This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json) Hash identifier: LKvfKqDNuqDdvKHY6aa3WC9/HBAwT9QmhdCGo0a2CdU= Subject key identifier: 4D:23:CA:8A:65:9A:55:E9:12:60:ED:00:99:0C:B8:1D:75:DD:4E:5C Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Certificate serial: 019B32313335686E3A10868C4864C3883577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft Manifest number: 0767 Signing time: Thu 18 Dec 2025 16:00:43 +0000 Manifest this update: Thu 18 Dec 2025 16:00:43 +0000 Manifest next update: Fri 19 Dec 2025 16:00:43 +0000 Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=) 2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: bX3yUVtED2Gl2mxPso9FjjInuwWBng8caIMHs4U5qX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:33:35:68:6e:3a:10:86:8c:48:64:c3:88:35:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Validity Not Before: Dec 18 16:00:43 2025 GMT Not After : Dec 19 16:00:43 2025 GMT Subject: CN=4d23ca8a659a55e91260ed00990cb81d75dd4e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:31:5c:a0:ea:c0:ec:8b:47:af:ff:cf:7f: 72:f6:7f:f9:04:d1:ed:3c:2e:44:11:c0:8a:a0:c1: c5:7e:bb:41:31:6f:d7:6e:c8:fe:c6:87:c5:ed:f0: 57:19:a6:1e:02:c0:8d:0d:38:1e:a4:d4:44:61:be: a3:d2:ec:b8:db:00:73:29:ab:91:42:1b:9f:a1:90: f9:ab:25:3b:e6:b1:30:f2:e7:75:82:52:a5:97:7d: c6:16:0a:c5:c2:85:b0:57:61:9d:a9:64:7d:1b:45: d3:ea:e1:59:b8:5f:41:61:13:31:ea:8f:30:d1:6d: eb:0a:d4:6a:07:70:16:60:22:c6:72:fb:f4:aa:d9: 36:20:51:13:32:55:23:d5:85:2e:95:99:18:a6:9d: 46:b2:03:8f:e8:cc:b4:77:1d:73:c2:7c:18:f5:1d: e1:dd:d7:d4:3a:0d:de:e4:b5:6f:88:27:9d:59:58: 21:a7:18:5e:c3:b1:d9:a1:c4:6d:f5:b6:01:ef:cf: d9:f8:9d:5d:08:e4:0d:af:22:92:cf:bc:2b:e5:d3: 6e:36:90:9a:19:32:02:fe:69:80:87:35:1c:a4:17: 5a:7e:c6:c3:cd:81:66:80:aa:d2:9a:50:bf:94:66: 84:37:c7:60:2d:2a:de:0d:97:ad:ee:c1:cf:84:ba: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:CA:8A:65:9A:55:E9:12:60:ED:00:99:0C:B8:1D:75:DD:4E:5C X509v3 Authority Key Identifier: keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:39:31:45:fa:b5:85:12:5c:71:21:d0:74:f3:3f:de:7c: 30:bc:a7:f4:ad:69:fc:c3:be:bf:ad:b9:1f:b5:e0:5b:6a:06: a6:07:4d:fd:3d:11:11:17:dd:53:f6:00:27:ac:00:c0:a2:0c: 9d:cb:ec:27:b6:b8:43:30:53:39:79:71:de:63:1f:ee:a1:e2: 5c:93:80:8e:cc:34:2d:71:79:3c:bc:56:86:29:97:e6:37:73: ee:ea:d3:f7:3f:8b:f9:13:e6:c5:13:6c:24:2c:15:5f:9b:18: 21:45:d2:61:f8:89:aa:ff:dc:5f:85:03:9d:d5:7c:3a:37:7d: 24:52:24:27:3d:81:8d:16:5f:63:96:24:32:2a:f4:21:c2:42: c2:51:5f:fe:32:82:fc:b4:12:95:79:21:9f:1d:d2:78:cf:3d: 9e:41:ad:7f:21:2e:e0:f0:88:38:e0:21:6a:98:37:d4:d3:6f: ba:44:55:5f:1a:cf:1f:51:d6:ea:1b:8f:59:4e:4e:5d:ab:30: 72:05:be:b5:19:4d:de:5e:3d:6e:17:bd:08:45:38:ea:fa:89: e8:5b:cd:6a:1e:20:71:25:7e:79:f7:35:b9:30:de:ec:1b:65: 47:55:0c:2d:12:02:a6:fc:47:99:cf:70:96:22:91:92:25:c9: 8a:ae:9c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMTM1aG46EIaMSGTDiDV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz NDRhMDMwHhcNMjUxMjE4MTYwMDQzWhcNMjUxMjE5MTYwMDQzWjAzMTEwLwYDVQQD Eyg0ZDIzY2E4YTY1OWE1NWU5MTI2MGVkMDA5OTBjYjgxZDc1ZGQ0ZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcIxXKDqwOyLR6//z39y9n/5BNHt PC5EEcCKoMHFfrtBMW/Xbsj+xofF7fBXGaYeAsCNDTgepNREYb6j0uy42wBzKauR QhufoZD5qyU75rEw8ud1glKll33GFgrFwoWwV2GdqWR9G0XT6uFZuF9BYRMx6o8w 0W3rCtRqB3AWYCLGcvv0qtk2IFETMlUj1YUulZkYpp1GsgOP6My0dx1zwnwY9R3h 3dfUOg3e5LVviCedWVghpxhew7HZocRt9bYB78/Z+J1dCOQNryKSz7wr5dNuNpCa GTIC/mmAhzUcpBdafsbDzYFmgKrSmlC/lGaEN8dgLSreDZet7sHPhLobwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0jyoplmlXpEmDtAJkMuB113U5cMB8GA1UdIwQY MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt NzA2MDI3NTZjYzhkLzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXs5MUX6 tYUSXHEh0HTzP958MLyn9K1p/MO+v625H7XgW2oGpgdN/T0RERfdU/YAJ6wAwKIM ncvsJ7a4QzBTOXlx3mMf7qHiXJOAjsw0LXF5PLxWhimX5jdz7urT9z+L+RPmxRNs JCwVX5sYIUXSYfiJqv/cX4UDndV8Ojd9JFIkJz2BjRZfY5YkMir0IcJCwlFf/jKC /LQSlXkhnx3SeM89nkGtfyEu4PCIOOAhapg31NNvukRVXxrPH1HW6huPWU5OXasw cgW+tRlN3l49bhe9CEU46vqJ6FvNah4gcSV+efc1uTDe7BtlR1UMLRICpvxHmc9w liKRkiXJiq6cJw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:10:39 2025 by rpki-client