This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft (raw, json) Hash identifier: ZUKSx+A2UWirCIzZ9Wk7c46OaTtbyPGYTicCrzCCYVU= Subject key identifier: EB:33:BF:C1:27:E3:AC:58:D5:BF:78:88:E4:33:BF:F8:57:5F:A5:86 Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03 Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503 Certificate serial: 019AF12EED950E398631A7B58D8640EB1BE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: bFkRdjlL0hn20ip0p52U66tWUIo.roa (hash: p8NzVok/1SLUDDbxbEZNBjooj07A1yaufDNHsefBkBc=) 2: cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl (hash: BmIxZrD/6oU4xq6wpKkr7kUSCsoJOfvM3eCAg54Dsd0=) 3: nIQMEgip1mNWJ7Ip1CpFsNhv-14.roa (hash: VrH3DSnZI21b6Kq/80BtfMStPDWRD226xCztuO3RSP8=) 4: rVBQGtYXn7dN7Hzvs99f93cybKM.roa (hash: 8+qIyvEknSqH8tSbuYmjo7zBDDaVOwlEHrt8OpQOnnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ed:95:0e:39:86:31:a7:b5:8d:86:40:eb:1b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=eb33bfc127e3ac58d5bf7888e433bff8575fa586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:39:00:27:29:9c:53:f8:a2:84:17:b3:6a:75: 7c:6c:1f:c9:25:4c:ea:46:fe:60:49:f4:7c:d2:34: 45:0f:41:9a:bc:0e:de:05:7d:e4:07:43:10:27:5f: 4a:d7:fc:88:ae:6f:b8:98:18:25:86:11:51:9f:03: 4d:b0:6b:97:f9:91:26:53:87:b1:78:61:87:9f:8d: 33:3d:e4:24:fc:b0:b8:a8:11:87:d1:b9:be:d4:24: cf:61:ca:f2:78:d5:6f:9f:e8:44:62:75:92:a0:de: b7:2b:25:02:be:07:e9:20:39:bf:4a:dc:4e:46:6e: b1:b5:68:9d:f8:8e:32:97:e9:39:40:e2:1d:ec:0b: 68:10:e4:5e:8e:70:2b:c3:2a:f7:28:05:c5:3d:43: 8d:71:10:7e:4e:25:af:1d:55:b6:77:01:70:69:18: 37:0b:fb:fb:f6:eb:4e:b8:f9:c7:15:d1:8c:63:c2: 62:9b:48:e1:42:ab:4a:ee:85:e7:c9:5c:b6:6c:da: c7:9a:5d:85:55:3e:a1:8b:7c:cf:cd:87:b3:4c:e5: 56:6c:5d:a6:8f:31:3b:1e:3c:e4:f2:fc:26:d6:ac: 5b:ec:74:96:83:23:1f:a5:65:d8:09:a3:92:0e:59: a6:00:f7:2a:07:c2:b3:a4:7e:e0:06:6b:3d:1c:d9: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:33:BF:C1:27:E3:AC:58:D5:BF:78:88:E4:33:BF:F8:57:5F:A5:86 X509v3 Authority Key Identifier: keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:58:1e:03:6b:a5:bb:6e:0d:f8:33:ec:ec:00:fb:6d:41:33: 97:27:77:be:fe:6f:8a:c6:5a:b4:ef:7d:53:6b:43:50:86:80: d9:d4:5d:fb:6b:bd:99:17:0a:c6:9f:e2:d7:0d:c1:f7:ea:c3: 3a:ff:d2:e5:ef:c2:9e:a8:3f:4e:3d:67:6a:1e:c2:c4:a6:b9: bb:5e:f3:48:57:12:fd:9f:0b:b5:bc:b4:b3:a7:8f:a4:f3:7d: 32:35:c2:3c:07:53:fc:cb:49:40:40:b2:85:28:30:e8:2b:c1: 54:c1:bd:42:0d:72:d5:2e:57:28:ba:ad:8f:d9:1c:2b:4c:17: 0a:41:a1:71:fe:e4:8e:74:c9:7b:d9:6e:0e:81:e2:b6:4e:1b: 0f:41:53:2b:3e:1a:7f:cf:df:90:82:62:03:24:54:bd:8c:1f: 03:57:71:dc:cd:38:3f:c1:21:a2:18:51:be:7e:15:f9:7e:e7: 09:93:c0:a4:06:33:a0:c9:ed:61:aa:93:9a:c7:1c:da:f1:df: b4:48:f0:cc:90:83:4a:13:d7:b4:61:29:13:83:3e:33:2c:8e: ed:b5:40:f3:74:07:12:ff:66:d5:4d:ff:7b:04:e7:a3:76:4d: ea:9f:f2:95:bf:b6:b3:b5:f4:cc:05:d2:dd:a8:d9:d8:d9:db: c7:cc:e2:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLu2VDjmGMae1jYZA6xvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDk4ZWZhYWU4MDYzY2FjZWNjNGYxYzFhMGI2NDQ4M2Ji Njk1MDMwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD EyhlYjMzYmZjMTI3ZTNhYzU4ZDViZjc4ODhlNDMzYmZmODU3NWZhNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDkAJymcU/iihBezanV8bB/JJUzq Rv5gSfR80jRFD0GavA7eBX3kB0MQJ19K1/yIrm+4mBglhhFRnwNNsGuX+ZEmU4ex eGGHn40zPeQk/LC4qBGH0bm+1CTPYcryeNVvn+hEYnWSoN63KyUCvgfpIDm/StxO Rm6xtWid+I4yl+k5QOId7AtoEORejnArwyr3KAXFPUONcRB+TiWvHVW2dwFwaRg3 C/v79utOuPnHFdGMY8Jim0jhQqtK7oXnyVy2bNrHml2FVT6hi3zPzYezTOVWbF2m jzE7Hjzk8vwm1qxb7HSWgyMfpWXYCaOSDlmmAPcqB8KzpH7gBms9HNnl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOszv8En46xY1b94iOQzv/hXX6WGMB8GA1UdIwQY MBaAFHIJjvqugGPKzsxPHBoLZEg7tpUDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEt NTczY2E1YTYwOWMwLzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGRhZjYtNDQ4ZC00ZjNlLTk0NGEtNTczY2E1YTYwOWMw LzEvY2dtTy1xNkFZOHJPekU4Y0dndGtTRHUybFFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilgeA2ul u24N+DPs7AD7bUEzlyd3vv5visZatO99U2tDUIaA2dRd+2u9mRcKxp/i1w3B9+rD Ov/S5e/Cnqg/Tj1nah7CxKa5u17zSFcS/Z8Ltby0s6ePpPN9MjXCPAdT/MtJQECy hSgw6CvBVMG9Qg1y1S5XKLqtj9kcK0wXCkGhcf7kjnTJe9luDoHitk4bD0FTKz4a f8/fkIJiAyRUvYwfA1dx3M04P8EhohhRvn4V+X7nCZPApAYzoMntYaqTmscc2vHf tEjwzJCDShPXtGEpE4M+MyyO7bVA83QHEv9m1U3/ewTno3ZN6p/ylb+2s7X0zAXS 3ajZ2Nnbx8ziWg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:55 2025 by rpki-client