This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json) Hash identifier: oM47BOrhkmRFwioU2t3TjxtGa8GsE7VmtQt4YLkJ9gw= Subject key identifier: 60:63:3E:32:C6:CB:A0:B3:9E:02:BE:02:34:69:30:83:5A:2A:E7:C3 Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a Certificate serial: 019AF1644B1ECD8CFCB782B0FC2C5A6984E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft Manifest number: 1027 Signing time: Sat 06 Dec 2025 02:01:13 +0000 Manifest this update: Sat 06 Dec 2025 02:01:13 +0000 Manifest next update: Sun 07 Dec 2025 02:01:13 +0000 Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=) 2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: AI3WRoG1mXSGsGuqRD5kcBtq2V0EHycEx665Eklp+hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4b:1e:cd:8c:fc:b7:82:b0:fc:2c:5a:69:84:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a Validity Not Before: Dec 6 02:01:13 2025 GMT Not After : Dec 7 02:01:13 2025 GMT Subject: CN=60633e32c6cba0b39e02be02346930835a2ae7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:cb:86:e6:2f:c3:57:21:2e:02:e7:7f:4c: e1:d5:c2:89:e2:e5:a4:63:b8:2a:c7:0d:02:6b:6a: 53:ad:b0:27:31:ca:ec:9f:2d:e2:8f:8d:5d:86:f3: c1:d2:75:91:a1:23:a8:cf:58:3f:15:04:76:e0:33: 29:85:60:a5:26:8c:36:5e:c2:ce:73:f6:96:46:da: 12:2a:88:8c:e5:20:49:c5:9b:80:29:fa:85:0a:a6: 89:e7:25:f2:6d:75:05:7a:33:e1:80:77:cc:cc:aa: e3:2c:cc:f9:a6:86:c0:34:5d:31:dc:55:2a:f1:63: 1f:43:3b:b2:23:6e:38:d9:e7:25:32:2e:b8:91:41: dd:43:47:ad:c1:f0:42:88:ff:69:35:0f:65:d1:36: 3f:47:01:27:30:f7:2c:cc:48:2b:ff:2e:cf:01:e2: 4f:54:17:c1:4d:5f:bd:79:5b:f7:9e:e2:e1:5c:f9: 3c:62:74:47:37:ec:10:46:33:99:fc:59:fe:59:2e: 80:f3:0f:d7:1c:72:73:bb:01:ec:7a:40:bb:41:5f: 02:66:e2:28:b6:37:55:7a:3b:31:ca:17:7a:3d:91: 37:25:90:8c:e2:7f:47:a6:28:48:13:79:e1:d1:eb: f7:11:71:3a:22:d4:19:41:60:d2:8c:c2:d1:43:22: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:63:3E:32:C6:CB:A0:B3:9E:02:BE:02:34:69:30:83:5A:2A:E7:C3 X509v3 Authority Key Identifier: keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ee:04:48:47:a2:42:da:7c:f6:e9:86:0f:6d:ed:7d:63:88: be:c9:ca:67:8f:e2:1a:f6:9b:b1:d0:ff:c8:b1:62:11:d4:be: ec:93:97:9d:76:87:71:bf:26:1c:d4:6d:2c:58:39:fa:fb:2b: cb:9b:c0:a9:31:10:81:95:7e:c4:2a:b5:b3:b5:ef:9f:03:d0: 59:db:a4:22:43:6b:d1:ae:eb:f1:3d:47:79:40:1a:18:ec:ca: 09:bf:99:23:6f:09:81:ec:01:10:d5:ec:4d:2f:5b:f4:fd:d9: 8f:64:2e:11:ef:13:f0:0b:8c:86:69:c7:f2:47:e6:ea:b1:fc: 17:df:38:53:6e:67:27:dc:57:eb:38:3d:aa:3f:83:86:f3:17: 54:86:8e:e3:34:ca:25:a9:6f:4c:09:85:14:ca:b4:e7:a6:32: de:51:73:1b:0c:48:de:e0:40:2f:0b:48:5f:be:08:00:2d:6e: aa:77:08:ff:ec:2a:c5:62:eb:98:2e:a4:41:2e:86:7d:17:97: 64:ca:89:df:54:f8:da:cf:37:01:4f:78:c3:ac:83:79:a9:77: 57:1c:29:9d:4a:6b:2a:8c:4f:20:b2:9f:64:ff:d0:b9:83:44: 0a:bb:31:30:53:f5:65:57:89:61:94:da:f5:50:70:d2:a6:fe: 7b:64:e0:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEsezYz8t4Kw/CxaaYTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTI1MTMxNDRmOGVhZmE4MzZjNGNkY2Y0Zjc1OGQxY2Ni NjcyMGEwHhcNMjUxMjA2MDIwMTEzWhcNMjUxMjA3MDIwMTEzWjAzMTEwLwYDVQQD Eyg2MDYzM2UzMmM2Y2JhMGIzOWUwMmJlMDIzNDY5MzA4MzVhMmFlN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jLhuYvw1chLgLnf0zh1cKJ4uWk Y7gqxw0Ca2pTrbAnMcrsny3ij41dhvPB0nWRoSOoz1g/FQR24DMphWClJow2XsLO c/aWRtoSKoiM5SBJxZuAKfqFCqaJ5yXybXUFejPhgHfMzKrjLMz5pobANF0x3FUq 8WMfQzuyI2442eclMi64kUHdQ0etwfBCiP9pNQ9l0TY/RwEnMPcszEgr/y7PAeJP VBfBTV+9eVv3nuLhXPk8YnRHN+wQRjOZ/Fn+WS6A8w/XHHJzuwHsekC7QV8CZuIo tjdVejsxyhd6PZE3JZCM4n9HpihIE3nh0ev3EXE6ItQZQWDSjMLRQyI8fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBjPjLGy6CzngK+AjRpMINaKufDMB8GA1UdIwQY MBaAFHESUTFE+Or6g2xM3PT3WNHMtnIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYt YTIyZjQ1ZGViZDRlLzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYtYTIyZjQ1ZGViZDRl LzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu4ESEei Qtp89umGD23tfWOIvsnKZ4/iGvabsdD/yLFiEdS+7JOXnXaHcb8mHNRtLFg5+vsr y5vAqTEQgZV+xCq1s7XvnwPQWdukIkNr0a7r8T1HeUAaGOzKCb+ZI28JgewBENXs TS9b9P3Zj2QuEe8T8AuMhmnH8kfm6rH8F984U25nJ9xX6zg9qj+DhvMXVIaO4zTK JalvTAmFFMq056Yy3lFzGwxI3uBALwtIX74IAC1uqncI/+wqxWLrmC6kQS6GfReX ZMqJ31T42s83AU94w6yDeal3VxwpnUprKoxPILKfZP/QuYNECrsxMFP1ZVeJYZTa 9VBw0qb+e2TgUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:13 2025 by rpki-client