This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json) Hash identifier: xhroYMRpd9iOcQIuhkH5/FyYx1JKxmOMZEAxOLUKP5Y= Subject key identifier: 1D:D6:8B:D2:D5:17:38:C2:00:A7:BA:0C:E8:D3:35:D4:6B:0F:27:73 Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Certificate serial: 019AF276D53721DAA8B015688E923E439490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft Manifest number: 0746 Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=) 2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: wIoWic8iwN9cCGbRJIOV6yZzYrVSlKEp6cM+mzG/H3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d5:37:21:da:a8:b0:15:68:8e:92:3e:43:94:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03 Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=1dd68bd2d51738c200a7ba0ce8d335d46b0f2773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:c9:c5:da:94:04:ba:a1:89:60:b4:39:32: e7:41:6e:ab:ab:0a:b3:3b:be:e6:43:2a:f5:8d:83: 8a:fa:bd:b3:ff:e3:d9:47:77:e2:82:ef:9a:1e:80: 53:86:27:74:a3:05:42:d4:43:d2:51:4c:e8:c4:cd: 49:a2:6f:98:87:a8:d7:7b:9b:d5:b3:62:85:f2:d0: 63:66:68:e9:fa:d0:98:d6:5d:c0:67:7d:40:ae:d8: 49:17:e1:e5:27:8d:08:d7:ba:7e:5e:b1:48:56:4d: de:aa:8e:65:cd:ec:28:3c:c2:c3:1d:d7:1c:25:b3: d2:4e:be:89:a4:48:8c:ed:1d:34:b3:81:08:d7:ba: e2:bc:5c:5e:1a:77:9e:17:de:2b:a4:74:eb:6e:e0: 3b:59:f0:4f:5e:27:f8:43:08:8a:1c:e8:11:91:1e: 56:de:97:7a:b4:50:39:34:6b:03:74:5d:5b:59:e8: e8:ff:b2:84:f6:d3:02:c7:ec:3b:35:e6:47:ae:79: 9a:65:3f:f4:d7:79:6e:61:6c:61:91:44:61:59:ea: c1:7d:78:48:16:29:1b:98:07:e6:d8:50:a8:bb:c5: 79:c7:54:96:8d:ac:7f:87:3e:7f:ff:28:fd:ca:68: ac:03:46:39:f0:10:a4:ce:dc:c1:8d:a0:78:57:e2: 0b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:8B:D2:D5:17:38:C2:00:A7:BA:0C:E8:D3:35:D4:6B:0F:27:73 X509v3 Authority Key Identifier: keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:9c:2f:98:fa:37:65:bf:b9:76:32:f8:f6:f9:ea:34:0d: 09:2a:ee:de:42:60:35:db:29:1a:4f:6a:7e:8d:0a:8b:58:bf: 8a:a4:69:d5:b4:65:61:73:3e:06:79:3d:29:86:fa:0c:39:64: 1c:19:5b:fa:10:06:39:ae:f3:72:1e:d2:35:d5:70:47:ad:1b: 3b:cf:da:78:e3:4a:c8:16:4a:60:ff:9b:69:14:e3:da:7e:6b: 43:90:ce:04:01:27:56:99:d1:c0:f5:1c:fb:a2:e6:d7:1c:26: 9c:4c:a3:d2:c0:1c:c0:b5:e9:10:a7:77:3c:f0:a9:47:bf:b6: f7:4c:cb:9f:86:c5:23:92:06:bc:a0:f9:e6:ce:50:63:35:56: cb:83:de:1f:78:a9:62:b2:47:81:6d:37:97:bf:2c:0b:ea:ed: 26:1a:55:f8:dc:31:a9:72:7d:aa:5d:8e:70:76:5e:a4:a3:20: c6:00:5d:e2:d2:e1:ad:23:0b:30:25:32:b2:60:82:6c:c2:e2: bb:4b:51:44:41:fb:db:40:2f:c0:68:12:c9:04:f9:94:fe:d4: d9:e7:0f:bc:8a:d4:98:45:95:56:0c:e4:e6:42:d2:11:cb:cc: f7:a6:bc:97:08:ed:10:01:72:28:e3:df:e3:73:5b:63:5d:37: e3:6c:74:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtU3IdqosBVojpI+Q5SQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz NDRhMDMwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EygxZGQ2OGJkMmQ1MTczOGMyMDBhN2JhMGNlOGQzMzVkNDZiMGYyNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDrJxdqUBLqhiWC0OTLnQW6rqwqz O77mQyr1jYOK+r2z/+PZR3figu+aHoBThid0owVC1EPSUUzoxM1Jom+Yh6jXe5vV s2KF8tBjZmjp+tCY1l3AZ31ArthJF+HlJ40I17p+XrFIVk3eqo5lzewoPMLDHdcc JbPSTr6JpEiM7R00s4EI17rivFxeGneeF94rpHTrbuA7WfBPXif4QwiKHOgRkR5W 3pd6tFA5NGsDdF1bWejo/7KE9tMCx+w7NeZHrnmaZT/013luYWxhkURhWerBfXhI FikbmAfm2FCou8V5x1SWjax/hz5//yj9ymisA0Y58BCkztzBjaB4V+ILcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Wi9LVFzjCAKe6DOjTNdRrDydzMB8GA1UdIwQY MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt NzA2MDI3NTZjYzhkLzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc+cL5j6 N2W/uXYy+Pb56jQNCSru3kJgNdspGk9qfo0Ki1i/iqRp1bRlYXM+Bnk9KYb6DDlk HBlb+hAGOa7zch7SNdVwR60bO8/aeONKyBZKYP+baRTj2n5rQ5DOBAEnVpnRwPUc +6Lm1xwmnEyj0sAcwLXpEKd3PPCpR7+290zLn4bFI5IGvKD55s5QYzVWy4PeH3ip YrJHgW03l78sC+rtJhpV+NwxqXJ9ql2OcHZepKMgxgBd4tLhrSMLMCUysmCCbMLi u0tRREH720AvwGgSyQT5lP7U2ecPvIrUmEWVVgzk5kLSEcvM96a8lwjtEAFyKOPf 43NbY10342x0BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:26 2025 by rpki-client