1:fb:2f:e6:53:d1:f7:3c:30:bc: a8:3f:46:90:ae:37:c2:d7:a2:a3:78:d2:ab:98:1e: 3a:6d:5e:4d:02:ab:64:d9:ed:2f:33:09:42:d5:40: f0:ed:07:79:84:1a:c2:f0:76:ab:14:09:ef:c6:7d: 2f:ac:00:9d:d8:b3:5b:fb:cb:f8:14:8d:30:0c:74: 44:1f:08:4c:fd:89:c3:89:21:62:14:b8:17:4f:89: 1e:5f:9d:77:50:4c:e1:da:95:1c:7c:d1:e9:8b:49: ab:c3:27:e0:d2:de:65:58:4d:cd:3c:84:ce:4c:41: 43:cc:6e:cb:df:80:90:39:82:55:b6:a4:8c:ba:25: 97:79:56:b0:80:a0:5a:82:90:dc:98:ca:42:0b:f1: cf:ca:c7:e7:20:6c:59:a9:75:2f:fe:dd:a0:6a:41: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D1:E9:4B:1E:4F:86:59:53:E2:ED:64:89:E2:E8:A5:87:20:5E:B4 X509v3 Authority Key Identifier: keyid:70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3c:c6:dd:7f:95:a7:65:c9:da:42:a2:84:26:46:f9:af:1f: 56:72:6d:be:68:cd:c1:b7:9b:e0:c4:0b:80:a8:c5:1c:40:98: 0a:fc:b7:2b:76:c7:be:c6:58:e1:ed:76:07:b9:8e:a8:9e:d6: 25:70:cb:52:3a:1a:3a:65:51:66:a0:05:c9:10:bf:e6:1d:3a: a4:9c:1c:56:b5:0a:1a:e2:09:42:9d:b0:c2:9f:c8:dc:c6:74: 2f:ee:ff:4e:dd:47:b7:f6:7b:cc:0a:1d:65:4e:f3:42:30:26: ee:d6:d4:f7:0a:dc:8b:e2:eb:3d:6c:f5:3d:c2:81:d8:d2:50: 9b:f2:e3:89:52:58:21:86:94:98:ac:8e:a8:6d:33:e1:79:ab: 75:ab:f2:a7:59:6d:f5:4c:43:7b:88:a3:28:51:66:52:b3:97: d4:1b:aa:10:f6:96:bc:fe:06:56:37:7d:64:5a:f3:c7:c3:40: fa:60:b1:10:a1:9d:71:dc:04:3a:dc:d9:d5:5e:8c:aa:e7:db: 3c:91:76:32:92:15:ad:1a:8f:c8:b5:ea:31:e2:31:a8:9f:ee: 22:5a:15:eb:f1:48:a4:6d:f8:11:bc:05:a8:6e:e2:bd:39:29: df:c1:be:c1:b5:e6:73:9f:06:95:5c:29:c5:dc:20:2e:8f:ae: 8e:66:f5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaHJHAb814MMXSCnFUSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwY2YyZjAyZmYxZmE3M2I3YmRiMWZiZjgzYWJiYmVjMmQz YjFjYmQwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EyhjN2QxZTk0YjFlNGY4NjU5NTNlMmVkNjQ4OWUyZThhNTg3MjA1ZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye4ThC5dWey43fuRuLMk4r9gsWa/ EBf2ZU57kU0lDHb9N2a6TefviK9dE74E+1JOuUDVuBkYAWVKxCabNTyfJPKU6dS3 FHqfilx86N7IB6Dx7vCFGVe+NMMtp7Mbm/H7L+ZT0fc8MLyoP0aQrjfC16KjeNKr mB46bV5NAqtk2e0vMwlC1UDw7Qd5hBrC8HarFAnvxn0vrACd2LNb+8v4FI0wDHRE HwhM/YnDiSFiFLgXT4keX513UEzh2pUcfNHpi0mrwyfg0t5lWE3NPITOTEFDzG7L 34CQOYJVtqSMuiWXeVawgKBagpDcmMpCC/HPysfnIGxZqXUv/t2gakGoKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfR6UseT4ZZU+LtZIni6KWHIF60MB8GA1UdIwQY MBaAFHDPLwL/H6c7e9sfv4Oru+wtOxy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY004dkF2OGZwenQ3MngtX2c2dTc3QzA3SEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80Y2ZkMGMtOGMyMC00NWMyLTk3ZmEt NGFjM2E0ZWU0YjNlLzEvY004dkF2OGZwenQ3MngtX2c2dTc3QzA3SEwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80Y2ZkMGMtOGMyMC00NWMyLTk3ZmEtNGFjM2E0ZWU0YjNl LzEvY004dkF2OGZwenQ3MngtX2c2dTc3QzA3SEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTzG3X+V p2XJ2kKihCZG+a8fVnJtvmjNwbeb4MQLgKjFHECYCvy3K3bHvsZY4e12B7mOqJ7W JXDLUjoaOmVRZqAFyRC/5h06pJwcVrUKGuIJQp2wwp/I3MZ0L+7/Tt1Ht/Z7zAod ZU7zQjAm7tbU9wrci+LrPWz1PcKB2NJQm/LjiVJYIYaUmKyOqG0z4Xmrdavyp1lt 9UxDe4ijKFFmUrOX1BuqEPaWvP4GVjd9ZFrzx8NA+mCxEKGdcdwEOtzZ1V6Mqufb PJF2MpIVrRqPyLXqMeIxqJ/uIloV6/FIpG34EbwFqG7ivTkp38G+wbXmc58GlVwp xdwgLo+ujmb17Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:13 2025 by rpki-client