This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json) Hash identifier: kNEGd/i1i4+APRkwL+PvEI6qjIZ0SnL+Tu6z3XTHlf8= Subject key identifier: FD:5B:08:CF:E6:F6:A4:1F:4E:C3:A4:6F:CC:2C:91:1F:0B:62:E0:66 Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Certificate serial: 019AF0BF25019CF833AD2FC962026F84629C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft Manifest number: 0584 Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=) 2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: qnS8GGb+bCBCAKfJABotUtF8f3aX17kNnN1+a98Khmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:25:01:9c:f8:33:ad:2f:c9:62:02:6f:84:62:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8 Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=fd5b08cfe6f6a41f4ec3a46fcc2c911f0b62e066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:59:1c:fe:58:f8:2b:76:d8:27:b3:cb:26:6f: f7:b5:99:f3:5c:2a:0a:b4:0a:76:9c:a3:8b:46:0d: e1:a9:ab:46:03:d6:6a:cc:a4:da:10:2d:6b:32:52: 98:d2:e8:7a:f9:49:a9:db:62:94:d8:6c:fc:f4:a0: c0:28:c8:9b:46:8e:8e:cc:e2:5c:4b:8a:0f:be:b5: 03:3e:ec:91:a2:57:36:3e:b9:9f:3d:b2:0a:ea:1c: 30:fa:11:87:14:80:32:ef:3e:48:94:6b:9d:85:a9: d3:92:f2:ce:f0:b9:47:47:cc:0a:94:0e:5f:84:89: bd:23:44:91:e5:f2:02:0d:07:f9:95:e2:19:cf:6c: a1:26:30:1d:57:76:c9:47:cb:12:2f:83:0d:c7:19: 7b:d9:af:6d:3c:26:24:0d:2b:84:88:c9:3a:c2:36: 78:f2:a0:8c:87:e7:d6:66:7a:56:ef:5e:d5:b0:fe: 5b:b3:d7:9c:e7:6e:af:ad:17:0c:12:ce:9e:77:7e: 12:5b:b6:76:01:eb:8b:e8:9f:58:19:af:e0:3f:2b: 06:19:43:8a:8a:23:80:58:78:00:b2:d1:b1:27:7c: 66:1d:fe:26:8c:9b:cc:f0:e6:f7:a1:40:74:07:c8: 95:1d:ff:a3:7a:8c:2a:1d:fb:19:33:aa:21:ba:89: 45:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5B:08:CF:E6:F6:A4:1F:4E:C3:A4:6F:CC:2C:91:1F:0B:62:E0:66 X509v3 Authority Key Identifier: keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f4:d7:b2:ce:1c:2a:84:eb:28:6e:83:3e:66:70:22:ed:78: 76:be:c9:c5:7e:8f:05:01:13:5f:65:36:19:98:47:20:d5:e6: 12:56:9f:ad:44:d1:a2:fa:5a:85:80:86:f1:fc:56:ce:60:49: e2:e8:e9:d0:4f:7f:2d:a6:3b:ae:6f:d0:9c:94:7a:81:37:aa: 7e:15:c9:2f:13:f1:bd:28:98:89:cb:19:80:82:2d:90:de:61: 57:7d:31:0c:4d:38:6c:a7:67:41:1b:a2:b5:79:66:dc:41:67: 83:92:6c:84:65:f0:69:6f:ec:85:13:fa:b6:c7:44:e9:a1:ef: fc:8b:94:d9:92:be:36:c4:a9:80:96:11:08:7d:bb:bd:2a:1c: 60:0a:58:8f:17:65:65:0f:85:89:5e:40:c9:ce:84:d6:93:71: 14:13:fb:55:0f:21:ae:51:e8:d5:27:a4:14:b7:65:fa:91:f5: 1a:d1:5c:51:b3:2e:60:40:db:cf:bd:dc:a3:4d:b3:05:6c:fc: 68:97:cf:67:98:33:17:92:54:13:9f:73:59:a9:ba:f3:a6:e3: 2f:c5:b1:51:02:96:9f:4a:63:d9:b4:bd:48:c5:a8:3b:cc:91: b9:44:d8:7b:bf:ca:45:85:53:28:00:88:65:7d:67:d6:df:3a: 1d:38:10:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyUBnPgzrS/JYgJvhGKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNzE1MDZiZmFiOTEyYzdiODE3MWI5NmI4NWEwOTliMTQw ZTZjZDgwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD EyhmZDViMDhjZmU2ZjZhNDFmNGVjM2E0NmZjYzJjOTExZjBiNjJlMDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Fkc/lj4K3bYJ7PLJm/3tZnzXCoK tAp2nKOLRg3hqatGA9ZqzKTaEC1rMlKY0uh6+Ump22KU2Gz89KDAKMibRo6OzOJc S4oPvrUDPuyRolc2PrmfPbIK6hww+hGHFIAy7z5IlGudhanTkvLO8LlHR8wKlA5f hIm9I0SR5fICDQf5leIZz2yhJjAdV3bJR8sSL4MNxxl72a9tPCYkDSuEiMk6wjZ4 8qCMh+fWZnpW717VsP5bs9ec526vrRcMEs6ed34SW7Z2AeuL6J9YGa/gPysGGUOK iiOAWHgAstGxJ3xmHf4mjJvM8Ob3oUB0B8iVHf+jeowqHfsZM6ohuolFfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1bCM/m9qQfTsOkb8wskR8LYuBmMB8GA1UdIwQY MBaAFHJxUGv6uRLHuBcblrhaCZsUDmzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQt ZDIyNTAzMmQxODU4LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9jZDU4MjQtMmRkZS00MDNlLWIyYzQtZDIyNTAzMmQxODU4 LzEvY25GUWFfcTVFc2U0Rnh1V3VGb0pteFFPYk5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfTXss4c KoTrKG6DPmZwIu14dr7JxX6PBQETX2U2GZhHINXmElafrUTRovpahYCG8fxWzmBJ 4ujp0E9/LaY7rm/QnJR6gTeqfhXJLxPxvSiYicsZgIItkN5hV30xDE04bKdnQRui tXlm3EFng5JshGXwaW/shRP6tsdE6aHv/IuU2ZK+NsSpgJYRCH27vSocYApYjxdl ZQ+FiV5Ayc6E1pNxFBP7VQ8hrlHo1SekFLdl+pH1GtFcUbMuYEDbz73co02zBWz8 aJfPZ5gzF5JUE59zWam686bjL8WxUQKWn0pj2bS9SMWoO8yRuUTYe7/KRYVTKACI ZX1n1t86HTgQ8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:56 2025 by rpki-client