This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json) Hash identifier: VSMS1zMDqLBJicg66MGFZ1SSc4+48fW+71mujbQlHQE= Subject key identifier: 23:09:9C:87:37:0C:BC:13:7F:D1:B5:4E:4B:6B:1C:EA:C2:B6:51:D5 Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb Certificate serial: 019AF20932EC4D721EDF467778C88A06077B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: 0pZ1bce9ow2gSSc2DHNvhW+FVmL8qrh+sXYl2lUjrpk=) 2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:32:ec:4d:72:1e:df:46:77:78:c8:8a:06:07:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=23099c87370cbc137fd1b54e4b6b1ceac2b651d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c9:c8:1d:fc:7d:47:63:ed:d1:af:fd:ea:ae: a0:df:ae:43:65:b2:bc:e3:56:08:39:ab:dd:1f:86: 2f:60:fd:55:75:2a:fb:5a:b3:11:f0:f6:b8:6b:93: 72:65:36:22:1b:91:dd:7b:b5:01:4d:ae:87:6c:7e: 20:46:94:65:e5:1a:cb:bd:e3:37:8b:59:3f:7b:28: 9f:39:b5:34:13:2a:86:7d:09:ed:1e:02:ee:cd:5b: 3a:cf:5b:db:a9:2b:8a:cf:51:41:f5:1b:18:1f:27: 23:7b:44:e8:fe:0d:7d:2e:0e:b7:fe:b2:02:2e:72: 7b:11:02:ab:04:ad:4d:c7:2f:82:8f:42:57:f5:ee: c2:e5:c5:53:17:db:ae:f6:2a:4b:a8:a7:44:54:7f: 3e:69:7a:1f:55:3a:04:ca:2c:34:62:b0:a2:27:bb: a4:bd:5d:e3:d7:ad:fb:ca:c7:1b:34:e1:b8:ce:f0: a5:0e:cc:75:6c:c3:d7:7c:92:76:af:65:b4:fb:7d: 6c:04:8d:93:0f:7e:b1:4e:54:68:cd:59:de:ab:42: 04:51:48:dc:d8:5e:01:8a:1d:8d:1c:8c:ea:43:14: 79:cb:95:50:07:67:f5:bc:74:78:25:1b:d6:8c:18: 3f:7c:b5:3e:98:94:a2:20:4a:15:e6:9a:db:50:b1: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:9C:87:37:0C:BC:13:7F:D1:B5:4E:4B:6B:1C:EA:C2:B6:51:D5 X509v3 Authority Key Identifier: keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:aa:a1:61:ef:93:57:f5:85:5d:f2:c8:82:4a:d5:54:fb:32: e1:28:e1:f3:26:77:c4:ed:a6:82:9e:97:1b:c0:d9:b2:5b:06: 0a:07:8c:a5:e7:9a:fd:dd:21:8d:5d:92:0a:06:2c:ec:5b:46: eb:6c:20:a5:f3:e7:f6:21:39:15:62:c9:06:2e:2a:ca:17:61: 4f:01:c9:41:45:e8:81:0c:ac:f9:a7:f1:65:13:1b:d0:60:6f: 3d:f9:43:04:21:38:90:60:95:42:f4:a1:16:20:6c:0a:59:84: 87:1e:cd:17:96:24:77:32:84:e6:4b:af:83:97:29:d9:a0:1f: a6:c0:da:ff:f6:0b:95:5d:41:53:ff:ab:2c:60:0e:60:39:f7: ef:9f:fe:43:4c:4e:ef:cb:3d:c4:38:69:91:21:f5:68:d4:21: ec:ca:b1:98:b0:07:ae:47:a4:6f:09:53:a5:05:07:68:d6:ba: 96:a2:5b:64:ee:f1:8e:08:03:a3:ff:92:b7:a9:6f:c4:0d:6e: c6:7a:db:b5:d3:19:80:87:67:20:d0:32:99:e9:33:b6:12:eb: 14:36:3e:dc:61:43:d6:e1:1a:c2:7c:5c:3c:a7:65:1d:58:02: c4:eb:c3:70:3a:5e:47:5e:c0:c9:9e:7a:00:b9:ef:bd:ef:96: 7d:f4:69:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTLsTXIe30Z3eMiKBgd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2JmN2EyYTQzYjE4MGQ3MjJiMzc2MzFlODc5YWZhMWI5 YTVlZGIwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EygyMzA5OWM4NzM3MGNiYzEzN2ZkMWI1NGU0YjZiMWNlYWMyYjY1MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5snIHfx9R2Pt0a/96q6g365DZbK8 41YIOavdH4YvYP1VdSr7WrMR8Pa4a5NyZTYiG5Hde7UBTa6HbH4gRpRl5RrLveM3 i1k/eyifObU0EyqGfQntHgLuzVs6z1vbqSuKz1FB9RsYHycje0To/g19Lg63/rIC LnJ7EQKrBK1Nxy+Cj0JX9e7C5cVTF9uu9ipLqKdEVH8+aXofVToEyiw0YrCiJ7uk vV3j1637yscbNOG4zvClDsx1bMPXfJJ2r2W0+31sBI2TD36xTlRozVneq0IEUUjc 2F4Bih2NHIzqQxR5y5VQB2f1vHR4JRvWjBg/fLU+mJSiIEoV5prbULHrgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMJnIc3DLwTf9G1TktrHOrCtlHVMB8GA1UdIwQY MBaAFP3L96KkOxgNcis3Yx6Hmvobml7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUt ZjU4YTViODhjNzNlLzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUtZjU4YTViODhjNzNl LzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKqhYe+T V/WFXfLIgkrVVPsy4Sjh8yZ3xO2mgp6XG8DZslsGCgeMpeea/d0hjV2SCgYs7FtG 62wgpfPn9iE5FWLJBi4qyhdhTwHJQUXogQys+afxZRMb0GBvPflDBCE4kGCVQvSh FiBsClmEhx7NF5YkdzKE5kuvg5cp2aAfpsDa//YLlV1BU/+rLGAOYDn375/+Q0xO 78s9xDhpkSH1aNQh7MqxmLAHrkekbwlTpQUHaNa6lqJbZO7xjggDo/+St6lvxA1u xnrbtdMZgIdnINAymekzthLrFDY+3GFD1uEawnxcPKdlHVgCxOvDcDpeR17AyZ56 ALnvve+WffRpmw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:02 2025 by rpki-client