This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json) Hash identifier: JCv2HfN+Gdw4iJ9PD9pJqJsRJj4cnbT5udsnTGNYPds= Subject key identifier: 6D:82:0D:E0:0D:56:C9:5A:6F:B0:30:37:4C:00:F5:69:8E:EC:6F:6E Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979 Certificate serial: 019AF19AB817ADAEF6D6EFD83C8ECABCC61F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=) 2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: n1R9dej1dS/wCQYDSjwGEU8xOVbSELK6Q05EoOltiCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b8:17:ad:ae:f6:d6:ef:d8:3c:8e:ca:bc:c6:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979 Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=6d820de00d56c95a6fb030374c00f5698eec6f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:a2:be:f0:9a:ab:72:63:c4:db:5a:7f:d3: f8:ff:b7:af:d6:6d:f5:ce:1d:8a:90:6f:86:8b:6a: 93:79:88:0a:ab:24:00:c8:5d:e9:9e:30:8e:c6:85: 79:0b:c6:46:f7:f8:3d:87:6d:f6:8b:0f:b0:e2:a7: 55:d2:96:41:80:76:7d:3c:e1:86:8f:32:03:54:ac: 7c:b7:e0:24:95:48:a9:9a:ca:da:0b:d9:2a:c0:3b: 37:dc:94:25:64:6c:b3:e9:50:7c:48:79:27:6c:c5: a2:91:16:ae:fa:d4:16:20:dd:62:69:34:a8:39:2b: 78:dd:87:f3:0d:8f:3e:62:f2:a4:24:5d:6c:d1:ab: 0a:ef:03:33:6a:e9:c4:e0:7f:05:48:3d:5c:7f:57: 69:e5:00:ed:7e:37:5a:b2:ef:29:83:60:4d:aa:9c: 31:59:d7:bb:34:f7:25:45:99:3d:d4:37:3e:88:2c: 15:d5:f6:9f:6f:62:75:a6:31:b1:a2:14:4e:11:57: 23:16:5c:be:3f:1e:ed:4e:07:2f:10:ac:74:7e:ac: ab:db:6f:a6:8e:38:0b:11:d8:bc:40:b5:80:6f:ec: 5c:6b:ed:61:93:fd:c9:76:41:af:b1:f7:fc:6b:b3: 4c:37:b1:54:88:37:39:a1:f5:e2:fa:d6:73:00:ac: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:82:0D:E0:0D:56:C9:5A:6F:B0:30:37:4C:00:F5:69:8E:EC:6F:6E X509v3 Authority Key Identifier: keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0e:2d:d8:29:06:89:5e:be:21:89:59:b4:2b:73:f1:c7:1d: 96:d2:14:bc:4a:41:67:a2:7e:ff:6f:c2:09:3a:93:bc:2e:b9: 3e:bf:67:7a:01:19:d9:cc:a1:ad:84:3a:a8:fe:92:b4:24:fa: be:37:e2:ed:be:4e:a1:2f:0d:21:33:42:4b:f3:05:ee:d2:13: 13:e4:97:7e:26:c4:3f:f5:15:65:96:77:05:5c:57:35:40:1a: 2e:f0:47:0f:dd:38:5e:6c:bd:54:bd:94:76:4f:c7:e1:15:16: 33:51:74:a6:4e:58:0b:b4:7b:fb:29:a4:d4:b9:71:9e:d4:37: 4f:18:3c:81:8d:9a:5e:8c:b3:3e:35:d1:0a:a6:46:5e:07:95: de:f2:81:37:e3:96:56:01:30:dc:08:0b:a9:a4:fd:96:59:db: 8f:59:a2:47:fc:be:10:9a:20:84:3a:57:d5:37:04:39:48:ae: 4d:b5:7c:2f:87:66:7b:92:17:8c:f6:5e:d5:86:cc:a0:c6:c0: 82:61:46:c3:25:a4:14:09:e7:a7:67:44:67:85:ab:2f:dc:60: c6:2f:bc:8e:dc:fa:ed:78:ae:66:37:a3:2d:cf:01:2b:49:06: 1f:5d:05:e6:ed:b9:ee:b5:8b:e5:fe:65:34:78:59:66:37:88: c4:55:f5:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrgXra721u/YPI7KvMYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl NzA5NzkwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD Eyg2ZDgyMGRlMDBkNTZjOTVhNmZiMDMwMzc0YzAwZjU2OThlZWM2ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomqivvCaq3JjxNtaf9P4/7ev1m31 zh2KkG+Gi2qTeYgKqyQAyF3pnjCOxoV5C8ZG9/g9h232iw+w4qdV0pZBgHZ9POGG jzIDVKx8t+AklUipmsraC9kqwDs33JQlZGyz6VB8SHknbMWikRau+tQWIN1iaTSo OSt43YfzDY8+YvKkJF1s0asK7wMzaunE4H8FSD1cf1dp5QDtfjdasu8pg2BNqpwx Wde7NPclRZk91Dc+iCwV1fafb2J1pjGxohROEVcjFly+Px7tTgcvEKx0fqyr22+m jjgLEdi8QLWAb+xca+1hk/3JdkGvsff8a7NMN7FUiDc5ofXi+tZzAKymlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2CDeANVslab7AwN0wA9WmO7G9uMB8GA1UdIwQY MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ4t2CkG iV6+IYlZtCtz8ccdltIUvEpBZ6J+/2/CCTqTvC65Pr9negEZ2cyhrYQ6qP6StCT6 vjfi7b5OoS8NITNCS/MF7tITE+SXfibEP/UVZZZ3BVxXNUAaLvBHD904Xmy9VL2U dk/H4RUWM1F0pk5YC7R7+ymk1LlxntQ3Txg8gY2aXoyzPjXRCqZGXgeV3vKBN+OW VgEw3AgLqaT9llnbj1miR/y+EJoghDpX1TcEOUiuTbV8L4dme5IXjPZe1YbMoMbA gmFGwyWkFAnnp2dEZ4WrL9xgxi+8jtz67XiuZjejLc8BK0kGH10F5u257rWL5f5l NHhZZjeIxFX1fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:01 2025 by rpki-client