This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json) Hash identifier: eJCdbSH4L4Lgr0RykGCLP3VZrx2mv2Gu4xJngqp54ng= Subject key identifier: E6:67:96:A0:DC:DB:F2:86:59:BA:02:3B:92:55:20:50:C4:EE:67:0F Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Certificate serial: 019AF19B09715C6858C4EAAAB30067A07E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft Manifest number: 0299 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: 3BvJA9jFFmaicjv4aobXh4GQtBtnQ/6fcssD2W/9+PU=) 2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:09:71:5c:68:58:c4:ea:aa:b3:00:67:a0:7e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=e66796a0dcdbf28659ba023b92552050c4ee670f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:0f:af:62:f3:95:48:b4:15:31:94:f0:98: c0:ca:24:29:1c:b5:68:a2:4e:41:60:de:d2:39:65: 2c:f8:e3:20:b4:39:c1:05:fa:d8:c4:cf:6c:a1:ab: 3b:42:31:57:6b:2b:b8:4b:b2:46:a7:b4:7e:bc:37: b2:e9:37:97:fe:4c:be:70:60:43:15:29:cb:e0:95: 23:31:6f:4e:99:9d:ed:ac:88:e9:b1:10:a6:53:ce: 0a:58:b8:66:15:94:02:c1:13:e6:c1:98:03:e6:c8: df:db:09:d7:b4:27:ca:5d:72:9b:7a:54:33:20:7e: 04:2d:b5:65:3d:65:6f:af:a2:fe:e4:a1:2c:19:5f: 1a:a4:9e:4f:37:81:9b:9d:1e:2d:29:5f:80:3d:97: 76:39:f3:7a:cd:9c:a4:26:f1:39:02:2e:e9:7f:2a: fe:ad:a4:cb:44:f0:ad:5a:fe:dd:9a:06:fe:60:a3: 8c:aa:4c:8c:b6:f2:47:89:89:a5:09:2a:fa:b3:95: 4a:31:72:fa:4d:81:30:cd:3c:7c:43:ba:41:23:73: c9:f6:b0:ed:bd:61:6b:28:05:09:77:a0:22:d2:05: a4:95:a9:a2:d7:5e:ff:92:80:e0:d3:69:ff:89:68: dc:a1:a6:4e:7f:8c:53:18:29:c9:1a:51:cb:d8:d7: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:67:96:A0:DC:DB:F2:86:59:BA:02:3B:92:55:20:50:C4:EE:67:0F X509v3 Authority Key Identifier: keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8d:95:ff:71:83:df:d6:56:2d:0d:1f:66:63:4c:77:62:f4: e6:98:4b:b8:a3:17:4c:ce:a7:fa:95:eb:02:36:28:99:07:d8: 94:9b:bd:9e:68:e0:91:3c:2f:d5:ca:a3:56:ce:84:ac:84:20: d7:2c:26:14:16:9a:0a:0f:9d:3e:5e:85:36:52:f5:24:3c:9c: 8e:87:05:d9:dc:6f:9c:19:cb:aa:b7:68:74:38:7c:54:3b:46: 0b:c1:32:9a:8b:d0:b6:7d:29:80:af:e2:ea:0f:12:26:e3:4c: 98:eb:e5:80:d7:5a:94:31:35:cb:9a:0a:f5:88:ad:fe:a6:d9: a4:80:d0:72:16:f4:63:71:98:4d:d0:c4:38:89:87:a9:c8:2d: a5:79:3a:33:95:71:77:91:f5:a0:0b:1c:98:55:06:cd:af:2f: 01:8f:7d:5c:35:7c:ae:13:fd:6f:28:8e:fc:02:4f:d6:00:15: c2:a5:46:a2:83:c2:b7:f8:fc:c1:8a:f9:2a:44:b0:55:fb:ae: f9:be:38:af:e3:e3:f2:bc:93:9f:63:49:14:88:91:9c:cd:22: 61:cc:01:2a:b8:ae:96:a5:29:fa:f0:ea:47:21:51:1d:e2:c8: 39:f8:05:1d:3f:07:27:95:70:9e:1f:d8:5a:42:08:d4:d0:88: 26:90:14:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwlxXGhYxOqqswBnoH4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw YjFmOTcwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EyhlNjY3OTZhMGRjZGJmMjg2NTliYTAyM2I5MjU1MjA1MGM0ZWU2NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz4Pr2LzlUi0FTGU8JjAyiQpHLVo ok5BYN7SOWUs+OMgtDnBBfrYxM9soas7QjFXayu4S7JGp7R+vDey6TeX/ky+cGBD FSnL4JUjMW9OmZ3trIjpsRCmU84KWLhmFZQCwRPmwZgD5sjf2wnXtCfKXXKbelQz IH4ELbVlPWVvr6L+5KEsGV8apJ5PN4GbnR4tKV+APZd2OfN6zZykJvE5Ai7pfyr+ raTLRPCtWv7dmgb+YKOMqkyMtvJHiYmlCSr6s5VKMXL6TYEwzTx8Q7pBI3PJ9rDt vWFrKAUJd6Ai0gWklami117/koDg02n/iWjcoaZOf4xTGCnJGlHL2NdBxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZnlqDc2/KGWboCO5JVIFDE7mcPMB8GA1UdIwQY MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0 LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo2V/3GD 39ZWLQ0fZmNMd2L05phLuKMXTM6n+pXrAjYomQfYlJu9nmjgkTwv1cqjVs6ErIQg 1ywmFBaaCg+dPl6FNlL1JDycjocF2dxvnBnLqrdodDh8VDtGC8EymovQtn0pgK/i 6g8SJuNMmOvlgNdalDE1y5oK9Yit/qbZpIDQchb0Y3GYTdDEOImHqcgtpXk6M5Vx d5H1oAscmFUGza8vAY99XDV8rhP9byiO/AJP1gAVwqVGooPCt/j8wYr5KkSwVfuu +b44r+Pj8ryTn2NJFIiRnM0iYcwBKriulqUp+vDqRyFRHeLIOfgFHT8HJ5Vwnh/Y WkII1NCIJpAUkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:28 2025 by rpki-client